Inbound mail gateway integration

  1. Set up integration
  2. How emails will be routed
  3. Gateway spam filtering

Admins can set up Yandex Mail for Business so that emails received by employees are processed by an inbound mail gateway.

Inbound mail gateways are third-party mail servers that check emails for spam, malicious attachments, and phishing. They help to expand the capabilities of Yandex Mail for Business: manage interactions with third-party products and set up hybrid email solutions so that some users can use third-party email providers.

Set up integration

  1. In Yandex 360 for Business:

    1. Log in to the admin account for the company.

    2. On the Domains page, check that your domain is verified. If it's not, verify your domain using one of the available methods. For the next steps, you only need to verify your domain, not delegate it.

    3. Prepare the DNS records for your domain:

      1. Configure the MX record so that it points to your gateway: enter the inbound mail gateway address in the Value field.

      2. Add Yandex servers to the SPF record of your DNS zone.

        For example:

        v=spf1 ip4:IP-1 ip4:IP-2 ip4:IP-3 include:_spf.yandex.net ~all

        Where IP-1, IP-2, and IP-3 are the IP addresses of additional servers.

      3. Create a DKIM signature.

  2. On the gateway side: create a rule for forwarding incoming mail to the DNS record mx.yandex.net. For instructions on setting up the gateway, check the relevant software documentation.

How emails will be routed

All incoming emails from external sources pass through the gateway and are preprocessed in accordance with the MX record of your domain.

Your company's internal emails in Yandex 360 for Business are also routed through the gateway:

  • Employee emails.

  • Emails sent to mailing addresses.

  • Emails forwarded according to message filters.

Gateway spam filtering

The inbound mail gateway can be set up to use third-party software to check emails for spam. There are two ways to use it:

Use the “Spamoborona” service together with a third-party anti-spam gateway solution (recommended)

This is a standard scheme: all incoming emails are first checked by a third-party anti-spam utility and then by the “Spamoborona” service. This provides more reliable protection against unsolicited emails.

Use only a third-party anti-spam solution (not recommended)

To set it up, add the gateway address to the whitelist via the Yandex 360 for Business API.

To move unsolicited emails to the Spam folder, add the X-Yandex-ExternalGate-Spam: YES header to these emails on the gateway side.