ssl and google workspace issue

[Rosco]

Good afternoon, everyone. I have a client that I manage all their tech except for their Google workspace emails. They set those up before I came on board and have stuck with the small firm to continue managing it. That said, there is a big issue with their e-mail today. From what I understand, they updated their SSL certificate for their website last night. After the tech did that, all the MX records were gone. In place of the correct Google MX records, just one record points to stackmail.com. After being called in quickly this morning, I could gather this is just an issue between Go Daddy's and Google’s connection. All the data and backups seem to be in place, so I left saying feel free to call, but your e-mail and website administrator needs to fix this. I don't even have the login credentials to help them if I want. I just got an e-mail from the tech asking, “Could you check to see if the email set up in Google Workspace needs to reflect the nameserver change as well?”

Since the MX records were originally on GoDaddy, I assume there is no need for any records in Google Workspace. Since I set none of this up, I'm finally finding it incredibly hard to pinpoint where the point of the problem is. If anyone has any suggestions, that would be greatly appreciated.

 

[Markverhyden]

MX records on GoDaddy was confirmed? Where are the other DNS records? It's preferable to have the same organization for hosting all DNS records.

This sounds like they setup a wildcard SSL Certificate - *.mydomain.com.

If you want to PM the FQDN to me Bob I can look at the entries to see if I can figure it out.

 

[NviGate Systems]

Good afternoon, everyone. I have a client that I manage all their tech except for their Google workspace emails. They set those up before I came on board and have stuck with the small firm to continue managing it. That said, there is a big issue with their e-mail today. From what I understand, they updated their SSL certificate for their website last night. After the tech did that, all the MX records were gone. In place of the correct Google MX records, just one record points to stackmail.com. After being called in quickly this morning, I could gather this is just an issue between Go Daddy's and Google’s connection. All the data and backups seem to be in place, so I left saying feel free to call, but your e-mail and website administrator needs to fix this. I don't even have the login credentials to help them if I want. I just got an e-mail from the tech asking, “Could you check to see if the email set up in Google Workspace needs to reflect the nameserver change as well?”

Since the MX records were originally on GoDaddy, I assume there is no need for any records in Google Workspace. Since I set none of this up, I'm finally finding it incredibly hard to pinpoint where the point of the problem is. If anyone has any suggestions, that would be greatly appreciated.

Google Workspace has an admin page admin.google.com that they sign into, there are tools that will check MX Records etc and can if memory serves give you a wizard to what records are needed.

If they manage the domain (or whoever handles that) the record needs to be updated with whatever service handles DNS entries.

Below is a copy of a tool I ran (can't recall if it's from Google or not) but shows the records that should be on the domain for Google Apps (some entries might be different but you will have an idea)

Pref    Hostname    IP Address    TTL   
1    aspmx.l.google.com    142.251.163.27
Google LLC (AS15169)    24 hrs    Blacklist Check      SMTP Test
1    aspmx.l.google.com    2607:f8b0:4004:c08::1b    24 hrs    Blacklist Check
5    alt1.aspmx.l.google.com    209.85.202.27
Google LLC (AS15169)    24 hrs    Blacklist Check      SMTP Test
5    alt1.aspmx.l.google.com    2a00:1450:400b:c00::1a    24 hrs    Blacklist Check
5    alt2.aspmx.l.google.com    64.233.184.26
Google LLC (AS15169)    24 hrs    Blacklist Check      SMTP Test
5    alt2.aspmx.l.google.com    2a00:1450:400c:c0b::1b    24 hrs    Blacklist Check
10    aspmx2.googlemail.com    209.85.202.26
Google LLC (AS15169)    24 hrs    Blacklist Check      SMTP Test
10    aspmx2.googlemail.com    2a00:1450:400b:c00::1b    24 hrs    Blacklist Check
10    aspmx3.googlemail.com    64.233.184.27
Google LLC (AS15169)    24 hrs    Blacklist Check      SMTP Test
10    aspmx3.googlemail.com    2a00:1450:400c:c0b::1b    24 hrs    Blacklist Check
Test    Result   
Status Problem    DMARC Record Published    No DMARC Record found    Information More Info
Status Warning    DMARC Policy Not Enabled    DMARC Quarantine/Reject policy not enabled    Information More Info
Status Ok    DNS Record Published    DNS Record found   
Your email service provider is "Google Apps"  Need Bulk Email Provider Data?
dns lookup    dns check    whois lookup    spf lookup    dns propagation
Reported by ns14.datona-1.com on 1/2/2023 at 1:13:42 AM (UTC -6), just for you.  Transcript
a:nvigate.com 
Type    Domain Name    IP Address    TTL
A    nvigate.com    69.16.227.64
Liquid Web, L.L.C (AS32244)    24 hrs
Test    Result
Status Ok    DNS Record Published    DNS Record found
dns check    mx lookup    whois lookup    spf lookup    dns propagation
Reported by ns15.datona-1.com on 1/2/2023 at 1:13:35 AM (UTC -6), just for you.  Transcript
ABOUT THE SUPERTOOL!