# Google Workspace (server-side)

## Part 1: Add host

In order to route your emails through Scribe secure servers, you have to create a host in your Google Workspace Gmail

### Step 1

In your [Google Admin](https://admin.google.com/), go to Apps -> Google Workspace -> Gmail\
On the next page, click on "Hosts" item

<figure><img src="https://208817895-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FdCWalfiZW3LFy32wvLxI%2Fuploads%2Fsnnl47BGkjqqW3dWgvuN%2Fimage.png?alt=media&#x26;token=4a40a3e5-81b1-47fe-b4b3-4816f407608f" alt="" width="563"><figcaption><p>Hosts item in Google Workspace admin Gmail settings</p></figcaption></figure>

### Step 2

Click on "ADD ROUTE" link and fill in the next form with the following informations:

* Name: Scribe
* Select "Single host"
* Host name or IP: smtp.server.scribe-mail.com
* Port: 25
* Select the options like in the screenshot below

<div data-full-width="false"><figure><img src="https://208817895-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FdCWalfiZW3LFy32wvLxI%2Fuploads%2F3xHoDd2vTYJ3BASpyPTO%2Fimage.png?alt=media&#x26;token=265bd333-dce5-4d49-9b32-9307d2ad60d3" alt="" width="563"><figcaption><p>Scribe host form in Google Workspace</p></figcaption></figure></div>

You can now click on the "Save" button

## Part 2: Configure the SMTP relay service

To receive email back from Scribe for routing to the end recipients:

### Step 1

In your [Google Admin](https://admin.google.com/), go to Apps -> Google Workspace -> Gmail\
On the next page, click on "Routing" item

<figure><img src="https://208817895-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FdCWalfiZW3LFy32wvLxI%2Fuploads%2Fd4mJkvB1JJHdWOnNy0B0%2Fimage.png?alt=media&#x26;token=f1865e22-3930-4a3c-9444-f58a0b7c920c" alt="" width="563"><figcaption><p>Routing item in Google Workspace admin Gmail settings</p></figcaption></figure>

### Step 2

In the next page, click on configure under "SMTP relay service"<br>

<figure><img src="https://208817895-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FdCWalfiZW3LFy32wvLxI%2Fuploads%2FuuBq5KSH0DjbqLf6H5N1%2Fimage.png?alt=media&#x26;token=6f9a6543-f507-483c-ad17-b6f1cbe48032" alt="" width="563"><figcaption><p>Configure SMTP relay service</p></figcaption></figure>

Fill-in the next form with the following informations:

* Description: Receive from Scribe
* Authentication: Check "Only accept mail from the specified IP addresses" and add those two ips:\
  15.236.243.144  and  51.44.50.107
* Select "Require TLS encryption"
* Click save

<figure><img src="https://208817895-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FdCWalfiZW3LFy32wvLxI%2Fuploads%2FInO6eefX6qmtP5XsBu9e%2Fimage.png?alt=media&#x26;token=e055dc68-85f6-4501-b96f-9bcd1eeafb78" alt="" width="563"><figcaption></figcaption></figure>

## Part 3: Route your emails through the created Host

### Step 1

In your [Google Admin](https://admin.google.com/), go to Apps -> Google Workspace -> Gmail\
On the next page, click on "Compliance" item

<figure><img src="https://208817895-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FdCWalfiZW3LFy32wvLxI%2Fuploads%2FzjJWC7Xerhpj6ggyjHqW%2Fimage.png?alt=media&#x26;token=84b5f291-d815-4aa5-ad70-4e9216628d8e" alt="" width="563"><figcaption><p>Compliance item in Google Workspace admin Gmail settings</p></figcaption></figure>

### Step 2

In the next page, click on configure under "Content compliance"<br>

<figure><img src="https://208817895-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FdCWalfiZW3LFy32wvLxI%2Fuploads%2FwphV8tAmf0RTnxcxnONg%2Fimage.png?alt=media&#x26;token=da46e1e4-30fe-4019-8cc7-f7915c1790b3" alt="" width="563"><figcaption><p>Configure compliance</p></figcaption></figure>

Fill in the following form like on the screenshot:

* Description: Route to Scribe
* Select "Outbound" and "Internal - sending" in "Email messages to affect"
* In the second configuration item, you have to add an expression with:\
  Location: Full headers\
  Math type: Not contains text\
  Content: X-Scribe-Processed\
  We want to avoid processing your email multiple time.
* In the third configuration item, you change the route to the host you create at the part 1 of this help article.
* Select Require secure transport (TLS)
* Click "Save"

<figure><img src="https://208817895-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FdCWalfiZW3LFy32wvLxI%2Fuploads%2Fw7QVaCYPCS8jfyYaZB1e%2Fimage.png?alt=media&#x26;token=453004c0-9911-43b4-9975-93512d06fb88" alt="" width="563"><figcaption><p>Compliance rule configuration</p></figcaption></figure>

<figure><img src="https://208817895-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FdCWalfiZW3LFy32wvLxI%2Fuploads%2Ficow7lzPBsW6cWE9gjkN%2Fimage.png?alt=media&#x26;token=8c29b0ef-5d61-4766-adc3-661ce2c6d8a5" alt="" width="563"><figcaption><p>Compliance rule expression</p></figcaption></figure>

## Part 4: Configure DKIM

Go to Scribe -> Settings -> DNS and configure DKIM for your sending domains

**You are done** :tada: