# Permitir a criação de tópicos por e-mail de entrega direta no torna meu fórum vulnerável a spammers **URL:** \ **Category:** Product Support\ **Created:** [22 Maio , 2019 15:51 UTC](https://meta.discourse.org/t/allowing-topic-creation-through-direct-delivery-email-in-makes-my-forum-vulnerable-to-spammers/118421 "2019-05-22T15:51:50Z")\ **Posts on this page:** 1\ **Showing post:** 7
**Author:** ![mpalmer](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/mpalmer/32/45740_2.png) [@mpalmer](https://meta.discourse.org/u/mpalmer)\ **Post date:** [24 Maio , 2019 01:09 UTC](https://meta.discourse.org/t/allowing-topic-creation-through-direct-delivery-email-in-makes-my-forum-vulnerable-to-spammers/118421/7 "2019-05-24T01:09:17Z")
You can ban SMTP sender domains with at SMTP time with `sender_access` rules, and do pretty much anything you like with mail via header checks. Given how heavily abused `qq.com` is, that’ll probably go a long way to solving your immediate problem. Discourse with incoming e-mail enabled is really very similar to an old-school mailing list platform, with a better web interface, and so the vast majority of the same abuse controls work quite adequately. These include things like not allowing unregistered users to post via e-mail – realistically, there are no mailing lists that allow such behaviour, because it invites exactly the sort of misadventure you’re seeing here. The one thing that Discourse is lacking in this respect is subscribe (or, in this case, forum sign up) via e-mail – sending an e-mail to `-subscribe@example.com` gets you a response back with a confirmation code or URL, etc. I doubt that’s going to holding back thousands of potential contributors from being involved in your forum, though… --- _[View the full topic](https://meta.discourse.org/t/allowing-topic-creation-through-direct-delivery-email-in-makes-my-forum-vulnerable-to-spammers/118421)._