Add IP addresses to allow lists in Gmail

If you have the legacy free edition of G Suite, upgrade to G Suite Basic to get this feature. 

As an administrator, you can help prevent messages from specified IP addresses from being marked as spam. Add the addresses to an email allowlist in your Google Admin console. Messages received from these addresses won't be marked as spam.

Email allowlists are always applied to your entire domain. You can’t create email allowlists that apply to specific organizational units only.

Other options for bypassing spam are described below, in Related settings, including:

  • Add individual email addresses or domains an approved senders list 
  • Add incoming servers to the Inbound Gateway setting

Add an IP address to your allowlist

  1. Sign in to your Google Admin console.

    Sign in using your administrator account (does not end in

  2. From the Admin console Home page, go to Appsand thenGoogle Workspaceand thenGmailand thenAdvanced settings.

    Tip: To see Advanced settings, scroll to the bottom of the Gmail page.

  3. On the left, select the top-level organization. Usually, this is your domain.

  4. In the Spam, phishing, and malware section, scroll to the Email whitelist setting. Or, in the search field, enter email whitelist.

  5. Enter the IP address of the sending mail servers you want to add to the allowlist. To add more than one IP address, enter an IP range (using CIDR notation) or separate individual IP addresses with commas.
    Note: Enter public IP addresses only. Private IP addresses aren't supported.

  6. At the bottom of the Advanced settings page, click Save.

It can take up to 24 hours for your changes to take effect. You can track changes in the Admin audit log.

Related settings

  • Spam setting—To add senders to an allowlist based on their email address or domain name (instead of by sending IP address), create an approved senders list in the Spam setting. Detailed steps are in Customize spam filter settings.
  • Approved sender lists—You can also add email addresses and domains to allowlists using the address list controls in these settings: Blocked sendersRestrict delivery,  Secure transport (TLS) complianceContent complianceAttachment complianceObjectionable content, and Routing.
  • Inbound gateway setting—If you have incoming mail servers that process your mail before sending to Google's servers, enter them in the Inbound Gateway setting instead. Detailed steps are in Set up an inbound mail gateway.

    Important: If you enter an IP address in an inbound gateway configuration and then add the same IP address to an email allowlist, the IP address isn't added to the allowlist. This is due to how Gmail determines the true sender, or source IP address.

Was this helpful?
How can we improve it?

Need more help?

Sign in for additional support options to quickly solve your issue