# Encryption only for a single domain **URL:** \ **Category:** Gateway\ **Created:** [March 21, 2016, 5:42pm UTC](https://community.ciphermail.com/t/encryption-only-for-a-single-domain/495 "2016-03-21T17:42:17Z")\ **Posts on this page:** 4\ **Page:** 1
**Author:** ![sreerag](https://avatars.discourse-cdn.com/v4/letter/s/ac8455/32.png) [@sreerag](https://community.ciphermail.com/u/sreerag)\ **Post date:** [March 21, 2016, 5:42pm UTC](https://community.ciphermail.com/t/encryption-only-for-a-single-domain/495/1 "2016-03-21T17:42:17Z")
Hello, Would it be possible to set ciphermail gateway in such a way that all emails send between users of a particular domain are encrypted but all other emails send to any external domains are not encrypted. Thanks, Sreerag ---
**Author:** ![martijn](https://dub1.discourse-cdn.com/flex017/user_avatar/community.ciphermail.com/martijn/32/127_2.png) [@martijn](https://community.ciphermail.com/u/martijn)\ **Post date:** [March 21, 2016, 8:08pm UTC](https://community.ciphermail.com/t/encryption-only-for-a-single-domain/495/2 "2016-03-21T20:08:33Z")
What are your exact requirements? That all email sent to a particular domain must be encrypted (irrespective of sender) but email sent to all other domains must be unencrypted? If so, set "encrypt mode" of the global settings to "no encryption", add the special, always encrypted, domain and set "encrypt mode" for this domain to "mandatory". Then all email sent to that domain will be encrypted but all other email will not. Note that if email sent to that domain cannot be encrypted for whatever reason, the sender will be notified and the message will not be encrypted. Kind regards, Martijn Brinkers > **···** > > On 03/21/2016 06:42 PM, sreerag(a)managed-me.com wrote: > > > Hello, > > Would it be possible to set ciphermail gateway in such a way that all > > emails send between users of a particular domain are encrypted but all > > other emails send to any external domains are not encrypted. > > -- > CipherMail email encryption > > Email encryption with support for S/MIME, OpenPGP, PDF encryption and > secure webmail pull. > > > **[CipherMail email encryption and digital signatures](https://www.ciphermail.com)** > > > > Easy to use server-side email encryption for automatic encryption and digital signing of email. > > Twitter: [http://twitter.com/CipherMail](http://twitter.com/CipherMail) ---
**Author:** ![sreerag](https://avatars.discourse-cdn.com/v4/letter/s/ac8455/32.png) [@sreerag](https://community.ciphermail.com/u/sreerag)\ **Post date:** [March 22, 2016, 5:29am UTC](https://community.ciphermail.com/t/encryption-only-for-a-single-domain/495/3 "2016-03-22T05:29:07Z")
Hello Martin, Thanks for your reply. I have set the Encrypt mode in global preferences to "No Encryption" and added our special domain with Encrypt Mode "Mandatory". After that I added two users and created encryption certificates for them. Should there be any additional configuration required to force encryption as I can see that the mails sent between these two users are still unencrypted. Regards, Sreerag > **···** > > On 2016-03-22 00:08, Martijn Brinkers wrote: > > > On 03/21/2016 06:42 PM, sreerag(a)managed-me.com wrote: > > > > > Hello, > > > Would it be possible to set ciphermail gateway in such a way that all > > > emails send between users of a particular domain are encrypted but all > > > other emails send to any external domains are not encrypted. > > > > What are your exact requirements? That all email sent to a particular > > domain must be encrypted (irrespective of sender) but email sent to all > > other domains must be unencrypted? > > > > If so, set "encrypt mode" of the global settings to "no encryption", > > add > > the special, always encrypted, domain and set "encrypt mode" for this > > domain to "mandatory". Then all email sent to that domain will be > > encrypted but all other email will not. Note that if email sent to that > > domain cannot be encrypted for whatever reason, the sender will be > > notified and the message will not be encrypted. > > > > Kind regards, > > > > Martijn Brinkers ---
**Author:** ![martijn](https://dub1.discourse-cdn.com/flex017/user_avatar/community.ciphermail.com/martijn/32/127_2.png) [@martijn](https://community.ciphermail.com/u/martijn)\ **Post date:** [March 22, 2016, 6:42am UTC](https://community.ciphermail.com/t/encryption-only-for-a-single-domain/495/4 "2016-03-22T06:42:34Z")
The MPA log should tell you what happens when the mail gets handled. Perhaps the users you added are internal users (only email sent to external users are encrypted), or your certificates are not valid or you disabled S/MIME or.... look at the logs Kind regards, Martijn Brinkers > **···** > > On 03/22/2016 06:29 AM, sreerag(a)managed-me.com wrote: > > > On 2016-03-22 00:08, Martijn Brinkers wrote: > > > > > On 03/21/2016 06:42 PM, sreerag(a)managed-me.com wrote: > > > > > > > Hello, > > > > Would it be possible to set ciphermail gateway in such a way that all > > > > emails send between users of a particular domain are encrypted but all > > > > other emails send to any external domains are not encrypted. > > > > > > What are your exact requirements? That all email sent to a particular > > > domain must be encrypted (irrespective of sender) but email sent to all > > > other domains must be unencrypted? > > > > > > If so, set "encrypt mode" of the global settings to "no encryption", add > > > the special, always encrypted, domain and set "encrypt mode" for this > > > domain to "mandatory". Then all email sent to that domain will be > > > encrypted but all other email will not. Note that if email sent to that > > > domain cannot be encrypted for whatever reason, the sender will be > > > notified and the message will not be encrypted. > > > > > > Kind regards, > > > > > > Martijn Brinkers > > > > Hello Martin, > > > > Thanks for your reply. > > I have set the Encrypt mode in global preferences to "No Encryption" and > > added our special domain with Encrypt Mode "Mandatory". After that I > > added two users and created encryption certificates for them. Should > > there be any additional configuration required to force encryption as I > > can see that the mails sent between these two users are still unencrypted. > > -- > CipherMail email encryption > > Email encryption with support for S/MIME, OpenPGP, PDF encryption and > secure webmail pull. > > > **[CipherMail email encryption and digital signatures](https://www.ciphermail.com)** > > > > Easy to use server-side email encryption for automatic encryption and digital signing of email. > > Twitter: [http://twitter.com/CipherMail](http://twitter.com/CipherMail)