Qualee sends login credentials for client admins and their employees via email. Qualee also sends specific console notifications, alerts and password reset requests via email.
This article details how emails from Qualee are sent. The information can be shared with your IT department to ensure all emails from Qualee are delivered successfully.
For an outline of the technical details for use by IT departments to properly configure firewalls and proxies to allow full access to the Qualee service, see Qualee hosts and protocols services.
Technical details
Qualee uses a combination of Amazon Web Services (AWS) to send emails via the AWS Simple Email Service (AWS SES), and Google's G-Suite mail service.
Security
Emails from Qualee use configured SPF and DKIM records, and use DMARC to track deliverability. Emails will be delivered over TLS if supported by your email server.
IP-addresses
Qualee sends emails from a set of dedicated IP addresses:
54.240.54.100
54.240.54.101
54.240.54.102
54.240.54.103
The above IP addresses are configured to be static. As our service continues to grow, additional IP addresses may be added over time.
Email addresses
All emails from Qualee are sent from [email protected] and have [email protected] listed as the reply-to address. Emails replies to Qualee are typically only used by your organisation's administrators for ad-hoc requests. Support in the Qualee console is built-in to the application and the Qualee mobile apps have support links within them.
Return path
Emails sent from Qualee will be sent using a Return Path of <prefix>@bounce.qualee.com. This is used to track bounces of emails, so we can alert to bounced emails inside the product, and enable rapid fixing of invalid emails.
Emails to allow
Office 365 - Advanced Threat Protection
If your organisation uses Microsoft Office 365, configuring mail flow rules will allow your system to bypass safe links when scanning emails from Qualee.
Go to Mail flow > Rules, create a new rule and give it a name.
In the Apply this rule if… section, click on More options, and then choose Sender’s IP address is in the range…
Add our IP addresses from the IP-addresses section above.
In the Do the following… section, choose Set the message header to this value…
Set the message header to: X-MS-Exchange-Organization-SkipSafeLinksProcessing and set the value to 1.
Save the changes.
Bounce handling
Qualee will retry the sending of emails a number of times with increasing delay if it encounters a temporary bounce, also referred to as a soft bounce. This can be caused by internet connectivity issues, target email server issues or other temporary problems. For such cases no action is required by your organisation.
Qualee will not send additional emails in the event of a permanent bounce, also referred to as a hard bounce. This could be caused by errors in the email address, an obsolete address, or spam rejections in error. In such cases the affected employee will be flagged as having a bounced email address.