Académique Documents
Professionnel Documents
Culture Documents
Google Message Filtering Google Message Security Google Message Discovery Postini Email Security
Activation Guide
documentation. Although their code does not appear in gd 1.8.4, the authors wish to thank David Koblas, David Rowley, and Hutchison Avenue Software Corporation for their prior contributions. Google Compliance Policies Notice: Google assumes no responsibility in connection with the Compliance Policies lexicon-filtering feature, including any failure to recognize credit card or social security numbers that do not follow an applicable pattern as established in Postinis systems or any failure to encrypt a credit card or social security number.
Overview
This guide describes the activation process for the message security service. After ordering your service, youll receive a registration confirmation email and a setup email, and later an activation email. You can use the information in the setup email to begin the activation steps described in this guide. Follow these steps to activate the message security service: First, follow the steps in Complete the Setup and Activation Wizard on page 7. Then decide your next steps by following the instructions in Choose Your Rollout Strategy on page 13. If you choose to change your MX records before adding users, see the instructions in Change Your MX Records on page 15. To test your activation, see Test Your MX Records on page 41 and Test Filtered Mail Flow on page 45. If you choose to add users and set up your service before changing your MX records, see Add Users and Set Up Your Service on page 47.
To learn more about MX records, see FAQ: How MX Records Work on page 49, or watch the video Understanding and Working with MX Records.
Prerequisites
Before following the steps in this guide: You must have completed the registration process for the message security service. You must have received a registration confirmation email and a setup email.
When you are ready to begin your activation, go to Complete the Setup and Activation Wizard on page 7.
During the activation process for the message security service, you receive the following three emails: Registration confirmation email: This email provides registration details, confirms that your registration was successful, and enables you to review your account information. Details include your activation domain (for example, stellarshores.com), company name, address, contact information, and the name of the service that you ordered. Setup email: Use the information in this email to begin the process of activating your service. The setup email provides you with an activation key, as well as a link to the setup wizard. Using the setup wizard, you can submit details about your account, including your domain name, administrator login address, and password. Activation email: You receive your activation email within two business days of completing the setup wizard. The activation email includes your MX record information and other details that youll need to complete the activation process.
An example of a setup email is shown below. The activation key and link to the Setup Wizard are outlined in red. When you receive this email, click the link to the Setup Wizard to begin activation.
To complete the Setup Wizard, follow these steps: 1. Open the Setup Wizard by clicking your Setup and Activation page URL in your setup email. 2. Copy the activation key from your setup email (an example of an activation key is shown below).
3. Paste the activation key into the Activation Key field of the Setup Wizard as shown in the example below, and click LOG IN.
Activation Guide
This opens the first step of the Setup Wizard as shown below:
4. In the Domain field, enter the domain for your account (for example, stellarshores.com). Be sure to copy your domain name with exactly the correct spelling in this field. 5. In the Email Server field, enter the host name or IP address of your domains email server (for example, mail.stellarshores.com). To look it up, click the Find from Domain button. 6. Enter the email address for Notifications and Support. This is the address that will appear in the From: field of messages to your users, as well as the address for users to contact Support.
7. In the Administrator Login Address field, enter the email address of an administrator in your organization. This is your login name for administering the service. The email address must be in the domain that you entered in the Domain field. 8. Enter a password in the Administrator Password field. Tip: The security requirements for passwords are high since this account holds all the mail for your domain, so your usual passwords might not be accepted. For help, see Password Requirements on page 10. 9. Enter the password again in the Confirm Password field. 10. Set up the Time Zone using the drop-down list. This sets the time for your message display in the archive. 11. Click the Set Up Account button. This opens the second step of the setup wizard, which displays your Initial Service Settings. We recommend that you not make changes to this page, but instead proceed to the third step of the wizard by clicking Continue.
Note: If you need to make changes to the Initial Service Settings, we
recommend that you do so later from the Administration Console after you have completed the activation process. 12. Clicking Continue opens the third step of the setup wizard, which confirms your account information. To complete the setup wizard, simply close the browser window once you have confirmed your account information. Within two business days of completing the wizard, you will receive the activation email which contains your MX records and specifies the steps for completing activation. Once you have finished the activation wizard, go to Choose Your Rollout Strategy on page 13.
Password Requirements
The Administration Console rejects any password with common patterns or that resembles a word or name. Specifically, the password: Must be at least 6 characters long Must contain at least 5 unique characters Cannot have consecutive numbers or letters (for example, 345 or abc) Cannot contain an email address
10
Activation Guide
Cannot resemble a word in the dictionary. When you enter a suggested password, the system: Converts common character substitutions to the familiar character. In other words, the @ sign becomes the letter a, and the number 1 becomes the letter L, and so on. Removes all numbers that act as substitutions for letters. Removes common suffixes (ing, er, es, y)
If the result is in the dictionary, the password is rejected. For example, John4387 and CR@CK3R are rejected because after substitution, the word john or cracker is in the dictionary.
If I click the Do This Later button in the first step of the wizard, can I still continue with the activation process and switch my MX records?
No. You must complete the setup wizard to receive your activation email, which contains the information you need to switch your MX records to the message security service.
I received my registration confirmation email and my setup email, but I havent received my activation email. Why not?
You receive your activation email only after completing the Setup Wizard. The activation email arrives within two business days of completing the wizard.
11
Once youve completed the Setup and Activation Wizard, its time to decide your next steps. Choose one of the following two options for your rollout strategy: Change your MX records first, and then later add users and set up your service in the administration console. Add users and set up your service first, and then change your MX records later.
