Setting up Email Relay

Setting up Email Relay

Understanding Email Relay and its benefits

Email Relay allows you to route emails through your (company's) server while sending emails from Zoho CRM. Once the relay server is setup, the sent emails will follow a path like this:  Zoho CRM -to- Relay server -to- Recipient 

Sending emails through a relay server lets you combat spamming or mislabelling when large batches of emails are sent. Many businesses that send out bulk emails like newsletters, notifications, invitations, automatic transactional emails etc. to their customers regularly, face higher chances of spamming and sometimes even the authenticity of an email becomes questionable. In such cases, a relay server can be beneficial. Let's see some of the benefits that relay servers can provide:
  1. Not all, but few organizations are required to store copies of emails that are sent to the recipients as part of their compliance goals. If the emails are routed through the relay server, you can always keep a backup of the sent emails in the server.

  2. Often, important transactions and messages are shared with the customers via email. It's best to have access to all such emails and attachments sent by your employees even after they discontinue service in your organization. You may need them for reference in the future.

  3. Sometimes emails are prone to virus threat and to prevent a potential malware attack to the recipients system, its best to run antivirus checks on the outbound emails before sending it to the customers.

  4. The bulk emails are intended to address a large population and therefore consists of content that is common for all the recipients. Just in case, you want to share some additional information such as disclaimers, notices or promotions with selected sets of customers, then instead of sending separate emails you can just append the information to the outbound emails before sending. 

  5. Oftentimes emails are prone to spoofing, where the email header is tampered to give an appearance of spam email. Sending emails from the relay server can help you avoid it. 

  6. The bounced and failed delivery emails can be accessed from the relay server.

Points to consider before setting up a relay server

  1. You can only send emails that originate from Zoho CRM via the relay server. That is, workflow emails, individual emails, and mass emails. You may choose to send all or either of these emails from a relay server.
  2. You can manually set limits to the number of emails (only the above mentioned emails) that can be sent from the relay server. 
    Note that sending emails through relay server does not change the email limit that is set for an edition. For example, as per the subscribed CRM edition if your daily limit for sending emails is 5000 emails/day, then you can set aside some number of emails, like 2000 to be sent from the relay server. The remaining 3000 emails will be sent from the Zoho CRMs server. 
  3. Email that are sent from the Zoho CRM's server will continue to be sent from this server and the per day limits of the outbound emails will depend on your subscription. 
  4. It is advisable to whitelist all the IP addresses of Zoho CRM in your relay server to avoid any deliverability issues. But, note that whitelisting IPs may be necessary if you set up an open relay server (an SMTP server that allows not just mail destined to or originating from known users but every user to send emails). 

Authenticating Email Protocols In Relay Server

When a relay server is not set 

The outbound emails originate from the user's domain (@company.com) and sent to the recipient via Zoho CRM's server. To receive the delivery failed and bounced emails, the return path (variable envelop from address) is set to Zoho CRM's server. This change causes a mismatch of IP addresses between originating email and return path that fails an essential email authentication protocol, called SPF. In order to avoid deliverability issue, Zoho CRM signs DKIM (alternate email authentication protocol). Signing DKIM ensures that the emails pass the DMARC policy and are successfully  delivered.

