Skip to main content
Google Workspace Setup

EU Data Center: Inbound Gateway

If you are installing in the EU Data Centers please follow the instructions below. Otherwise go to the US Data Center: Inbound Gateway documentation.

Written By Michel Young

Last updated About 2 months ago

Apps → Google Workspace → Gmail → Spam, phishing, and malware → Inbound Gateway

Scroll to the section “Inbound gateway” and hover over and click the edit pencil. Enable Inbound gateway if it is not already enabled.

The inbound gateway setting is where you specify to Google what servers mail may pass through before the final delivery. Google needs to account for not only Google, but also INKY IPs. By adding these IPs, each email’s entire journey from initial entry into Google through INKY processing and the return journey to Google is accounted for. There are a total of eight (8) INKY IPs and twenty-eight (28) Google IP blocks. It is recommended to add the INKY IPs first and save your work (blue save button) prior to installing the Google IPs as the Google UI times out and you will need to redo the installation.

INKY controlled IPs:

3.121.161.229
18.198.39.243
34.249.87.65
52.17.160.9
18.193.59.0
18.198.169.240
63.32.42.225
34.255.79.51

Click the blue save button and then add the next section

Google controlled IP Blocks:

35.190.247.0/24
35.191.0.0/16
66.102.0.0/20
64.233.160.0/19
66.249.80.0/20
72.14.192.0/18
74.125.0.0/16
108.177.8.0/21
108.177.96.0/19
130.211.0.0/22
172.217.0.0/19
172.217.32.0/20
172.217.128.0/19
172.217.160.0/20
172.217.192.0/19
172.253.56.0/21
172.253.112.0/20
173.194.0.0/16
207.126.144.0/20
209.85.128.0/17
216.58.192.0/19
216.239.32.0/19
2001:4860:4000::/36
2404:6800:4000::/36
2607:f8b0:4000::/36
2800:3f0:4000::/36
2a00:1450:4000::/36
2c0f:fb50:4000::/36

Click the blue save button and then add the next section.

Check:

Automatically detect external IP (recommended)

UNCHECK:

Reject all mail not from gateway IPs

Check:

Require TLS for connections from the email gateways listed above

Check:

Message is considered spam if the following header regexp match

Regexp:

X-IPW-SCL: ([56789]|10)

Check:

Disable Gmail Spam evaluation on mail from this gateway; only use header value

Click the blue save button to save your work