IMPORTANT: Whichever strategy you choose, youll need to finish both of these steps to complete your activation. Note that both deployment strategies are effective options for getting started with the message security service.
13
Once you complete the Setup Wizard, you receive an activation email, which provides the information you need to change your mail exchange (MX) records. The activation email arrives within two business days of completing the wizard. MX records represent the mailing address for your domain's email. To ensure that messages for users within your domain are filtered and/or archived, you need to change your domains MX records to point to the message security service. To change your MX records, you must first log in to your domain registrar. To do this, follow the instructions below. IMPORTANT: Dont change MX records for any domain other than the one listed in your activation email. You can add other domains to the service and change their records later. Note that MX records may take 48 hours or longer to propagate after you change your records to the message security service, although propagation may take just one hour in some cases. The length of time thats required for propagation depends on the Time to Live (TTL) setting that was previously specified for your domain. During this transition, your mail will be delivered as usual, but not all mail will be filtered by the message security service until your records have fully propagated. For more information about MX records, TTL, propagation, and related topics, see FAQ: How MX Records Work on page 49, or watch the video Understanding and Working with MX Records.
15
The activation email provides a list of MX records for switching mail flow to the message security service. The activation email also provides your Administration Console login information. Youll need this information later after switching your MX records, so be sure to save this email. When you enter your MX records, log in to your domain registrar and enter them exactly as they appear in the activation email, including the trailing dot at the end of each line. In general, your MX records include the following details:
<yourdomain>.s<your <yourdomain>.s<your <yourdomain>.s<your <yourdomain>.s<your system system system system number>a1.psmtp.com. number>a2.psmtp.com. number>b1.psmtp.com. number>b2.psmtp.com.
IMPORTANT: Always replace <yourdomain> with your actual domain name -for example, solarmora.com -- when entering your MX records. Several common domain registrars are listed below. If your domain registrar is shown here, click the link and then follow the instructions for switching your MX records. If your domain registrar is not listed here, see Instructions for Other Domain Hosts on page 36. GoDaddy Network Solutions Enom DreamHost Yahoo! SmallBusiness DynDNS IX Web Hosting EveryDNS No-IP DNS Park 4d Web Hosting Instructions for Other Domain Hosts If you have trouble with this step, see Troubleshooting MX Records on page 39. Important: Most ISPs and domain name providers that host the email for your domain are compatible with the message security service. However, 1and1 and XO Communications are known providers that are currently not compatible with the message security service. The message security service is not compatible with providers that don't release mail server information, or don't allow you to change the MX records with their hosted email service.
16
Activation Guide
When you are finished switching your MX records to the message security service, go to Test Your MX Records on page 41.
GoDaddy
The following steps use example MX records. Be sure to enter the exact MX records shown in your activation email.
To modify your MX records with GoDaddy, do the following:
1. Log in to your account at www.godaddy.com. 2. Open the Domains tab and select My Domain Names. You'll be directed to the Manage Domains page. 3. Click the domain that you'd like to use. 4. Click the Total DNS Control And MX Records in the box entitled Total DNS Control. 5. Clear all existing MX Records by clicking Delete. 6. Click OK in the confirmation dialogue box. 7. Once you've deleted all existing records, click Add New MX Record. The MX (Mail Exchangers) Record Wizard will appear. 8. For each MX Record, enter the following information: For the Select the Priority Value drop-down menu, enter the priority value. For Enter a Host Name, leave the default setting to @. For the Select TTL Value drop-down menu, the default Time to Live (TTL) value may be set to 1 Week. This will appear as 604800 seconds within the DNS system. This means that it will require one week for your MX records to propagate. For future updates to your records, we suggest you enter a shorter time span for the TTL, such as 1 day or 1 hour. For Enter Goes To Address, enter the following MX records, including the trailing dots at the end of each record. Be sure to enter your actual domain name -- for example, solarmora.com -- for yourdomain:
<yourdomain>.s<your <yourdomain>.s<your <yourdomain>.s<your <yourdomain>.s<your system system system system number>a1.psmtp.com. number>a2.psmtp.com. number>b1.psmtp.com. number>b2.psmtp.com.
For additional instructions on changing your MX records, see Tips for Changing Your MX Records with GoDaddy on page 18. 9. Click Continue. 10. Click Add to confirm each entry. The DNS Manager main page will reappear when you've finished. Keep in mind that changes to MX records will take time to propagate throughout the Internet. The length of time depends on the Time to Live (TTL) for your domain.
17
When you are finished switching your MX records to the message security service, go to Test Your MX Records on page 41.
Once you are sure that mail flow through the message security service has been established, we highly recommend that you remove your old MX records to ensure your email traffic does not bypass the message security service and connect directly to your mail server. (You verify your MX records later in the activation process. See Test Your MX Records on page 41 and Test Filtered Mail Flow on page 45.) The default Time to Live (TTL) value for GoDaddy is 1 week. Therefore, if you have not already changed this setting to a shorter length of time, you may need to wait one week before your MX records are propagated. (Your email will continue to flow during this transition.) Make sure each MX record is entered exactly as it appears below, including the trailing dot at the end of each record. In this example, N equals your system number for the message security service. (See your activation email to make sure you are entering your correct system number. Be sure to enter your actual domain name for yourdomain.com.)
Priority Value TTL Value
Hostname
1 2 3 4
@ @ @ @
For example, if your domain is stellarshores.com, and you are on System 7 for the message security service, you would receive the following MX records in your activation email:
stellarshores.com. IN MX 1 s7a1.psmtp.com. stellarshores.com. IN MX 2 s7a2.psmtp.com.
