Vous êtes sur la page 1sur 46

Activation Guide

Google Message Filtering Google Message Security Google Message Discovery Postini Email Security

Google, Inc. 1600 Amphitheatre Parkway Mountain View, CA 94043 www.google.com

Part number: ASBSG_R646_10


22 December 2011 Copyright 2011 Google, Inc. All rights reserved.
Google, the Google logo, Google Message Filtering, Google Message Security, Google Message Discovery, Postini, the Postini logo, Postini Perimeter Manager, Postini Threat Identification Network (PTIN), Postini Industry Heuristics, and PREEMPT are trademarks, registered trademarks, or service marks of Google, Inc. All other trademarks are the property of their respective owners. Use of any Google solution is governed by the license agreement included in your original contract. Any intellectual property rights relating to the Google services are and shall remain the exclusive property of Google, Inc. and/or its subsidiaries( Google). You may not attempt to decipher, decompile, or develop source code for any Google product or service offering, or knowingly allow others to do so. Google documentation may not be sold, resold, licensed or sublicensed and may not be transferred without the prior written consent of Google. Your right to copy this manual is limited by copyright law. Making copies, adaptations, or compilation works, without prior written authorization of Google. is prohibited by law and constitutes a punishable violation of the law. No part of this manual may be reproduced in whole or in part without the express written consent of Google. Copyright by Google, Inc. Postini, Inc. provides this publication as is without warranty of any either express or implied, including but not limited to the implied warranties of merchantability or fitness for a particular purpose. Postini, Inc. may revise this publication from time to time without notice. Some jurisdictions do not allow disclaimer of express or implied warranties in certain transactions; therefore, this statement may not apply to you. GD Graphics Copyright Notice: Google uses GD graphics. Portions copyright 1994, 1995, 1996, 1997, 1998, 1999, 2000 by Cold Spring Harbor Laboratory. Funded under Grant P41RR02188 by the National Institutes of Health. Portions copyright 1996, 1997, 1998, 1999, 2000 by Boutell.Com, Inc. Portions relating to GD2 format copyright 19s99, 2000 Philip Warner. Portions relating to PNG copyright 1999, 2000 Greg Roelofs. Portions relating to libttf copyright 1999, 2000 John Ellson (ellson@lucent.com). Portions relating to JPEG copyright 2000, Doug Becker and copyright (C) 1994-1998, Thomas G. Lane. This software is based in part on the work of the Independent JPEG Group. Portions relating to WBMP copyright 2000 Maurice Szmurlo and Johan Van den Brande. Permission has been granted to copy, distribute and modify gd in any context without fee, including a commercial application, provided that this notice is present in user-accessible supporting documentation. This does not affect your ownership of the derived work itself, and the intent is to assure proper credit for the authors of gd, not to interfere with your productive use of gd. If you have questions, ask. Derived works includes all programs that utilize the library. Credit must be given in user-accessible documentation. This software is provided AS IS. The copyright holders disclaim all warranties, either express or implied, including but not limited to implied warranties of merchantability and fitness for a particular purpose, with respect to this code and accompanying

Activation Guide

documentation. Although their code does not appear in gd 1.8.4, the authors wish to thank David Koblas, David Rowley, and Hutchison Avenue Software Corporation for their prior contributions. Google Compliance Policies Notice: Google assumes no responsibility in connection with the Compliance Policies lexicon-filtering feature, including any failure to recognize credit card or social security numbers that do not follow an applicable pattern as established in Postinis systems or any failure to encrypt a credit card or social security number.

Overview and Prerequisites

Overview
This guide describes the activation process for the message security service. After ordering your service, youll receive a registration confirmation email and a setup email, and later an activation email. You can use the information in the setup email to begin the activation steps described in this guide. Follow these steps to activate the message security service: First, follow the steps in Complete the Setup and Activation Wizard on page 7. Then decide your next steps by following the instructions in Choose Your Rollout Strategy on page 13. If you choose to change your MX records before adding users, see the instructions in Change Your MX Records on page 15. To test your activation, see Test Your MX Records on page 41 and Test Filtered Mail Flow on page 45. If you choose to add users and set up your service before changing your MX records, see Add Users and Set Up Your Service on page 47.

To learn more about MX records, see FAQ: How MX Records Work on page 49, or watch the video Understanding and Working with MX Records.

Prerequisites
Before following the steps in this guide: You must have completed the registration process for the message security service. You must have received a registration confirmation email and a setup email.

When you are ready to begin your activation, go to Complete the Setup and Activation Wizard on page 7.

Overview and Prerequisites

Complete the Setup and Activation Wizard

During the activation process for the message security service, you receive the following three emails: Registration confirmation email: This email provides registration details, confirms that your registration was successful, and enables you to review your account information. Details include your activation domain (for example, stellarshores.com), company name, address, contact information, and the name of the service that you ordered. Setup email: Use the information in this email to begin the process of activating your service. The setup email provides you with an activation key, as well as a link to the setup wizard. Using the setup wizard, you can submit details about your account, including your domain name, administrator login address, and password. Activation email: You receive your activation email within two business days of completing the setup wizard. The activation email includes your MX record information and other details that youll need to complete the activation process.

An example of a setup email is shown below. The activation key and link to the Setup Wizard are outlined in red. When you receive this email, click the link to the Setup Wizard to begin activation.

Complete the Setup and Activation Wizard

To complete the Setup Wizard, follow these steps: 1. Open the Setup Wizard by clicking your Setup and Activation page URL in your setup email. 2. Copy the activation key from your setup email (an example of an activation key is shown below).

3. Paste the activation key into the Activation Key field of the Setup Wizard as shown in the example below, and click LOG IN.

Activation Guide

This opens the first step of the Setup Wizard as shown below:

4. In the Domain field, enter the domain for your account (for example, stellarshores.com). Be sure to copy your domain name with exactly the correct spelling in this field. 5. In the Email Server field, enter the host name or IP address of your domains email server (for example, mail.stellarshores.com). To look it up, click the Find from Domain button. 6. Enter the email address for Notifications and Support. This is the address that will appear in the From: field of messages to your users, as well as the address for users to contact Support.

Complete the Setup and Activation Wizard

7. In the Administrator Login Address field, enter the email address of an administrator in your organization. This is your login name for administering the service. The email address must be in the domain that you entered in the Domain field. 8. Enter a password in the Administrator Password field. Tip: The security requirements for passwords are high since this account holds all the mail for your domain, so your usual passwords might not be accepted. For help, see Password Requirements on page 10. 9. Enter the password again in the Confirm Password field. 10. Set up the Time Zone using the drop-down list. This sets the time for your message display in the archive. 11. Click the Set Up Account button. This opens the second step of the setup wizard, which displays your Initial Service Settings. We recommend that you not make changes to this page, but instead proceed to the third step of the wizard by clicking Continue.
Note: If you need to make changes to the Initial Service Settings, we

recommend that you do so later from the Administration Console after you have completed the activation process. 12. Clicking Continue opens the third step of the setup wizard, which confirms your account information. To complete the setup wizard, simply close the browser window once you have confirmed your account information. Within two business days of completing the wizard, you will receive the activation email which contains your MX records and specifies the steps for completing activation. Once you have finished the activation wizard, go to Choose Your Rollout Strategy on page 13.

Password Requirements
The Administration Console rejects any password with common patterns or that resembles a word or name. Specifically, the password: Must be at least 6 characters long Must contain at least 5 unique characters Cannot have consecutive numbers or letters (for example, 345 or abc) Cannot contain an email address

10

Activation Guide

Cannot resemble a word in the dictionary. When you enter a suggested password, the system: Converts common character substitutions to the familiar character. In other words, the @ sign becomes the letter a, and the number 1 becomes the letter L, and so on. Removes all numbers that act as substitutions for letters. Removes common suffixes (ing, er, es, y)

If the result is in the dictionary, the password is rejected. For example, John4387 and CR@CK3R are rejected because after substitution, the word john or cracker is in the dictionary.

Frequently Asked Questions: Setup and Activation Wizard


What if my activation key does not open the first step of the Setup Wizard?
Make sure you copy your activation key exactly as it appears in your setup email. If your key still does not work, please contact Support. If you are a directly supported Postini Customer, please log in to the Postini Support Portal . Otherwise, contact your vendor, who can assist you.

