ServiceNow Email Server whitelisting

[annalee]

What IP addresses should we white list for Email infrastructure to allow emails flow from ServiceNow Mail Servers to Our Mail Servers?

[vab_13 · Accepted solution]

You should always leverage Hi portal for these kind of information.

To answer your question: Here is the KB Article:

ServiceNow KB: Enabling Email Delivery Using SPF Records to Whitelist ServiceNow Email Servers (KB05...

Example:

This example issues an initial dig command, and based on the structure of the response, issues further queries to locate hosts and IPs.

WARNING:

This is only an example of commands and returned values. Work with your System Email Administrator to run the initial query and similarly follow the SPF record data to gather IP addresses at the time you read this KB article.

Begin with the initial query of the service-now.com domain for TXT records:

dig service-now.com TXT +short

As of this KB article's writing, the command returned the following data, which includes mx and three a: records:

      "v=spf1 mx a:b.spf.service-now.com a:c.spf.service-now.com a:d.spf.service-now.com"

The bolded items in the response point to a group of mail servers each (based on servers location):

      b.spf.service-now.com - Canada DCs

      c.spf.service-now.com - US/Europe DCs

      d.spf.service-now.com - all ohter DCs

SPF Query Tool:

There are a lot of tools for testing SPF records.

On this one:

https://www.kitterman.com/spf/validate.html

under the section 'Is this SPF record valid - syntactically correct?' you can test if your new SPF record is syntactically correct and also if it requires more than 10 DNS lookups (before you actually publish it to DNS).

[annalee]

Thanks, is there a phone number to contact Hi Support?

[vab_13]

If you need to speak to someone, please use one of the contact numbers from our Support contact page:

[code]<a href="http://www.servicenow.com/support/contact-support.html"><span style="color:#00F">http://www.servicenow.com/support/contact-support.html</span></a>[/code] You will then be able to enter your Incident or Change number over the phone to have your call routed to the engineer that owns that Incident or Change.

866-709-5932 (US toll free)

800-756-9901 (UK)

800-184-278 (Australia)

+1-858-345-1444 (Globally)

Please keep in mind that Hi Support is not available for Devxxxx instances.