18
Activation Guide
Enter each of the MX records in the Goes To Address (Mail Server) column. Be sure to enter your actual domain name for yourdomain.com. Be sure to include the trailing dot as shown in this example, and assign priority values of 1, 2, 3, and 4:
Priority Value TTL Value
Hostname
1 2 3 4
@ @ @ @
When you are finished switching your MX records to the message security service, go to Test Your MX Records on page 41.
Network Solutions
The following steps use example MX records. Be sure to enter the exact MX records shown in your activation email.
To modify your MX records with Network Solutions, do the following:
1. Log in to your account at networksolutions.com. 2. Click Edit DNS under DNS Settings. The Edit DNS page will appear. (If you have not previously edited DNS entries for your domain name, you may need to select Custom DNS Setting.) 3. Under the DNS Manager-Advanced Tools panel, click Continue. The DNS Manager - Advanced Tools page will appear. 4. Under the Mail Servers panel, click Add / Edit. The Mail Servers table will appear. 5. Remove any existing MX records by checking the box next to delete. 6. Within the Mail Servers table, enter the following MX records:
<yourdomain>.s<your <yourdomain>.s<your <yourdomain>.s<your <yourdomain>.s<your system system system system number>a1.psmtp.com. number>a2.psmtp.com. number>b1.psmtp.com. number>b2.psmtp.com.
See your activation email to make sure you are entering your correct system number. For additional instructions on changing your MX records, see Tips for Changing Your MX Records with Network Solutions on page 20.
19
Keep in mind that changes to MX records will take time to propagate throughout the Internet. The length of time depends on the Time to Live (TTL) for your domain. When you are finished switching your MX records to the message security service, and when the TTL has expired, go to Test Your MX Records on page 41.
Once you are sure that mail flow through the message security service has been established, we highly recommend that you remove your old MX records to ensure your email traffic does not bypass the message security service and connect directly to your mail server. (You verify your MX records later in the activation process. See Test Your MX Records on page 41 and Test Filtered Mail Flow on page 45.)
Make sure each MX record is entered exactly as it appears below, including the trailing dot at the end of each record. Be sure to enter your actual domain name for yourdomain.com. In this example, N equals your system number for the message security service. (See your activation email to make sure you are entering your correct system number.)
Priority Mail Server
1 2 3 4
For example, if your domain is stellarshores.com, and you are on System 7 for the message security service, you would receive the following MX records in your activation email:
stellarshores.com. IN MX 1 s7a1.psmtp.com. stellarshores.com. IN MX 2 s7a2.psmtp.com. stellarshores.com. IN MX 3 s7b1.psmtp.com.
20
Activation Guide
stellarshores.com. IN MX 4 s7b2.psmtp.com.
Enter each of the MX records in the Mail Server column. Be sure to enter your actual domain name for yourdomain.com. Be sure to include the trailing dot as shown in this example, and assign priority values of 1, 2, 3, and 4:
Priority Mail Server
1 2 3 4
When you are finished switching your MX records to the message security service, go to Test Your MX Records on page 41.
Enom
The following steps use example MX records. Be sure to enter the exact MX records shown in your activation email.
To modify your MX records with Enom, do the following:
1. Log in to your account at www.enom.com. 2. From the Domains drop-down menu, select my domains. You'll see a list of domains associated with your account. 3. Click the domain name that you'd like to use. 4. From the Domain Control Panel, select Email Settings from the Manage Domain drop-down list on the right side of the screen. This opens the Edit Email Settings page. 5. In the Service Selection drop-down list near the top of the page, select User (MX). 6. Click the new row button to add rows.
21
7. For each MX Record, enter information according to the examples below. Be sure to refer to your activation email for your actual MX records (for additional instructions, see Tips for Changing Your MX Records with Enom on page 22):
<yourdomain>.s<your <yourdomain>.s<your <yourdomain>.s<your <yourdomain>.s<your system system system system number>a1.psmtp.com. number>a2.psmtp.com. number>b1.psmtp.com. number>b2.psmtp.com.
Include an @ sign in the Host name column for each record. Enter an Address in each row as shown in the table below. Be sure to include the trailing dot.
See your activation email to make sure you are entering your correct system number. 8. Click the Save button in the lower-right corner of the screen. Keep in mind that changes to MX records will take time to propagate throughout the Internet. The length of time depends on the Time to Live (TTL) for your domain. When you are finished switching your MX records to the message security service, go to Test Your MX Records on page 41.
@ @ @ @
1 2 3 4
For example, if your domain is stellarshores.com, and you are on System 7 for the message security service, you would receive the following MX records in your activation email:
stellarshores.com. stellarshores.com. stellarshores.com. stellarshores.com. IN IN IN IN MX MX MX MX 1 2 3 4 s7a1.psmtp.com. s7a2.psmtp.com. s7b1.psmtp.com. s7b2.psmtp.com.
