Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Why does netgate.com have googlemail MX record?

    Scheduled Pinned Locked Moved General pfSense Questions
    42 Posts 12 Posters 5.2k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • johnpozJ
      johnpoz LAYER 8 Global Moderator @michmoor
      last edited by johnpoz

      @michmoor said in Why does netgate.com have googlemail MX record?:

      I don't understand the issue

      To OP Google = BAD... netgate uses google for email.. Like other millions of other companies.. ;) so OP doesn't want to use netgate..

      Lets see netflix uses them, uber uses them.. etc.. So very big names use them.. now these are not security companies - but guess the OP shouldn't be using those services either.. itconvergence uses them too, I know they have quite a few fortune 500 customers.. Guess they didn't look into the details of how bad google is before using them ;)

      An intelligent man is sometimes forced to be drunk to spend time with his fools
      If you get confused: Listen to the Music Play
      Please don't Chat/PM me for help, unless mod related
      SG-4860 24.11 | Lab VMs 2.8, 24.11

      1 Reply Last reply Reply Quote 2
      • J
        jrey @michmoor
        last edited by

        @michmoor said in Why does netgate.com have googlemail MX record?:

        I don't understand the issue and im trying to.

        IMHO, it is not an "issue" at all. But rather and simply that the OP is red flagging the purchase based (and seemingly) entirely on the fact that Netgate's mail server has an MX at Google.

        Several people (me included) I think, are just trying to expand the criteria being used and therefore allowing the OP to make a more informed choice.

        I don't think the conversation is really any more complicated than that. At the end of the day what the OP chooses to do, is exactly that a choice they have to make.

        Except those that specifically work for Netgate (and I'm not one of them) they are the only people that would be directly impacted by the OPs view.

        @johnpoz said in Why does netgate.com have googlemail MX record?:

        To OP Google = BAD... netgate uses google for email.. Like other millions of other companies.. ;) so OP doesn't want to use netgate..

        Yes, exactly. and as such is really a narrow scope as expressed.

        1 Reply Last reply Reply Quote 0
        • M
          michmoor LAYER 8 Rebel Alliance
          last edited by

          Ahh ok. Fair enough.
          I did read through the thread so i was getting confused on the point of why using a Google-hosted server was not good but ok i gotcha.
          Carry on :)

          Firewall: NetGate,Palo Alto-VM,Juniper SRX
          Routing: Juniper, Arista, Cisco
          Switching: Juniper, Arista, Cisco
          Wireless: Unifi, Aruba IAP
          JNCIP,CCNP Enterprise

          johnpozJ 1 Reply Last reply Reply Quote 0
          • johnpozJ
            johnpoz LAYER 8 Global Moderator @michmoor
            last edited by

            @michmoor So you meet a nice person you want to do some "business" with.. You exchange info and find out they use t-mobile for their cell phone.. Which you don't like, but then you find out they have a aol email address.. And your like oh.. Not going to have anything to do with this person..

            Its kind of like that ;)

            An intelligent man is sometimes forced to be drunk to spend time with his fools
            If you get confused: Listen to the Music Play
            Please don't Chat/PM me for help, unless mod related
            SG-4860 24.11 | Lab VMs 2.8, 24.11

            M 1 Reply Last reply Reply Quote 0
            • M
              michmoor LAYER 8 Rebel Alliance @johnpoz
              last edited by

              @johnpoz
              Time to change the criteria on how you select a business partner. lol

              Firewall: NetGate,Palo Alto-VM,Juniper SRX
              Routing: Juniper, Arista, Cisco
              Switching: Juniper, Arista, Cisco
              Wireless: Unifi, Aruba IAP
              JNCIP,CCNP Enterprise

              johnpozJ 1 Reply Last reply Reply Quote 0
              • johnpozJ
                johnpoz LAYER 8 Global Moderator @michmoor
                last edited by

                @michmoor guess zscaler is out as well.. ;)

                ;; QUESTION SECTION:
                ;zscaler.com.                   IN      MX
                
                ;; ANSWER SECTION:
                zscaler.com.            3600    IN      MX      10 aspmx3.googlemail.com.
                zscaler.com.            3600    IN      MX      10 aspmx2.googlemail.com.
                zscaler.com.            3600    IN      MX      5 alt2.aspmx.l.google.com.
                zscaler.com.            3600    IN      MX      1 aspmx.l.google.com.
                zscaler.com.            3600    IN      MX      5 alt1.aspmx.l.google.com.
                

