Skip to main content
Google Workspace Setup

US Data Center: Inbound Gateway

If you are installing in the US Data Centers please follow the instructions below. Otherwise go to the EU Data Center: Inbound Gateway documentation.

Written By Michel Young

Last updated 7 months ago

Apps → Google Workspace → Gmail → Spam, phishing, and malware → Inbound Gateway

Scroll to the section “Inbound gateway” and hover over and click the edit pencil. Enable Inbound gateway if it is not already enabled.

The inbound gateway setting is where you specify to Google what servers mail may pass through before the final delivery. Google needs to account for not only Google, but also INKY IPs. By adding these IPs, each email’s entire journey from initial entry into Google through INKY processing and the return journey to Google is accounted for. There are a total of twenty (20) INKY IPs and twenty-eight (28) Google IP blocks. It is recommended to add the INKY IPs first and save your work (blue save button) prior to installing the Google IPs as the Google UI times out and you will need to redo the installation.

INKY controlled IPs:

3.132.108.44
3.132.222.232
3.231.237.226
13.52.203.50
34.210.15.192
52.60.91.15
54.176.221.149
99.79.118.75
100.21.157.149
100.24.129.5
3.132.208.199
13.59.96.180
35.166.188.152
44.224.15.38
50.17.62.222
52.4.92.69
52.8.44.33
52.52.2.239
54.225.87.32
52.60.96.218
52.60.185.242

Click the blue save button and then add the next section

Google controlled IP Blocks:

35.190.247.0/24
35.191.0.0/16
66.102.0.0/20
64.233.160.0/19
66.249.80.0/20
72.14.192.0/18
74.125.0.0/16
108.177.8.0/21
108.177.96.0/19
130.211.0.0/22
172.217.0.0/19
172.217.32.0/20
172.217.128.0/19
172.217.160.0/20
172.217.192.0/19
172.253.56.0/21
172.253.112.0/20
173.194.0.0/16
207.126.144.0/20
209.85.128.0/17
216.58.192.0/19
216.239.32.0/19
2001:4860:4000::/36
2404:6800:4000::/36
2607:f8b0:4000::/36
2800:3f0:4000::/36
2a00:1450:4000::/36
2c0f:fb50:4000::/36

Click the blue save button and then add the next section.

Check:

Automatically detect external IP (recommended)

UNCHECK:

Reject all mail not from gateway IPs

Check:

Require TLS for connections from the email gateways listed above

Check:

Message is considered spam if the following header regexp match

Regexp:

X-IPW-SCL: ([56789]|10)

Check:

Disable Gmail Spam evaluation on mail from this gateway; only use header value

Click the blue save button to save your work.