Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Why does netgate.com have googlemail MX record?

    Scheduled Pinned Locked Moved General pfSense Questions
    42 Posts 12 Posters 5.9k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • VerticalTechnikV
      VerticalTechnik @johnpoz
      last edited by

      @johnpoz said in Why does netgate.com have googlemail MX record?:

      @VerticalTechnik said in Why does netgate.com have googlemail MX record?:

      found that netgate.com has googlemail MX

      So you don't do business with any company that uses google email services? That is a lot of companies.. to not do business with.

      Indeed.. everything on Linux and avoiding all Spy-Tech-Companies as good as possible.
      Business policy = no Google, SocialMedia, CloudServices etc..

      Therefore, as soon anything comes up with above mentioned companies = red flag!

      J D 2 Replies Last reply Reply Quote 0
      • J
        jrey @VerticalTechnik
        last edited by

        @VerticalTechnik said in Why does netgate.com have googlemail MX record?:

        Therefore, as soon anything comes up with above mentioned companies

        Business policy = no Google, SocialMedia, CloudServices etc..

        at this point these ^ are passion beliefs, not technical. Everything on that list can be mitigated, not only by Netgate but many other vendor products as well. Those categories should therefore be scoring high on your evaluation..

        Still sounds like the perfect situation to have a Netgate as PART of your overall strategy.

        Sounds like the score for "they use google mail" carries too much weight in your overall evaluation process. Not sure a company "using google mail" would even be a factor on any such evaluation we would use, but it could be one factor in your case, I guess.

        other possible strategies might be:
        a) don't use the internet at all, or;
        b) find the right combination of equipment for your particular use case and move forward.

        part a) has a range of options: everything from literally, no internet to hand it all off to a service company that will deal with everything for you (good luck).

        Certainly would not let the single "red flag" you have listed as "they use google mail" be the only factor in your decision. If that is the show stopper, won't matter what gear you pick, you will be better off with option a) in the truest form, unplugged.

        If you are really making a business decision, you will have a chart comparing several factors and each potential vendor and their equipment will be listed and the pros and cons of each evaluated and scored. Then your choice is much easier.

        Note: I am not affiliated with Netgate in any way, and don't care one way or the other what you choose to do.

        1 Reply Last reply Reply Quote 1
        • AndyRHA
          AndyRH
          last edited by

          What I am not understanding is why you are not using a company that rates the on-line security of a company?
          My company is making value changes to our security and that results in a higher rating. If we want to do business with a new company we review their rating, based on that we may or may not do business with them. We also recognize we are not security experts, so we pay a company to evaluate partners and us.
          This service has highlighted several mistakes we have made that has had a real and positive effect on our security posture and located some rouge websites that we (IT) did not know about.

          Using Google mail for business is no different than using Microsoft. Using Google mail for business likely includes an NDA that would legally prevent them from scanning emails like they do in the free service. This does not make Google less evil...

          o||||o
          7100-1u

          1 Reply Last reply Reply Quote 0
          • M
            michmoor LAYER 8 Rebel Alliance @VerticalTechnik
            last edited by

            @VerticalTechnik said in Why does netgate.com have googlemail MX record?:

            hile completing the security checks regarding privacy we have found that netgate.com has googlemail MX entries when checking the DNS Report.

            I don't understand the issue and im trying to.

            Firewall: NetGate,Palo Alto-VM,Juniper SRX
            Routing: Juniper, Arista, Cisco
            Switching: Juniper, Arista, Cisco
            Wireless: Unifi, Aruba IAP
            JNCIP,CCNP Enterprise

            johnpozJ J VerticalTechnikV 3 Replies Last reply Reply Quote 0
            • johnpozJ
              johnpoz LAYER 8 Global Moderator @michmoor
              last edited by johnpoz

              @michmoor said in Why does netgate.com have googlemail MX record?:

              I don't understand the issue

              To OP Google = BAD... netgate uses google for email.. Like other millions of other companies.. ;) so OP doesn't want to use netgate..

              Lets see netflix uses them, uber uses them.. etc.. So very big names use them.. now these are not security companies - but guess the OP shouldn't be using those services either.. itconvergence uses them too, I know they have quite a few fortune 500 customers.. Guess they didn't look into the details of how bad google is before using them ;)

              An intelligent man is sometimes forced to be drunk to spend time with his fools
              If you get confused: Listen to the Music Play
              Please don't Chat/PM me for help, unless mod related
              SG-4860 24.11 | Lab VMs 2.8, 24.11

              1 Reply Last reply Reply Quote 2
              • J
                jrey @michmoor
                last edited by

                @michmoor said in Why does netgate.com have googlemail MX record?:

                I don't understand the issue and im trying to.

                IMHO, it is not an "issue" at all. But rather and simply that the OP is red flagging the purchase based (and seemingly) entirely on the fact that Netgate's mail server has an MX at Google.