22
Activation Guide
Enter each of the MX records (as highlighted in the example above) in the Address column. Be sure to enter your actual domain name for yourdomain.com. Be sure to include the trailing dot as shown in this example, and assign priority values of 1, 2, 3, and 4:
Host name
Address
Pref
@ @ @ @
1 2 3 4
If your domain registrar allows this, we recommend that you keep your current MX records (examples shown in bold below) as a precaution for 48 to 72 hours, or until you have verified mail flow through the message security service. However, be sure to assign the MX records shown in your activation email with the higher priority values (lower numbers). For example, the values of 1, 2, 3, and 4 represent higher priorities than the values of 10 and 20.
yourdomain.com. yourdomain.com. yourdomain.com. yourdomain.com. yourdomain.com. yourdomain.com. IN IN IN IN IN IN MX MX MX MX MX MX 1 s7a1.psmtp.com 2 s7a2.psmtp.com 3 s7b1.psmtp.com 4 s7b2.psmtp.com 10 yourmailhost1.yourdomain.com 20 yourmailhost2.yourdomain.com
Once you are sure that mail flow through the message security service has been established, we highly recommend that you remove your old MX records to ensure your email traffic does not bypass the message security service and connect directly to your mail server. (You verify your MX records later in the activation process. See Test Your MX Records on page 41 and Test Filtered Mail Flow on page 45.)
When you are finished switching your MX records to the message security service, go to Test Your MX Records on page 41.
DreamHost
The following steps use example MX records. Be sure to enter the exact MX records shown in your activation email.
To modify your MX records with DreamHost, do the following:
1. Log in to your account at www.dreamhost.com. 2. Click Mail on the left side and select MX from the drop-down menu. 3. Click Edit next to the domain you will be using.
23
4. Under Custom MX Records, delete the existing MX record, and enter the following MX record (refer to your activation email and enter the first MX record thats listed): s7a1.psmtp.com. Make sure the MX record is entered exactly as it appears above, including the trailing dot at the end of the record. 5. Click Update your custom MX records now! IMPORTANT: Your activation email may display a set of four MX records as shown below. For example, if your domain is stellarshores.com, and you are on System 7 for the message security service, you would receive the following MX records in your activation email:
stellarshores.com. stellarshores.com. stellarshores.com. stellarshores.com. IN IN IN IN MX MX MX MX 1 2 3 4 s7a1.psmtp.com. s7a2.psmtp.com. s7b1.psmtp.com. s7b2.psmtp.com.
However, if DreamHost allows you to enter only one MX record (as described in the example above), enter only the one MX record with the highest priority (lowest number, for example MX 1) from your activation email. When you are finished switching your MX records to the message security service, go to Test Your MX Records on page 41.
Yahoo! SmallBusiness
The following steps use example MX records. Be sure to enter the exact MX records shown in your activation email.
To modify your MX records with Yahoo! SmallBusiness, do the following:
1. Log in to your account at smallbusiness.yahoo.com. 2. Click Domain Control Panel below the domain you'd like to use with the message security service. 3. Click Manage Advanced DNS Settings. 4. Click Change MX Records. 5. Clear all existing MX records. 6. Enter the following MX records:
<yourdomain>.s<your <yourdomain>.s<your <yourdomain>.s<your <yourdomain>.s<your system system system system number>a1.psmtp.com. number>a2.psmtp.com. number>b1.psmtp.com. number>b2.psmtp.com.
See your activation email to make sure you are entering your correct system number. For additional instructions on changing your MX records, see Tips for Changing Your MX Records with Yahoo on page 25.
24
Activation Guide
7. Click Submit. When you are finished switching your MX records to the message security service, go to Test Your MX Records on page 41.
Once you are sure that mail flow through the message security service has been established, we highly recommend that you remove your old MX records to ensure your email traffic does not bypass the message security service and connect directly to your mail server. (You verify your MX records later in the activation process. See Test Your MX Records on page 41 and Test Filtered Mail Flow on page 45.)
Make sure each MX record is entered exactly as it appears below, including the trailing dot at the end of each record. Be sure to enter your actual domain name for yourdomain.com. In this example, N equals your system number for the message security service. (See your activation email to make sure you are entering your correct system number.) Mailserver Hostname yourdomain.com.sNa1.psmtp.com. yourdomain.com.sNa2.psmtp.com. yourdomain.com.sNb1.psmtp.com. yourdomain.com.sNb2.psmtp.com. Priority 1 2 3 4
For example, if your domain is stellarshores.com, and you are on System 7 for the message security service, you would receive the following MX records in your activation email:
stellarshores.com. stellarshores.com. stellarshores.com. stellarshores.com. IN IN IN IN MX MX MX MX 1 2 3 4 s7a1.psmtp.com. s7a2.psmtp.com. s7b1.psmtp.com. s7b2.psmtp.com.
25
Enter each of the MX records (as highlighted in the example above) in the Mailserver Hostname column. Be sure to enter your actual domain name for yourdomain.com. Be sure to include the trailing dot as shown in this example, and assign priority values of 1, 2, 3, and 4:
Priority 1 2 3 4
When you are finished switching your MX records to the message security service, go to Test Your MX Records on page 41.
DynDNS
The following steps use example MX records. Be sure to enter the exact MX records shown in your activation email.
To modify your MX records with DynDNS, do the following:
1. Log in to your account at DynDNS.com. 2. Click My Services below your username. 3. Under Zone Level Services, click Custom DNS next to the domain you will be using. 4. Under Mail eXchanger (MX) Records, select all existing domains, and click Delete MX. 5. Next to Mail eXchanger (MX) Records, click Add New MX. 6. For Preference, select 5 -- Highest. 7. In the Mail Exchanger field, enter the following as the first entry:
<yourdomain>.s<your system number>a1.psmtp.com.
For example, if your system number is 7 for the message security service, you would enter:
<yourdomain>.s7a1.psmtp.com.
See your activation email to make sure you are entering your correct system number. For additional instructions on changing your MX records, see Tips for Changing Your MX Records with Yahoo on page 25. 8. Click Modify MX. 9. At the top-right, click Return to...
