# Bad CSRF with mailgun replies

**URL:** <https://meta.discourse.org/t/bad-csrf-with-mailgun-replies/72029>\
**Category:** Support\
**Created:** [October 13, 2017, 7:48pm UTC](https://meta.discourse.org/t/bad-csrf-with-mailgun-replies/72029 "2017-10-13T19:48:09Z")\
**Posts on this page:** 1\
**Showing post:** 16

<div class="post-metadata">

**Author:** ![pfaffman](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/pfaffman/32/120154_2.png) [@pfaffman](https://meta.discourse.org/u/pfaffman)\
**Post date:** [October 15, 2017, 6:41pm UTC](https://meta.discourse.org/t/bad-csrf-with-mailgun-replies/72029/16 "2017-10-15T18:41:09Z")

</div>

> [@DeanMarkTaylor](#):
>
> I don’t believe Mailgun’s mail forwarding will work as-is with Discourse. It doesn’t pass the email data in the right way and there doesn’t appear to be a way to change that on either end Mailgun nor Discourse.

I’m using mailgun to forward discourse+%{reply\_key}@literatecomputing.com to a gmail inbox that is retrieved via pop3 and I believe that it’s working just fine.

---

_[View the full topic](https://meta.discourse.org/t/bad-csrf-with-mailgun-replies/72029)._