If I click the Do This Later button in the first step of the wizard, can I still continue with the activation process and switch my MX records?
No. You must complete the setup wizard to receive your activation email, which contains the information you need to switch your MX records to the message security service.

I received my registration confirmation email and my setup email, but I havent received my activation email. Why not?
You receive your activation email only after completing the Setup Wizard. The activation email arrives within two business days of completing the wizard.

What if I lost my setup email or my activation email?


If you no longer have the email with your activation information, please contact Support. If you are a directly supported Postini Customer, please log in to the Postini Support Portal . Otherwise, contact your vendor, who can assist you.

Complete the Setup and Activation Wizard

11

Choose Your Rollout Strategy

Once youve completed the Setup and Activation Wizard, its time to decide your next steps. Choose one of the following two options for your rollout strategy: Change your MX records first, and then later add users and set up your service in the administration console. Add users and set up your service first, and then change your MX records later.

IMPORTANT: Whichever strategy you choose, youll need to finish both of these steps to complete your activation. Note that both deployment strategies are effective options for getting started with the message security service.

Add Users and Set Up Your Service First


If you are replacing an existing hosted solution, and if you don't want to leave a short gap in the spam and virus protection for your organization, you may want to add your users to the message security service first, as well as configure settings. To continue with your activation, see Add Users and Set Up Your Service on page 47.

Change Your MX Records First


If you prefer to test your MX records and test mail flow before adding all of your users, you can flip MX records first. To continue with your activation, see Change Your MX Records on page 15.

Choose Your Rollout Strategy

13

Change Your MX Records

Once you complete the Setup Wizard, you receive an activation email, which provides the information you need to change your mail exchange (MX) records. The activation email arrives within two business days of completing the wizard. MX records represent the mailing address for your domain's email. To ensure that messages for users within your domain are filtered and/or archived, you need to change your domains MX records to point to the message security service. To change your MX records, you must first log in to your domain registrar. To do this, follow the instructions below. IMPORTANT: Dont change MX records for any domain other than the one listed in your activation email. You can add other domains to the service and change their records later. Note that MX records may take 48 hours or longer to propagate after you change your records to the message security service, although propagation may take just one hour in some cases. The length of time thats required for propagation depends on the Time to Live (TTL) setting that was previously specified for your domain. During this transition, your mail will be delivered as usual, but not all mail will be filtered by the message security service until your records have fully propagated. For more information about MX records, TTL, propagation, and related topics, see FAQ: How MX Records Work on page 49, or watch the video Understanding and Working with MX Records.

Change Your MX Records

15

To update your MX records:


1. Log in to your domain registrar (also called domain host or domain provider).

See the instructions below for specific domain registrars.


2. Change the MX records for the domain listed in your activation email.

The activation email provides a list of MX records for switching mail flow to the message security service. The activation email also provides your Administration Console login information. Youll need this information later after switching your MX records, so be sure to save this email. When you enter your MX records, log in to your domain registrar and enter them exactly as they appear in the activation email, including the trailing dot at the end of each line. In general, your MX records include the following details:
<yourdomain>.s<your <yourdomain>.s<your <yourdomain>.s<your <yourdomain>.s<your system system system system number>a1.psmtp.com. number>a2.psmtp.com. number>b1.psmtp.com. number>b2.psmtp.com.

IMPORTANT: Always replace <yourdomain> with your actual domain name -for example, solarmora.com -- when entering your MX records. Several common domain registrars are listed below. If your domain registrar is shown here, click the link and then follow the instructions for switching your MX records. If your domain registrar is not listed here, see Instructions for Other Domain Hosts on page 36. GoDaddy Network Solutions Enom DreamHost Yahoo! SmallBusiness DynDNS IX Web Hosting EveryDNS No-IP DNS Park 4d Web Hosting Instructions for Other Domain Hosts If you have trouble with this step, see Troubleshooting MX Records on page 39. Important: Most ISPs and domain name providers that host the email for your domain are compatible with the message security service. However, 1and1 and XO Communications are known providers that are currently not compatible with the message security service. The message security service is not compatible with providers that don't release mail server information, or don't allow you to change the MX records with their hosted email service.

16

Activation Guide

When you are finished switching your MX records to the message security service, go to Test Your MX Records on page 41.
GoDaddy
The following steps use example MX records. Be sure to enter the exact MX records shown in your activation email.
To modify your MX records with GoDaddy, do the following:

1. Log in to your account at www.godaddy.com. 2. Open the Domains tab and select My Domain Names. You'll be directed to the Manage Domains page. 3. Click the domain that you'd like to use. 4. Click the Total DNS Control And MX Records in the box entitled Total DNS Control. 5. Clear all existing MX Records by clicking Delete. 6. Click OK in the confirmation dialogue box. 7. Once you've deleted all existing records, click Add New MX Record. The MX (Mail Exchangers) Record Wizard will appear. 8. For each MX Record, enter the following information: For the Select the Priority Value drop-down menu, enter the priority value. For Enter a Host Name, leave the default setting to @. For the Select TTL Value drop-down menu, the default Time to Live (TTL) value may be set to 1 Week. This will appear as 604800 seconds within the DNS system. This means that it will require one week for your MX records to propagate. For future updates to your records, we suggest you enter a shorter time span for the TTL, such as 1 day or 1 hour. For Enter Goes To Address, enter the following MX records, including the trailing dots at the end of each record. Be sure to enter your actual domain name -- for example, solarmora.com -- for yourdomain:
<yourdomain>.s<your <yourdomain>.s<your <yourdomain>.s<your <yourdomain>.s<your system system system system number>a1.psmtp.com. number>a2.psmtp.com. number>b1.psmtp.com. number>b2.psmtp.com.

For additional instructions on changing your MX records, see Tips for Changing Your MX Records with GoDaddy on page 18. 9. Click Continue. 10. Click Add to confirm each entry. The DNS Manager main page will reappear when you've finished. Keep in mind that changes to MX records will take time to propagate throughout the Internet. The length of time depends on the Time to Live (TTL) for your domain.

Change Your MX Records

17

When you are finished switching your MX records to the message security service, go to Test Your MX Records on page 41.

Tips for Changing Your MX Records with GoDaddy


If your domain registrar allows this, we recommend that you keep your current MX records (examples shown in bold below) as a precaution until you have verified mail flow through the message security service. However, be sure to assign the MX records shown in your activation email with the higher priority values (lower numbers). For example, the values of 1, 2, 3, and 4 represent higher priorities than the values of 10 and 20.
yourdomain.com. yourdomain.com. yourdomain.com. yourdomain.com. yourdomain.com. yourdomain.com. IN IN IN IN IN IN MX MX MX MX MX MX 1 yourdomain.com.s7a1.psmtp.com 2 yourdomain.com.s7a2.psmtp.com 3 yourdomain.com.s7b1.psmtp.com 4 yourdomain.com.s7b2.psmtp.com 10 yourmailhost1.yourdomain.com 20 yourmailhost2.yourdomain.com

Once you are sure that mail flow through the message security service has been established, we highly recommend that you remove your old MX records to ensure your email traffic does not bypass the message security service and connect directly to your mail server. (You verify your MX records later in the activation process. See Test Your MX Records on page 41 and Test Filtered Mail Flow on page 45.) The default Time to Live (TTL) value for GoDaddy is 1 week. Therefore, if you have not already changed this setting to a shorter length of time, you may need to wait one week before your MX records are propagated. (Your email will continue to flow during this transition.) Make sure each MX record is entered exactly as it appears below, including the trailing dot at the end of each record. In this example, N equals your system number for the message security service. (See your activation email to make sure you are entering your correct system number. Be sure to enter your actual domain name for yourdomain.com.)
Priority Value TTL Value

Hostname

Goes To Address (Mail Server)

1 2 3 4

@ @ @ @

yourdomain.com.sNa1.psmtp.com. yourdomain.com.sNa2.psmtp.com. yourdomain.com.sNb1.psmtp.com. yourdomain.com.sNb2.psmtp.com.

1 week 1 week 1 week 1 week

For example, if your domain is stellarshores.com, and you are on System 7 for the message security service, you would receive the following MX records in your activation email:
stellarshores.com. IN MX 1 s7a1.psmtp.com. stellarshores.com. IN MX 2 s7a2.psmtp.com.

