We use cookies on our website to ensure we provide you with the best experience on our website. By using our website, you agree to the use of cookies for analytics and personalized content.This website uses cookies. More Information
It seems like your browser didn't download the required fonts. Please revise your security settings and try again.

G Suite Journaling

  • Last updated on

This article refers to Barracuda Message Archiver version 5.0 and higher, and G Suite.

Use the steps in this article to configure G Suite to send journal mail to the Barracuda Message Archiver.

Step 1. Ensure Public Access to Port 25 on the Barracuda Message Archiver

To Journal mail directly from G Suite to your Barracuda Message Archiver, you must have a public IP address and port 25 open and NATed to the Barracuda Message Archiver. Additionally, you can optionally have a public DNS record. You can test this by attempting to telnet to the Barracuda Message Archiver on port 25. You can expect one of three outcomes:

  1. If the Barracuda Message Archiver is not accessible, either due to port 25 being blocked or incorrectly configured on the firewall, the attempt to telnet simply hangs at Trying [IP address]. In this case you need to troubleshoot your network settings:
    telnet_port_25_blocked.png 
  2. If the Barracuda Message Archiver is accessible and you have set Allow Only Trusted Hosts on the Mail Sources > SMTP page to No, telnet establishes a connection to the Barracuda Message Archiver:
    telnet_port_25_open_all.png
  3. If the Barracuda Message Archiver is accessible, you have set Allow Only Trusted Hosts on the Mail Sources > SMTP page to Yes, and you are attempting to telnet from an IP address not listed in the TRUSTED SMTP SERVERS section, telnet establishes a connection and the connection is immediately closed:
    telnet_port_25_openO365.png 

Step 2. Add Google IP Address Ranges to the Trusted SMTP Servers List

G Suite mail servers use a large range of IP addresses which may change. To determine the current Google IP address range, see the Google IP address ranges for outbound SMTP in the G Suite Administrator Help.

  1. Use the steps outlined in the Google IP address ranges for outbound SMTP  article.
  2. Log in to the Barracuda Message Archiver as the administrator, and go to the Mail Sources > SMTP page.
  3. Click Bulk Edit.
  4. Copy and paste the IP addresses based on your region, and click Save.

Step 3. Configure SMTP Forwarding Settings

Because this configuration requires the Barracuda Message Archiver to be public-facing, Barracuda strongly recommends that you configure the Barracuda Message Archiver to only accept mail from the list of Trusted SMTP Servers. If you are also receiving mail from sources other than G Suite, make sure you add those IP addresses to the list of Trusted SMTP Servers before setting the Barracuda Message Archiver to Allow Only Trusted Hosts.

To configure SMTP forwarding settings, 

1. Log in to the Barracuda Message Archiver as the administrator, and go to the Mail Sources > SMTP page.
2. In the SMTP Forwarding Settings section, set Allow Only Trusted Hosts to Yes.
3. Click Save.

Step 4. Configure Local Domains

  1. Log in to the Barracuda Message Archiver as the administrator, and go to the Basic > IP Configuration page.
  2. In the Local Domains section, add all of your mail-enabled domains.
  3. Click Add after each domain entry, and click Save.

Step 5. Configure SMTP Over TLS/SSL (Optional)

  1. Log in to the Barracuda Message Archiver as the administrator, and go to the Advanced > SMTP Configuration page.
  2. In the SMTP Over TLS/SSL section, set Enable SMTP over TLS/SSL to Yes.
  3. Click Save.

Step 6. Add Route

  1. Sign in to the G Suite domain console, and go to Apps > G Suite > Gmail > Advanced settings .
  2. Click Hosts, and click ADD ROUTE.
  3. In the Add mail route page, enter your Barracuda Message Archiver settings:
    1. Type Barracuda Message Archiver in the Name field.
    2. In the Specify email server section, enter your Barracuda Message Archiver public IP address or public DNS record.

      You can optionally select Require secure transport (TLS). When selected, you must set Enable SMTP over TLS/SSL to Yes on the Advanced > SMTP Configuration page in the Barracuda Message Archiver web interface (see STEP 5 above).

      If you are using a self-signed certificate, clear Require CA signed certificate.

  4. Click Save.
  5. Click General settings, scroll to Routing, and click Configure:
    routing.png
  6. Enter a unique name to identify the setting, and select all of the check boxes under Messages to affect:
    messages_to_affect.png
  7. Scroll to Also deliver to, click Add more recipients, and click Add.
  8. Under Recipients, select Advanced from the drop-down menu.
  9. Select Change route and Barracuda Message Archiver.
  10. Clear Do not deliver spam to this recipient and select Suppress bounces from this recipient.
  11. Click Save, and click Add Setting.
  12. Click Save:
    final.png
Last updated on