Parting ways with Paubox
      Back to home
      2. General
      3. Parting ways with Paubox

      Offboarding: Paubox Email Suite (Inbound Security)

      Overview

      These are the offboarding steps to remove Paubox from your inbound email configuration. If you'd like some help, just schedule time with our team here!

      Google Workspace                                                        

      Part I: Your domain - update your MX record

      1. Log in to your Domain host
      2. Click on the Control Panel (may also be called DNS Zone Editor, or just DNS)
      3. Find the record of type MX with a value of: mx2.paubox.com or mx.paubox.com
      4. Edit that MX record - leave type MX; priority 1; change the value to: aspmx.l.google.com
      5. Create the 4 additional original Google MX records & Save:

      (Record type; Priority; Value)

      MX   5     alt2.aspmx.l.google.com
      MX   5     alt1.aspmx.l.google.com
      MX   10   alt4.aspmx.l.google.com
      MX   10   alt3.aspmx.l.google.com

      Part II: Google Workspace - adjust Gmail settings                                                              

      1. Go to your Google Admin Console              
      2. Click the Apps icon (9 dots, left side)                                                 
      3. Select Google Workspace, and then Gmail 
      4. On the next screen (Settings for Gmail), scroll down and click Spam, phishing, and malware >>
      5. On the next screen, scroll down to the Inbound Gateway section
      6. In the Inbound gateway section, click on the pencil on the right-hand side
      7. Delete the Gateway IPs and uncheck Enable 
      8. Click SAVE

      Microsoft 365

      Part I: Your domain - update your MX record

      1. Go to your Microsoft 365 Exchange Admin Center
      2. In the left column, navigate to Setup > Domains (you may need to click ...Show all to see this section)
      3. Find your Domain name and click on it
      4. Under the Exchange Online section, look for a row that has Type MX
      5. Copy the value for this row under Points to address or value (you will be pasting this later)
      6. Log in to your Domain Host
      7. Click on the Control Panel (may also be called DNS Zone Editor, or just DNS)
      8. Find the record of type MX with a value of: mx1.paubox.com or mx.paubox.com
      9. Edit that MX record - leave type MX; priority 1; replace the value with what you copied from the Microsoft 365 Admin Panel in Step 5 above
      10. Save your changes

      Part II: Microsoft Exchange Admin Center - remove transport rule                                               

      1. Go to your Microsoft 365 Exchange Admin Center           
      2. Click Mail flow link in the left column                                                   
      3. Look for a transport rule that allows inbound relaying from Paubox (if present)
      4. If present, click on the name of the rule and then click the Trash icon 

      Microsoft Exchange Server                                          

      Part I: Your domain - update your MX record

      1. Log in to your Domain Host
      2. Click on the Control Panel (may also be called DNS Zone Editor, or just DNS)
      3. Find the record of type MX with a value of: mx1.paubox.com or mx.paubox.com
      4. Edit that MX record - leave type MX; priority 1; change the value to direct mail to your Exchange server 

      Part II: Exchange - remove inbound IPs from firewall              

      After changing your MX record, wait for the new value to fully propagate. Once inbound traffic has stopped arriving via Paubox, it is safe to remove Paubox IPs from your firewall. 

      • 54.69.73.61
      • 54.69.65.158
      • 54.69.172.93

      ... or these CIDR ranges, if your setup included CIDR ranges rather than specific IPs: 

      • 50.112.144.0/255.255.255.0
      • 54.69.0.0/255.255.0.0
      • 165.140.171.0/24

      That's it! Thanks for using Paubox - please feel free to reach out with any questions, or if you'd like to re-visit Paubox down the road: support@paubox.com

       

      Note: You may want to also remove include:_spf.paubox.com from your domain's SPF record, for good housekeeping. No harm in leaving it in place.