How to Use MailRoute with Google Apps for Inbound and Outbound Protection
MailRoute has always supported Inbound filtering for Google Apps users, but Google has new settings to increase the functionality, and to make sure that their own spam filters don't double-filter the mail.
In addition, MailRoute now supports outbound email relay of mail for Google Apps for Mail users. This allows your outbound mail to be filtered by MailRoute, preventing inadvertent transmission of viruses or spam from infected machines, and allows MailRoute to use your outbound email sending patterns to fine-tune your inbound spam filtering, reducing potential-false positives even further than before!
* it is not necessary to add your outbound server details in MailRoute's Control Panel once you have completed the steps below.
** Please note the new outbound configurations instructions listed below **
There are a few settings the Google Apps Administrator must make to tune things for Inbound filtering, and to enable Outbound mail relay as well:
Set up your google apps mail servers in MailRoute under Delivery & Mailservers and assign their priorities.
See our article
- We will need to know where to send your email. You will want to enter your Google Apps Mail Servers under the Inbound Servers tab.
about entering your mail servers here
> https://mailroute.zendesk.com/entries/23219453-Inbound-Mail-Servers.Configure Google Apps;
- Visit https ://admin.google.com/<your domain>/AdminHome
- Select "Apps"
3. Select "Google Apps" or "G Suite"
4. Select "Gmail"
5. Scroll down to the bottom and choose "Advanced Settings"
6. Scroll down to the section labeled "Spam":
7. Hover over "Inbound Gateway" and choose "Configure"
8. In the configuration dialog
A. Under "Inbound Gateway", enter a description for this setting, such as "MailRoute"
B. Section 1 "Gateway IPs", click "Add", and then enter "220.127.116.11/21" and click save.
C. Select the three checkboxes:
- Automatically detect external IP
- Reject all mail not from gateway IPs
- (optional) Require TLS for connections from the email gateways listed above
9. Section 2 - "Message Tagging".
A. Select the checkbox "Message is considered spam if the following header regexp matches".
B. Enter the following Regexp expression: ^X-Spam-Score: (-?\d+\.\d+)$
C. Select radio button "Regexp Extracts a numeric score"
D. Under "message is considered spam if extracted numeric score is"
- Choose "Greater than or equal to" from the popup menu, and set the value to "7"
E. Choose "Disable gmail spam evaluation on mail from this gateway; use only header value"
F. Click "Add Setting"
10. Scroll down to the section labeled "Routing", and the subsection "Outbound Gateway".
Google has made a change to how outbound email routing is performed. If you have used the old method, you must delete that old setting and re-configure outbound mail according to our current instructions.
Remove Old Setting: Delete the old Outbound gateway setting
A. Make certain that the field for Outbound gateway is empty.
B. Click "Save" at the very bottom of the window.
New Method: Using the Routing Setting
Step 1 - Add the outbound gateway route
- Click Hosts tab at the top
- Click Add Route.
- Enter the route name "outbound.mailroute.net" for the gateway server in the Name field.
- Enter the outbound gateway server "outbound.mailroute.net" in the Enter host name or IP field.
- Select the following option:
- Require secure transport (TLS)—Encrypt messages between sending mail servers and receiving mail servers using Transport Layer Security (TLS).
- Click Save.
Step 2 - Configure Gmail to use the outbound gateway route
From the Gmail Advanced settings section:
- Click General Settings.
- In the Organizations section, select the top-level organization.
- Scroll to the Routing setting in the Routing section, hover over the setting, and choose one of the following options:
- * Click Configure.
- * If the setting is already configured, click Edit or Add another.
- Enter a name or description for your routing setting like "MailRoute Outbound"
- Under Messages to affect, check Outbound.
- Under the third option (For the above types of messages…), select Modify message from the drop-down menu.
- Under Route, check the Change route box.
- From the drop-down list, select your gateway server route that you created in Step 1.
- Under Encryption (onward delivery only), check the Require secure transport (TLS).
- Click Add setting or Save.
- New settings are added to the Advanced settings page.
- At the bottom of the Advanced settings page, click Save.
It can take Google up to an hour for changes to propagate to user accounts.
Please Note *** If you use the MailRoute Outbound/SmartHost Service and you have SPF records, there's a simple, but important change you need to make to your SPF records.
You must leave the Google SPF record in place when you add the mailroute SPF records. It will look like this:
"v=spf1 mx include:spf.mailroute.net include:_spf.google.com -all"
Note: MailRoute will automatically recognize that you are using Google Apps for your outbound service, so you do not need to enter an outbound mailserver in the MailRoute Control Panel.