The outbound emails are sent from Zoho CRM's server to the relay server from where they are sent to the recipients. Some vendors tend to change the return path of the emails to their server in order to manage the bounced and failed delivery emails within the relay server. 
Note: If you want to access the bounced emails (stored in the relay server) within CRM, you can do so by fetching the bounce management data from the relay server and integrating it with CRM using API. 
Once a relay server is set there are two possibilities with respect to the return paths: 
  1. If the return path is retained as Zoho CRM's server
    1. The outbound email is sent from Zoho CRM's server to the relay server. At this point, the IP address of the originating email is authenticated against the IP address mentioned in the return path. Since the return path is retained to Zoho CRM's server, both the IP addresses will match resulting in SPF validation to pass. 
    2. The email is then sent to the recipient from the relay server, at this point another IP address authentication will be carried out between the email origination and return path. This time, originating email's IP address is the relay server and the return path's IP address is Zoho CRM's server, which will cause SPF failure due to mismatch of IP addresses. Because of this the email deliverability will be unsuccessful and the email may land as a spam in the recipient's inbox. 
To prevent such instances, it is recommended to enable DKIM (it automatically passes the DMARC policy) which in turn ensure successful email delivery.
  1. If the return path is set to relay server
    1. The outbound email is sent from Zoho CRM's server to the relay server. An IP address authentication is carried out and the originating email's IP will match with that of the return path's which will result in SPF validation. 
    2. The email will be sent to the recipient from the relay server and the IP authentication will display a match of IP addresses because in this case both the originating email and return paths have the same IP addresses (relay server). This will result in SPF validation and the email will be delivered successfully.  
Note
  • The return path is by default set to Zoho CRM's address and many vendors don't change it to relay server's address. Since SPF failure in these cases is inevitable, it is mandatory to enable DKIM and ensure the DMARC policy is signed. 

  • We recommend you to sign DKIM with Zoho CRM to rule out any possibilities of unsuccessful delivery. However, you can enable it with the vendor too.

Whitelist Zoho CRM IPs in the Relay Server

Emails may be sent to the relay server from different IP addresses of Zoho CRM and to prevent any unsuccessful deliveries as a result of IP mismatch it is essential to whitelist all our IPs in the relay server. It is mandatory to whitelist the IPs, if an open relay server (it uses IPs as a criteria to filter the inbound emails) is used. Though it is not necessary, to whitelist these IPs in the relay servers that use host's username and password as an authentication mechanism, it is still recommend to publish these IPs in the relay servers.

Server Name (Accessing URL)
IP addresses
US DC
(crm.zoho.com)
  • 204.141.42.0/23 

  • 136.143.190.0/23 

  • 136.143.186.0/23 

  • 136.143.189.0/24 

  • 204.141.32.0/23 

  • 136.143.182.0/23 

  • 136.143.180.0/23 

  • 136.143.185.0/24 

  • 136.143.178.0/23 

  • 136.143.176.0/23 

  • 8.40.222.0/23

  • 8.39.54.0/23

EU DC
(crm.zoho.eu)
  • 185.20.209.0/24

  • 31.186.243.0/24

  • 213.244.146.0/24

  • 185.230.212.0/23

  • 87.252.213.0/24

  • 89.36.170.0/24

  • 217.163.72.0/24

  • 185.230.214.0/23

IN DC
(crm.zoho.in)
  • 103.103.196.0/24 

  • 103.103.197.0/24 

  • 103.117.158.0/24 

  • 103.89.75.0/24 

  • 125.17.151.81

  • 125.17.212.101 

  • 103.89.75.3

  • 103.89.75.7 

  • 103.103.198.0/24 

  • 103.117.159.0/24 

  • 103.89.74.0/24 

  • 199.34.22.38

  • 103.89.74.3

  • 103.89.74.7

AU DC
(crm.zoho.com.au)
  • 101.97.36.0/24

  • 103.138.128.0/23

  • 103.91.166.0/24

  • 165.173.191.0/24

    CN DC
    (crm.zoho.cn)
    • 163.53.93.0/24

    • 163.53.94.0/27

    • 118.126.63.128/25

    • 118.126.63.64/26

    • 103.212.59.96/29

    • 124.251.121.0/24

    • 124.251.122.0/25

    • 124.251.128.0/24



      Setting up a Relay Server

      You can route the emails sent from Zoho CRM's server to your company's server using email relay. Based on your CRM subscription, you can add multiple domains and set relay servers for each domain. You can add a maximum of three relay servers in a single domain.Before you begin setting up the email relay, make sure you have the following information from your email administrator: 
      • Port number - The port number of your company's SMTP server. The Email relay supports the following port numbers: 25, 465, 587. 

