I have set the following: [52] However, a user’s email reply was rejected as their sending email address didn’t match the account email address. In this case I’d like their email reply to be accepted. Is there anything I can change to ensure email replies are accepted in cases where the sender …

Make sure the enable_staged_users site setting is enabled. For categories, enabling “Accept emails from anonymous users with no accounts” in the category’s settings should work.

Thanks @gerhard . “Enable staged users” was in fact enabled already. In my case, the user has two accounts on the forum, both live. She replied to a notification from the “other” account and it got rejected by Discourse. I’ve noticed also that the wording on the setting is a little ambiguous. “Only…

Was it a reply to a public topic or a group message? The exact error would be interesting too. You can find it in Admin → Emails → Rejected. The second account might not be allowed to reply to the topic.

The reply was to a public forum post [image] gerhard: The exact error would be interesting too We’re sorry, but your email message to [“hitreply+[redacted]@se26.life”] (titled Re: SE26.life [Dining/Drinking] Zigghy Cafe [Now open]) didn’t work.

Disabling that setting isn’t a good idea. Email addresses are always validated. Each reply key is bound to a topic and user. If they do not match, the email gets rejected. There’s only one exception. If the system knows that an email was forwarded to another user, because that other user was in the…

[image] gerhard: In your case, the user needs to send with the correct email address. There’s no way around it. Most email clients should be smart enough to select the right sender address anyway. Thanks for the explanation. I would be comfortable with just the reply key being used to author…

Hi, I have the same problem, a user has two accounts registered, one with her email as @googlemail.com and one as @gmail.com The result is that sometimes her emails get rejected with the error: Your reply was sent from a different email address than the one we expected, so we’re not sure if this…

[image] manuc: I am thinking of adding the alternate domain email as secondary email address on both accounts, or is there a better idea? There are no other safe alternatives. Handling this automatically would definitely lead to security issues.

[image] zogstrip: Handling this automatically would definitely lead to security issues. Isn’t it a security issue for Discourse to trust the email address in the From header, and to use this as part of its validation of incoming emails? I can set the From header to whatever I like.

That’s why we have reply keys :wink:

Reply key / email address check not working? (replies by email)

Support

ChrisBeach (Chris) December 18, 2018, 1:23am 7

Thanks for the explanation.

I would be comfortable with just the reply key being used to authorise the user.

After all, it’s easy to spoof an email address isn’t it?

Topic		Replies	Views
Do not auto-create users when reply by mail Support	2	1607	May 19, 2017
Confused by Error Message From Reply-by-Email Support	26	3344	June 4, 2020
Reply by email - additional addresses Support	28	2618	August 19, 2019
Issue configuring reply by email: 553 5.7.1 Sender address rejected: not owned by user Support	6	12895	June 13, 2019
Difference between "reply by email address" and "alternative reply by email addresses" Support	6	960	June 9, 2022

Reply key / email address check not working? (replies by email)

Related topics