Knowledge Base: Comprehensive Guide to Email Forwarding Setup

Email forwarding automatically routes incoming messages from one email address to another. Whether you are redirecting individual emails, consolidating multiple accounts into a single inbox, or configuring organization-wide mail routing, this guide covers step-by-step setup instructions for major email providers and administrative environments.
 

1. Overview & Key Terminology

Before configuring email forwarding, it is helpful to understand the primary deployment methods:

• Single-Address (User-Level) Forwarding: Set up within an individual user's account settings. All incoming mail (or filtered subsets) is forwarded to a designated destination address.
• Domain-Level / Administrative Forwarding: Configured by system administrators at the mail server, DNS, or workspace level (e.g., Google Workspace, Microsoft 365).
• Implicit (Filter-Based) Forwarding: Forwarding triggered only when incoming messages match specific criteria, such as subject lines, sender domains, or keywords.
• Forwarding vs. Alias: An alias is an alternate address pointing directly to the same inbox (e.g., [email protected] delivering to [email protected]). Forwarding transmits a copy of the message across separate mailboxes or external systems.

2. User-Level Forwarding Setup

Gmail (Personal Accounts)

1. Open Gmail on a desktop browser and click the Settings (gear icon) in the top-right corner.
2. Select See all settings.
3. Go to the Forwarding and POP/IMAP tab.
4. In the "Forwarding" section, click Add a forwarding address.
5. Enter the destination email address and click Next → Proceed → OK.
6. A confirmation link will be sent to the destination email address. Open that inbox, click the verification link, or copy the confirmation code back into Gmail settings.
7. Return to the Forwarding and POP/IMAP tab in Gmail, select Forward a copy of incoming mail to, and choose your preferred action for the primary copy (e.g., keep Gmail's copy in the Inbox, mark as read, or archive).
8. Scroll to the bottom and click Save Changes.

Verification: Send a test email from a third, non-participating email address to the source address and verify that it arrives at the destination inbox.

Outlook on the Web / Microsoft 365 (User Settings)

1. Sign in to Outlook on the Web.
2. Click the Settings (gear icon) in the top right.
3. Select Mail from the left panel, then select Forwarding.
4. Check the box to Enable forwarding.
5. Enter the destination email address.
6. (Optional) Check Keep a copy of forwarded messages if you want messages to remain in the original Outlook inbox.
7. Click Save.

Verification: Send a test email to your Outlook address and confirm receipt in the target inbox.

Apple iCloud Mail

1. Sign in to iCloud.com and open Mail.
2. Click the Settings (gear icon) at the top of the Mailbox list and choose Preferences.
3. In the General tab, check Forward my email to.
4. Type the forwarding email address in the field provided.
5. (Optional) Select Delete messages after forwarding if you do not wish to retain copies in iCloud.
6. Click Done.

3. Administrator-Level Forwarding Setup

Google Workspace (Admin Console)

Method A: Setting User Forwarding from Admin Console

1. Log in to the Google Admin Console (admin.google.com).
2. Navigate to Directory → Users.
3. Select the target user account.
4. Expand the User information section and select Email routing or edit the user's mail settings to add forwarders.

Method B: Routing Rules (Advanced)

1. Go to Apps → Google Workspace → Gmail → Routing.
2. Scroll to Routing and click Configure or Add another rule.
3. Enter a rule name (e.g., "Inbound Sales Auto-Forward").
4. Under Messages to affect, select Inbound.
5. Under Also deliver to, check the box and specify recipient addresses.
6. Click Save.

Microsoft 365 Exchange Admin Center (EAC)

1. Log in to the Exchange Admin Center (admin.exchange.microsoft.com).
2. Go to Recipients → Mailboxes.
3. Click the mailbox you wish to forward.
4. In the flyout pane, select the Mailbox tab, then click Manage email forwarding under Email forwarding.
5. Check Forward all emails sent to this mailbox.
6. Enter the internal or external forwarding address.
7. Check or uncheck Keep a copy of forwarded email in this mailbox based on your policy.
8. Click Save.

4. Advanced: Filter-Based Forwarding

If you only need specific types of emails forwarded (e.g., invoices, support tickets, or automated alerts), set up conditional rules rather than global forwarding.

5. Deliverability & Authentication Protocols (SPF, DKIM, DMARC)

When email forwarding is enabled—especially across external domains—forwarded messages may fail standard authentication checks if security mechanisms are not configured correctly.

[ Sender Domain ] ---> ( Original Sent Message ) ---> [ Source Mailbox ]
                                                             |
                                                   ( Auto-Forwarded )
                                                             |
                                                             v
                                                   [ Destination Mailbox ]
                                          ( Evaluates SPF, DKIM, & DMARC )

Mitigation Strategies

• DKIM (DomainKeys Identified Mail): Ensure DKIM signing is enabled on the originating sender domain. DKIM signatures survive forwarding because they are tied to the message content rather than the transmitting server's IP address.
• ARC (Authenticated Received Chain): Modern mail servers (Google Workspace, Microsoft 365) use ARC to preserve original authentication results along the intermediate hop.
• SRS (Sender Rewriting Scheme): SRS rewrites the envelope sender address (MAIL FROM) during forwarding so that the message aligns with the forwarding domain's SPF record. Ensure SRS is active if operating custom mail servers (Postfix, Exim, cPanel).

6. Troubleshooting Common Forwarding Issues

7. Security Best Practices

1. Audit External Forwarding: Routinely review administrative audit logs for unauthorized external forwarders, which can be an indicator of compromise (IOC) during account takeovers.
2. Restrict Automatic External Forwarding: Enforce organizational policies blocking user-level auto-forwarding to non-corporate domains unless explicitly whitelisted.
3. Use Shared Mailboxes for Teams: Instead of forwarding personal or department emails to multiple staff members, utilize Shared Mailboxes (M365) or Google Groups to improve oversight and security.