      • Secure connection - Whether you choose SSL or TLS certificate, it is advisable to authenticate the certificate (authenticating the certificates is not a mandatory step). To do so, you will need to mention the host's name and password on the certificate.  

      Availability  
      Permission Required  
      Users with administrative permission in their profile can access this feature.  

      Setting the type of emails sent from the relay server 

      You can select the type of emails that should be sent via the relay server. Only the emails that originate from CRM such as, workflow emails, mass emails or individual emails can be sent through a relay server. You can use different relay servers for each type of email, for example you can use the server one to send all the mass emails and server two to send all the workflow related emails.  


      Setting maximum send limit from the relay server  

      You can specify the number of emails that should be sent on a daily basis from the relay server. Once the maximum limit is reached, the subsequent emails will be sent from the CRM server. 

      Managing bounced emails

      Bounce management with Zoho CRM provides an option to configure an email address to which the bounced emails will be sent. Say, when you send out packages using any delivery services company, you mention the recipient’s address and the address the package must be returned to in case the package couldn’t be delivered. Similarly, the emails we send out have the recipient ’s address and a return path. A return path is an email address where the emails that couldn’t be delivered are returned. In CRM, the default return path is the Zoho CRM mailbox and it processes the bounced emails by updating the email status to 'Bounced' in Zoho CRM under the related lists, sales signal, reports and smart filters. 
      1. With 'Bounce management with Zoho CRM' option, Zoho CRM will be set as the return path to receive bounce emails. i.e Whenever an email gets bounced, the bounce report will be sent to the Zoho CRM mailbox and the email status will be updated as 'Bounced.
      1. Some relay servers accept addresses as return paths that are already configured with the relay server. In that case, users can configure the server to allow the following domains. Update these DC-specific domains in your relay server to continue receiving bounce mail report back to Zoho CRM.
      1. When the relay server does not allow Zoho CRM as the return path then the user should disable Bounce management in Zoho CRM option and set the return path as the relay server in two ways:
        1. Set 'From address' as default return path – The senders 'From email address' will be set as the return path and the bounce report (if the mail is bounced) will be directly sent to this address.
        2. Set custom email address as default return path – The user can set an email address, belonging to the domain configured with the relay server, as the return path. This option is ideal when the user wants to receive the reports of bounced emails, originating from different 'From addresses' in a common mailbox. Say for instance you have the following email addresses - amelia@zylker.compatricia@zylker.comjennie@zylker.com. You can set a common email address bounce@zylker.com as the return path which receives the reports of bounced emails, originating from the email addresses mentioned above.

      By disabling 'Bounce management with Zoho CRM', the user will not get bounce mail notification inside CRM and the email status will not be updated as 'Bounced' in the email related list.






      Troubleshooting Tips



        • Related Articles

        • Troubleshooting Email Relay

          1. Why am I getting an authentication failure error? Make sure that the password you entered is correct. To verify the password, log in to your webmail with the same password by typing in the password instead of using auto-fill. Check whether TFA is ...
        • How do I send mass emails from CRM using my SMTP server?

          Mass emails can be sent via your SMTP servers using email relay. To set up email relays, you will have to connect your SMTP server with the Zoho CRM server. To configure email relay settings Navigate to Setup > Channels > Email > Email Deliverability ...
        • Setting Email Preferences

          CRM users perform a variety of activities depending on their position in the organization and as a part of individual's job responsibility. To accomplish these activities the administrators provide users with appropriate access levels to various ...
        • Setting Email Notifications

          Email Notifications are among the instant and scheduled actions associated with different automations in CRM. They are alerts, notifications, information, or details   sent to leads, contacts and users within the organization. When you associate an ...
        • Setting up Email Sharing Permissions

          Emails exchanged with customers contain important information that may be required for reference by several other teams who are involved in the business process. For example, a contract agreement exchanged with a firm may be required by the legal ...