Inbound Mail Route


Configuring an inbound mail route on the G Suite domain is required to restrict message delivery from Mailprotector's servers and prevent spammers from using a direct connection to Google Gmail host addresses, bypassing Mailprotector scanning.

Configuration steps for an outbound mail route are in the Outbound Mail Routes article.

Applies to:

Google Workspace, Business Starter, Business Standard, Business Plus, Enterprise


Before configuring the Workspace Gmail mail routes, the Mailprotector Console should have the domain, inbound SMTP host address, and users configured to ensure the Mailprotector solution is ready to scan and protect the domain.

If the domain and users need to be configured in the Mailprotector Console, please start with Step 2: Add Users.

You should also have access to the domain's public DNS zone. Changing the MX record is a required step to provisioning Mailprotector. The MX record should be modified before configuring the inbound mail route on G Suite. View Step 3: Change the DNS MX Records for more information.

Configuration Steps

Inbound Mail Route Configuration

  1. Go to the Google Admin Console and click on Apps as shown in Figure 1 in the left-hand navigation bar.

    Fig. 1
  2. Under the "Apps" section of the navigation bar, select "Gmail," and you will arrive at the Settings for Gmail page as shown in Figure 2. Click on Spam, Phishing and Malware to begin the configuration process.

    Fig. 2

  3. Locate the Inbound gateway setting. Move your mouse over the setting and click on the Edit Button (pencil icon) as shown in Figure 3. If you have an existing inbound gateway setting, you will click on the Edit button instead.

    Fig. 3

  4. Select the "Enable" box as shown in Figure 4
    Fig. 4
  5. Under "IP Addresses/Ranges" Select the "Add" button. You will need to add each IP address individually. 

    NOTE: There isn't currently a way to add multiples simultaneously.

    Add the three transport IP addresses Mailprotector will deliver from:

    Check the boxes for Automatically detect external IP (recommended) and Reject all mail not from gateway IPs. This will allow Gmail to evaluate a sender's correct origin IP address and prevent spammers from going around Mailprotector's systems.

    The completed settings window should look similar to Figure 5, and you will click on ADD SETTING in the lower right to save the changes. NOTE: You may only have the three transport IP addresses from above. Other IP addresses may be for other services not related to Mailprotector.

    Fig. 5

  6. At the bottom of your browser window, you will see a notice stating, 'These changes may take up to 24 hours to propagate to all users.' To the right of the message is a SAVE link as shown in Figure 5. Click on the SAVE link to complete the Inbound Mail Route configuration.

    IMPORTANT: These changes may take up to 24 hours to propagate to all users in the Workspace domain.


Have more questions? Submit a request