Skip to main content

SMTP relay service setting

Gev Tari
Updated

SMTP relay service setting

If your organisation uses a non-Gmail mail service such as Microsoft Exchange (or other non-Google SMTP service), you can use the SMTP relay service setting to route outgoing mail through Google. This enables you to filter messages for spam and viruses before they reach external contacts, and to apply Google Apps email security settings to outgoing messages.

Sending limits for the SMTP relay service
Important:
  • Once you have configured the SMTP relay service, you’ll need to configure your on-premise outbound mail server to point to Google. See the steps below for instructions.
     
  • The SMTP relay service enables you to relay mail only for domains that you have added to your Google Apps account. This service is not an open relay for any IP address that you specify. Make sure all of the domains used by your sending servers are added to Google Apps; otherwise, messages may be rejected.

To route your outbound mail through Google Apps using the SMTP relay service setting:

    1. Sign in to the Google Admin console. 
    2. Do one of the following:
      • In the classic Admin console, click Settings > Gmail.
      • In the new Admin console, click Google Apps > Gmail > Advanced settings.
    3. In the Organisations section near the top of the page, highlight your root org.

      Note: You can configure the SMTP relay service setting for the root organisational unit only. You can view the setting from the sub-org level once it's added, but you cannot add, edit, or delete the setting from the sub-org level.
       
    4. Scroll down to SMTP relay service (you can also enter SMTP relay service in the search field):
       
      • If the setting's status is Not configured yet, click the Configure button near the right edge of the window (the Add setting dialog box opens).
      • Click Edit to edit an existing setting (the Edit setting dialog box appears).
         
    5. Click Add description to enter a short description that will appear in the setting's summary.
       
    6. In the Authentication section, click Add.
       
    7. Enter an IP address or range. Mail sent from these IP addresses will be trusted as coming from your domain(s).

      Use CIDR format to enter an IP range. For example, 192.168.12.0/23 represents an address range of 192.168.12.0 to 192.168.13.255. The maximum number of IP addresses that can be specified in the range is 65,536. We recommend that you keep the allowed IP range as narrow as possible for security reasons.

      You can also use IPv6 address formats to specify an IP address. For example:
      1050:0000:0000:0000:0005:0600:300c:326b or
      1050:0:0:0:5:600:300c:326b or
      1050::5:600:300c:326b
       
    8. Click Save.
       
    9. In the Encryption section, click Require TLS Encryption to require that the communication between your server and Google’s server be TLS encrypted, including the message contents.

      Note: If your email server does not support TLS, then you should not click this checkbox. By clicking this check box, Google will reject messages that are not encrypted.
       
    10. When you are finished making changes, click Add setting or Save to close the dialog box.

      Note: Any settings you add will be highlighted on the Advanced settings page.
       
    11. Click Save changes at the bottom of the Advanced settings page.

  1. Configure your on-premise outbound mail server to point to smtp-relay.gmail.com, port 25 or port 465. See the sections below for instructions on completing this step for specific mail servers.
Microsoft Exchange 2007/2010 without an Edge Server

Follow the instructions below to set up the SMTP relay service for Exchange 2007/2010 if you do not have an Edge Server. In this case, set up Outbound Services on a Hub Transport server.

There is no need to increase the timeouts for Microsoft Exchange 2007/2010 mail servers. The default timeout settings are appropriate.

To create and configure a Send Connector on your Hub Connector Server:

  1. Click Organisation Configuration > Hub Transport.
  2. Click Send Connectors.
  3. Right-click in the actions pane and choose New Send Connector.
  4. Name the connector Outbound.
  5. Under Select the intended use for this Send Connector, select Internet, and click Next.


     
  6. Click Add to open the Add Address Space dialog box.


     
  7. In the Domain field, enter an asterisk (*) so that all mail will be routed through the new connector.


     
  8. Highlight the Include all subdomains check box, and click OK.
  9. Click Next.
  10. Under Network settings, select Route mail through the following smart hosts.
  11. Click Add.