18

Activation Guide

stellarshores.com. IN MX 3 s7b1.psmtp.com. stellarshores.com. IN MX 4 s7b2.psmtp.com.

Enter each of the MX records in the Goes To Address (Mail Server) column. Be sure to enter your actual domain name for yourdomain.com. Be sure to include the trailing dot as shown in this example, and assign priority values of 1, 2, 3, and 4:
Priority Value TTL Value

Hostname

Goes To Address (Mail Server)

1 2 3 4

@ @ @ @

yourdomain.com.s7a1.psmtp.com. yourdomain.com.s7a2.psmtp.com. yourdomain.com.s7b1.psmtp.com. yourdomain.com.s7b2.psmtp.com.

1 week 1 week 1 week 1 week

When you are finished switching your MX records to the message security service, go to Test Your MX Records on page 41.

Network Solutions
The following steps use example MX records. Be sure to enter the exact MX records shown in your activation email.
To modify your MX records with Network Solutions, do the following:

1. Log in to your account at networksolutions.com. 2. Click Edit DNS under DNS Settings. The Edit DNS page will appear. (If you have not previously edited DNS entries for your domain name, you may need to select Custom DNS Setting.) 3. Under the DNS Manager-Advanced Tools panel, click Continue. The DNS Manager - Advanced Tools page will appear. 4. Under the Mail Servers panel, click Add / Edit. The Mail Servers table will appear. 5. Remove any existing MX records by checking the box next to delete. 6. Within the Mail Servers table, enter the following MX records:
<yourdomain>.s<your <yourdomain>.s<your <yourdomain>.s<your <yourdomain>.s<your system system system system number>a1.psmtp.com. number>a2.psmtp.com. number>b1.psmtp.com. number>b2.psmtp.com.

See your activation email to make sure you are entering your correct system number. For additional instructions on changing your MX records, see Tips for Changing Your MX Records with Network Solutions on page 20.

Change Your MX Records

19

Keep in mind that changes to MX records will take time to propagate throughout the Internet. The length of time depends on the Time to Live (TTL) for your domain. When you are finished switching your MX records to the message security service, and when the TTL has expired, go to Test Your MX Records on page 41.

Tips for Changing Your MX Records with Network Solutions


If your domain registrar allows this, we recommend that you keep your current MX records (examples shown in bold below) as a precaution for 48 to 72 hours, or until you have verified mail flow through the message security service. However, be sure to assign the MX records shown in your activation email with the higher priority values (lower numbers). For example, the values of 1, 2, 3, and 4 represent higher priorities than the values of 10 and 20.
yourdomain.com. yourdomain.com. yourdomain.com. yourdomain.com. yourdomain.com. yourdomain.com. IN IN IN IN IN IN MX MX MX MX MX MX 1 s7a1.psmtp.com 2 s7a2.psmtp.com 3 s7b1.psmtp.com 4 s7b2.psmtp.com 10 yourmailhost1.yourdomain.com 20 yourmailhost2.yourdomain.com

Once you are sure that mail flow through the message security service has been established, we highly recommend that you remove your old MX records to ensure your email traffic does not bypass the message security service and connect directly to your mail server. (You verify your MX records later in the activation process. See Test Your MX Records on page 41 and Test Filtered Mail Flow on page 45.)

Make sure each MX record is entered exactly as it appears below, including the trailing dot at the end of each record. Be sure to enter your actual domain name for yourdomain.com. In this example, N equals your system number for the message security service. (See your activation email to make sure you are entering your correct system number.)
Priority Mail Server

1 2 3 4

yourdomain.com.sNa1.psmtp.com. yourdomain.com.sNa2.psmtp.com. yourdomain.com.sNb1.psmtp.com. yourdomain.com.sNb2.psmtp.com.

For example, if your domain is stellarshores.com, and you are on System 7 for the message security service, you would receive the following MX records in your activation email:
stellarshores.com. IN MX 1 s7a1.psmtp.com. stellarshores.com. IN MX 2 s7a2.psmtp.com. stellarshores.com. IN MX 3 s7b1.psmtp.com.

20

Activation Guide

stellarshores.com. IN MX 4 s7b2.psmtp.com.

Enter each of the MX records in the Mail Server column. Be sure to enter your actual domain name for yourdomain.com. Be sure to include the trailing dot as shown in this example, and assign priority values of 1, 2, 3, and 4:
Priority Mail Server

1 2 3 4

yourdomain.com.s7a1.psmtp.com. yourdomain.com.s7a2.psmtp.com. yourdomain.com.s7b1.psmtp.com. yourdomain.com.s7b2.psmtp.com.

When you are finished switching your MX records to the message security service, go to Test Your MX Records on page 41.

Enom
The following steps use example MX records. Be sure to enter the exact MX records shown in your activation email.
To modify your MX records with Enom, do the following:

1. Log in to your account at www.enom.com. 2. From the Domains drop-down menu, select my domains. You'll see a list of domains associated with your account. 3. Click the domain name that you'd like to use. 4. From the Domain Control Panel, select Email Settings from the Manage Domain drop-down list on the right side of the screen. This opens the Edit Email Settings page. 5. In the Service Selection drop-down list near the top of the page, select User (MX). 6. Click the new row button to add rows.

Change Your MX Records

21

7. For each MX Record, enter information according to the examples below. Be sure to refer to your activation email for your actual MX records (for additional instructions, see Tips for Changing Your MX Records with Enom on page 22):
<yourdomain>.s<your <yourdomain>.s<your <yourdomain>.s<your <yourdomain>.s<your system system system system number>a1.psmtp.com. number>a2.psmtp.com. number>b1.psmtp.com. number>b2.psmtp.com.

Include an @ sign in the Host name column for each record. Enter an Address in each row as shown in the table below. Be sure to include the trailing dot.

See your activation email to make sure you are entering your correct system number. 8. Click the Save button in the lower-right corner of the screen. Keep in mind that changes to MX records will take time to propagate throughout the Internet. The length of time depends on the Time to Live (TTL) for your domain. When you are finished switching your MX records to the message security service, go to Test Your MX Records on page 41.

Tips for Changing Your MX Records with Enom


Make sure each MX record is entered exactly as it appears below, where N equals your system number for the message security service. See your activation email to make sure you are entering the correct system number and domain. Be sure to enter your actual domain name for yourdomain.com.
Host name Address Pref

@ @ @ @

yourdomain.com.sNa1.psmtp.com. yourdomain.com.sNa2.psmtp.com. yourdomain.com.sNb1.psmtp.com. yourdomain.com.sNb2.psmtp.com.

1 2 3 4

For example, if your domain is stellarshores.com, and you are on System 7 for the message security service, you would receive the following MX records in your activation email:
stellarshores.com. stellarshores.com. stellarshores.com. stellarshores.com. IN IN IN IN MX MX MX MX 1 2 3 4 s7a1.psmtp.com. s7a2.psmtp.com. s7b1.psmtp.com. s7b2.psmtp.com.

22

Activation Guide

Enter each of the MX records (as highlighted in the example above) in the Address column. Be sure to enter your actual domain name for yourdomain.com. Be sure to include the trailing dot as shown in this example, and assign priority values of 1, 2, 3, and 4:

Host name

Address

Pref

@ @ @ @

yourdomain.com.s7a1.psmtp.com. yourdomain.com.s7a2.psmtp.com. yourdomain.com.s7b1.psmtp.com. yourdomain.com.s7b2.psmtp.com.

1 2 3 4

If your domain registrar allows this, we recommend that you keep your current MX records (examples shown in bold below) as a precaution for 48 to 72 hours, or until you have verified mail flow through the message security service. However, be sure to assign the MX records shown in your activation email with the higher priority values (lower numbers). For example, the values of 1, 2, 3, and 4 represent higher priorities than the values of 10 and 20.
yourdomain.com. yourdomain.com. yourdomain.com. yourdomain.com. yourdomain.com. yourdomain.com. IN IN IN IN IN IN MX MX MX MX MX MX 1 s7a1.psmtp.com 2 s7a2.psmtp.com 3 s7b1.psmtp.com 4 s7b2.psmtp.com 10 yourmailhost1.yourdomain.com 20 yourmailhost2.yourdomain.com

Once you are sure that mail flow through the message security service has been established, we highly recommend that you remove your old MX records to ensure your email traffic does not bypass the message security service and connect directly to your mail server. (You verify your MX records later in the activation process. See Test Your MX Records on page 41 and Test Filtered Mail Flow on page 45.)

