Fix gateway configuration for inactive domains
If you used any mxHERO service in the past that required the routing of your emails through our gateway (for either inbound or outbound messages) and you currently don't have an active mxHERO subscription, you might receive an alert at the SMTP level in order to remove the email routing configuration through the mxHERO network from your domain.
Please follow the steps below to get this quickly fixed.
Important: only administrators are able to perform the changes required and documented below. If you are not the domain administrator, please contact them internally in your organization informing about this article.
G Suite
Outbound emails
If you have any paid version of G Suite, the process is extremely straightforward.
- Sign in to your Google Admin console.
- From the Admin console, go to Apps > Google Workspace > Gmail > Advanced settings.
- In the Organizations section, select the top-level organization.
- Scroll to the Routing settings.
- Remove the mxHero entry in Outbound Gateway field (usually "gmail-out.mxhero.com", "gmail.mxhero.com" or "smtp.mxhero.com")
- Save the changes.
All set. For more information about this process please access this G Suite article.
However, if you use the G Suite's Legacy Free Edition, the above process might not be visible to you. Please follow the steps below in order to get the outbound gateway unset through our integration with Google.
- Access the following mxHero configuration page.
- Provide your G Suite Administrator credentials. You may receive an alert saying the app is unverified by Google, but please proceed with the authentication process anyway.
- If all the authorizations were successfully provided, you will receive a confirmation page. If any error occurs, you will also be notified.
- If you receive a message saying we were not able to access to your gateway information, it can be either:
- You're not using the main G Suite administrator account or;
- The API access to your account is disabled. To enable API access, log in to your admin account, and select Security. If you do not see Security listed, select More controls and then select Security from the options shown in the gray box. Select API reference, and then select the checkbox to Enable API access. Save your changes.
- If you receive a message saying we were not able to access to your gateway information, it can be either:
- You are all set. The route change may take up to 60 minutes to kick in.
Note: if you receive a message from Google saying you're not allowed to sign in to unverified apps, you may have set restrictions on that sense in your organization. In order to get this process done, please whitelist our app in your G Suite account as shown here.
When requested, this is our client id:
966519150562-uhu01pdic1gpe3vvmff0ga91bvhd7ub5.apps.googleusercontent.com |
Then try to run the GWFIX process again.
After executing the procedure, being it successfully, you can revoke the access to the application through the following Google link.
If you find any errors during this process please open a ticket on the top right of this page or send a request to support@mxhero.com.
How does GWFIX work?
This is the API used in order to remove the Outbound Gateway programmatically from your domain:
https://developers.google.com/admin-sdk/admin-settings
It pushes the following configuration to your domain in order to remove the existing mxHERO gateway:
<atom:entry xmlns:atom="http://www.w3.org/2005/Atom" xmlns:apps="http://schemas.google.com/apps/2006">
<apps:property name="smartHost" value="" />
<apps:property name="smtpMode" value="SMTP" />
</atom:entry>
Alternatively, you still might have setup the integration with mxHERO by manually provisioning the configuration according to the following article. If that's the case, you just need to disable or remove the manually created rules.
You may want to remove the mxHero SPF records from your DNS configuration, if you have it set. Please see the following article for more information.
Inbound emails
There's no automatic configuration for inbound emails and you likely don't have it setup. If you do so, it's basically set with either of the alternatives below:
- You have your MX records pointing to mxHERO as documented here. In this case, you need to remove the mxHERO MX records from your DNS configuration.
- You integrated with mxHERO by manually provisioning the configuration according to the following article. If that's the case, you just need to disable or remove the manually created rules.
Office 365
For both inbound and outbound, the configuration on Office 365 is based on rules set in the Exchange Admin Center. The rules just need to be disabled in order to stop routing emails through the mxHero gateway. The rules are described in this dedicated section in our help portal.
Occasionally, for inbound you may have your MX records pointing to mxHERO as documented here. In this case, you need to remove the mxHERO MX records from your DNS configuration.
MS Exchange on premises and other email servers
If you are using the mxHERO Transport Agent for Exchange, please uninstall or disable it. It will affect both inbound and outbound flows. Otherwise, please find further orientation below.
Inbound emails
You may have your MX records pointing to mxHERO as documented here. In this case, you need to remove the mxHERO MX records from your DNS configuration.
Outbound emails
You may have set our gateway in your email system as a relay server. This configuration just needs to be removed in order to stop sending messages through our network. In MS Exchange this configuration is called "Send Connector".
Support
If you need further assistance please open a ticket on the top right of this page or send a request to support@mxhero.com.