     
  12. In the Add smart host dialog box, enter the following smarthost in the Fully qualified domain name field:

    smtp-relay.gmail.com


     
  13. Click OK.
  14. Under Configure smart host authentication settings, click None, and then clickNext.


     
  15. Under Source Server, click Add, and list each outbound hub server that will act as a bridgehead.




     
  16. Click OK, and click Next.
  17. Click New.


     
  18. Click Finish to complete the send connector configuration.


     
  19. Once you have completed your configuration, send a test message to confirm that your outbound mail is flowing.
Important: Google Apps Support does not provide technical support for configuring on-premise mail servers or third-party products. In the event of a Microsoft Exchange issue, you should consult your Microsoft Exchange administrator. These instructions are designed to work with the most common Microsoft Exchange scenarios. Any changes to your Microsoft Exchange configuration should be made at the discretion of your Microsoft Exchange administrator.
 
Microsoft Exchange 2007/2010 with an Edge Server

For Microsoft Exchange 2007/2010, different servers are assigned distinct, concrete roles. An Edge Server is one such role. The Edge Server connects all other Exchange Servers to the Internet, and provides filtering and security.

To send email on an edge transport server, you need to configure a send connector. Send connectors are created and edited in the Exchange Management Console. Follow the instructions below to set up the SMTP relay service for Exchange 2007/2010 on your Edge Server.

There is no need to increase the timeouts for Microsoft Exchange 2007/2010 mail servers. The default timeout settings are appropriate.

To create and configure a Send Connector on your Hub Connector Server:

  1. Click Organisation Configuration > Hub Transport.
  2. Click Send Connectors.
  3. Double-click the connector named EdgeSync – [your site] to Internet, where [your site] is the name of your site.


     
  4. From the Address Space tab, verify that the “*” domain has been added.


     
  5. From the Network tab, un-check “Enable Domain Security (Mutual Auth TLS)", and click Route mail through the following smart hosts.


     
  6. Click Add.
  7. In the Add smart host dialog box, enter the following smarthost in the Fully qualified domain name field:

    smtp-relay.gmail.com


     
  8. Click OK.
  9. On the Source Server tab, verify that the appropriate edge subscription(s) are defined.
  10. From the Exchange Management Shell, run the following command:

    start-edgesynchronization


     
  11. Verify on the Edge server(s) that the new Send Connector settings have been received and look identical to those on the hub server.
  12. Be sure to check your receive connectors on the Edge server and verify the following:
     
    • The Network tab has the IP range of all hub servers included
    • The Authentication tab has the Exchange Server Authentication tab checked
    • The Permission Groups tab has the Exchange Servers option checked
  13. Once you have completed your configuration, send a test message to confirm that your outbound mail is flowing.
Important: Google Apps Support does not provide technical support for configuring on-premise mail servers or third-party products. In the event of a Microsoft Exchange issue, you should consult your Microsoft Exchange administrator. These instructions are designed to work with the most common Microsoft Exchange scenarios. Any changes to your Microsoft Exchange configuration should be made at the discretion of your Microsoft Exchange administrator.
 
Microsoft Exchange 2000/2003
 Change the retry interval, and configure the smarthost to route traffic to Google:
  1. Right-click SMTP Virtual Server and select Properties.
  2. Click the Delivery tab.
  3. Under Outbound, change the default retry interval values to the following:

    First retry interval (minutes): 1
    Second retry interval (minutes): 1
    Third retry interval (minutes): 3
    Subsequent retry interval (minutes): 5
     
  4. Click Connectors and then right-click the SMTP Connector (or the Internet Mail SMTP Connector) and select Properties.
  5. On the General tab, type in the following smart host:

    smtp-relay.gmail.com
     
  6. Click OK to save the changes.
Important: Google Apps Support does not provide technical support for configuring on-premise mail servers or third-party products. In the event of a Microsoft Exchange issue, you should consult your Microsoft Exchange administrator. These instructions are designed to work with the most common Microsoft Exchange scenarios. Any changes to your Microsoft Exchange configuration should be made at the discretion of your Microsoft Exchange administrator.
 
