Skip to content
Nabvia
Setup
Sign inStart free

Setup

One routing rule, in a console you already administer.

Ten minutes, no MX change, and you can undo it in under a minute. Read only the section for your provider.

Before you start

  • Administrator access to Google Workspace or Microsoft 365 for the domain.
  • Access to the DNS zone for that domain, to add one TXT record.
  • One email address that should hear about a rescue.

Verifying the domain

Nabvia gives you a TXT record when you add a domain. Add it at your DNS host and Nabvia checks it. This proves you control the domain and nothing else; it does not affect mail, because a TXT record is not an MX record.

Jump to your provider

Google Workspace

Google's default routing lets you catch messages for addresses that do not resolve, without touching any mailbox that does.

  1. Open default routing

    In the Google Admin console, go to Apps, then Google Workspace, then Gmail, then Routing, then Default routing.

    1 minutes

  2. Add a setting that matches your domain

    Choose Add setting. Match on the envelope recipient, matching the domain you are protecting.

    2 minutes

  3. Limit the rule to unrecognized addresses

    In the routing options, restrict the setting to unrecognized or catch-all addresses only. This is the control that keeps the rule away from every real mailbox.

    1 minutes

  4. Send to Nabvia and save

    Set the action to change the envelope recipient to your tenant address at inbound.nabvia.com, then save. Google applies routing changes within about an hour.

    1 minutes

The routing rule you addAn abstraction of the admin form, with the real field names and the values you paste.Admin console: Google WorkspaceMatch onEnvelope recipient: @acme.comActionacme@inbound.nabvia.comApply toUnrecognized onlyThe safety control
This is the whole change. The highlighted control is what keeps it away from real mailboxes.
  1. The rule matches on the envelope recipient for your domain.
  2. The action changes the recipient to your tenant address at inbound.nabvia.com.
  3. The scope is restricted to unrecognized addresses only, so no real mailbox is affected.

Microsoft 365

Microsoft 365 needs the domain marked as an internal relay before it will hand an unknown recipient to a connector.

  1. Set the accepted domain to internal relay

    In the Exchange admin center, go to Mail flow, then Accepted domains, and change the domain type from Authoritative to Internal relay.

    2 minutes

  2. Add a connector to Nabvia

    Go to Mail flow, then Connectors, and add a connector from Office 365 to your organization's email server, using the smart host inbound.nabvia.com with TLS required.

    3 minutes

  3. Scope the connector to that domain

    Restrict the connector to the accepted domain you just changed, so nothing else in your tenant is affected.

    1 minutes

  4. Validate and save

    Run the built-in connector validation, then save. Microsoft applies the change within about an hour.

    2 minutes

The routing rule you addAn abstraction of the admin form, with the real field names and the values you paste.Admin console: Microsoft 365Match onEnvelope recipient: @acme.comActioninbound.nabvia.com (acme.com)Apply toUnrecognized onlyThe safety control
This is the whole change. The highlighted control is what keeps it away from real mailboxes.
  1. The rule matches on the envelope recipient for your domain.
  2. The action changes the recipient to your tenant address at inbound.nabvia.com.
  3. The scope is restricted to unrecognized addresses only, so no real mailbox is affected.

What you should see in the first hour

  1. Send a message to a deliberately wrong address on your domain, from an outside account.
  2. Confirm that message does not bounce back to the sender.
  3. Confirm the notification arrives, from an address at notify.nabvia.com.
  4. Send a message to a real address on your domain and confirm it lands normally.

Add the rule. Stop losing mail.

Ten minutes in a console you already administer, and your normal delivery is untouched.

Start freeSee the setup
  • 14-day trial, no card
  • Never your MX