This FAQ is for system administrators
Settings:
To migrate email - enable Google Workspace Migration to run through the apps control panel. Under Settings>Email>General>User email uploads>Allow users to upload mail using the Email Migration API.
Also check that forwarding is on (next checkbox)
CNAME Records:
| Domain | TTL | Type | Value |
|---|---|---|---|
| drive | 3600 | CNAME | ghs.googlehosted.com. |
| 3600 | CNAME | ghs.googlehosted.com. | |
| calendar | 3600 | CNAME | ghs.googlehosted.com. |
In Google Workspace Console update the URL in Company Profile>Custom URL
Other CNAME options here...https://support.google.com/a/answer/112038?hl=en
MX Records:
| Domain | TTL | Type | Value | Priority |
|---|---|---|---|---|
| mydomain.com.au. | 3600 | MX | ASPMX.L.GOOGLE.COM. | 1 |
| mydomain.com.au. | 3600 | MX | ALT1.ASPMX.L.GOOGLE.COM. | 5 |
| mydomain.com.au. | 3600 | MX | ALT2.ASPMX.L.GOOGLE.COM. | 5 |
| mydomain.com.au. | 3600 | MX | ALT3.ASPMX.L.GOOGLE.COM. | 10 |
| mydomain.com.au. | 3600 | MX | ALT4.ASPMX.L.GOOGLE.COM. | 10 |
| mydomain.com.au. | 3600 | MX | MYDOMAINNAME.COM.AU. | 200 |
Google Ref: https://support.google.com/a/answer/174125?hl=en
SPF Record
Used to avoid spam flagging
| Domain | TTL | Type | Value |
|---|---|---|---|
| mydomain.com.au. | 3600 | TXT | "v=spf1 ip4:27.54.92.98 include:_spf.google.com ~all" |
or
| Domain | TTL | Type | Value |
|---|---|---|---|
| mydomain.com.au. | 3600 | TXT | "v=spf1 a mx include:_spf.google.com ~all" |
http://en.wikipedia.org/wiki/Sender_Policy_Framework
To enable SPF for all domains, Shell in and type
for i in `ls /var/cpanel/users` ;do /usr/local/cpanel/bin/spf_installer $i ;done
DKIM
Set the TXT record of the domain. Use G Suit admin to generate the key (APPS>GMail?Authenticate). Then create a new DNS record...
| Domain | TTL | Type | Value |
|---|---|---|---|
| google._domainkey | 3600 | TXT | "v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3...." |
DMARC
DKIM does not prevent spoofing of incoming messages from outside email servers. To help prevent email spoofing on incoming messages, use Domain-based Message, Authentication, Reporting & Conformance (DMARC). Learn about DMARC.
No Action
but we get an email report...
| Domain | TTL | Type | Value |
|---|---|---|---|
| _dmarc | 3600 | TXT | "v=DMARC1; p=none; rua=mailto:domains@organicwebs.com.au" |
Quarantine for 20%
Suggest to start at a low number and work up to all (default).
| Domain | TTL | Type | Value |
|---|---|---|---|
| _dmarc | 3600 | TXT | "v=DMARC1; p=quarantine; pct=20; rua=mailto:domains@organicwebs.com.au" |
Quarantine for 100%
| Domain | TTL | Type | Value |
|---|---|---|---|
| _dmarc.organicwebs.com.au | 3600 | TXT | "v=DMARC1; p=quarantine; rua=mailto:domains@organicwebs.com.au" |
More info on Anti Spam and Spoofing...
IMAP
For free Google Accounts...
Outlook 2007/2010 setups: https://support.google.com/mail/bin/answer.py?hl=en&answer=77689
| Incoming Mail (IMAP) Server - requires SSL: | imap.googlemail.com Use SSL: Yes Port: 993 |
| Outgoing Mail (SMTP) Server - requires TLS: | smtp.googlemail.com (use authentication) Use Authentication: Yes Use STARTTLS: Yes (some clients call this SSL) Port: 465 or 587 |