Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Why does netgate.com have googlemail MX record?

    Scheduled Pinned Locked Moved General pfSense Questions
    42 Posts 12 Posters 5.9k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • AndyRHA
      AndyRH
      last edited by

      What I am not understanding is why you are not using a company that rates the on-line security of a company?
      My company is making value changes to our security and that results in a higher rating. If we want to do business with a new company we review their rating, based on that we may or may not do business with them. We also recognize we are not security experts, so we pay a company to evaluate partners and us.
      This service has highlighted several mistakes we have made that has had a real and positive effect on our security posture and located some rouge websites that we (IT) did not know about.

      Using Google mail for business is no different than using Microsoft. Using Google mail for business likely includes an NDA that would legally prevent them from scanning emails like they do in the free service. This does not make Google less evil...

      o||||o
      7100-1u

      1 Reply Last reply Reply Quote 0
      • M
        michmoor LAYER 8 Rebel Alliance @VerticalTechnik
        last edited by

        @VerticalTechnik said in Why does netgate.com have googlemail MX record?:

        hile completing the security checks regarding privacy we have found that netgate.com has googlemail MX entries when checking the DNS Report.

        I don't understand the issue and im trying to.

        Firewall: NetGate,Palo Alto-VM,Juniper SRX
        Routing: Juniper, Arista, Cisco
        Switching: Juniper, Arista, Cisco
        Wireless: Unifi, Aruba IAP
        JNCIP,CCNP Enterprise

        johnpozJ J VerticalTechnikV 3 Replies Last reply Reply Quote 0
        • johnpozJ
          johnpoz LAYER 8 Global Moderator @michmoor
          last edited by johnpoz

          @michmoor said in Why does netgate.com have googlemail MX record?:

          I don't understand the issue

          To OP Google = BAD... netgate uses google for email.. Like other millions of other companies.. ;) so OP doesn't want to use netgate..

          Lets see netflix uses them, uber uses them.. etc.. So very big names use them.. now these are not security companies - but guess the OP shouldn't be using those services either.. itconvergence uses them too, I know they have quite a few fortune 500 customers.. Guess they didn't look into the details of how bad google is before using them ;)

          An intelligent man is sometimes forced to be drunk to spend time with his fools
          If you get confused: Listen to the Music Play
          Please don't Chat/PM me for help, unless mod related
          SG-4860 24.11 | Lab VMs 2.8, 24.11

          1 Reply Last reply Reply Quote 2
          • J
            jrey @michmoor
            last edited by

            @michmoor said in Why does netgate.com have googlemail MX record?:

            I don't understand the issue and im trying to.

            IMHO, it is not an "issue" at all. But rather and simply that the OP is red flagging the purchase based (and seemingly) entirely on the fact that Netgate's mail server has an MX at Google.

            Several people (me included) I think, are just trying to expand the criteria being used and therefore allowing the OP to make a more informed choice.

            I don't think the conversation is really any more complicated than that. At the end of the day what the OP chooses to do, is exactly that a choice they have to make.

            Except those that specifically work for Netgate (and I'm not one of them) they are the only people that would be directly impacted by the OPs view.

            @johnpoz said in Why does netgate.com have googlemail MX record?:

            To OP Google = BAD... netgate uses google for email.. Like other millions of other companies.. ;) so OP doesn't want to use netgate..

            Yes, exactly. and as such is really a narrow scope as expressed.

            1 Reply Last reply Reply Quote 0
            • M
              michmoor LAYER 8 Rebel Alliance
              last edited by

              Ahh ok. Fair enough.
              I did read through the thread so i was getting confused on the point of why using a Google-hosted server was not good but ok i gotcha.
              Carry on :)

              Firewall: NetGate,Palo Alto-VM,Juniper SRX
              Routing: Juniper, Arista, Cisco
              Switching: Juniper, Arista, Cisco
              Wireless: Unifi, Aruba IAP
              JNCIP,CCNP Enterprise

              johnpozJ 1 Reply Last reply Reply Quote 0
              • johnpozJ
                johnpoz LAYER 8 Global Moderator @michmoor
                last edited by

                @michmoor So you meet a nice person you want to do some "business" with.. You exchange info and find out they use t-mobile for their cell phone.. Which you don't like, but then you find out they have a aol email address.. And your like oh.. Not going to have anything to do with this person..