                They should prob go through all of their IT equipment and pull out anything made by broadcom ;)

                ;broadcom.com.                  IN      MX
                
                ;; ANSWER SECTION:
                broadcom.com.           3600    IN      MX      10 mx1.smtp.goog.
                broadcom.com.           3600    IN      MX      60 mx4.smtp.goog.
                broadcom.com.           3600    IN      MX      50 mx3.smtp.goog.
                broadcom.com.           3600    IN      MX      40 alt2.aspmx.l.google.com.
                broadcom.com.           3600    IN      MX      40 alt1.aspmx.l.google.com.
                broadcom.com.           3600    IN      MX      30 aspmx.l.google.com.
                broadcom.com.           3600    IN      MX      20 mx2.smtp.goog.
                

                An intelligent man is sometimes forced to be drunk to spend time with his fools
                If you get confused: Listen to the Music Play
                Please don't Chat/PM me for help, unless mod related
                SG-4860 24.11 | Lab VMs 2.8, 24.11

                1 Reply Last reply Reply Quote 2
                • VerticalTechnikV
                  VerticalTechnik @michmoor
                  last edited by

                  @michmoor GAFAMs.. for the ones who want to understand my thoughts on security and privacy evaluation.

                  johnpozJ M demD 3 Replies Last reply Reply Quote 0
                  • johnpozJ
                    johnpoz LAYER 8 Global Moderator @VerticalTechnik
                    last edited by

                    @VerticalTechnik said in Why does netgate.com have googlemail MX record?:

                    GAFAMs

                    Wouldn't that now be GAMAMs now.. with facebook now being Meta

                    An intelligent man is sometimes forced to be drunk to spend time with his fools
                    If you get confused: Listen to the Music Play
                    Please don't Chat/PM me for help, unless mod related
                    SG-4860 24.11 | Lab VMs 2.8, 24.11

                    1 Reply Last reply Reply Quote 0
                    • M
                      michmoor LAYER 8 Rebel Alliance @VerticalTechnik
                      last edited by

                      @VerticalTechnik
                      But how does that help
                      In evaluating a companies ability to do commerce or treat your data securely.

                      Unless you are saying that because Netgate uses Google mail servers Google can read their mail…but smtp is insecure anyway so what’s the point.
                      If we’re being honest you just have a “security” policy of not j business with any entity that doesn’t own their mail servers which is a bit insane in 2024 but that’s your decision. It’s just strange that you’re choosing an insecure protocol by default as your decision point but ok

                      Firewall: NetGate,Palo Alto-VM,Juniper SRX
                      Routing: Juniper, Arista, Cisco
                      Switching: Juniper, Arista, Cisco
                      Wireless: Unifi, Aruba IAP
                      JNCIP,CCNP Enterprise

                      johnpozJ 1 Reply Last reply Reply Quote 1
                      • johnpozJ
                        johnpoz LAYER 8 Global Moderator @michmoor
                        last edited by

                        @michmoor maybe he is ok with the other mail providers, and spam filtering services that many a company, and very large ones especially run their mail servers through.

                        Proofpoint is a big one that many a large company uses, we are moving away from them - they have been missing obvious stuff.

                        MS is part of GAFAM or now should really be GAMAM, so maybe they don't do business with anyone that uses any of these services. Companies putting their info up on onedrive for example.. MS prob filtering through that stuff for data as well, if they mining data in email ;)

                        An intelligent man is sometimes forced to be drunk to spend time with his fools
                        If you get confused: Listen to the Music Play
                        Please don't Chat/PM me for help, unless mod related
                        SG-4860 24.11 | Lab VMs 2.8, 24.11

                        1 Reply Last reply Reply Quote 0
                        • demD
                          dem @VerticalTechnik
                          last edited by

                          @VerticalTechnik said in Why does netgate.com have googlemail MX record?:

                          @michmoor GAFAMs.. for the ones who want to understand my thoughts on security and privacy evaluation.

                          Tell us your thoughts on the icons near the bottom of (what I assume is) your home page.

                          Screenshot 2024-01-11 at 8.09.04 AM.png

                          VerticalTechnikV 1 Reply Last reply Reply Quote 2
                          • NollipfSenseN
                            NollipfSense
                            last edited by

                            Google is in the business of extraction of information without privacy regards...it's their nature and that's bad for the living or dead human being. I champion the small group from Spain that took on Google and won for the right to be forgotten. Doing business with Google supports that extraction. It doesn't bother me that Netgate is hosting their email server on Google...it's mostly or all encrypted emails when I communicate with the company. However, I wouldn't support Google economic extraction engine and I completely understand why that could turn off a potential client.