26
Activation Guide
10. Repeat the last few steps above by entering the following MX records. For example, if your domain is stellarshores.com and you are on System 7 for the message security service, you would enter the following records: stellarshores.com.s7a2.psmtp.com. stellarshores.com.s7b1.psmtp.com. stellarshores.com.s7b2.psmtp.com. Be sure to include the trailing dot as shown in this example, and assign the highest priority values to the MX records shown in your activation email. See your activation email to make sure you are entering your correct system number. For additional instructions on changing your MX records, see Tips for Changing Your MX Records with DynDNS on page 27.
Once you are sure that mail flow through the message security service has been established, we highly recommend that you remove your old MX records to ensure your email traffic does not bypass the message security service and connect directly to your mail servers. (You verify your MX records later in the activation process. See Test Your MX Records on page 41 and Test Filtered Mail Flow on page 45.)
When you are finished switching your MX records to the message security service, go to Test Your MX Records on page 41.
IX Web Hosting
The following steps use example MX records. Be sure to enter the exact MX records shown in your activation email.
To modify your MX records with IX Web Hosting, do the following:
1. Log in to your account at https://manage.ixwebhosting.com. 2. Click Manage below the Hosting Account section.
27
3. On the left side, click the domain you'd like to use with the message security service. 4. Next to Mail Service, click On to disable the default MX records. 5. Next to DNS Configuration, click EDIT. 6. If you've already created custom MX records, be sure to erase all existing records before adding MX records for the message security service. 7. Click Add DNS MX Record. 8. Enter the following (while entering your actual domain name -- for example, solarmora.com -- for <yourdomain>:
<yourdomain>s<your system number>a1.psmtp.com.
For example, if your system number is 7 and your domain name is solarmora.com, you would enter
solarmora.com.s7a1.psmtp.com.
See your activation email to make sure you are entering your correct system number. For additional instructions on changing your MX records, see Tips for Changing Your MX Records for IX Web Hosting on page 28. 9. Click Submit. 10. Repeat the above steps for the following MX record entries:
<yourdomain>.s<your system number>a2.psmtp.com. <yourdomain>.s<your system number>b1.psmtp.com. <yourdomain>.s<your system number>b2.psmtp.com.
28
Activation Guide
Once you are sure that mail flow through the message security service has been established, we highly recommend that you remove your old MX records to ensure your email traffic does not bypass the message security service and connect directly to your mail server. (You verify your MX records later in the activation process. See Test Your MX Records on page 41 and Test Filtered Mail Flow on page 45.)
Make sure each MX record is entered exactly as it appears below, including the trailing dot at the end of each record. Be sure to enter your actual domain name for yourdomain.com. In this example, N equals your system number for the message security service. See your activation email to make sure you are entering your correct system number. Name leave blank leave blank leave blank leave blank Data 1 2 3 4 Data (second box) yourdomain.com.sNa1.psmtp.com. yourdomain.com.sNa2.psmtp.com. yourdomain.com.sNb1.psmtp.com. yourdomain.com.sNb2.psmtp.com.
For example, if your domain is stellarshores.com, and you are on System 7 for the message security service, you would receive the following MX records in your activation email:
stellarshores.com. stellarshores.com. stellarshores.com. stellarshores.com. IN IN IN IN MX MX MX MX 1 2 3 4 s7a1.psmtp.com. s7a2.psmtp.com. s7b1.psmtp.com. s7b2.psmtp.com.
Enter each of the MX records (as highlighted in the example above) in the Data (second box) column. Be sure to enter your actual domain name for yourdomain.com. Be sure to include the trailing dot as shown in this example, and assign priority values of 1, 2, 3, and 4: Name leave blank leave blank leave blank leave blank Data 1 2 3 4 Data (second box) yourdomain.com.s7a1.psmtp.com. yourdomain.com.s7a2.psmtp.com. yourdomain.com.s7b1.psmtp.com. yourdomain.com.s7b2.psmtp.com.
When you are finished switching your MX records to the message security service, go to Test Your MX Records on page 41.
EveryDNS
The following steps use example MX records. Be sure to enter the exact MX records shown in your activation email.
29
1. Log in to your account at EveryDNS.net. 2. On the left side, click the domain you'd like to use with the message security service. 3. Since EveryDNS.net is your hosting service, and not your domain registrar, be sure that your domain points to EveryDNS.net's nameservers. This will allow your MX record configuration to take effect. 4. Below Add a Record, enter the following:
<yourdomain>.s<your system number>a1.psmtp.com.
For example, if your system number is 7 and your domain name is solarmora.com, you would enter
solarmora.com.s7a1.psmtp.com.
See your activation email to make sure you are entering your correct system number. For additional instructions on changing your MX records, see Tips for Changing Your MX Records for IX Web Hosting on page 30. 5. Click Submit. 6. Repeat the steps above for the following MX record entries:
<yourdomain>.s<your system number>a2.psmtp.com. <yourdomain>.s<your system number>b1.psmtp.com. <yourdomain>.s<your system number>b2.psmtp.com.
Once you are sure that mail flow through the message security service has been established, we highly recommend that you remove your old MX records to ensure your email traffic does not bypass the message security service and connect directly to your mail server. (You verify your MX records later in the activation process. See Test Your MX Records on page 41 and Test Filtered Mail Flow on page 45.)