When you are finished switching your MX records to the message security service, go to Test Your MX Records on page 41.

DreamHost
The following steps use example MX records. Be sure to enter the exact MX records shown in your activation email.
To modify your MX records with DreamHost, do the following:

1. Log in to your account at www.dreamhost.com. 2. Click Mail on the left side and select MX from the drop-down menu. 3. Click Edit next to the domain you will be using.

Change Your MX Records

23

4. Under Custom MX Records, delete the existing MX record, and enter the following MX record (refer to your activation email and enter the first MX record thats listed): s7a1.psmtp.com. Make sure the MX record is entered exactly as it appears above, including the trailing dot at the end of the record. 5. Click Update your custom MX records now! IMPORTANT: Your activation email may display a set of four MX records as shown below. For example, if your domain is stellarshores.com, and you are on System 7 for the message security service, you would receive the following MX records in your activation email:
stellarshores.com. stellarshores.com. stellarshores.com. stellarshores.com. IN IN IN IN MX MX MX MX 1 2 3 4 s7a1.psmtp.com. s7a2.psmtp.com. s7b1.psmtp.com. s7b2.psmtp.com.

However, if DreamHost allows you to enter only one MX record (as described in the example above), enter only the one MX record with the highest priority (lowest number, for example MX 1) from your activation email. When you are finished switching your MX records to the message security service, go to Test Your MX Records on page 41.

Yahoo! SmallBusiness
The following steps use example MX records. Be sure to enter the exact MX records shown in your activation email.
To modify your MX records with Yahoo! SmallBusiness, do the following:

1. Log in to your account at smallbusiness.yahoo.com. 2. Click Domain Control Panel below the domain you'd like to use with the message security service. 3. Click Manage Advanced DNS Settings. 4. Click Change MX Records. 5. Clear all existing MX records. 6. Enter the following MX records:
<yourdomain>.s<your <yourdomain>.s<your <yourdomain>.s<your <yourdomain>.s<your system system system system number>a1.psmtp.com. number>a2.psmtp.com. number>b1.psmtp.com. number>b2.psmtp.com.

See your activation email to make sure you are entering your correct system number. For additional instructions on changing your MX records, see Tips for Changing Your MX Records with Yahoo on page 25.

24

Activation Guide

7. Click Submit. When you are finished switching your MX records to the message security service, go to Test Your MX Records on page 41.

Tips for Changing Your MX Records with Yahoo


If your domain registrar allows this, we recommend that you keep your current MX records (examples shown in bold below) as a precaution for 48 to 72 hours, or until you have verified mail flow through the message security service. However, be sure to assign the MX records shown in your activation email with the higher priority values (lower numbers). For example, the values of 1, 2, 3, and 4 represent higher priorities than the values of 10 and 20.
yourdomain.com. yourdomain.com. yourdomain.com. yourdomain.com. yourdomain.com. yourdomain.com. IN IN IN IN IN IN MX MX MX MX MX MX 1 s7a1.psmtp.com 2 s7a2.psmtp.com 3 s7b1.psmtp.com 4 s7b2.psmtp.com 10 yourmailhost1.yourdomain.com 20 yourmailhost2.yourdomain.com

Once you are sure that mail flow through the message security service has been established, we highly recommend that you remove your old MX records to ensure your email traffic does not bypass the message security service and connect directly to your mail server. (You verify your MX records later in the activation process. See Test Your MX Records on page 41 and Test Filtered Mail Flow on page 45.)

Make sure each MX record is entered exactly as it appears below, including the trailing dot at the end of each record. Be sure to enter your actual domain name for yourdomain.com. In this example, N equals your system number for the message security service. (See your activation email to make sure you are entering your correct system number.) Mailserver Hostname yourdomain.com.sNa1.psmtp.com. yourdomain.com.sNa2.psmtp.com. yourdomain.com.sNb1.psmtp.com. yourdomain.com.sNb2.psmtp.com. Priority 1 2 3 4

For example, if your domain is stellarshores.com, and you are on System 7 for the message security service, you would receive the following MX records in your activation email:
stellarshores.com. stellarshores.com. stellarshores.com. stellarshores.com. IN IN IN IN MX MX MX MX 1 2 3 4 s7a1.psmtp.com. s7a2.psmtp.com. s7b1.psmtp.com. s7b2.psmtp.com.

Change Your MX Records

25

Enter each of the MX records (as highlighted in the example above) in the Mailserver Hostname column. Be sure to enter your actual domain name for yourdomain.com. Be sure to include the trailing dot as shown in this example, and assign priority values of 1, 2, 3, and 4:

Mailserver Hostname yourdomain.com.s7a1.psmtp.com. yourdomain.com.s7a2.psmtp.com. yourdomain.com.s7b1.psmtp.com. yourdomain.com.s7b2.psmtp.com.

Priority 1 2 3 4

When you are finished switching your MX records to the message security service, go to Test Your MX Records on page 41.

DynDNS
The following steps use example MX records. Be sure to enter the exact MX records shown in your activation email.
To modify your MX records with DynDNS, do the following:

1. Log in to your account at DynDNS.com. 2. Click My Services below your username. 3. Under Zone Level Services, click Custom DNS next to the domain you will be using. 4. Under Mail eXchanger (MX) Records, select all existing domains, and click Delete MX. 5. Next to Mail eXchanger (MX) Records, click Add New MX. 6. For Preference, select 5 -- Highest. 7. In the Mail Exchanger field, enter the following as the first entry:
<yourdomain>.s<your system number>a1.psmtp.com.

For example, if your system number is 7 for the message security service, you would enter:
<yourdomain>.s7a1.psmtp.com.

See your activation email to make sure you are entering your correct system number. For additional instructions on changing your MX records, see Tips for Changing Your MX Records with Yahoo on page 25. 8. Click Modify MX. 9. At the top-right, click Return to...

26

Activation Guide

10. Repeat the last few steps above by entering the following MX records. For example, if your domain is stellarshores.com and you are on System 7 for the message security service, you would enter the following records: stellarshores.com.s7a2.psmtp.com. stellarshores.com.s7b1.psmtp.com. stellarshores.com.s7b2.psmtp.com. Be sure to include the trailing dot as shown in this example, and assign the highest priority values to the MX records shown in your activation email. See your activation email to make sure you are entering your correct system number. For additional instructions on changing your MX records, see Tips for Changing Your MX Records with DynDNS on page 27.

Tips for Changing Your MX Records with DynDNS


If your domain registrar allows this, we recommend that you keep your current MX records (examples shown in bold below) as a precaution for 48 to 72 hours, or until you have verified mail flow through the message security service. However, be sure to assign the MX records shown in your activation email with the higher priority values (lower numbers). For example, the values of 1, 2, 3, and 4 represent higher priorities than the values of 10 and 20.
yourdomain.com. yourdomain.com. yourdomain.com. yourdomain.com. yourdomain.com. yourdomain.com. IN IN IN IN IN IN MX MX MX MX MX MX 1 s7a1.psmtp.com 2 s7a2.psmtp.com 3 s7b1.psmtp.com 4 s7b2.psmtp.com 10 yourmailhost1.yourdomain.com 20 yourmailhost2.yourdomain.com

Once you are sure that mail flow through the message security service has been established, we highly recommend that you remove your old MX records to ensure your email traffic does not bypass the message security service and connect directly to your mail servers. (You verify your MX records later in the activation process. See Test Your MX Records on page 41 and Test Filtered Mail Flow on page 45.)

When you are finished switching your MX records to the message security service, go to Test Your MX Records on page 41.

IX Web Hosting
The following steps use example MX records. Be sure to enter the exact MX records shown in your activation email.
To modify your MX records with IX Web Hosting, do the following:

1. Log in to your account at https://manage.ixwebhosting.com. 2. Click Manage below the Hosting Account section.

Change Your MX Records

27

3. On the left side, click the domain you'd like to use with the message security service. 4. Next to Mail Service, click On to disable the default MX records. 5. Next to DNS Configuration, click EDIT. 6. If you've already created custom MX records, be sure to erase all existing records before adding MX records for the message security service. 7. Click Add DNS MX Record. 8. Enter the following (while entering your actual domain name -- for example, solarmora.com -- for <yourdomain>:
<yourdomain>s<your system number>a1.psmtp.com.