                Its kind of like that ;)

                An intelligent man is sometimes forced to be drunk to spend time with his fools
                If you get confused: Listen to the Music Play
                Please don't Chat/PM me for help, unless mod related
                SG-4860 24.11 | Lab VMs 2.8, 24.11

                M 1 Reply Last reply Reply Quote 0
                • M
                  michmoor LAYER 8 Rebel Alliance @johnpoz
                  last edited by

                  @johnpoz
                  Time to change the criteria on how you select a business partner. lol

                  Firewall: NetGate,Palo Alto-VM,Juniper SRX
                  Routing: Juniper, Arista, Cisco
                  Switching: Juniper, Arista, Cisco
                  Wireless: Unifi, Aruba IAP
                  JNCIP,CCNP Enterprise

                  johnpozJ 1 Reply Last reply Reply Quote 0
                  • johnpozJ
                    johnpoz LAYER 8 Global Moderator @michmoor
                    last edited by

                    @michmoor guess zscaler is out as well.. ;)

                    ;; QUESTION SECTION:
                    ;zscaler.com.                   IN      MX
                    
                    ;; ANSWER SECTION:
                    zscaler.com.            3600    IN      MX      10 aspmx3.googlemail.com.
                    zscaler.com.            3600    IN      MX      10 aspmx2.googlemail.com.
                    zscaler.com.            3600    IN      MX      5 alt2.aspmx.l.google.com.
                    zscaler.com.            3600    IN      MX      1 aspmx.l.google.com.
                    zscaler.com.            3600    IN      MX      5 alt1.aspmx.l.google.com.
                    

                    They should prob go through all of their IT equipment and pull out anything made by broadcom ;)

                    ;broadcom.com.                  IN      MX
                    
                    ;; ANSWER SECTION:
                    broadcom.com.           3600    IN      MX      10 mx1.smtp.goog.
                    broadcom.com.           3600    IN      MX      60 mx4.smtp.goog.
                    broadcom.com.           3600    IN      MX      50 mx3.smtp.goog.
                    broadcom.com.           3600    IN      MX      40 alt2.aspmx.l.google.com.
                    broadcom.com.           3600    IN      MX      40 alt1.aspmx.l.google.com.
                    broadcom.com.           3600    IN      MX      30 aspmx.l.google.com.
                    broadcom.com.           3600    IN      MX      20 mx2.smtp.goog.
                    

                    An intelligent man is sometimes forced to be drunk to spend time with his fools
                    If you get confused: Listen to the Music Play
                    Please don't Chat/PM me for help, unless mod related
                    SG-4860 24.11 | Lab VMs 2.8, 24.11

                    1 Reply Last reply Reply Quote 2
                    • VerticalTechnikV
                      VerticalTechnik @michmoor
                      last edited by

                      @michmoor GAFAMs.. for the ones who want to understand my thoughts on security and privacy evaluation.

                      johnpozJ M demD 3 Replies Last reply Reply Quote 0
                      • johnpozJ
                        johnpoz LAYER 8 Global Moderator @VerticalTechnik
                        last edited by

                        @VerticalTechnik said in Why does netgate.com have googlemail MX record?:

                        GAFAMs

                        Wouldn't that now be GAMAMs now.. with facebook now being Meta

                        An intelligent man is sometimes forced to be drunk to spend time with his fools
                        If you get confused: Listen to the Music Play
                        Please don't Chat/PM me for help, unless mod related
                        SG-4860 24.11 | Lab VMs 2.8, 24.11

                        1 Reply Last reply Reply Quote 0
                        • M
                          michmoor LAYER 8 Rebel Alliance @VerticalTechnik
                          last edited by

                          @VerticalTechnik
                          But how does that help
                          In evaluating a companies ability to do commerce or treat your data securely.

                          Unless you are saying that because Netgate uses Google mail servers Google can read their mail…but smtp is insecure anyway so what’s the point.
                          If we’re being honest you just have a “security” policy of not j business with any entity that doesn’t own their mail servers which is a bit insane in 2024 but that’s your decision. It’s just strange that you’re choosing an insecure protocol by default as your decision point but ok

                          Firewall: NetGate,Palo Alto-VM,Juniper SRX
                          Routing: Juniper, Arista, Cisco
                          Switching: Juniper, Arista, Cisco
                          Wireless: Unifi, Aruba IAP
                          JNCIP,CCNP Enterprise

                          johnpozJ 1 Reply Last reply Reply Quote 1
                          • johnpozJ
                            johnpoz LAYER 8 Global Moderator @michmoor
                            last edited by

                            @michmoor maybe he is ok with the other mail providers, and spam filtering services that many a company, and very large ones especially run their mail servers through.

                            Proofpoint is a big one that many a large company uses, we are moving away from them - they have been missing obvious stuff.