30
Activation Guide
Make sure each MX record is entered exactly as it appears below, including the trailing dot at the end of each record. Be sure to enter your actual domain name for yourdomain.com. In this example, N equals your system number for the message security service. See your activation email to make sure you are entering your correct system number.) Record Value yourdomain.com.sNa1.psmtp.com. yourdomain.com.sNa2.psmtp.com. yourdomain.com.sNb1.psmtp.com. yourdomain.com.sNb2.psmtp.com. If MX Record, MX Value 1 2 3 4
For example, if your domain is stellarshores.com, and you are on System 7 for the message security service, you would receive the following MX records in your activation email:
stellarshores.com. stellarshores.com. stellarshores.com. stellarshores.com. IN IN IN IN MX MX MX MX 1 2 3 4 s7a1.psmtp.com. s7a2.psmtp.com. s7b1.psmtp.com. s7b2.psmtp.com.
Enter each of the MX records in the Record Value column. Be sure to enter your actual domain name for yourdomain.com. Be sure to include the trailing dot as shown in this example, and assign priority values of 1, 2, 3, and 4: Record Value yourdomain.com.s7a1.psmtp.com. yourdomain.com.s7a2.psmtp.com. yourdomain.com.s7b1.psmtp.com. yourdomain.com.s7b2.psmtp.com. If MX Record, MX Value 1 2 3 4
When you are finished switching your MX records to the message security service, go to Test Your MX Records on page 41.
No-IP
The following steps use example MX records. Be sure to enter the exact MX records shown in your activation email.
To modify your MX records with No-IP, do the following:
1. Log in to your account at No-IP.com. 2. On the left side, click Host/Redirects. 3. Find the top entry for the domain you'd like to use, and click Modify.
31
4. Scroll to the bottom of the page to view Mail Options. 5. Enter the following for the first MX record field.
<yourdomain>.s<your system number>a1.psmtp.com.
For example, if your system number is 7 and your domain name is solarmora.com, you would enter
solarmora.com.s7a1.psmtp.com.
See your activation email to make sure you are entering your correct system number. For additional instructions on changing your MX records, see Tips for Changing Your MX Records for No-IP on page 32. 6. Click Submit. 7. Repeat the steps above for the following MX record entries:
<yourdomain>.s<your system number>a2.psmtp.com. <yourdomain>.s<your system number>b1.psmtp.com. <yourdomain>.s<your system number>b2.psmtp.com. Note: No-IP allows up to five MX record entries.
When you are finished switching your MX records to the message security service, go to Test Your MX Records on page 41.
Once you are sure that mail flow through the message security service has been established, we highly recommend that you remove your old MX records to ensure your email traffic does not bypass the message security service and connect directly to your mail server. (You verify your MX records later in the activation process. See Test Your MX Records on page 41 and Test Filtered Mail Flow on page 45.)
32
Activation Guide
Make sure each MX record is entered exactly as it appears below, including the trailing dot at the end of each record. Be sure to enter your actual domain name for yourdomain.com. In this example, N equals your system number for the message security service. See your activation email to make sure you are entering your correct system number. yourdomain.com.sNa1.psmtp.com. yourdomain.com.sNa2.psmtp.com. yourdomain.com.sNb1.psmtp.com. yourdomain.com.sNb2.psmtp.com. 1 2 3 4
For example, if you on System 7 for the message security service, you would receive the following MX records in your activation email:
stellarshores.com. stellarshores.com. stellarshores.com. stellarshores.com. IN IN IN IN MX MX MX MX 1 2 3 4 s7a1.psmtp.com. s7a2.psmtp.com. s7b1.psmtp.com. s7b2.psmtp.com.
Be sure to enter your actual domain name for yourdomain.com. Be sure to include the trailing dot as shown in this example, and assign priority values of 1, 2, 3, and 4:
1 2 3 4
When you are finished switching your MX records to the message security service, go to Test Your MX Records on page 41.
DNS Park
The following steps use example MX records. Be sure to enter the exact MX records shown in your activation email.
To modify your MX records with DNS Park, do the following:
1. Log in to your account at https://www.dnspark.net. 2. On the left side, click DNS Hosting. 3. Click the domain you'd like to use with the message security service. 4. Since DNS Park is your hosting service, and not your domain registrar, be sure that your domain points to DNS Park's nameservers. This will allow your MX record configuration to take effect.
33
5. Click Mail Records (MX). 6. For MX Resource records, enter the following:
<yourdomain>.s<your system number>a1.psmtp.com.
For example, if your system number is 7 and your domain name is solarmora.com, you would enter
solarmora.com.7a1.psmtp.com.
See your activation email to make sure you are entering your correct system number. For additional instructions on changing your MX records, see Tips for Changing Your MX Records for DNS Park on page 34. 7. Click Update. 8. Repeat the above steps for the following MX record entries:
<yourdomain>.s<your system number>a2.psmtp.com. <yourdomain>.s<your system number>b1.psmtp.com. <yourdomain>.s<your system number>b2.psmtp.com.
When you are finished switching your MX records to the message security service, go to Test Your MX Records on page 41.
Once you are sure that mail flow through the message security service has been established, we highly recommend that you remove your old MX records to ensure your email traffic does not bypass the message security service and connect directly to your mail server. (You verify your MX records later in the activation process. See Test Your MX Records on page 41 and Test Filtered Mail Flow on page 45.)
34
Activation Guide
Make sure each MX record is entered exactly as it appears below, including the trailing dot at the end of each record. Be sure to enter your actual domain name for yourdomain.com. In this example, N equals your system number for the message security service. (See your activation email to make sure you are entering your correct system number.) Mail Domain (auto-filled) (auto-filled) (auto-filled) (auto-filled) Priority 1st 2nd 3rd 4th Hostname yourdomain.com.sNa1.psmtp.com. yourdomain.com.sNa2.psmtp.com. yourdomain.com.sNb1.psmtp.com. yourdomain.com.sNb2.psmtp.com.
