Step 3: Change the DNS MX records

After completing Step 1: Adding users and Step 2: Confirming your Inbound Mail address, you can make the following DNS MX record changes to get your Mailprotector email security service up and running:

IMPORTANT: Before making these DNS changes, please ensure that you have allowed Mailprotector's IP addresses through your firewall.  You can find the complete list of IP addresses here.  We also recommend you confirm that we can connect to your mail server from our datacenters, after making that change.

IF USING OFFICE 365: It is recommended you configure inbound and outbound connectors to establish secure mail flow between Office 365 and Mailprotector. Add the connectors immediately after changing the MX record or configure first and turn them on after changing the MX record. Detailed information starts with the Office 365 Connectors Summary article.

IF USING G SUITE: It is recommended you configure inbound and outbound mail routes to establish secure mail flow between the G Suite domain and Mailprotector. Configure the mail routes immediately after changing the MX record. Detailed information starts with the G Suite Mail Routes Summary article.

DNS MX Record Changes

  • Delete all current MX records - this will help prevent spammers from getting around Mailprotector's filtering
  • Enter new MX Records based on your geographic region:
    United States yourdomain.tld.us.emailservice.io
    Europe yourdomain.tld.eu.emailservice.io
    Asia Pacific yourdomain.tld.ap.emailservice.io

    yourdomain.tld = The domain you are setting up.
    Example: For Domain Name mailprotector.com
    10 MX mailprotector.com.us.emailservice.io

Frequently Asked Questions

Question: Can I keep my old MX record in there as a backup or lower priority record than Mailprotector's MX record?

Answer: While technically there are no problems with this configuration, you will be leaving direct access to your mail server open. It is common for spammers to deliver to backup/alternate MX records to bypass security and other filters. We also advise that after your MX records have fully propagated, you restrict SMTP (port 25) traffic to only accept from Mailprotector ranges. This will guarantee all email is scanned by Mailprotector systems.

Question: Will I lose email if I change my MX records?

Answer: No. An email will still be delivered to your current server while the MX record change propagates across the Internet's name servers. Watch the short video below for a great explanation.

 

Question: Is there a way to speed up MX record change propagation?

Anwer: Possibly. If your DNS zone host provider allows you to change the time to live (TTL) setting for your records, set it to between 60 and 300 seconds about a day or two before you plan on changing the MX record. The TTL will tell the Internet's name servers to check for an update of the record more frequently, so when you are ready to make the change, the new MX record will propagate faster.

« Step 2: Confirm inbound SMTP address | Step 4: What Next »

Have more questions? Submit a request

Comments