Introduction
The implementation process for Mail Aegis is straightforward, but for it to be as seamless as possible, we need to prepare to make the cut over as quick and easy as possible. The migration will be in a couple of phases – first, we need to make a few minor changes (that won’t impact your users at all). We will gather other information in the background. The screenshots in this document are for illustrative purposes only. If in doubt, don’t change anything and ask for help from someone familiar with DNS. We can also provide guidance.
Turn on 2-Step verification
Require all users in the organization to enable 2-step verification, utilizing either Passkeys & hardware security keys (preferred) or Verification code app.
We strongly discourage using verification codes from text messages or calls.
To enable 2-Step Verification, Click Here
Create an Inbound Mail Gateway
- Go to https://admin.google.com/ and sign in with an administrator account
- Go to Menu > Apps > Google Workspace > Gmail > Spam, Phishing and Malware
- On the left, select your top-level organization.
- Scroll to the Inbound Gateway setting, then click Edit. The inbound gateway settings open on the page.
- In Gateway IPs, enter all the following IP addresses.
- 5.250.182.9
- 85.215.201.235
- 212.227.232.71
- In the Add IP address/range box, click Save.
- Select Automatically detect external IP
- Select Require TLS for connections.
- At the bottom, click Save
Enable External Recipient Warnings
Click Here for instructions and to configure.
DKIM Configuration
Click Here for instructions and to configure
MTA-STS Configuration
Create the following DNS records in your DNS Control Panel:
| Type | Name | Value | TTL |
|---|---|---|---|
| A | mta-sts | 77.68.124.225 | 604800 |
| TXT | _mta-sts | v=STSv1; id=202502020000 | 604800 |
Once you have made these changes, please contact us to let us know when you are done so that we can check before we move on with the next steps where additional changes will be made. You will be notified by email when our systems are ready for the next steps.