This FAQ is for system administrators

Settings:

To migrate email - enable Google Suite Migration to run through the apps control panel. Under Settings>Email>General>User email uploads>Allow users to upload mail using the Email Migration API.

Also check that forwarding is on (next checkbox)

CNAME Records:

DomainTTLTypeValue
drive 3600 CNAME ghs.googlehosted.com.
mail 3600 CNAME ghs.googlehosted.com.
calendar 3600 CNAME ghs.googlehosted.com.

MX Records:

DomainTTLTypeValuePriority
mydomain.com.au. 3600 MX ASPMX.L.GOOGLE.COM. 1
mydomain.com.au. 3600 MX ALT1.ASPMX.L.GOOGLE.COM. 5
mydomain.com.au. 3600 MX ALT2.ASPMX.L.GOOGLE.COM. 5
mydomain.com.au. 3600 MX ALT3.ASPMX.L.GOOGLE.COM. 10
mydomain.com.au. 3600 MX ALT4.ASPMX.L.GOOGLE.COM. 10
mydomain.com.au. 3600 MX MYDOMAINNAME.COM.AU. 200

 
Google Ref: https://support.google.com/a/answer/174125?hl=en

SPF Record

Used to avoid spam flagging

DomainTTLTypeValue
@ 3600 TXT "v=spf1 ip4:27.54.92.98 include:_spf.google.com ~all"

or

DomainTTLTypeValue
@ 3600 TXT "v=spf1 a mx include:_spf.google.com ~all"

http://en.wikipedia.org/wiki/Sender_Policy_Framework

To enable SPF for all domains, Shell in and type

for i in `ls /var/cpanel/users` ;do /usr/local/cpanel/bin/spf_installer $i ;done

DKIM

Set the TXT record of the domain. Use G Suit admin to generate the key (APPS>GMail?Authenticate). Then create a new DNS record...

DomainTTLTypeValue
google._domainkey 3600 TXT "v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3...."

 

DMARC

DKIM does not prevent spoofing of incoming messages from outside email servers. To help prevent email spoofing on incoming messages, use Domain-based Message, Authentication, Reporting & Conformance (DMARC). Learn about DMARC.

No Action

but we get an email report...

DomainTTLTypeValue
_dmarc 3600 TXT "v=DMARC1; p=none; rua=mailto:domains@organicwebs.com.au"

 

Quarantine for 20%

Suggest to start at a low number and work up to all (default).

DomainTTLTypeValue
_dmarc 3600 TXT "v=DMARC1; p=quarantine; pct=20; rua=mailto:domains@organicwebs.com.au"

 

Quarantine for 100% 

DomainTTLTypeValue
_dmarc.organicwebs.com.au 3600 TXT "v=DMARC1; p=quarantine; rua=mailto:domains@organicwebs.com.au"

 

 

More info on Anti Spam and Spoofing...

https://www.organicwebs.com.au/44-faqs/email-calendar-contact-and-cloud-services/44-spam-adn-forging-emails

IMAP

For free Google Accounts...

Outlook 2007/2010 setups: https://support.google.com/mail/bin/answer.py?hl=en&answer=77689

Incoming Mail (IMAP) Server - requires SSL: imap.googlemail.com
Use SSL: Yes
Port: 993
Outgoing Mail (SMTP) Server - requires TLS: smtp.googlemail.com (use authentication)
Use Authentication: Yes
Use STARTTLS: Yes (some clients call this SSL)
Port: 465 or 587