Servicenow SMTP Firewall

[vjmani]

We need to white list the IPs of ServiceNow's SMTP.

How can I get this information?

[Simon46 · Accepted solution]

Hello VJ,

Please find below a link to our KB0535456, it provides information of our SPF records which are the IPs that ServiceNow sends emails from.

https://hi.service-now.com/kb_view.do?sysparm_article=KB0535456

Please note that the values below may be outdated, you will need to check the SPF records yourself to ensure you have the latest IPs.

:~$ dig service-now.com TXT +short
"v=spf1 mx a:b.spf.service-now.com a:c.spf.service-now.com a:d.spf.service-now.com ~all"

:~$ dig service-now.com MX +short
10 mx21.service-now.com.
10 mx22.service-now.com.
10 mx11.service-now.com.
10 mx12.service-now.com.
10 mx13.service-now.com.
10 mx14.service-now.com.
10 mx23.service-now.com.
20 mx24.service-now.com.


:~$ dig b.spf.service-now.com +short
149.96.5.7
149.96.6.2
149.96.6.3
149.96.6.6
149.96.6.7
199.91.136.28
199.91.140.28
199.91.138.26
199.91.142.26
149.96.5.2
149.96.5.3
149.96.5.6


:~$ dig c.spf.service-now.com +short
199.91.136.28
199.91.140.28
37.98.232.12
37.98.232.26
37.98.234.26
37.98.235.26
149.96.3.26
149.96.4.26
199.91.136.26
199.91.137.26
199.91.140.26


:~$ dig d.spf.service-now.com +short
103.23.66.26
103.23.67.26
149.96.1.26
149.96.2.26
199.91.136.28
199.91.140.28
103.23.64.26
103.23.65.26

Kind regards,

Simon Liang

[vjmani]

Hi Simon,

Thanks for the detailed information and prompt response.

Appreciate the help.

Regards

VJ

[vab_13]

This is what you are after I think, have a read:

ServiceNow KB: Enabling Email Delivery Using SPF Records to Whitelist ServiceNow Email Servers (KB05...

Allowing email delivery from ServiceNow to your mail servers

Overview

---

If your company prevents email from being delivered from unknown IP addresses, or uses any services that filter spam based on IP address, you can configure those services using ServiceNow's Sender Policy Framework (SPF) records. ServiceNow provides SPF records to assist with anti-spoofing or spam detection. Please ensure that your corporate email infrastructure is configured to the industry standards that are described below. This ensures that email delivery from your ServiceNow instance to your corporate email service continues, uninterrupted.

Sender Policy Framework is standardized under RFC4408; for more information, please visit the OpenSPF web site: http://www.openspf.org/FAQ or http://www.ietf.org/rfc/rfc4408.txt.

Recommended Solution

---

ServiceNow strongly recommends that you configure your mail system to use SPF records dynamically, using your mail server's feature for automatically retrieving them. If ServiceNow moves your instance to another datacenter, your mail servers will still be able to receive emails from your instance.

[vjmani]

Hi Vab

I forgot "SPF" from the meeting. This is what our consultant asked for. Thanks.

Regards

VJ