Offboarding: Email Suite (Inbound)

Overview

These are the offboarding steps to remove Paubox from your inbound email configuration. If you'd like some help, just schedule time with our team here!

Google Workspace                                                        

Part I: Your Domain - Update Your MX Record

1. Log in to your Domain Host
2. Click on the Control Panel (may also be called DNS Zone Editor, or just DNS)
3. Find the record of type MX with a value of: mx2.paubox.com or mx.paubox.com
4. Edit that MX record - leave type MX; priority 1; change the value to: aspmx.l.google.com
5. Create the 4 additional original Google MX records & Save:

(Record type; Priority; Value)

MX   5     alt2.aspmx.l.google.com
MX   5     alt1.aspmx.l.google.com
MX   10   alt4.aspmx.l.google.com
MX   10   alt3.aspmx.l.google.com

Part II: Google Workspace - Adjust Gmail Settings                                                              

1. Go to your Google Admin Panel              
2. Click the Apps icon (9 dots, left side)                                                 
3. Select Google Workspace, and then Gmail 
4. On the next screen (Settings for Gmail), scroll down and click Spam, phishing, and malware >>
5. On the next screen, scroll down to the Inbound Gateway section
6. In the Inbound gateway section, click on the pencil on the right-hand side
7. Delete the Gateway IPs and uncheck Enable 
8. Click SAVE

Microsoft 365

Part I: Your Domain - Update Your MX Record

1. Go to your Microsoft 365 Exchange Admin Center
2. In the left column, navigate to Setup > Domains (you may need to click ...Show all to see this section)
3. Find your Domain name and click on it
4. Under the Exchange Online section, look for a row that has Type MX
5. Copy the value for this row under Points to address or value (you will be pasting this later)
6. Log in to your Domain Host
7. Click on the Control Panel (may also be called DNS Zone Editor, or just DNS)
8. Find the record of type MX with a value of: mx1.paubox.com or mx.paubox.com
9. Edit that MX record - leave type MX; priority 1; replace the value with what you copied from the Microsoft 365 Admin Panel in Step 5 above
10. Save your changes

Part II: Microsoft Exchange admin center - Remove transport rule                                               

1. Go to your Microsoft 365 Exchange Admin Center          
2. Click Mail flow link in the left column                                                   
3. Look for a transport rule that allows inbound relaying from Paubox (if present)
4. If present, click on the name of the rule and then click the Trash icon 

Microsoft Exchange Server                                          

Part I: Your Domain - Update Your MX Record

1. Log in to your Domain Host
2. Click on the Control Panel (may also be called DNS Zone Editor, or just DNS)
3. Find the record of type MX with a value of: mx1.paubox.com or mx.paubox.com
4. Edit that MX record - leave type MX; priority 1; change the value to direct mail to your Exchange server 

Part II: Exchange - Remove Inbound IPs from Firewall              

After changing your MX record, wait for the new value to fully propagate. Once inbound traffic has stopped arriving via Paubox, it is safe to remove Paubox IPs from your firewall. 

• 54.69.73.61
• 54.69.65.158
• 54.69.172.93

... or these CIDR ranges, if your setup included CIDR ranges rather than specific IPs: 

• 50.112.144.0/255.255.255.0
• 54.69.0.0/255.255.0.0
• 165.140.171.0/24

That's it! Thanks for using Paubox - please feel free to reach out with any questions, or if you'd like to re-visit Paubox down the road: support@paubox.com

Note: You may want to also remove include:_spf.paubox.com from your domain's SPF record, for good housekeeping. No harm in leaving it in place.