                Several people (me included) I think, are just trying to expand the criteria being used and therefore allowing the OP to make a more informed choice.

                I don't think the conversation is really any more complicated than that. At the end of the day what the OP chooses to do, is exactly that a choice they have to make.

                Except those that specifically work for Netgate (and I'm not one of them) they are the only people that would be directly impacted by the OPs view.

                @johnpoz said in Why does netgate.com have googlemail MX record?:

                To OP Google = BAD... netgate uses google for email.. Like other millions of other companies.. ;) so OP doesn't want to use netgate..

                Yes, exactly. and as such is really a narrow scope as expressed.

                1 Reply Last reply Reply Quote 0
                • M
                  michmoor LAYER 8 Rebel Alliance
                  last edited by

                  Ahh ok. Fair enough.
                  I did read through the thread so i was getting confused on the point of why using a Google-hosted server was not good but ok i gotcha.
                  Carry on :)

                  Firewall: NetGate,Palo Alto-VM,Juniper SRX
                  Routing: Juniper, Arista, Cisco
                  Switching: Juniper, Arista, Cisco
                  Wireless: Unifi, Aruba IAP
                  JNCIP,CCNP Enterprise

                  johnpozJ 1 Reply Last reply Reply Quote 0
                  • johnpozJ
                    johnpoz LAYER 8 Global Moderator @michmoor
                    last edited by

                    @michmoor So you meet a nice person you want to do some "business" with.. You exchange info and find out they use t-mobile for their cell phone.. Which you don't like, but then you find out they have a aol email address.. And your like oh.. Not going to have anything to do with this person..

                    Its kind of like that ;)

                    An intelligent man is sometimes forced to be drunk to spend time with his fools
                    If you get confused: Listen to the Music Play
                    Please don't Chat/PM me for help, unless mod related
                    SG-4860 24.11 | Lab VMs 2.8, 24.11

                    M 1 Reply Last reply Reply Quote 0
                    • M
                      michmoor LAYER 8 Rebel Alliance @johnpoz
                      last edited by

                      @johnpoz
                      Time to change the criteria on how you select a business partner. lol

                      Firewall: NetGate,Palo Alto-VM,Juniper SRX
                      Routing: Juniper, Arista, Cisco
                      Switching: Juniper, Arista, Cisco
                      Wireless: Unifi, Aruba IAP
                      JNCIP,CCNP Enterprise

                      johnpozJ 1 Reply Last reply Reply Quote 0
                      • johnpozJ
                        johnpoz LAYER 8 Global Moderator @michmoor
                        last edited by

                        @michmoor guess zscaler is out as well.. ;)

                        ;; QUESTION SECTION:
                        ;zscaler.com.                   IN      MX
                        
                        ;; ANSWER SECTION:
                        zscaler.com.            3600    IN      MX      10 aspmx3.googlemail.com.
                        zscaler.com.            3600    IN      MX      10 aspmx2.googlemail.com.
                        zscaler.com.            3600    IN      MX      5 alt2.aspmx.l.google.com.
                        zscaler.com.            3600    IN      MX      1 aspmx.l.google.com.
                        zscaler.com.            3600    IN      MX      5 alt1.aspmx.l.google.com.
                        

                        They should prob go through all of their IT equipment and pull out anything made by broadcom ;)

                        ;broadcom.com.                  IN      MX
                        
                        ;; ANSWER SECTION:
                        broadcom.com.           3600    IN      MX      10 mx1.smtp.goog.
                        broadcom.com.           3600    IN      MX      60 mx4.smtp.goog.
                        broadcom.com.           3600    IN      MX      50 mx3.smtp.goog.
                        broadcom.com.           3600    IN      MX      40 alt2.aspmx.l.google.com.
                        broadcom.com.           3600    IN      MX      40 alt1.aspmx.l.google.com.
                        broadcom.com.           3600    IN      MX      30 aspmx.l.google.com.
                        broadcom.com.           3600    IN      MX      20 mx2.smtp.goog.
                        

                        An intelligent man is sometimes forced to be drunk to spend time with his fools
                        If you get confused: Listen to the Music Play
                        Please don't Chat/PM me for help, unless mod related
                        SG-4860 24.11 | Lab VMs 2.8, 24.11

                        1 Reply Last reply Reply Quote 2
                        • VerticalTechnikV
                          VerticalTechnik @michmoor
                          last edited by

                          @michmoor GAFAMs.. for the ones who want to understand my thoughts on security and privacy evaluation.

                          johnpozJ M demD 3 Replies Last reply Reply Quote 0
                          • johnpozJ
                            johnpoz LAYER 8 Global Moderator @VerticalTechnik
                            last edited by

                            @VerticalTechnik said in Why does netgate.com have googlemail MX record?:

                            GAFAMs

                            Wouldn't that now be GAMAMs now.. with facebook now being Meta

                            An intelligent man is sometimes forced to be drunk to spend time with his fools
                            If you get confused: Listen to the Music Play
                            Please don't Chat/PM me for help, unless mod related
                            SG-4860 24.11 | Lab VMs 2.8, 24.11

                            1 Reply Last reply Reply Quote 0
                            • M
                              michmoor LAYER 8 Rebel Alliance @VerticalTechnik
                              last edited by

                              @VerticalTechnik
                              But how does that help
                              In evaluating a companies ability to do commerce or treat your data securely.

