English
Chinese (Simplified)
French
German
Italian
Japanese
Russian
Spanish
Vietnamese
Authentication errors between MDaemon and migrated MS 365 domain
-
Hello, good day.
We have multiple domains running on MDaemon, and one of them is currently being migrated to Microsoft 365.
We cannot remove the domain from MDaemon yet because there are still a few active accounts, and we are still in the process of moving emails.
The issue we are facing is that when the domain already migrated to Microsoft 365 sends an email to a domain still hosted on MDaemon, MDaemon rejects it with an authentication error. Is there a way to prevent this?Thank you!
-
Hello @Abel,
We have an article at https://knowledge.mdaemon.com/configure-mdaemon-microsoft-365-to-use-the-same-domain-name that may help you out. Essentially, you need to allow Microsoft 365 to send email without having to authenticate:
MDaemon must be configured to allow Microsoft 365 to send email as a local user without the need to authenticate.
- Open MDaemon and select Security / Security Manager / Sender Authentication / SMTP Authentication
- Click the check box next to ...unless message is to a local account to enable the exclusion.
- Click Apply
When enabling the above option, the IP Shield should be utilized to prevent any other local to local messages that are not authenticating. Adding the domain/IP pairs to the IP Shield and bypassing the IP Shield with authenticated sessions will prevent this.
- In MDaemon select Security / Security Manager / Sender Authentication / IP Shield
- Check the box to Enable IP Shield
- Check the box for Do not apply IP Shield to Authenticated sessions
- Add Domain/IP pairs for all of the IP address ranges used by Microsoft 365
- In most cases the domains are spf.protection.outlook.com and spfd.protection.outlook.com
I hope that is helpful, if you have any further difficulties, please don't hesitate to post again with your questions. Please include log samples if you do, that will help us determine how to assist you.