For example, if your system number is 7 and your domain name is solarmora.com, you would enter
solarmora.com.s7a1.psmtp.com.

See your activation email to make sure you are entering your correct system number. For additional instructions on changing your MX records, see Tips for Changing Your MX Records for IX Web Hosting on page 28. 9. Click Submit. 10. Repeat the above steps for the following MX record entries:
<yourdomain>.s<your system number>a2.psmtp.com. <yourdomain>.s<your system number>b1.psmtp.com. <yourdomain>.s<your system number>b2.psmtp.com.

Tips for Changing Your MX Records for IX Web Hosting


If your domain registrar allows this, we recommend that you keep your current MX records (examples shown in bold below) as a precaution for 48 to 72 hours, or until you have verified mail flow through the message security service. However, be sure to assign the MX records shown in your activation email with the higher priority values (lower numbers). For example, the values of 1, 2, 3, and 4 represent higher priorities than the values of 10 and 20.
yourdomain.com. yourdomain.com. yourdomain.com. yourdomain.com. yourdomain.com. yourdomain.com. IN IN IN IN IN IN MX MX MX MX MX MX 1 s7a1.psmtp.com 2 s7a2.psmtp.com 3 s7b1.psmtp.com 4 s7b2.psmtp.com 10 yourmailhost1.yourdomain.com 20 yourmailhost2.yourdomain.com

28

Activation Guide

Once you are sure that mail flow through the message security service has been established, we highly recommend that you remove your old MX records to ensure your email traffic does not bypass the message security service and connect directly to your mail server. (You verify your MX records later in the activation process. See Test Your MX Records on page 41 and Test Filtered Mail Flow on page 45.)

Make sure each MX record is entered exactly as it appears below, including the trailing dot at the end of each record. Be sure to enter your actual domain name for yourdomain.com. In this example, N equals your system number for the message security service. See your activation email to make sure you are entering your correct system number. Name leave blank leave blank leave blank leave blank Data 1 2 3 4 Data (second box) yourdomain.com.sNa1.psmtp.com. yourdomain.com.sNa2.psmtp.com. yourdomain.com.sNb1.psmtp.com. yourdomain.com.sNb2.psmtp.com.

For example, if your domain is stellarshores.com, and you are on System 7 for the message security service, you would receive the following MX records in your activation email:
stellarshores.com. stellarshores.com. stellarshores.com. stellarshores.com. IN IN IN IN MX MX MX MX 1 2 3 4 s7a1.psmtp.com. s7a2.psmtp.com. s7b1.psmtp.com. s7b2.psmtp.com.

Enter each of the MX records (as highlighted in the example above) in the Data (second box) column. Be sure to enter your actual domain name for yourdomain.com. Be sure to include the trailing dot as shown in this example, and assign priority values of 1, 2, 3, and 4: Name leave blank leave blank leave blank leave blank Data 1 2 3 4 Data (second box) yourdomain.com.s7a1.psmtp.com. yourdomain.com.s7a2.psmtp.com. yourdomain.com.s7b1.psmtp.com. yourdomain.com.s7b2.psmtp.com.

When you are finished switching your MX records to the message security service, go to Test Your MX Records on page 41.

EveryDNS
The following steps use example MX records. Be sure to enter the exact MX records shown in your activation email.

Change Your MX Records

29

To modify your MX records with EveryDNS, do the following:

1. Log in to your account at EveryDNS.net. 2. On the left side, click the domain you'd like to use with the message security service. 3. Since EveryDNS.net is your hosting service, and not your domain registrar, be sure that your domain points to EveryDNS.net's nameservers. This will allow your MX record configuration to take effect. 4. Below Add a Record, enter the following:
<yourdomain>.s<your system number>a1.psmtp.com.

For example, if your system number is 7 and your domain name is solarmora.com, you would enter
solarmora.com.s7a1.psmtp.com.

See your activation email to make sure you are entering your correct system number. For additional instructions on changing your MX records, see Tips for Changing Your MX Records for IX Web Hosting on page 30. 5. Click Submit. 6. Repeat the steps above for the following MX record entries:
<yourdomain>.s<your system number>a2.psmtp.com. <yourdomain>.s<your system number>b1.psmtp.com. <yourdomain>.s<your system number>b2.psmtp.com.

Tips for Changing Your MX Records for IX Web Hosting


If your domain registrar allows this, we recommend that you keep your current MX records (examples shown in bold below) as a precaution for 48 to 72 hours, or until you have verified mail flow through the message security service. However, be sure to assign the MX records shown in your activation email with the higher priority values (lower numbers). For example, the values of 1, 2, 3, and 4 represent higher priorities than the values of 10 and 20.
yourdomain.com. yourdomain.com. yourdomain.com. yourdomain.com. yourdomain.com. yourdomain.com. IN IN IN IN IN IN MX MX MX MX MX MX 1 s7a1.psmtp.com 2 s7a2.psmtp.com 3 s7b1.psmtp.com 4 s7b2.psmtp.com 10 yourmailhost1.yourdomain.com 20 yourmailhost2.yourdomain.com

Once you are sure that mail flow through the message security service has been established, we highly recommend that you remove your old MX records to ensure your email traffic does not bypass the message security service and connect directly to your mail server. (You verify your MX records later in the activation process. See Test Your MX Records on page 41 and Test Filtered Mail Flow on page 45.)

30

Activation Guide

Make sure each MX record is entered exactly as it appears below, including the trailing dot at the end of each record. Be sure to enter your actual domain name for yourdomain.com. In this example, N equals your system number for the message security service. See your activation email to make sure you are entering your correct system number.) Record Value yourdomain.com.sNa1.psmtp.com. yourdomain.com.sNa2.psmtp.com. yourdomain.com.sNb1.psmtp.com. yourdomain.com.sNb2.psmtp.com. If MX Record, MX Value 1 2 3 4

For example, if your domain is stellarshores.com, and you are on System 7 for the message security service, you would receive the following MX records in your activation email:
stellarshores.com. stellarshores.com. stellarshores.com. stellarshores.com. IN IN IN IN MX MX MX MX 1 2 3 4 s7a1.psmtp.com. s7a2.psmtp.com. s7b1.psmtp.com. s7b2.psmtp.com.

Enter each of the MX records in the Record Value column. Be sure to enter your actual domain name for yourdomain.com. Be sure to include the trailing dot as shown in this example, and assign priority values of 1, 2, 3, and 4: Record Value yourdomain.com.s7a1.psmtp.com. yourdomain.com.s7a2.psmtp.com. yourdomain.com.s7b1.psmtp.com. yourdomain.com.s7b2.psmtp.com. If MX Record, MX Value 1 2 3 4

When you are finished switching your MX records to the message security service, go to Test Your MX Records on page 41.

No-IP
The following steps use example MX records. Be sure to enter the exact MX records shown in your activation email.
To modify your MX records with No-IP, do the following:

1. Log in to your account at No-IP.com. 2. On the left side, click Host/Redirects. 3. Find the top entry for the domain you'd like to use, and click Modify.

Change Your MX Records

31

4. Scroll to the bottom of the page to view Mail Options. 5. Enter the following for the first MX record field.
<yourdomain>.s<your system number>a1.psmtp.com.

For example, if your system number is 7 and your domain name is solarmora.com, you would enter
solarmora.com.s7a1.psmtp.com.

See your activation email to make sure you are entering your correct system number. For additional instructions on changing your MX records, see Tips for Changing Your MX Records for No-IP on page 32. 6. Click Submit. 7. Repeat the steps above for the following MX record entries:
<yourdomain>.s<your system number>a2.psmtp.com. <yourdomain>.s<your system number>b1.psmtp.com. <yourdomain>.s<your system number>b2.psmtp.com. Note: No-IP allows up to five MX record entries.

When you are finished switching your MX records to the message security service, go to Test Your MX Records on page 41.