                              Unless you are saying that because Netgate uses Google mail servers Google can read their mail…but smtp is insecure anyway so what’s the point.
                              If we’re being honest you just have a “security” policy of not j business with any entity that doesn’t own their mail servers which is a bit insane in 2024 but that’s your decision. It’s just strange that you’re choosing an insecure protocol by default as your decision point but ok

                              Firewall: NetGate,Palo Alto-VM,Juniper SRX
                              Routing: Juniper, Arista, Cisco
                              Switching: Juniper, Arista, Cisco
                              Wireless: Unifi, Aruba IAP
                              JNCIP,CCNP Enterprise

                              johnpozJ 1 Reply Last reply Reply Quote 1
                              • johnpozJ
                                johnpoz LAYER 8 Global Moderator @michmoor
                                last edited by

                                @michmoor maybe he is ok with the other mail providers, and spam filtering services that many a company, and very large ones especially run their mail servers through.

                                Proofpoint is a big one that many a large company uses, we are moving away from them - they have been missing obvious stuff.

                                MS is part of GAFAM or now should really be GAMAM, so maybe they don't do business with anyone that uses any of these services. Companies putting their info up on onedrive for example.. MS prob filtering through that stuff for data as well, if they mining data in email ;)

                                An intelligent man is sometimes forced to be drunk to spend time with his fools
                                If you get confused: Listen to the Music Play
                                Please don't Chat/PM me for help, unless mod related
                                SG-4860 24.11 | Lab VMs 2.8, 24.11

                                1 Reply Last reply Reply Quote 0
                                • demD
                                  dem @VerticalTechnik
                                  last edited by

                                  @VerticalTechnik said in Why does netgate.com have googlemail MX record?:

                                  @michmoor GAFAMs.. for the ones who want to understand my thoughts on security and privacy evaluation.

                                  Tell us your thoughts on the icons near the bottom of (what I assume is) your home page.

                                  Screenshot 2024-01-11 at 8.09.04 AM.png

                                  VerticalTechnikV 1 Reply Last reply Reply Quote 2
                                  • NollipfSenseN
                                    NollipfSense
                                    last edited by

                                    Google is in the business of extraction of information without privacy regards...it's their nature and that's bad for the living or dead human being. I champion the small group from Spain that took on Google and won for the right to be forgotten. Doing business with Google supports that extraction. It doesn't bother me that Netgate is hosting their email server on Google...it's mostly or all encrypted emails when I communicate with the company. However, I wouldn't support Google economic extraction engine and I completely understand why that could turn off a potential client.

                                    pfSense+ 23.09 Lenovo Thinkcentre M93P SFF Quadcore i7 dual Raid-ZFS 128GB-SSD 32GB-RAM PCI-Intel i350-t4 NIC, -Intel QAT 8950.
                                    pfSense+ 23.09 VM-Proxmox, Dell Precision Xeon-W2155 Nvme 500GB-ZFS 128GB-RAM PCIe-Intel i350-t4, Intel QAT-8950, P-cloud.

                                    1 Reply Last reply Reply Quote 1
                                    • JonathanLeeJ
                                      JonathanLee
                                      last edited by

                                      PfSense needs one for alarm emails, also they have one to preset NTP on boot up before NTP servers come online for log tracking also. Don’t worry about it

                                      Make sure to upvote

                                      johnpozJ 1 Reply Last reply Reply Quote 0
                                      • johnpozJ
                                        johnpoz LAYER 8 Global Moderator @JonathanLee
                                        last edited by

                                        @JonathanLee

                                        what.gif

                                        An intelligent man is sometimes forced to be drunk to spend time with his fools
                                        If you get confused: Listen to the Music Play
                                        Please don't Chat/PM me for help, unless mod related
                                        SG-4860 24.11 | Lab VMs 2.8, 24.11

                                        JonathanLeeJ 1 Reply Last reply Reply Quote 1
                                        • JonathanLeeJ
                                          JonathanLee @johnpoz
                                          last edited by

                                          @johnpoz

                                          😂😂😂😂

                                          Make sure to upvote

                                          1 Reply Last reply Reply Quote 0
                                          • D
                                            dw @VerticalTechnik
                                            last edited by

                                            @VerticalTechnik
                                            You haven't setup your DMARC properly.
                                            No cloud services? what's this - Microsoft office 365.
                                            Try to google for "could act" and you will not be able to sleep.
                                            Screenshot from 2024-01-12 13-55-02.png

                                            NollipfSenseN 1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.