What are the IP ranges from which the Cleanmail Domain Gateway forwards e-mails? And how do I need to configure the firewall so that only e-mails sent from the Cleanmail Domain Gateway are accepted?
For Cleanmail Version 5 (from cmv5) :
Plage 1: 91.212.152.1 - 91.212.152.254 (Notation CIDR: 91.212.152.0/24)
For Quar (previous version): Please open the following IP ranges on the firewall for SMTP (port 25). We suggest that customers using on-premise Exchange 2013/16/19 open the port 2525 (for recipient verification, Exchange Backend).
Range 1: 91.208.173.1 - 91.208.173.254 (CIDR Notation: 91.208.173.0/24)
Range 2: 195.141.89.1 - 195.141.89.254 (CIDR Notation: 195.141.89.0/24)
Customers of the Cleanmail Archive service also need to open port port 143 (for IMAP access to the journaling mailbox using STARTTLS, if applicable) or port 993 (the same by using IMAPS) for the following IP address:
Primary91.208.173.180, net mask 255.255.255.255
Mirror185.142.213.179, net mask 255.255.255.255