Tips for Changing Your MX Records for No-IP


If your domain registrar allows this, we recommend that you keep at least one of your current MX records (examples shown in bold below) as a precaution for 48 to 72 hours, or until you have verified mail flow through the message security service. However, be sure to assign the MX records shown in your activation email with the higher priority values (lower numbers). For example, the values of 1, 2, 3, and 4 represent higher priorities than the value of 10.
yourdomain.com. yourdomain.com. yourdomain.com. yourdomain.com. yourdomain.com. IN IN IN IN IN MX MX MX MX MX 1 s7a1.psmtp.com 2 s7a2.psmtp.com 3 s7b1.psmtp.com 4 s7b2.psmtp.com 10 yourmailhost1.yourdomain.com

Once you are sure that mail flow through the message security service has been established, we highly recommend that you remove your old MX records to ensure your email traffic does not bypass the message security service and connect directly to your mail server. (You verify your MX records later in the activation process. See Test Your MX Records on page 41 and Test Filtered Mail Flow on page 45.)

32

Activation Guide

Make sure each MX record is entered exactly as it appears below, including the trailing dot at the end of each record. Be sure to enter your actual domain name for yourdomain.com. In this example, N equals your system number for the message security service. See your activation email to make sure you are entering your correct system number. yourdomain.com.sNa1.psmtp.com. yourdomain.com.sNa2.psmtp.com. yourdomain.com.sNb1.psmtp.com. yourdomain.com.sNb2.psmtp.com. 1 2 3 4

For example, if you on System 7 for the message security service, you would receive the following MX records in your activation email:
stellarshores.com. stellarshores.com. stellarshores.com. stellarshores.com. IN IN IN IN MX MX MX MX 1 2 3 4 s7a1.psmtp.com. s7a2.psmtp.com. s7b1.psmtp.com. s7b2.psmtp.com.

Be sure to enter your actual domain name for yourdomain.com. Be sure to include the trailing dot as shown in this example, and assign priority values of 1, 2, 3, and 4:

yourdomain.com.s7a1.psmtp.com. yourdomain.com.s7a2.psmtp.com. yourdomain.com.s7b1.psmtp.com. yourdomain.com.s7b2.psmtp.com.

1 2 3 4

When you are finished switching your MX records to the message security service, go to Test Your MX Records on page 41.

DNS Park
The following steps use example MX records. Be sure to enter the exact MX records shown in your activation email.
To modify your MX records with DNS Park, do the following:

1. Log in to your account at https://www.dnspark.net. 2. On the left side, click DNS Hosting. 3. Click the domain you'd like to use with the message security service. 4. Since DNS Park is your hosting service, and not your domain registrar, be sure that your domain points to DNS Park's nameservers. This will allow your MX record configuration to take effect.

Change Your MX Records

33

5. Click Mail Records (MX). 6. For MX Resource records, enter the following:
<yourdomain>.s<your system number>a1.psmtp.com.

For example, if your system number is 7 and your domain name is solarmora.com, you would enter
solarmora.com.7a1.psmtp.com.

See your activation email to make sure you are entering your correct system number. For additional instructions on changing your MX records, see Tips for Changing Your MX Records for DNS Park on page 34. 7. Click Update. 8. Repeat the above steps for the following MX record entries:
<yourdomain>.s<your system number>a2.psmtp.com. <yourdomain>.s<your system number>b1.psmtp.com. <yourdomain>.s<your system number>b2.psmtp.com.

When you are finished switching your MX records to the message security service, go to Test Your MX Records on page 41.

Tips for Changing Your MX Records for DNS Park


If your domain registrar allows this, we recommend that you keep your current MX records (examples shown in bold below) as a precaution for 48 to 72 hours, or until you have verified mail flow through the message security service. However, be sure to assign the MX records shown in your activation email with the higher priority values (lower numbers). For example, the values of 1, 2, 3, and 4 represent higher priorities than the values of 10 and 20.
yourdomain.com. yourdomain.com. yourdomain.com. yourdomain.com. yourdomain.com. yourdomain.com. IN IN IN IN IN IN MX MX MX MX MX MX 1 s7a1.psmtp.com 2 s7a2.psmtp.com 3 s7b1.psmtp.com 4 s7b2.psmtp.com 10 yourmailhost1.yourdomain.com 20 yourmailhost2.yourdomain.com

Once you are sure that mail flow through the message security service has been established, we highly recommend that you remove your old MX records to ensure your email traffic does not bypass the message security service and connect directly to your mail server. (You verify your MX records later in the activation process. See Test Your MX Records on page 41 and Test Filtered Mail Flow on page 45.)

34

Activation Guide

Make sure each MX record is entered exactly as it appears below, including the trailing dot at the end of each record. Be sure to enter your actual domain name for yourdomain.com. In this example, N equals your system number for the message security service. (See your activation email to make sure you are entering your correct system number.) Mail Domain (auto-filled) (auto-filled) (auto-filled) (auto-filled) Priority 1st 2nd 3rd 4th Hostname yourdomain.com.sNa1.psmtp.com. yourdomain.com.sNa2.psmtp.com. yourdomain.com.sNb1.psmtp.com. yourdomain.com.sNb2.psmtp.com.

For example, if you are on System 7 for the message security service, you would receive the following MX records in your activation email:
stellarshores.com. stellarshores.com. stellarshores.com. stellarshores.com. IN IN IN IN MX MX MX MX 1 2 3 4 s7a1.psmtp.com. s7a2.psmtp.com. s7b1.psmtp.com. s7b2.psmtp.com.

Be sure to enter your actual domain name for yourdomain.com. Be sure to include the trailing dot as shown in this example, and assign priority values of 1, 2, 3, and 4: Mail Domain (auto-filled) (auto-filled) (auto-filled) (auto-filled) Priority 1st 2nd 3rd 4th Hostname yourdomain.com.s7a1.psmtp.com. yourdomain.com.s7a2.psmtp.com. yourdomain.com.s7b1.psmtp.com. yourdomain.com.s7b2.psmtp.com.

When you are finished switching your MX records to the message security service, go to Test Your MX Records on page 41.

4d Web Hosting
The following steps use example MX records. Be sure to enter the exact MX records shown in your activation email.
To modify your MX records with 4D Web Hosting, do the following:

1. Log in to your account at https://members.4dwebhosting.com/. 2. Click Configure on the left side. A list of options will appear. 3. Under Configure, Click MX Records.

Change Your MX Records

35

4. Below Update Record, enter the following information for the Primary and Secondary:
<yourdomain>.s<your system number>a1.psmtp.com. <yourdomain>.s<your system number>a2.psmtp.com.

For example, if your system number is 7 and your domain name is solarmora.com, you would enter:
solarmora.com.s7a1.psmtp.com. solarmora.com.s7a2.psmtp.com.

See your activation email to make sure you are entering your correct system number. For additional instructions on changing your MX records, see Tips for Changing Your MX Records for 4D Web Hosting on page 36. 5. Click Update MX Records. When you are finished switching your MX records to the message security service, go to Test Your MX Records on page 41.

Tips for Changing Your MX Records for 4D Web Hosting


If you are on System 7 for the message security service, you would receive the following MX records in your activation email:
stellarshores.com. stellarshores.com. stellarshores.com. stellarshores.com. IN IN IN IN MX MX MX MX 1 2 3 4 s7a1.psmtp.com. s7a2.psmtp.com. s7b1.psmtp.com. s7b2.psmtp.com.

Be sure to enter your actual domain name for yourdomain.com. Enter the first two of the MX records in the second column as shown below. Be sure to include the trailing dot as shown in this example:

Primary: Secondary:

yourdomain.com.s7a1.psmtp.com. yourdomain.com.s7a2.psmtp.com.

When you are finished switching your MX records to the message security service, go to Test Your MX Records on page 41.

Instructions for Other Domain Hosts


If your service provider (domain host) is not listed above, use the following general instructions to switch your MX records.
To modify your MX records, do the following:

1. Log in to your account with your domain host. 2. Navigate to the MX record maintenance page.

36

Activation Guide

3. MX records may be located in DNS Management, Mail Server Configuration, or Name Server Management. It's possible that you will have to enable advanced settings to edit your MX records. 4. Add the following MX records:
<yourdomain>.s<your <yourdomain>.s<your <yourdomain>.s<your <yourdomain>.s<your system system system system number>a1.psmtp.com. number>a2.psmtp.com. number>b1.psmtp.com. number>b2.psmtp.com.

For example, if your system number is 7 and your domain name is solarmora.com, you would enter:
solarmora.com.s7a1.psmtp.com. solarmora.com.s7a2.psmtp.com. solarmora.com.s7b1.psmtp.com. solarmora.com.s7b2.psmtp.com.

