Migrating Email Repositories (aka Certified Email Servers)

To replicate the email routing functionality that the ESAs (fe3.lbl.gov and fe4.lbl.gov) provide to Email repositories, DNS contacts for repositories and/or domain owners will need to take steps to make sure SMTP traffic that currently routes through mailgate.lbl.gov continues to their repositories after the Email team completes the routing migration to Google's MX servers.

Email Repository Owner actions:

1. Verify that the domain(s) which route email to them are still in-use so that we do not unnecessarily migrate the domain(s) to Google
2. Confirm that the Email repository IP address for each domain is accurate
3. Make sure that any host and/or ASA firewalls allow SMTP directly from Gmail's IP addresses instead of just the ESAs (fe3.lbl.gov and fe4.lbl.gov)
   • The border firewall will be opened to allow port 25 (SMTP) from Gmail's IP addresses to all confirmed Email repository IP addresses

Email team actions:

1. Configure routes at Google from each in-use domain to its corresponding, confirmed Email repository IP address
2. Change MX records for Email repositories from mailgate.lbl.gov to Gmail's MX records: https://support.google.com/a/answer/174125