For example, if you are on System 7 for the message security service, you would receive the following MX records in your activation email:
stellarshores.com. stellarshores.com. stellarshores.com. stellarshores.com. IN IN IN IN MX MX MX MX 1 2 3 4 s7a1.psmtp.com. s7a2.psmtp.com. s7b1.psmtp.com. s7b2.psmtp.com.
Be sure to enter your actual domain name for yourdomain.com. Be sure to include the trailing dot as shown in this example, and assign priority values of 1, 2, 3, and 4: Mail Domain (auto-filled) (auto-filled) (auto-filled) (auto-filled) Priority 1st 2nd 3rd 4th Hostname yourdomain.com.s7a1.psmtp.com. yourdomain.com.s7a2.psmtp.com. yourdomain.com.s7b1.psmtp.com. yourdomain.com.s7b2.psmtp.com.
When you are finished switching your MX records to the message security service, go to Test Your MX Records on page 41.
4d Web Hosting
The following steps use example MX records. Be sure to enter the exact MX records shown in your activation email.
To modify your MX records with 4D Web Hosting, do the following:
1. Log in to your account at https://members.4dwebhosting.com/. 2. Click Configure on the left side. A list of options will appear. 3. Under Configure, Click MX Records.
35
4. Below Update Record, enter the following information for the Primary and Secondary:
<yourdomain>.s<your system number>a1.psmtp.com. <yourdomain>.s<your system number>a2.psmtp.com.
For example, if your system number is 7 and your domain name is solarmora.com, you would enter:
solarmora.com.s7a1.psmtp.com. solarmora.com.s7a2.psmtp.com.
See your activation email to make sure you are entering your correct system number. For additional instructions on changing your MX records, see Tips for Changing Your MX Records for 4D Web Hosting on page 36. 5. Click Update MX Records. When you are finished switching your MX records to the message security service, go to Test Your MX Records on page 41.
Be sure to enter your actual domain name for yourdomain.com. Enter the first two of the MX records in the second column as shown below. Be sure to include the trailing dot as shown in this example:
Primary: Secondary:
yourdomain.com.s7a1.psmtp.com. yourdomain.com.s7a2.psmtp.com.
When you are finished switching your MX records to the message security service, go to Test Your MX Records on page 41.
1. Log in to your account with your domain host. 2. Navigate to the MX record maintenance page.
36
Activation Guide
3. MX records may be located in DNS Management, Mail Server Configuration, or Name Server Management. It's possible that you will have to enable advanced settings to edit your MX records. 4. Add the following MX records:
<yourdomain>.s<your <yourdomain>.s<your <yourdomain>.s<your <yourdomain>.s<your system system system system number>a1.psmtp.com. number>a2.psmtp.com. number>b1.psmtp.com. number>b2.psmtp.com.
For example, if your system number is 7 and your domain name is solarmora.com, you would enter:
solarmora.com.s7a1.psmtp.com. solarmora.com.s7a2.psmtp.com. solarmora.com.s7b1.psmtp.com. solarmora.com.s7b2.psmtp.com.
See your activation email to make sure you are entering your correct system number. For additional instructions on changing your MX records, see Tips for Changing Your MX Records for Any Domain Host on page 37. 5. Click Submit, Save, or Update to make sure you save the changes. When you are finished switching your MX records to the message security service, go to Test Your MX Records on page 41.
37
yourdomain.com. IN MX 20 yourmailhost2.yourdomain.com
Once you are sure that mail flow through the message security service has been established, we highly recommend that you remove your old MX records to ensure your email traffic does not bypass the message security service and connect directly to your mail server. (You verify your MX records later in the activation process. See Test Your MX Records on page 41 and Test Filtered Mail Flow on page 45.)
Make sure each MX record is entered exactly as it appears below, including the trailing dot at the end of each record. Be sure to enter your actual domain name for yourdomain.com. In this example, N equals your system number for the message security service. (See your activation email to make sure you are entering your correct system number.) Priority 1 2 3 4 Mail Server yourdomain.com.sNa1.psmtp.com. yourdomain.com.sNa2.psmtp.com. yourdomain.com.sNb1.psmtp.com. yourdomain.com.sNb2.psmtp.com.
For example, if your domain is stellarshores.com, and you are on System 7 for the message security service, you would receive the following MX records in your activation email:
stellarshores.com. stellarshores.com. stellarshores.com. stellarshores.com. IN IN IN IN MX MX MX MX 1 2 3 4 s7a1.psmtp.com. s7a2.psmtp.com. s7b1.psmtp.com. s7b2.psmtp.com.
Enter each of the MX records (as highlighted in the example above) in the Mail Server column (this column may have a different name, depending on your domain registrar). Be sure to enter your actual domain name for yourdomain.com. Be sure to include the trailing dot as shown in this example, and assign priority values of 1, 2, 3, and 4:
Priority 1 2 3 4
When you are finished switching your MX records to the message security service, go to Test Your MX Records on page 41.
38
Activation Guide
Troubleshooting MX Records
I don't understand MX records.
For more information about MX records and how to use them, see FAQ: How MX Records Work on page 49.
39
When you are finished switching your MX records to the message security service, go to Test Your MX Records on page 41.
40
Activation Guide
After you change your domains MX records and wait for the (Time to Live) TTL to expire, log in to the Administration Console to perform this test and confirm that the new MX records have been propagated. Dont proceed unless youve changed your MX records and waited for your TTL to expire, or this test might fail. (The default TTL setting varies for each domain registrar. For more information about TTL and MX records, see Frequently Asked Questions: Test Your MX Records on page 42 and FAQ: How MX Records Work on page 49, or watch the video Understanding and Working with MX Records.)
