Frequently Asked Questions - Google Postini Email Security and Compliance
web-kong.com.s8a1.psmtp.com. [Preference 10]
web-kong.com.s8a2.psmtp.com. [Preference 20]
web-kong.com.s8b1.psmtp.com. [Preference 30]
web-kong.com.s8b2.psmtp.com. [Preference 40]
To receive email you must publish public records to the Internet stating where mail should be delivered. This is no different than publishing your address or phone number.
Typically the company ABC.com might publish records like "mail.ABC.com", but due to your managed email security and compliance you're first telling would-be mailees to drop of your mail at these servers where it's processed for spam, security, and compliance THEN these servers deliver it to your mail server safe and sound.
Take special note that these above records end in a period ("."). Depending on the means used to configure your DNS this may or may note be very important! Many configuration services may automatically append "ABC.com" to every record that doesn't explicitly end with a period. This would then publish web-kong.com.s8a1.psmtp.com.ABC.com which is entirely different AND INCORRECT. This will prohibit you from properly receiving email.
PDF versionweb-kong.com.s8a1.psmtp.com. [Preference 10]
web-kong.com.s8a2.psmtp.com. [Preference 20]
web-kong.com.s8b1.psmtp.com. [Preference 30]
web-kong.com.s8b2.psmtp.com. [Preference 40]
In short- if you have to ask you probably shouldn't be making this change yourself. Because there are some troublesome implications involved if mistakes are made, we suggest that you find the appropriate technical expertise within your organization or contract us to make this change for you.
If you're the do-it-yourself type, or just have lots of time on your hands, there are numerous resources available on the Internet explaining the procedure- just search for it (aka "google it").
But be forewarned- making a mistake may have catastrophic consequences. It is possible to disable your organization's email, make your website irretrievable, take your VPN down, etc.
Consider yourself warned.
Your email, once scanned by Postini for spam, compliance, and security, will be handed off to your email server. It will come to you FROM GOOGLE POSTINI via the IP address ranges in the table below. Every firewall/email server accepts IP ranges in different formats. Choose the one most appropriate for hardware/software.
|
64.18.0.0 - 64.18.15.255
|
64.18.0.0
netmask 255.255.240.0 |
You firewall should be configured to deny all connections inbound to your mail server on port 25 EXCEPT from the listed IP address ranges. This makes it absolutely necessary for email to first be processed by Google Postini before being received on your end. Should your security policy also call for outbound processing you may also configure the reverse forcing outbound email be delivered to the same IP ranges.
NOTE! If this information leads to follow up questions like, "What does all these mean?", "Where do I enter this?," or similar then you probably shouldn't be attempting this yourself. Please contact us to help you through the process.
Shopping cart
Support / FAQ's