See your activation email to make sure you are entering your correct system number. For additional instructions on changing your MX records, see Tips for Changing Your MX Records for Any Domain Host on page 37. 5. Click Submit, Save, or Update to make sure you save the changes. When you are finished switching your MX records to the message security service, go to Test Your MX Records on page 41.

Tips for Changing Your MX Records for Any Domain Host


You may not be able to enter the priority value exactly as it appears in the table below -- if you can't, make sure each record follows the indicated order (instead of 1, 5, 10, you can use 10, 20, 30, etc.). If you aren't able to assign priorities, you should enter only the following MX record: <yourdomain>.s7a1.psmtp.com. In other words, if your system number is 7 and your domain name is solarmora.com, you would enter, solarmora.com.s7a1.psmtp.com. Be sure to refer to your activation email for your correct MX records. If you can't enter all four records, enter as many as you can. If your domain registrar allows this, we recommend that you keep your current MX records (examples shown in bold below) as a precaution for 48 to 72 hours, or until you have verified mail flow through the message security service. However, be sure to assign the MX records shown in your activation email with the higher priority values (lower numbers). For example, the values of 1, 2, 3, and 4 represent higher priorities than the values of 10 and 20.
yourdomain.com. yourdomain.com. yourdomain.com. yourdomain.com. yourdomain.com. IN IN IN IN IN MX MX MX MX MX 1 s7a1.psmtp.com 2 s7a2.psmtp.com 3 s7b1.psmtp.com 4 s7b2.psmtp.com 10 yourmailhost1.yourdomain.com

Change Your MX Records

37

yourdomain.com. IN MX 20 yourmailhost2.yourdomain.com

Once you are sure that mail flow through the message security service has been established, we highly recommend that you remove your old MX records to ensure your email traffic does not bypass the message security service and connect directly to your mail server. (You verify your MX records later in the activation process. See Test Your MX Records on page 41 and Test Filtered Mail Flow on page 45.)

Make sure each MX record is entered exactly as it appears below, including the trailing dot at the end of each record. Be sure to enter your actual domain name for yourdomain.com. In this example, N equals your system number for the message security service. (See your activation email to make sure you are entering your correct system number.) Priority 1 2 3 4 Mail Server yourdomain.com.sNa1.psmtp.com. yourdomain.com.sNa2.psmtp.com. yourdomain.com.sNb1.psmtp.com. yourdomain.com.sNb2.psmtp.com.

For example, if your domain is stellarshores.com, and you are on System 7 for the message security service, you would receive the following MX records in your activation email:
stellarshores.com. stellarshores.com. stellarshores.com. stellarshores.com. IN IN IN IN MX MX MX MX 1 2 3 4 s7a1.psmtp.com. s7a2.psmtp.com. s7b1.psmtp.com. s7b2.psmtp.com.

Enter each of the MX records (as highlighted in the example above) in the Mail Server column (this column may have a different name, depending on your domain registrar). Be sure to enter your actual domain name for yourdomain.com. Be sure to include the trailing dot as shown in this example, and assign priority values of 1, 2, 3, and 4:

Priority 1 2 3 4

Mail Server yourdomain.com.s7a1.psmtp.com. yourdomain.com.s7a2.psmtp.com. yourdomain.com.s7b1.psmtp.com. yourdomain.com.s7b2.psmtp.com.

When you are finished switching your MX records to the message security service, go to Test Your MX Records on page 41.

38

Activation Guide

Troubleshooting MX Records
I don't understand MX records.
For more information about MX records and how to use them, see FAQ: How MX Records Work on page 49.

I don't know who my domain registrar is.


To find your domain registrar, follow these steps: 1. Search for "WHOIS server" on Google.com. 2. Select a search result from the list. 3. Type your domain name in to the field. 4. Click Submit.
Note: Domain registrars are also referred to as DNS providers, domain providers, or domain hosts.

Will I lose mail after changing MX records?


No. As long as you enter the MX records correctly, you won't lose any mail after changing the MX records. While your MX records are changing over, some mail will be delivered using your old MX information, and some mail will be delivered using your new MX information, but all of it will be delivered.

I typed the wrong information into the MX record.


If you type the incorrect delivery information in the MX record, some mail will bounce. The sender will receive notice that the mail wasn't delivered. Correct the MX records as soon as possible. Some mail may still bounce for a period of time (up to the length of the new TTL setting), but the sooner you update the MX records to the correct setting, the fewer messages will bounce.

I updated my MX records correctly, but the changes aren't showing up.


This is normal. MX record updates are not immediate. After you've updated your MX records, it will take a while for every sender to use the new MX records. Your original TTL setting determines how long (in seconds) this will take. There is no way to speed this up; changing the TTL setting won't affect this.

How can I tell if the MX update worked?


Send a test message from an outside address, then view the full headers. The full headers are about 20-50 lines of text. If the headers include the word "psmtp.com" then the mail flowed through the security service. Keep in mind that it can sometimes take a few days for MX records to completely change.

Change Your MX Records

39

Im unable to change my MX records with my domain provider. Why am I having trouble?


Most ISPs and domain name providers that host the email for your domain are compatible with the message security service. However, 1and1 and XO Communications are known providers that are currently not compatible with the message security service. The message security service is not compatible with providers that don't release mail server information, or don't allow you to change the MX records with their hosted email service.

When you are finished switching your MX records to the message security service, go to Test Your MX Records on page 41.

40

Activation Guide

Test Your MX Records

After you change your domains MX records and wait for the (Time to Live) TTL to expire, log in to the Administration Console to perform this test and confirm that the new MX records have been propagated. Dont proceed unless youve changed your MX records and waited for your TTL to expire, or this test might fail. (The default TTL setting varies for each domain registrar. For more information about TTL and MX records, see Frequently Asked Questions: Test Your MX Records on page 42 and FAQ: How MX Records Work on page 49, or watch the video Understanding and Working with MX Records.)
WARNING:

To test your MX records, follow these steps: 1. Refer to the login information in your activation email, and log in to the Administration Console. In any Web browser, go to the URL provided in your activation email. In the Login form, enter your Login Name and the password you supplied when you signed up for the message security service, and click Login. 2. Immediately after the next screen appears, click the System Administration link. You should then arrive at the Administration Console home page. 3. At the top of the Administration Console home page, open the Choose Org list and select the third org (short for organization)the one that has Users in its name. 4. On the resulting page, click the System Tests link. You may need to scroll down the page to find this link.

5. On the System Tests page, click the MX Record Test link. Be sure that Your_Account Users is named at the top of the page.

Test Your MX Records

41

6. On the MX Record Test page, click the Test button. Be sure that your domain is named in the list.

Wait a few moments, then view the results of the test at the bottom of the page. For example, if your domain is acme.com, successful results look like this.
acme.com: MX records OK. acme.com acme.com acme.com acme.com IN IN IN IN MX MX MX MX 1 2 3 4 acme.com.s7a1.psmtp.com. acme.com.s7a2.psmtp.com. acme.com.s7b1.psmtp.com. acme.com.s7b2.psmtp.com.

If you do not receive the test email and the test does not succeed, please see Frequently Asked Questions: Test Your MX Records on page 42.

When your test succeeds, go to the next step, Test Filtered Mail Flow on page 45.

Frequently Asked Questions: Test Your MX Records


Why did this test fail?
If this test fails, the most likely reason is that your new MX records havent yet propagated. If you havent waited the duration of the Time to Live (TTL), do so, then try the test again. (For information on TTL, see FAQ: How MX Records Work on page 49, or watch the video Understanding and Working with MX Records.)

42

Activation Guide

If you have waited the full duration of the TTL and the test fails, troubleshoot as follows: Verify that all records were entered correctly. For example, if the error message reports that a particular record couldnt be found, that record might have been misstyped. If so, reenter it, wait for the TTL to expire, and try the test again. Verify that your primary and secondary nameservers are properly synced with the new DNS records. Usually, entering records for the primary nameserver updates the secondary nameserver, as well. But with some DNS services, you might have to update the secondary nameserver manually. Verify that your ISP is compatible with the email protection service, in particular, that they will allow your domain to route email traffic to an external server. Some ISPs and hosting companies might not allow this. If this is the case, talk with them about a workaround right away. You can also contact your Internet services technical support for more information.

