Reflexion KBA's:
Reflexion and you: GSuite Mail
Posted by , Last modified by on 14 November 2016 06:04 PM

For this Setup piece, we draw heavily from Google's own documentation.  Please start with this page:

This page is a refresher on mailflow and some terms.

In the GSuite portal

Inbound FROM Reflexion

On this page, you will setup your Inbound Gateway.  This setting will allow mail that is filtered by us to be exempted from DMARC and DKIM scanning.  You can also tag messages that do not come from our IPs as spam, or flat-out block them. Please add the following IPs to the table: ( ( ( ( (

Outbound TO Reflexion

This page has the setup instructions to send to our Smarhost.  Once you reached the Outbound Gateway field, please enter our smarthost address and hit save:

We strongly recommend using the FQDN for our smarthost rather than the IP.  We do not expect to change our IPs anytime soon, but using the FQDN will help prevent any mailflow outages if our IPs do change.

In the Reflexion Portal.

Domains(To receive email)

Please put the original MX records received from Google into the Domains table and set delivery to port 25.  

Trusted Hosts

Please put the public IPs for GSuites into the Trusted hosts table.  You do not need to put in individual IPs, but the ranges published by Google will cover their IPs.  The list below contains most of their IPs, but please also check with Google in case new or different ranges are in use. (This list is accurate as of 23 October, 2019)     

Please also remember to set your MX records to Reflexion.

While not mandatory, setting an SPF record can help streamline outbound mail transfer and helps our SPAM engine protect you and your clients from spoofed mail.

(241 vote(s))
Not helpful

Comments (0)
Post a new comment
Full Name:
CAPTCHA Verification 
Please enter the text you see in the image into the textbox below (we use this to prevent automated submissions).