How to Create Domain and Email Address Lists for Routing Settings in Google Workspace

Type an email address or domain. To remove one, hover over it and click DELETE.

Subdomains are a match to parent domains. For example, it’s as if [email protected] is also listed if you add [email protected].

The Authentication required (received mail only) button is very important. It is on by default and helps protect you from spoofing and other malicious attacks.

However, it can backfire if the sender you add to the list is not correctly authenticating their emails. Suppose this is the case, and you enable the option to require authentication. In that case, all emails from this sender will be rejected instead of being whitelisted.

When enabled, to verify sender authentication, Gmail checks that at least one of these conditions is met:

• The message passes SPF (learn about SPF here), and the From sender matches the Return-path sender. The From sender typically appears as the sender address in your email inbox. The Return-path sender appears only in the full message header.
• The message has a valid DKIM signature, and the domain in the signature matches the From sender.