If after that youre still have trouble, please contact Support. If you are a directly supported Postini Customer, please log in to the Postini Support Portal . Otherwise, contact your vendor, who can assist you. Dont delay in fixing this problem, as email to your domain might be bouncing back to senders, without reaching users.
WARNING:

Test Your MX Records

43

Test Filtered Mail Flow

After confirming that your domains MX records are pointing to servers at the message security service, verify that mail sent to your domain is being routed through these servers and filtered. In this step, you run a test that sends a test message from an outside source, through the message security service, and to your server. To test filtered mail flow, follow these steps: 1. Return to the SMTP Message Test page. From the MX Record Test page, click your browsers Back button to return to the System Tests page. Then click SMTP Message Test link. Or from the Administration Console home page, click the SMTP Message Test link at the left of the page.

2. On the SMTP Message Test page, enter your administrator email address, and select the first radio button option: Test mailflow through the data center. You must enter the administrator address you logged in with.

Test Filtered Mail Flow

45

3. Click the Test button Wait a few moments for the data center to send its test email. Then view the results of the test at the bottom of the page. Successful results look like this:
Sending test email to helen@acme.com: Establish connection... Sending HELO Sending MAIL FROM Sending RCPT TO Sending data End of data dot Success The email data center can deliver email to this email server.

4. Retrieve the test message sent to your administrators Inbox. When this test is successful, a test message is delivered to your administrator address. Its important that you are able receive this message. If you dont receive it, look under Frequently Asked Questions: Test Filtered Mail Flow on page 46.

Frequently Asked Questions: Test Filtered Mail Flow


How can I tell my email is being filtered?
The Administration Console has real-time charts and graphs displaying current email activity at the message security services data center, including messages filtered as spam or viruses, and messages delivered to your server. After email has begun to flow through the data center for your administrator address, go to the Consoles home page to see this activity.

What if I dont receive the test message?


If your test succeeds but you dont receive the test message, your firewall or mail server might have an anti-spoofing feature turned on. To proceed, turn off any email filtering which prevented spoofing and run the test again. For information on configuring spoofing, consult the product documentation or support resources for your firewall or mail server. The message security service will provide comprehensive filtering against spam, so spoofing protection at your mail server is not needed. When the message security services data center sends a Welcome message (and other notifications), it spoofs the sender address to make it look like it came from your support address. That way, users feel they are interacting directly with you. To proceed with activation and use your service in general, please turn antispoofing off and leave it that way.

46

Activation Guide

Add Users and Set Up Your Service

During the setup process, you'll do the following: 1. Determine the level of control over spam and virus-infected messages that you want to give your users. 2. Configure settings for your users. 3. Announce the message security service to your users. To help make this process easier, download our Email Templates (Zip file). 4. Add users and mailing lists to the service. To add your users and set up your service now, follow the steps in the Quick Start Guide for your package: Quick Start for Message Security and Message Discovery Important: If you have not yet switched your MX records, you'll need to do this after adding users and setting up your service. To switch your MX records, see Change Your MX Records on page 15. To begin the process of switching MX records for additional domains and domain aliases, see the Quick Start guide.

Add Users and Set Up Your Service

47

FAQ: How MX Records Work

What is an MX record?
An MX record tells senders how to send email for your domain. When your domain is registered, its assigned several DNS records, which enable it to be located on the Internet. These include MX records, which direct the domains mail flow. Each MX record points to an email server thats configured to process mail for that domain. Theres typically one record that points to a primary server, then additional records that point to one or more backup servers. For users to send and receive email, their domain's MX records must point to a server that can process their mail. To filter email through the message security service, you must insert new records that point to the message security service's servers. For more about MX records, watch the video Understanding and Working with MX Records

Where are my MX records?


Your authoritative MX records are on your DNS provider's server. When you change the MX record on your DNS provider, other servers will make copies of these updated MX records over time.

How can I see my MX records?


To check your current MX records, follow these steps: 1. Search for "MX lookup" on Google.com. 2. Select a search result from the list. 3. Type your domain name in to the field. 4. Select MX records if it's not the default search query. 5. Click Lookup.

How do I update my MX records?


If your company has its own DNS servers, talk to your DNS administrator. Otherwise, contact your domain name provider.

FAQ: How MX Records Work

49

For detailed instructions on how to update your MX records, see Change Your MX Records on page 15

Why should I update MX records?


For the message security service to work, we need you to route your mail to us. When you update your MX records, we accept your mail, filter out the bad mail, and pass the good mail on to your server.

When should I update my MX records?


During activation, you'll receive a message telling you it's time to update your MX records. If you're adding more domains later on, update your MX records after you've added the domain in the Administration Console. Until your domain is set up in the Administration Console, mail will bounce if you update your MX records.

What's the format of an MX record?


An MX record includes the following fields: Name: The name of your domain. Class: This is always set to IN, which stands for Internet. Type: For MX records, this is always set to MX. TTL: "Time to Live." How long it will take to update the record. This is measured in seconds. A TTL of 3600 seconds means records will take an hour to update. A TTL of 86400 means records will take a day to update. A higher TTL value means less traffic load for the DNS server, but it also means that changing the MX records will take longer. Preference or Priority: The order of preference for mail delivery. Sending servers should try the lowest preference number first, then the next lowest, and so on. Data: The host name of the mail server that handles mail for that domain. For instance, if your domain is jumboinc.com, your MX records might look like this:
jumboinc.com. jumboinc.com. jumboinc.com. jumboinc.com. IN IN IN IN MX MX MX MX 86400 86400 86400 86400 1 2 3 4 jumboinc.com.s7a1.psmtp.com. jumboinc.com.s7a2.psmtp.com. jumboinc.com.s7b1.psmtp.com. jumboinc.com.s7b2.psmtp.com.

50

Activation Guide

Every DNS host has a different user interface for MX records. Some use a trailing period and some don't. Some allow you to set your TTL and some won't. Our instructions include information for most common MX hosts, but yours may be different. If you're not sure what to enter, use the same format as your existing MX records. Be sure that the message security service MX records have the first priority; the exact numbers don't matter as long as the message security service MX records are the first. If your DNS server allows fewer than 4 records, enter as many as you can. For detailed instructions on how to update your MX records, see Change Your MX Records on page 15.

Why do I need four separate MX records?


We use redundant MX records as a backup in case any problem occurs. They give our network more flexibility if any changes to architecture are necessary.

Should I update A records when routing mail to the message security service?
Do not update your A records. Since your MX records point to psmtp.com, you do not need to change any A records.

Can I keep MX records pointed directly to my mail server as a backup?


Yes. If you want to keep a direct MX record for your mail server as a backup, you can, but be sure to leave it at the lowest priority, after all four psmtp.com records. Leaving your own mail server in the MX records should be a temporary backup measure, because spammers sometimes try to bypass the service and connect directly to your mail server using your backup MX records. Once your mail is flowing through the message security service successfully, consider changing your MX records to remove this backup.

How long do MX record updates take?


MX record updates are not immediate. After you've updated your MX records, it will take a while for every sender to use the new MX records. Your original TTL setting determines how long (in seconds) this will take. Changing the TTL setting won't speed this up.

Will I lose mail after changing MX records?


No. As long as you enter the MX records correctly, you won't lose any MX records. While your MX records are changing over, some mail will be delivered using your old MX information, and some mail will be delivered using your new MX information, but all of it will be delivered.

FAQ: How MX Records Work

51

What happens if I type the wrong information into the MX record?


If you type the incorrect delivery information in the MX record, some mail will bounce. The sender will receive a notice that the mail wasn't delivered. If this happens, correct the MX records as soon as possible. Some mail may still bounce for a period of time (up to the length of the new TTL setting), but the sooner you update the MX records to the correct setting, the fewer messages will bounce.

What happens when I update my MX records?


Once you update your MX records, mail will start flowing through the message security service. After your old previous TTL (in seconds) has expired, all your mail flows through the message security service. When your mail flows through the service, mail is bounced from IP addresses known to be a major source of spam attacks or viruses. Also, if you have Non-Account Virus Blocking, mail to users will be filtered for viruses as well. You'll get complete mail filtering after you've added your users.

How can I tell if the MX update worked?


Send a test message from an outside address, then view the full headers. The full headers are about 20-50 lines of text. If the headers include the word "psmtp.com" then the mail flowed through the message security service.

52

Activation Guide

Vous aimerez peut-être aussi