Forefront Online Protection for Exchange Online IP Addresses
Applies to: Office 365 for professionals and small businesses, Office 365 for enterprises, Live@edu, Forefront Online Protection for Exchange
Topic Last Modified: 2013-04-23
The following are the hosted filtering service data center IP addresses for Forefront Online Protection for Exchange (FOPE):
18.104.22.168/24 22.214.171.124/26 126.96.36.199/26 188.8.131.52/24 184.108.40.206/24 220.127.116.11/26 18.104.22.168/24 22.214.171.124/24
The data center IP address schema is a format called Classless Inter-Domain Routing (CIDR).
The IP Address ranges that are specific to the new Data Center format are as follows:
126.96.36.199/24 = 188.8.131.52 - 184.108.40.206 220.127.116.11/26 = 18.104.22.168 - 22.214.171.124 126.96.36.199/26 = 188.8.131.52 - 184.108.40.206 220.127.116.11/24 = 18.104.22.168 - 22.214.171.124 126.96.36.199/24 = 188.8.131.52 - 184.108.40.206 220.127.116.11/26 = 18.104.22.168 - 22.214.171.124 126.96.36.199/24 = 188.8.131.52 - 184.108.40.206 220.127.116.11/24 = 18.104.22.168 - 22.214.171.124
The current list of data center IP addresses are also listed under Configuration on the Information tab in the FOPE Administration Center.
Change notification for FOPE IP address ranges lists IP addresses that have been removed or added. If you would like information regarding IP addresses specifically used by Office 365, see IP addresses and URLs used by Office 365.
Please be sure to restrict your inbound SMTP connections on port 25 to allow email only from our data centers by using the IP addresses listed in this topic. Doing so prevents the possibility that spam can be sent directly to your IP address and bypass our data centers. These IP-address ranges are used only for relaying messages to customer domains and customer’s partner destinations specified in Outbound connectors. (To illustrate, if a customer has a connector configured to route mail through a smart host, or delivers mail to an on-premises environment in a hybrid configuration, these destinations can receive mail from the FOPE data centers.)|
For more information about creating Outbound connectors that route messages to partners and others via the published IP-address ranges, see the following topics: