Setup with GSuite (Formally GApps)
Posted by Max McElroy on 27 March 2017 05:32 PM
For this Setup piece, we draw heavily from Google's own documentation. Please start with this page:
This page is mostly for a refresher on mailflow and some terms.
In the GSuite portal
Inbound FROM Reflexion
On this page, you will setup your Inbound Gateway. This setting will allow mail that is filtered by us to be exempted from DMARC and DKIM scanning. You can also tag messages that do not come from our IPs as spam, or flat-out block them. Please add the following IPs to the table:
Outbound TO Reflexion
This page has the setup instructions to send to our Smarhost. Once you reached the Outbound Gateway field, please enter our smarthost address and hit save: asp-submit.reflexion.net
We strongly recommend using the FQDN for our smarthost rather than the IP. We do not expect to change our IPs anytime soon, but using the FQDN will help prevent any mailflow outages if our IPs do change.
In the Reflexion Portal.
Domains(To receive email)
Please put the original MX records received from Google into the Domains table and set delivery to port 25.
Please put the public IPs for GSuites into the Trusted hosts table. You do not need to put in individual IPs, but the ranges published by Google will cover their IPs. The list below contains most of their IPs, but please also check with Google in case new or different ranges are in use.
While not mandatory, setting an SPF record can help streamline outbound mail transfer and helps our SPAM engine protect you and your clients from spoofed mail.