1. Home
  2. Docs
  3. Email Relay – Google G-Suite
  4. Configuration


Trustifi admin portal

Step 1 – Verifying the plan and user type

⚠ NOTE! In case you aren’t running under the “Pro” plan and your user type isn’t an “Admin”, you will have to upgrade your plan to “Pro”.

Navigate to "My Plan" page, verify that your plan type is "PRO" and your level is "Admin".

Verifying your plan details

Step 2 – Navigating to "Domains" under "Outbound Management"

The email relay section will be locked because you have no verified domains yet.

To verify your domain, navigate to “Outbound Management” (Shield icon) and then click on the “Domains” tab to continue.

Navigating to the "Domains" tab

Adding a new domain

This is a quick overview of the domain verification process. To view the full guide click here - https://trustifi.com/docs/general/domain-verification/

Step 3 – Adding a new domain

Now, we will need to add the domain used to send emails. Continue by clicking on the “Add Domain” button.

Step 5 – Verifying the domain

After adding the domain, you will have to copy and import the records to your DNS provider (e.g. DNS Made Easy, GoDaddy). Continue to the next step after all the DNS records have been imported to your DNS environment.

Adding a new domain

Note: You can also click on "Download records CSV" from the "Actions" menu to save these records as a CSV file.

Step 6 – Verifying the domain and navigating to the Plan Settings tab

After you have added all the DNS records to your domain, click on “Check if verified” to see if the status changes to “Verified”. Continue to the next step only if the domain has been verified.

Note: Depending on your DNS system, your domain may take up to 24 hours to update DNS records.

Showing the domain's DNS records

Step 7 – Enabling and generating the email relay secret key

In this part, you will need to enable the Email Relay toggle, and copy the “Email Relay key” which is the secret key that will be used to authenticate the transport flow of your emails. At the "Plan Settings" page, scroll to the "Email Relay Integration" section.

Copying your Email Relay key

Google Admin Center

Step 8 – Navigating to the Google Admin Center – Mail flow

Navigate to the “Google Admin Center” via the following link – https://admin.google.com/

After you have logged in, input "hosts" in the search bar and select the first option.

Navigating to "Hosts"

Adding host route

Step 9 – Adding a new route

Click on "ADD ROUTE" under "Hosts".

Adding a new route

Step 10 – Creating the host

  1. Name your host
  2. Select "Single host"
  3. In the "Host name" field enter "smtp.trustifi.com" (without the quotes) with port 25.
  4. Check these boxes:
    • Require mail to be transmitted via a secure (TLS) connection
    • Require CA signed certificate
    • Validate certificate hostname
  • Click "Save"

Creating the host

Step 11 – Validate the host

Make sure your host's address and port are correct.

Validating the newly created host

Step 12 – Navigating to "Settings for Gmail"

In the navigation bar at the top of the screen, click on "Settings for Gmail"

Navigating to "Settings for Gmail"

Step 13 – Navigating to "Routing"

Scroll down to the bottom of the page and click on "Routing"

Navigating to "Routing"

Step 14 – Adding a new route

Now we will need to configure a set of rules to guide mail flow to our new host.

In the "Routing" page, click on "Add another rule".

Adding a routing rule

Step 15 – Configuring the route

Name your routing rule, check the “Outbound” and “Internal – sending” check boxes.

Configuring the route

Step 16 – Modifying the route

Scroll down to section number 2, make sure “Modify message” is selected, and check the “Add custom headers” checkbox.

Click on “Add” to add the headers (see next step). Adding a custom header

Step 17 – Adding the custom header

In the "Header key" field, enter the value "x-trustifi-creds" (without the quotes).

In the "Header value" field, enter the value copied over from step 7.

Adding the header key and value

Step 18 – Verifying the custom header

Make sure the custom header key and value were added correctly before continuing.

Verifying the custom header

Step 19 – Setting the route

Now we will have to set the route for this routing rule for our new host.

Check the “Change route” checkbox, click on “Normal routing” and select the host you’ve created by it's name.

Setting the route

Step 20 – Bypassing spam and displaying more options

Under the "Spam" section, check the box for "Bypass spam filter for this message".

Then, click the "Show options" button to display advanced routing options.

Bypassing spam and displaying more options

Step 21 – Adding a patter-based domain match

If you do not have multiple domains under Google Workspaces you can skip this step.

Under "Envelope filer" check the “Only affect specific envelope senders” box.

Then select “Pattern match” from the drop-down menu, enter “.*[@]domain[.]com$” (Without double quotes), instead of domain and com, replace with your domain’s name and your top-level domain (e.g. .net, .com, .org).

Click on "Test expression" to verify the pattern is correct (see next step).

Creating a pattern-based domain match

Step 22– Testing the pattern match

Enter one of the email address from your domain and make sure the status displayed is "Match".

Testing the pattern match

Step 23 – Saving the changes

Once all the correct route changes have been made, click on "Save" at the bottom-right corner.

Saving the changes

Was this article helpful to you? Yes 4 No

How can we help?