diff --git a/apps/base/mail/rspamd/external_relay.conf b/apps/base/mail/rspamd/external_relay.conf
index 6cbe557..09236aa 100644
--- a/apps/base/mail/rspamd/external_relay.conf
+++ b/apps/base/mail/rspamd/external_relay.conf
@@ -3,6 +3,6 @@ enabled = true;
 rules {
   EDGE_RELAY {
     strategy = "ip_map";
-    ip_map = ["192.0.2.1/32", "192.0.2.2/32"];
+    ip_map = ["66.226.148.207/32", "66.226.149.50/32"];
   }
 }
diff --git a/apps/base/mail/smarthost-networkpolicy.yaml b/apps/base/mail/smarthost-networkpolicy.yaml
index 05f4c67..6557ca6 100644
--- a/apps/base/mail/smarthost-networkpolicy.yaml
+++ b/apps/base/mail/smarthost-networkpolicy.yaml
@@ -14,9 +14,9 @@ spec:
   ingress:
     - from:
         - ipBlock:
-            cidr: 192.0.2.1/32
+            cidr: 66.226.148.207/32
         - ipBlock:
-            cidr: 192.0.2.2/32
+            cidr: 66.226.149.50/32
         - ipBlock:
             cidr: 10.10.12.200/32
         - ipBlock:
diff --git a/apps/base/mail/smarthost/gateways.cidr b/apps/base/mail/smarthost/gateways.cidr
index c3d1c3b..b3f409b 100644
--- a/apps/base/mail/smarthost/gateways.cidr
+++ b/apps/base/mail/smarthost/gateways.cidr
@@ -1,3 +1,3 @@
-# Gateway (mta1/mta2) public IPs; TEST-NET placeholders until the BinaryLane servers exist.
-192.0.2.1/32 reject_plaintext_session, permit
-192.0.2.2/32 reject_plaintext_session, permit
+# Gateway (mta1/mta2) public IPs: ausyd2nxvm2130, aubne1nxvm2132.
+66.226.148.207/32 reject_plaintext_session, permit
+66.226.149.50/32 reject_plaintext_session, permit