Fix gateway configuration for inactive domains

If you used any mxHero service in the past that required the routing of your emails through our gateway (for either inbound or outbound messages) and you currently don't have an active mxHero subscription, you might receive an alert at the SMTP level in order to remove the email routing configuration through the mxHero network from your domain.

Please follow the steps below to get this quickly fixed.

Important: only administrators are able to perform the changes required and documented below. If you are not the domain administrator, please contact them internally in your organization informing about this article.

 

G Suite

 

Outbound emails

 

If you have any paid version of G Suite, the process is extremely straightforward. 

  1. Sign in to your Google Admin console.
  2. From the Admin console, go to Apps > G Suite > Gmail > Advanced settings.
  3. In the Organizations section, select the top-level organization.
  4. Scroll to the Outbound gateway setting in the Routing section.
  5. Remove the mxHero entry in this field (usually "gmail-out.mxhero.com", "gmail.mxhero.com" or "smtp.mxhero.com")
  6. At the bottom of the Advanced settings page, click Save

All set. For more information about this process please access this G Suite article.

However, if you use the G Suite's Legacy Free Edition, the above process might not be visible to you. Please follow the steps below in order to get the outbound gateway unset through our integration with Google.

  1. Access the following mxHero configuration page.
  2. Provide your G Suite Administrator credentials. You may receive an alert saying the app is unverified by Google, but please proceed with the authentication process anyway.
  3. If all the authorizations were successfully provided, you will receive a confirmation page. If any error occurs, you will also be notified.
    1. If you receive a message saying we were not able to access to your gateway information, it can be either:
      1. You're not using the main G Suite administrator account or;
      2. The API access to your account is disabled. To enable API access, log in to your admin account, and select Security. If you do not see Security listed, select More controls and then select Security from the options shown in the gray box. Select API reference, and then select the checkbox to Enable API accessSave your changes.
  4. You are all set. The route change may take up to 60 minutes to kick in.

Note: if you receive a message from Google saying you're not allowed to sign in to unverified apps, you may have set restrictions on that sense in your organization. In order to get this process done, please whitelist our app in your G Suite account as shown here.

When requested, this is our client id:
300841506906-kb4gueij80jh16q9dbf7qeh25bi2971c.apps.googleusercontent.com
Then try to run the GWFIX process again.

After executing the procedure, being it successfully, you can revoke the access to the application through the following Google link.

If you find any errors during this process please open a ticket on the top right of this page or send a request to support@mxhero.com.

How does GWFIX work?

This is the API used in order to remove the Outbound Gateway programmatically from your domain:
https://developers.google.com/admin-sdk/admin-settings

It pushes the following configuration to your domain in order to remove the existing mxHero gateway:

<atom:entry xmlns:atom="http://www.w3.org/2005/Atom" xmlns:apps="http://schemas.google.com/apps/2006">
<apps:property name="smartHost" value="" />
<apps:property name="smtpMode" value="SMTP" />
</atom:entry>

Alternatively, you still might have setup the integration with mxHero by manually provisioning the configuration according to the following article. If that's the case, you just need to disable or remove the manually created rules.

You may want to remove the mxHero SPF records from your DNS configuration, if you have it set. Please see the following article for more information.

 

Inbound emails

 

There's no automatic configuration for inbound emails and you likely don't have it setup. If you do so, it's basically set with either of the alternatives below:

  1. You have your MX records pointing to mxHero as documented here. In this case, you need to remove the mxHero MX records from your DNS configuration.
  2. You integrated with mxHero by manually provisioning the configuration according to the following article. If that's the case, you just need to disable or remove the manually created rules.

 

Office 365

 

For both inbound and outbound, the configuration on Office 365 is based on rules set in the Exchange Admin Center. The rules just need to be disabled in order to stop routing emails through the mxHero gateway. The rules are described in this dedicated section in our help portal.

Occasionally, for inbound you may have your MX records pointing to mxHero as documented here. In this case, you need to remove the mxHero MX records from your DNS configuration.

 

MS Exchange on premises and other email servers

 

If you are using the mxHero Transport Agent for Exchange, please uninstall or disable it. It will affect both inbound and outbound flows.

Otherwise, please find further orientation below.

 

Inbound emails

 

You may have your MX records pointing to mxHero as documented here. In this case, you need to remove the mxHero MX records from your DNS configuration.

 

Outbound emails

 

You may have set our gateway in your email system as a relay server. This configuration just needs to be removed in order to stop sending messages through our network. In MS Exchange this configuration is called "Send Connector".

 

Support

 

If you need further assistance please open a ticket on the top right of this page or send a request to support@mxhero.com.

Have more questions? Submit a request

Comments

Powered by Zendesk