Forefront Online Protection for Exchange Online IP Addresses

Applies to: Office 365 for professionals and small businesses, Office 365 for enterprises, Live@edu, Forefront Online Protection for Exchange

Topic Last Modified: 2013-04-23

The following are the hosted filtering service data center IP addresses for Forefront Online Protection for Exchange (FOPE):

65.55.88.0/24
94.245.120.64/26
207.46.51.64/26
207.46.163.0/24
213.199.154.0/24
213.199.180.128/26
216.32.180.0/24
216.32.181.0/24

The data center IP address schema is a format called Classless Inter-Domain Routing (CIDR).

The IP Address ranges that are specific to the new Data Center format are as follows:

65.55.88.0/24 = 65.55.88.1 - 65.55.88.254
94.245.120.64/26 = 94.245.120.65 - 94.245.120.126
207.46.51.64/26 = 207.46.51.65 - 207.46.51.126
207.46.163.0/24 = 207.46.163.1 - 207.46.163.254
213.199.154.0/24 = 213.199.154.1 - 213.199.154.254
213.199.180.128/26 = 213.199.180.129 - 213.199.180.190
216.32.180.0/24 = 216.32.180.1 - 216.32.180.254
216.32.181.0/24 = 216.32.181.1 - 216.32.181.254

The current list of data center IP addresses are also listed under Configuration on the Information tab in the FOPE Administration Center.

Change notification for FOPE IP address ranges lists IP addresses that have been removed or added. If you would like information regarding IP addresses specifically used by Office 365, see IP addresses and URLs used by Office 365.

Note:

Please be sure to restrict your inbound SMTP connections on port 25 to allow email only from our data centers by using the IP addresses listed in this topic. Doing so prevents the possibility that spam can be sent directly to your IP address and bypass our data centers. These IP-address ranges are used only for relaying messages to customer domains and customer’s partner destinations specified in Outbound connectors. (To illustrate, if a customer has a connector configured to route mail through a smart host, or delivers mail to an on-premises environment in a hybrid configuration, these destinations can receive mail from the FOPE data centers.) For more information about creating Outbound connectors that route messages to partners and others via the published IP-address ranges, see the following topics: Using FOPE Connectors to Configure Advanced Email Flow Scenarios Outbound Smart Host Scenario Regulated Partner with Forced TLS Scenario We do not publish our relay list for non-customer mail, and ranges for non-customer mail may change at any time.