WARNING:
To test your MX records, follow these steps: 1. Refer to the login information in your activation email, and log in to the Administration Console. In any Web browser, go to the URL provided in your activation email. In the Login form, enter your Login Name and the password you supplied when you signed up for the message security service, and click Login. 2. Immediately after the next screen appears, click the System Administration link. You should then arrive at the Administration Console home page. 3. At the top of the Administration Console home page, open the Choose Org list and select the third org (short for organization)the one that has Users in its name. 4. On the resulting page, click the System Tests link. You may need to scroll down the page to find this link.
5. On the System Tests page, click the MX Record Test link. Be sure that Your_Account Users is named at the top of the page.
41
6. On the MX Record Test page, click the Test button. Be sure that your domain is named in the list.
Wait a few moments, then view the results of the test at the bottom of the page. For example, if your domain is acme.com, successful results look like this.
acme.com: MX records OK. acme.com acme.com acme.com acme.com IN IN IN IN MX MX MX MX 1 2 3 4 acme.com.s7a1.psmtp.com. acme.com.s7a2.psmtp.com. acme.com.s7b1.psmtp.com. acme.com.s7b2.psmtp.com.
If you do not receive the test email and the test does not succeed, please see Frequently Asked Questions: Test Your MX Records on page 42.
When your test succeeds, go to the next step, Test Filtered Mail Flow on page 45.
42
Activation Guide
If you have waited the full duration of the TTL and the test fails, troubleshoot as follows: Verify that all records were entered correctly. For example, if the error message reports that a particular record couldnt be found, that record might have been misstyped. If so, reenter it, wait for the TTL to expire, and try the test again. Verify that your primary and secondary nameservers are properly synced with the new DNS records. Usually, entering records for the primary nameserver updates the secondary nameserver, as well. But with some DNS services, you might have to update the secondary nameserver manually. Verify that your ISP is compatible with the email protection service, in particular, that they will allow your domain to route email traffic to an external server. Some ISPs and hosting companies might not allow this. If this is the case, talk with them about a workaround right away. You can also contact your Internet services technical support for more information.
If after that youre still have trouble, please contact Support. If you are a directly supported Postini Customer, please log in to the Postini Support Portal . Otherwise, contact your vendor, who can assist you. Dont delay in fixing this problem, as email to your domain might be bouncing back to senders, without reaching users.
WARNING:
43
After confirming that your domains MX records are pointing to servers at the message security service, verify that mail sent to your domain is being routed through these servers and filtered. In this step, you run a test that sends a test message from an outside source, through the message security service, and to your server. To test filtered mail flow, follow these steps: 1. Return to the SMTP Message Test page. From the MX Record Test page, click your browsers Back button to return to the System Tests page. Then click SMTP Message Test link. Or from the Administration Console home page, click the SMTP Message Test link at the left of the page.
2. On the SMTP Message Test page, enter your administrator email address, and select the first radio button option: Test mailflow through the data center. You must enter the administrator address you logged in with.
45
3. Click the Test button Wait a few moments for the data center to send its test email. Then view the results of the test at the bottom of the page. Successful results look like this:
Sending test email to helen@acme.com: Establish connection... Sending HELO Sending MAIL FROM Sending RCPT TO Sending data End of data dot Success The email data center can deliver email to this email server.
4. Retrieve the test message sent to your administrators Inbox. When this test is successful, a test message is delivered to your administrator address. Its important that you are able receive this message. If you dont receive it, look under Frequently Asked Questions: Test Filtered Mail Flow on page 46.
46
Activation Guide
During the setup process, you'll do the following: 1. Determine the level of control over spam and virus-infected messages that you want to give your users. 2. Configure settings for your users. 3. Announce the message security service to your users. To help make this process easier, download our Email Templates (Zip file). 4. Add users and mailing lists to the service. To add your users and set up your service now, follow the steps in the Quick Start Guide for your package: Quick Start for Message Security and Message Discovery Important: If you have not yet switched your MX records, you'll need to do this after adding users and setting up your service. To switch your MX records, see Change Your MX Records on page 15. To begin the process of switching MX records for additional domains and domain aliases, see the Quick Start guide.
47
What is an MX record?
An MX record tells senders how to send email for your domain. When your domain is registered, its assigned several DNS records, which enable it to be located on the Internet. These include MX records, which direct the domains mail flow. Each MX record points to an email server thats configured to process mail for that domain. Theres typically one record that points to a primary server, then additional records that point to one or more backup servers. For users to send and receive email, their domain's MX records must point to a server that can process their mail. To filter email through the message security service, you must insert new records that point to the message security service's servers. For more about MX records, watch the video Understanding and Working with MX Records
49
For detailed instructions on how to update your MX records, see Change Your MX Records on page 15
50
Activation Guide
Every DNS host has a different user interface for MX records. Some use a trailing period and some don't. Some allow you to set your TTL and some won't. Our instructions include information for most common MX hosts, but yours may be different. If you're not sure what to enter, use the same format as your existing MX records. Be sure that the message security service MX records have the first priority; the exact numbers don't matter as long as the message security service MX records are the first. If your DNS server allows fewer than 4 records, enter as many as you can. For detailed instructions on how to update your MX records, see Change Your MX Records on page 15.
Should I update A records when routing mail to the message security service?
Do not update your A records. Since your MX records point to psmtp.com, you do not need to change any A records.
51
52
Activation Guide