                            pfSense+ 23.09 Lenovo Thinkcentre M93P SFF Quadcore i7 dual Raid-ZFS 128GB-SSD 32GB-RAM PCI-Intel i350-t4 NIC, -Intel QAT 8950.
                            pfSense+ 23.09 VM-Proxmox, Dell Precision Xeon-W2155 Nvme 500GB-ZFS 128GB-RAM PCIe-Intel i350-t4, Intel QAT-8950, P-cloud.

                            1 Reply Last reply Reply Quote 1
                            • JonathanLeeJ
                              JonathanLee
                              last edited by

                              PfSense needs one for alarm emails, also they have one to preset NTP on boot up before NTP servers come online for log tracking also. Don’t worry about it

                              Make sure to upvote

                              johnpozJ 1 Reply Last reply Reply Quote 0
                              • johnpozJ
                                johnpoz LAYER 8 Global Moderator @JonathanLee
                                last edited by

                                @JonathanLee

                                what.gif

                                An intelligent man is sometimes forced to be drunk to spend time with his fools
                                If you get confused: Listen to the Music Play
                                Please don't Chat/PM me for help, unless mod related
                                SG-4860 24.11 | Lab VMs 2.8, 24.11

                                JonathanLeeJ 1 Reply Last reply Reply Quote 1
                                • JonathanLeeJ
                                  JonathanLee @johnpoz
                                  last edited by

                                  @johnpoz

                                  😂😂😂😂

                                  Make sure to upvote

                                  1 Reply Last reply Reply Quote 0
                                  • D
                                    dw @VerticalTechnik
                                    last edited by

                                    @VerticalTechnik
                                    You haven't setup your DMARC properly.
                                    No cloud services? what's this - Microsoft office 365.
                                    Try to google for "could act" and you will not be able to sleep.
                                    Screenshot from 2024-01-12 13-55-02.png

                                    NollipfSenseN 1 Reply Last reply Reply Quote 0
                                    • NollipfSenseN
                                      NollipfSense @dw
                                      last edited by

                                      @dw said in Why does netgate.com have googlemail MX record?:

                                      You haven't setup your DMARC properly.

                                      You really think DMARC policy stops Google...think again...here is a list from my company's DMARC report account of silly hackers attempt at using Google email service...OP's concern is legitimate..

                                      Screenshot 2024-01-12 at 8.09.18 AM.png

                                      pfSense+ 23.09 Lenovo Thinkcentre M93P SFF Quadcore i7 dual Raid-ZFS 128GB-SSD 32GB-RAM PCI-Intel i350-t4 NIC, -Intel QAT 8950.
                                      pfSense+ 23.09 VM-Proxmox, Dell Precision Xeon-W2155 Nvme 500GB-ZFS 128GB-RAM PCIe-Intel i350-t4, Intel QAT-8950, P-cloud.

                                      demD 1 Reply Last reply Reply Quote 0
                                      • demD
                                        dem @NollipfSense
                                        last edited by

                                        @NollipfSense said in Why does netgate.com have googlemail MX record?:

                                        You really think DMARC policy stops Google...think again...here is a list from my company's DMARC report account of silly hackers attempt at using Google email service...OP's concern is legitimate..

                                        Google will send a DMARC report even if it has only received completely legitimate emails from your domain. The fact that you've received a report from them proves nothing.

                                        You can send your reports to a site like dmarcian to get a detailed report about what's really in them.

                                        NollipfSenseN 1 Reply Last reply Reply Quote 0
                                        • M
                                          michmoor LAYER 8 Rebel Alliance
                                          last edited by

                                          OPs concern aside, i find this conversation pretty interesting. Grabbing my popcorn 🍿

                                          Firewall: NetGate,Palo Alto-VM,Juniper SRX
                                          Routing: Juniper, Arista, Cisco
                                          Switching: Juniper, Arista, Cisco
                                          Wireless: Unifi, Aruba IAP
                                          JNCIP,CCNP Enterprise

                                          1 Reply Last reply Reply Quote 0
                                          • VerticalTechnikV
                                            VerticalTechnik @dem
                                            last edited by

                                            @dem Sure.. this is a good argument, and currently in progress to be changed. Nevertheless, this has an lower priority as giving potentially critical Hardware informations about Firewall, Network etc.. And this topic might be a controversial discussion.
                                            Primally I wanted to give an input to Netgate, that this MX record does exist, and can avoid potential clients to buy their products. Sure its none of my business what Netgate thinks about it, but mabye some clients do care.

                                            demD 1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.