                            MS is part of GAFAM or now should really be GAMAM, so maybe they don't do business with anyone that uses any of these services. Companies putting their info up on onedrive for example.. MS prob filtering through that stuff for data as well, if they mining data in email ;)

                            An intelligent man is sometimes forced to be drunk to spend time with his fools
                            If you get confused: Listen to the Music Play
                            Please don't Chat/PM me for help, unless mod related
                            SG-4860 24.11 | Lab VMs 2.8, 24.11

                            1 Reply Last reply Reply Quote 0
                            • demD
                              dem @VerticalTechnik
                              last edited by

                              @VerticalTechnik said in Why does netgate.com have googlemail MX record?:

                              @michmoor GAFAMs.. for the ones who want to understand my thoughts on security and privacy evaluation.

                              Tell us your thoughts on the icons near the bottom of (what I assume is) your home page.

                              Screenshot 2024-01-11 at 8.09.04 AM.png

                              VerticalTechnikV 1 Reply Last reply Reply Quote 2
                              • NollipfSenseN
                                NollipfSense
                                last edited by

                                Google is in the business of extraction of information without privacy regards...it's their nature and that's bad for the living or dead human being. I champion the small group from Spain that took on Google and won for the right to be forgotten. Doing business with Google supports that extraction. It doesn't bother me that Netgate is hosting their email server on Google...it's mostly or all encrypted emails when I communicate with the company. However, I wouldn't support Google economic extraction engine and I completely understand why that could turn off a potential client.

                                pfSense+ 23.09 Lenovo Thinkcentre M93P SFF Quadcore i7 dual Raid-ZFS 128GB-SSD 32GB-RAM PCI-Intel i350-t4 NIC, -Intel QAT 8950.
                                pfSense+ 23.09 VM-Proxmox, Dell Precision Xeon-W2155 Nvme 500GB-ZFS 128GB-RAM PCIe-Intel i350-t4, Intel QAT-8950, P-cloud.

                                1 Reply Last reply Reply Quote 1
                                • JonathanLeeJ
                                  JonathanLee
                                  last edited by

                                  PfSense needs one for alarm emails, also they have one to preset NTP on boot up before NTP servers come online for log tracking also. Don’t worry about it

                                  Make sure to upvote

                                  johnpozJ 1 Reply Last reply Reply Quote 0
                                  • johnpozJ
                                    johnpoz LAYER 8 Global Moderator @JonathanLee
                                    last edited by

                                    @JonathanLee

                                    what.gif

                                    An intelligent man is sometimes forced to be drunk to spend time with his fools
                                    If you get confused: Listen to the Music Play
                                    Please don't Chat/PM me for help, unless mod related
                                    SG-4860 24.11 | Lab VMs 2.8, 24.11

                                    JonathanLeeJ 1 Reply Last reply Reply Quote 1
                                    • JonathanLeeJ
                                      JonathanLee @johnpoz
                                      last edited by

                                      @johnpoz

                                      😂😂😂😂

                                      Make sure to upvote

                                      1 Reply Last reply Reply Quote 0
                                      • D
                                        dw @VerticalTechnik
                                        last edited by

                                        @VerticalTechnik
                                        You haven't setup your DMARC properly.
                                        No cloud services? what's this - Microsoft office 365.
                                        Try to google for "could act" and you will not be able to sleep.
                                        Screenshot from 2024-01-12 13-55-02.png

                                        NollipfSenseN 1 Reply Last reply Reply Quote 0
                                        • NollipfSenseN
                                          NollipfSense @dw
                                          last edited by

                                          @dw said in Why does netgate.com have googlemail MX record?:

                                          You haven't setup your DMARC properly.

                                          You really think DMARC policy stops Google...think again...here is a list from my company's DMARC report account of silly hackers attempt at using Google email service...OP's concern is legitimate..

                                          Screenshot 2024-01-12 at 8.09.18 AM.png

                                          pfSense+ 23.09 Lenovo Thinkcentre M93P SFF Quadcore i7 dual Raid-ZFS 128GB-SSD 32GB-RAM PCI-Intel i350-t4 NIC, -Intel QAT 8950.
                                          pfSense+ 23.09 VM-Proxmox, Dell Precision Xeon-W2155 Nvme 500GB-ZFS 128GB-RAM PCIe-Intel i350-t4, Intel QAT-8950, P-cloud.

                                          demD 1 Reply Last reply Reply Quote 0
                                          • demD
                                            dem @NollipfSense
                                            last edited by

                                            @NollipfSense said in Why does netgate.com have googlemail MX record?:

                                            You really think DMARC policy stops Google...think again...here is a list from my company's DMARC report account of silly hackers attempt at using Google email service...OP's concern is legitimate..

                                            Google will send a DMARC report even if it has only received completely legitimate emails from your domain. The fact that you've received a report from them proves nothing.

                                            You can send your reports to a site like dmarcian to get a detailed report about what's really in them.

                                            NollipfSenseN 1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.