IBM Lotus Domino
 Follow the instructions below to set up the SMTP relay service for IBM Lotus Domino. These instructions, which were written for Lotus Domino R5/R6, are designed to work with a majority of deployments.

Changing the timeout configuration for Lotus Domino R5/R6 is not required. You can use the default timeout settings.

Set up a smarthost and adjust the Retry Interval by following these steps:

  1. Open Domino Administrator.
  2. Click Administration and select the Configuration tab.
  3. Click Configurations.
  4. Double-click the name of your Domino Server.
  5. At the top of the window, click Edit Server Configuration.
  6. Select the Router/SMTP tab in the first row. (This will select the Basics tab of the second row of tabs.)
  7. Under Relay host for messages leaving the local internet domain, add the following:

    smtp-relay.gmail.com
     
  8. Select the Restrictions and Controls tab from the second row.
  9. Select the Transfer Controls tab from the third row.
  10. Set the configuration Initial Transfer Retry Interval to 1 minute or higher.
  11. Click Save & Close to exit.
  12. Once you have completed your configuration, send a test message to confirm that your outbound mail is flowing.
Important: Google Apps Support does not provide technical support for configuring on-premise mail servers or third-party products. In the event of an IBM Lotus Domino issue, you should consult your IBM Lotus Domino administrator. These instructions are designed to work with the most common IBM Lotus Domino scenarios. Any changes to your IBM Lotus Domino configuration should be made at the discretion of your IBM Lotus Domino administrator.
 
Novell Groupwise
 Follow the instructions below to set up the SMTP relay service for Novell Groupwise. These instructions are designed to work with a majority of deployments. You’ll first need to increase server timeouts before setting up a smarthost.

To increase server timeouts:

  1. Open the Groupwise ConsoleOne interface.
  2. Right-click the Internet Agent object, and click Properties.
  3. Select the SMTP/MIME Settings tab and click Timeouts.
  4. Set the following values:

    Commands: 5 minutes
    Data: 3 minutes
    Connection Establishment: 2 minutes
    Initial Greeting: 5 minutes
    TCP Read: 5 minutes
    Connection Termination: 15 minutes
     
  5. Click Apply, then click OK.

To set up a smarthost:

  1. Open the Groupwise ConsoleOne interface.
  2. Right-click the Internet Agent object, and click Properties.
  3. If the SMTP/MIME Settings page is not the default page, click theSMTP/MIME tab and click Settings.
  4. Set the number of SMTP Send Threads to the maximum number of simultaneous connections the Groupwise server will safely support.
  5. Enter the following smarthost in the field entitled Relay Host for Outbound Messages:

    smtp-relay.gmail.com
     
  6. Click Apply, then click OK to exit.
  7. Once you have completed your configuration, send a test message to confirm that your outbound mail is flowing.
Important: Google Apps Support does not provide technical support for configuring on-premise mail servers or third-party products. In the event of a Novell Groupwise issue, you should consult your Novell Groupwise administrator. These instructions are designed to work with the most common Novell Groupwise scenarios. Any changes to your Novell Groupwise configuration should be made at the discretion of your Novell Groupwise administrator.
 
Sendmail
 Follow the instructions below to set up the SMTP relay service for Sendmail. These instructions are designed to work with a majority of deployments.

Changing server timeouts should not be necessary. In Sendmail, the server timeout is set in the value Timeout.datafinal. By default it is set to 1 hour. IfTimeout.datafinal has been changed to a lower value, raise the value to 1 hour.

