Google Workspace

Connecting MXGuard as an external gateway in front of Google Workspace (corporate Gmail).

Target server

The target server for Google Workspace looks like:

aspmx.l.google.com

Enter it in the MXGuard panel when adding the domain.

In the Google Admin Console → Apps → Google Workspace → Gmail → Advanced settings → Inbound gateway. Add MXGuard's IP addresses:

88.198.102.232/29

62.76.100.176/29

62.76.113.32/27

Enable "Reject all mail not from gateway IPs" so Google only accepts mail from our servers.

v=spf1 include:spf.mxguard.net include:_spf.google.com ~all

If you send outbound mail through Google Workspace, also set up DKIM via Google Admin Console → Apps → Gmail → Authenticate email.