SecuraWall MailFlowEmail Security & ContinuityCloud-based Backup MX, SMTP Gateway, AntiSpam and Antivirus services.
SecuraWall menu

OPTIONAL ADD-ON · BACKUP MX OR EMAIL PROTECTION

SMTP Relay: an alternative route for outgoing email.

Approved customers can send outgoing email through SecuraWall while keeping their existing mail server, mailboxes and incoming mail route.

When would I use it?

WHY SMTP RELAY?

When your direct sending route has a problem

A recipient server rejects your sending IP

Some destinations refuse your current sending IP. An approved relay provides another route while you fix the original cause.

Direct SMTP is restricted

Your network or provider may restrict direct outbound SMTP. Use the approved SMTP submission service if your network can reach the required TLS ports.

You need a planned route change

Your mail administrator can switch the outbound connector and review delivery results without moving mailboxes.

What changes with the add-on?

WITHOUT SMTP RELAY

You rely on your current sending route

  1. Your mail serverUses its own sending path.
  2. Recipient mail serverMay accept, temporarily defer or reject the message.

If that route is refused, delivery may wait or fail under your current server and provider policies.

WITH SMTP RELAY

An approved alternative delivery path

  1. Your mail serverConnects with TLS and authorized SMTP credentials.
  2. SecuraWallChecks sender rights, limits and enabled outgoing policies.
  3. Recipient mail serverDecides whether to accept the message.

You gain another sending path and recorded delivery outcomes. Recipient policies and domain reputation still apply.

What do I gain?

Keep the system you know

No mailbox migration, receiving-MX change or directory import is required.

More control over outbound delivery

Authorize sender domains and server credentials, then use assigned sending quotas.

Follow the recorded result

Track queued messages and the recipient server’s SMTP responses to see where delivery stopped.

Keep your base service

PACKAGE 1Backup MXIncoming continuity
OPTIONAL ADD-ONSMTP RelayApproved outbound route
PACKAGE 2Email ProtectionIncoming security and continuity
OPTIONAL ADD-ONSMTP RelayApproved outbound route

The add-on requires an active Package 1 or Package 2 subscription for the same domain, owned by the same customer. Your base package and SMTP Relay add-on have separate prices and are renewed manually. Relay does not add incoming inspection to Backup MX.

Setup

  1. Keep your base activeVerify the same owned domain and select SMTP Relay.
  2. Approve and authorizeObtain sending approval, quotas and server credentials.
  3. Configure sender DNSVerify SPF before payment. Optionally enable customer-domain DKIM signing after DNS verification.
  4. Connect and testUse 587 STARTTLS or 465 TLS; confirm destination results with your own recipient.

Free Setup Assistance and Unlimited Technical Support Tickets are included.

Controlled sending

A working sending server is required

Your server must still create and submit the message. SMTP Relay does not provide mailboxes or webmail access during outages.

Switching is under your control

Configure the outbound connector on your mail server. Purchasing relay does not enable automatic client-side failover.

Delivery is not guaranteed

A domain on a blocklist, a compromised account, malicious traffic or the recipient server’s policies can still prevent acceptance. Fix the source of unwanted sending.

Submission, queue and expiry details

Only current customers and authorized sender domains may submit. TLS, SMTP credentials, administrator approval, quotas and message controls apply. Temporary destination failures retry within the queue lifetime; permanent failures and expiry can generate delivery failure notices. Base or relay expiry stops new submissions. Accepted messages are not deleted by add-on expiry. Relay does not remove blocklist entries or guarantee inbox placement.

Outbound mail flow

  1. SubmitYour server connects to SecuraWall using authorized SMTP AUTH and TLS.
  2. CheckYour active service, sender authorization, quotas and enabled message policies are checked.
  3. DeliverAccepted messages that meet the service requirements enter the outgoing queue for delivery to the recipient’s mail server.
Detailed protocol flow
SMTP Relay · outbound flow
SMTP Relay · outbound flowSMTP AUTH is required only for outbound devices. Enforce approval, sender domains and quotas; apply enabled policies and optional active DKIM signing. Queue accepted mail; distinguish temporary retry, permanent failure and remote acceptance.FailedReject4xx / unavailable5xx / expiry2xxCustomer mail serverSMTP AUTH and TLS policySending approval and domainSender / From rights and quotasMessage policy decisionsCustomer DKIM if activeAccepted messageOutgoing delivery queueAttempt destination deliveryInvalid rights / exceeded quotaReject or temporarily deferReject malware / policyNot accepted for deliveryTemporary failureHold and retryPermanent failure / expiryRecord failure and notifySMTP acceptedRemove delivered queue entry

Incoming mail never requires a portal login or mailbox password. Temporary delivery failures remain queued within the configured lifetime. Permanent delivery rejection or expiry can generate a failure notification. Remote SMTP acceptance is separate from inbox placement.

ADD TO YOUR CURRENT DOMAIN

SMTP Relay

USD 25.00 / domain / month · additional to your base package

Choose an existing domain

Protection and portal capabilities

Message inspection and personal quarantine are available in Email Protection (base Package 2). Backup MX provides queuing and delivery without content scanning. Availability depends on package, enabled controls and supported analysis limits.

Mail traffic and account activity

All packages

Use Logs to distinguish mail traffic from account activity.

Scope and limits

Use Logs to distinguish mail traffic from account activity. Recorded setting changes include named old and new values where available. Customer access stays scoped to the account; historical records may contain less detail.

Brute Force Protection

All packages

Configured login and SMTP authentication protections limit repeated failed attempts.

Scope and limits

Configured login and SMTP authentication protections limit repeated failed attempts. This account and server protection is separate from message content filtering; enabled controls and administrator settings determine coverage.

Delivery history and security details

All packages

Open a Queue ID to follow recorded delivery attempts, SMTP responses, security decisions and rule contributions.

Scope and limits

Open a Queue ID to follow recorded delivery attempts, SMTP responses, security decisions and rule contributions. A local submission result, destination acceptance and inbox placement are different outcomes.

Approved SMTP sending

SMTP Relay add-on · optional outbound policy

SMTP Relay add-on adds approved device credentials, authorized sender domains, customer-domain DKIM and customer/domain/device recipient quotas.

Scope and limits

SMTP Relay add-on adds approved device credentials, authorized sender domains, customer-domain DKIM and customer/domain/device recipient quotas. Incoming content inspection does not imply identical inspection of authenticated outgoing mail.

Outbound text DLP

SMTP Relay add-on · optional outbound policy

Opt-in data loss prevention (DLP) checks use format and checksum validation to flag candidate Turkish identity numbers, TR IBANs and supported payment-card formats in the subject, visible body text and supported text attachments.

Scope and limits

Opt-in data loss prevention (DLP) checks use format and checksum validation to flag candidate Turkish identity numbers, TR IBANs and supported payment-card formats in the subject, visible body text and supported text attachments. Observe/SMTP Reject and incomplete Observe/temporary-failure actions apply only to eligible authenticated SMTP Relay with an external exact-domain recipient. Defaults off. PDF, Office, images, archives and attached messages are outside coverage. Matched values are excluded from DLP output. Native enforcement and mailbox delivery require separate deployment validation.

Choose Security in the main menu for analysis scope, or Company → What’s new for release details.

Chat on WhatsApp