Allowing topic creation through direct delivery email in makes my forum vulnerable to spammers

[tobiaseigen]

@schungx

The way i eventually solved this problem is to turn on post approval for incoming emails. This is done by setting the approval level limit to 1 instead of 0.

So all posts from email gets added to the pending list. Then you can delete those users and blacklist their ip.

Cons of this is that a post will be created for each. This will inflate your db.

Thanks, Stephen!

I would be happy to do what you describe but it doesn’t seem to have any effect on messages to groups, which is the only thing I allow topic creation through email for. See screenshot below - perhaps the “email in min trust” could be adjusted to also require minimum trust level to send messages to groups?

I’m also finding that my system is now still sending emails to the email addresses on the blacklist.. really it should ignore them as I wrote up separately in https://meta.discourse.org/t/feature-request-do-not-accept-or-send-email-to-blocked-users-or-domains/118670?u=tobiaseigen.