Editions supported: Inbound gateways are available in Google Apps for Business and Education. Compare editions now
An inbound mail gateway is a server through which all incoming mail for your domain passes. The gateway typically processes the mail in some way — such as archiving it or filtering out spam — then passes the mail on to the mail server that delivers the messages to the recipients. The Postini servers are an example of an inbound mail gateway: they filter (and possibly archive) incoming mail before passing it on to the Google Apps mail servers.
When you use an inbound mail gateway, the MX records for your domain point to the inbound mail gateway server. You configure the gateway server to pass the incoming mail on to the Google Apps mail servers, and configure the Google Apps mail servers to accept a stream of incoming mail from the gateway server.
To configure an inbound mail gateway:
- Update your domain's MX records so that the highest priority record refers to the inbound mail gateway server.
See Creating MX records for detailed instructions.
- Configure the inbound mail gateway server to deliver mail to the Google Apps mail servers.
The configuration steps differ depending on the gateway server.
Sign in to the Google Admin console.
- Do one of the following:
- In the classic Admin console, click Settings > Gmail.
- In the new Admin console, click Google Apps > Gmail > Users.
Where is it? Which Admin console do I have?
- In the Organizations section, highlight your domain.
- In the Inbound gateway box, enter the IP address of the inbound mail gateway server.
If you have more than one gateway server, enter an IP range in CIDR notation or separate each IP address with a comma. If you are using the Postini Services, include the addresses of the Postini servers:
- Select the check box Only let my users receive email from the email gateways listed above.
This setting ensures that all incoming email comes through the inbound gateway server and is therefore properly filtered or archived. The Google Apps mail servers will reject incoming mail from any other mail server.
- Click Save changes at the bottom of the Email settings page.
- Verify that incoming mail is properly delivered.
Once your MX record changes from step 1 have taken effect (that is, after the previous MX record's TTL has expired), send an email message to a user in your domain. Confirm that (a) the inbound gateway server processes it and (b) the user receives the message in his or her inbox.