How to setup FreePBX to work with Office 365 Exchange Email
- Kelli Higdon
Introduction
Getting FreePBX to work with Office 365 can be tricky. Many of the Asterisk/FreePBX/Linux gurus out there don’t yet fully understand that Office 365 is more paranoid than most SMTP systems. Office 365 Exchange Servers require a few things before an email can be relayed to them. These instructions are a little easier than the old instructions.
Using the Commercial System Admin module makes this a bit easier. It would still be possible to do this without the Commercial System Admin module, but you will need to configure options manually through editing files through SSH
You must meet all of these requirements:
You can reach your Office 365 Exchange Server through port 25. For example: yourdomain-com.mail.protection.outlook.com
Your firewall is not blocking port 25
Your ISP is not blocking port 25
Office 365 is not blocking your IP
You are using a fixed public IP address
You don’t need IPv6 on your PBX (as Office 365 does not support it, yet) and are willing to disable it.
Commercial System Admin module (It has the handy SMTP Email Setup)
You have admin account to your Office 365
You know what your Office 365 SMTP server is for your tenant account. To get this information, you can use Network Tools: DNS,IP,Email for your domain. It will tell you what it is.
You have access to your DNS settings, so you can update your TXT SPF record.
Step-by-step guide
A. Edit your DNS records and setup a SPF text record for your domain. This informs Office 365 that you are a “known and trusted system”. Since Office 365 requires an SPF record already, you will not so much need to add it, but modify the existing one it so that it include the external IP of your PBX. So, with aaa.bbb.ccc.ddd representing your public pbx ip address, this is what your TEXT record should read as:
v=spf1 ip4: **aaa.bbb.ccc.ddd** include:spf.protection.outlook.com ~all <-- be sure to replace aaa.bbb.ccc.ddd with your public ip address
If you already have an ip4: in there with an IP, you can add another.
B. Add the following to the end of /etc/postfix/main.cf (You can’t do this from the admin module, SSH only)
inet_protocols = ipv4
The inet_protocols = ipv4 tells postfix to not use ipv6. ipv6 is bad mojo with most SMTP servers.
Reload postfix by running these command:
systemctl restart postfix
OPTIONAL: I also took the liberty to disable IPv6 at the Centos OS level as well. I do not need IPv6, nor is it supported end to end everywhere, so I don’t want it to ever be an issue until I know IPv6 is supported everywhere. If you want to disable IPv6 at the OS level you can do so by going to /etc/sysctl.conf and adding the following line:
net.ipv6.conf.all.disable_ipv6 = 1save the file, then reload the system ip configuration by issuing this command:sysctl -pKeep in mind you will still need to disable IPv6 in main.cf to inform postfix that you are only using ipv4
C. Setup Office 365 Exchange Connector to allow your external IP to talk to it
Login to Office 365 as admin.
Go to Admin, select Exchange
Go to the mail flow section, and click on connectors
Click on the plus icon, and add a connector for your PBX external IP address. Use your external IP as the IP Address that is authorized to communicate with the Office 365 Exchange server.
D. Confirm you can connect using your external IP to Office 365 through port 25. From a telnet capable system that uses the same external gateway IP that your PBX will be using use telnet (yes, telnet!) to confim you can connect to Office 365 Exchange Server through port 25. Use the following telnet [Your domain]-com.mail.protection.outlook.com 25 . If you are able to connect, then you have nothing blocking port 25. If you cannot connect, you need to ensure your firewall is not blocking this, or your ISP is not blocking. If this step does not pass, then no point in going forward. STOP.
E. Setup Email settings in FreePBX using the Commercial System Admin module
Go to Email Setup. Use these settings
SMTP Server: Enable “Use External SMTP Server”
My Hostname: [YourDomain].com ex: sipserver.yourcompany.com (use FQDN of your server)
My Origin: [YourDomain].com ex: yourcompany.com (yourcompany.com is fine)
My Domain: [YourDomain].com ex: yourcompany.com (yourcompany.com is fine)
Provider: Other
SMTP Server: [Your domain]-com.mail.protection.outlook.com:25 (This should be an mx record for your company already. Use Network Tools: DNS,IP,Email to find out what it is set to if you don’t remember)
Use Auth: “No Authentication” – Your IP authorized through section C above.
Use TLS: Use TLS
SASL Security Options: Disable Security
Click Submit
Click on Debug
Supply a valid email address to send to, click on submit.
From the resultant debug output, ensure that you have a “status=sent” for the email
Check the email address that you sent to ensure email was sent.
If it did not work, your IP may be blocked by Office 365. You can use https://sender.office.com to unblock it. Microsoft says it will take about 30 minutes to unblock, mine took 45 minutes.
Test again.
Testing / Debugging
While still in Email Setup, Click on Debug, and then use a real email address to sent it to. The output of the debug should show you want is right/wrong and should help if you still have issues with the setup.
If you need more details on your smtp communications, you can always get to /var/log/maillog to gather more information.
Use postconf -n to get a dump of all parameters which may of been altered from the default ones.
Notes
These wiki instructions replace the original forum thread " Steps to getting FreePBX to work with Office 365 email" dated 5/2017 with updated information, and a later thread Office 365 Exchange Email and FreePBX (Updated 9/23/2019)
This wiki how-to was jump-started using helpful information from the Microsoft article here: How to set up a multifunction device or application to send email using Office 365