To configure a smarthost for Sendmail:

  1. Add the following line to the /etc/mail/sendmail.mc file:

    define(`SMART_HOST', `smtp-relay.gmail.com')
     
  2. Stop and restart the sendmail server process.
  3. Once you have completed your configuration, send a test message to confirm that your outbound mail is flowing.
Important: Google Apps Support does not provide technical support for configuring on-premise mail servers or third-party products. In the event of a Sendmail issue, you should consult your Sendmail administrator. These instructions are designed to work with the most common Sendmail scenarios. Any changes to your Sendmail configuration should be made at the discretion of your Sendmail administrator.
 
Apple Macintosh OS X
Follow the instructions below to set up the SMTP relay service for Apple Macintosh OS X. These instructions are designed to work with a majority of deployments.

To set up a smarthost:

  1. In Server Admin, select Mail and click Settings.
  2. Under Relay all mail through this host, enter the following:

    smtp-relay.gmail.com
     
  3. Click Save to close the Server Admin.
  4. Restart the mail service.
  5. Once you have completed your configuration, send a test message to confirm that your outbound mail is flowing.
Important: Google Apps Support does not provide technical support for configuring on-premise mail servers or third-party products. In the event of an Apple Macintosh OS X issue, you should consult your Apple Macintosh OS X administrator. These instructions are designed to work with the most common Apple Macintosh OS X scenarios. Any changes to your Apple Macintosh OS X configuration should be made at the discretion of your Apple Macintosh OS X administrator.
 
Qmail
Follow the instructions below to set up the SMTP relay service for Qmail. These instructions are designed to work with a majority of deployments.

You may first need to increase server timeouts before setting up a smarthost. The default timeout is 1200 seconds, which is long enough. If this value has been previously changed, then edit the file /var/qmail/timeoutsmtpd and increase it to at least 900 seconds.

To set up a smarthost for Qmail:

    1. Edit (or create) the file /var/qmail/control/smtproutes and append the following line:

      :smtp-relay.gmail.com:25
       
    2. If you have certain internal domains whose traffic should not be routed to Google, you will want to add specific routing to the appropriate mail server to the /var/qmail/control/smtproutes file using the following syntax:

    1. <InternalDomain>:<ServerForInternalDomain>

  1. Stop and restart the Qmail server.
  2. Once you have completed your configuration, send a test message to confirm that your outbound mail is flowing.
Important: Google Apps Support does not provide technical support for configuring on-premise mail servers or third-party products. In the event of a Qmail issue, you should consult your Qmail administrator. These instructions are designed to work with the most common Qmail scenarios. Any changes to your Qmail configuration should be made at the discretion of your Qmail administrator.
 
Postfix
Follow the instructions below to set up the SMTP relay service for Postfix. These instructions are designed to work with a majority of deployments. There is no need to increase the timeouts for Postfix servers. The default timeout settings are appropriate.

To set up a smarthost for Postfix:

  1. Add the following line to your configuration file (example path /etc/postfix/main.cf):

    relayhost = smtp-relay.gmail.com:25
     
  2. Restart Postfix by running the following command:

    # sudo postfix reload
     
  3. Once you have completed your configuration, send a test message to confirm that your outbound mail is flowing.
Important: Google Apps Support does not provide technical support for configuring on-premise mail servers or third-party products. In the event of a Postfix issue, you should consult your Postfix administrator. These instructions are designed to work with the most common Postfix scenarios. Any changes to your Postfix configuration should be made at the discretion of your Postfix administrator.
Note: You'll also need to enable the Comprehensive mail storage setting if you have a non-Gmail system that uses the SMTP Relay Service to route mail on behalf of your users -- for example, for ticket tracking systems, bug databases, or automated notification systems -- and if you want that mail to appear in your users’ Gmail mailboxes.

Comments

1 comment

Date Votes
  • Sirajfgcengineering

    International Domain website design

    0

Please sign in to leave a comment.

Powered by Zendesk