# Bug? White listed spam host domains failing

**URL:** https://meta.discourse.org/t/bug-white-listed-spam-host-domains-failing/27718
**Category:** Support
**Created:** [17.Апрель.2015 22:13:13 UTC](https://meta.discourse.org/t/bug-white-listed-spam-host-domains-failing/27718 "2015-04-17T22:13:13Z")
**Posts on this page:** 10
**Page:** 1

<div class="post-metadata">

### Author: ![lisajill](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/lisajill/32/32289_2.png) [@lisajill](https://meta.discourse.org/u/lisajill)
#### Post date: [17.Апрель.2015 22:13:13 UTC](https://meta.discourse.org/t/bug-white-listed-spam-host-domains-failing/27718/1 "2015-04-17T22:13:13Z")

</div>

Hi all,

We have a limit of 4 links in a post for a new user. We also have a few whitelisted domains:

 ![](https://global.discourse-cdn.com/meta/original/3X/b/4/b458c9c3004f82e5791aedd6a5d65551ea9f5d73.png) 

However, despite that list - which hasn’t changed in a few days, we just received system notification for a moderation action:

 ![](https://global.discourse-cdn.com/meta/original/3X/5/d/5d5d13f54fcba45c4eff4769a4bb55f5e48ee704.png) 

So I have a few questions:

1. Is this a bug?
2. Does wildcarding work? If not - huge feature request from here; we have many subdomains.
3. Why did the system block this and include “[discuss.newrelic.com](http://discuss.newrelic.com)” in the list when it is whitelisted?  
Thank you!

---

<div class="post-metadata">

### Author: ![codinghorror](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/codinghorror/32/110067_2.png) [@codinghorror](https://meta.discourse.org/u/codinghorror)
#### Post date: [18.Апрель.2015 01:32:50 UTC](https://meta.discourse.org/t/bug-white-listed-spam-host-domains-failing/27718/2 "2015-04-18T01:32:50Z")

</div>

There is no wildcard support here. However, it was my understanding that listing the domain automatically allows all subdomains too.

I am also pretty sure that the site itself is not the source of spam, e.g. you do not need to have [discuss.newrelic.com](http://discuss.newrelic.com) in there. Self links are always allowed…

In this case the other domains are likely the issue, eg [coreos.com](http://coreos.com) and [deis.io](http://deis.io)

---

<div class="post-metadata">

### Author: ![riking](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/riking/32/170938_2.png) [@riking](https://meta.discourse.org/u/riking)
#### Post date: [18.Апрель.2015 01:50:28 UTC](https://meta.discourse.org/t/bug-white-listed-spam-host-domains-failing/27718/3 "2015-04-18T01:50:28Z")

</div>

> [@codinghorror](#):
>
> I am also pretty sure that the site itself is not the source of spam, e.g. you do not need to have [discuss.newrelic.com](http://discuss.newrelic.com) in there. Self links are always allowed…

Yep, the only entry actually doing anything there is `github.com`.

---

<div class="post-metadata">

### Author: ![lisajill](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/lisajill/32/32289_2.png) [@lisajill](https://meta.discourse.org/u/lisajill)
#### Post date: [20.Апрель.2015 14:07:19 UTC](https://meta.discourse.org/t/bug-white-listed-spam-host-domains-failing/27718/4 "2015-04-20T14:07:19Z")

</div>

I find it confusing that it lists domains that are allowed; I did not find the error clear in that it was blocking only due to the other domains. Specifically:

The user is still able to create new posts that do not link to [docs.newrelic.com](http://docs.newrelic.com), [coreos.com](http://coreos.com), [discuss.newrelic.com](http://discuss.newrelic.com).

I find that I get messages from our mods on this as well. Perhaps a review of the verbiage for this one could make it more clear?

---

<div class="post-metadata">

### Author: ![Mittineague](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/mittineague/32/114259_2.png) [@Mittineague](https://meta.discourse.org/u/Mittineague)
#### Post date: [20.Апрель.2015 14:11:52 UTC](https://meta.discourse.org/t/bug-white-listed-spam-host-domains-failing/27718/5 "2015-04-20T14:11:52Z")

</div>

> [@lisajill](#):
>
> I find that I get messages from our mods on this as well. Perhaps a review of the verbiage for this one could make it more clear?

Inserting “external” ?  
i.e.  
“A list of external domains excluded …”

---

<div class="post-metadata">

### Author: ![lisajill](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/lisajill/32/32289_2.png) [@lisajill](https://meta.discourse.org/u/lisajill)
#### Post date: [20.Апрель.2015 17:18:18 UTC](https://meta.discourse.org/t/bug-white-listed-spam-host-domains-failing/27718/6 "2015-04-20T17:18:18Z")

</div>

That would work so long as the ones that are whitelisted don’t appear. What threw me here was seeing domains that **are** in the Whitelist listed as ‘blocked’ in the private message.

In the error I quoted the PM should have listed only ‘[coreos.com](http://coreos.com)’ and [deis.io](http://deis.io)’ - not our domains.

Make sense?

---

<div class="post-metadata">

### Author: ![codinghorror](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/codinghorror/32/110067_2.png) [@codinghorror](https://meta.discourse.org/u/codinghorror)
#### Post date: [21.Апрель.2015 04:35:47 UTC](https://meta.discourse.org/t/bug-white-listed-spam-host-domains-failing/27718/7 "2015-04-21T04:35:47Z")

</div>

What was listed in the message should have been the domains the user tried to post over and over in their posts – it is not listing anything except what the user entered.

---

<div class="post-metadata">

### Author: ![lisajill](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/lisajill/32/32289_2.png) [@lisajill](https://meta.discourse.org/u/lisajill)
#### Post date: [21.Апрель.2015 16:37:11 UTC](https://meta.discourse.org/t/bug-white-listed-spam-host-domains-failing/27718/8 "2015-04-21T16:37:11Z")

</div>

I understand that now; I don’t understand that from the error though.

---

<div class="post-metadata">

### Author: ![jesus2099](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/jesus2099/32/119720_2.png) [@jesus2099](https://meta.discourse.org/u/jesus2099)
#### Post date: [01.Апрель.2016 09:36:42 UTC](https://meta.discourse.org/t/bug-white-listed-spam-host-domains-failing/27718/9 "2016-04-01T09:36:42Z")

</div>

> [@codinghorror](#):
>
> What was listed in the message should have been the domains the user tried to post over and over in their posts – it is not listing anything except what the user entered.

Hello, Just to be sure I have well understood. Will the following setting allow anything coming from [HTTP://anything.newrelic.com](HTTP://anything.newrelic.com), [HTTPS://anything.newrelic.com](HTTPS://anything.newrelic.com), [HTTP://newrelic.com](HTTP://newrelic.com), and [HTTPS://newrelic.com](HTTPS://newrelic.com) ?

 ![newrelic.com github.com](https://global.discourse-cdn.com/meta/original/3X/2/f/2f3ca16df5cdf7e9ca3be0f7f635d3b499853458.png)

---

<div class="post-metadata">

### Author: ![JammyDodger](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/jammydodger/32/254611_2.png) [@JammyDodger](https://meta.discourse.org/u/JammyDodger)
#### Post date: [08.Июнь.2024 12:45:48 UTC](https://meta.discourse.org/t/bug-white-listed-spam-host-domains-failing/27718/10 "2024-06-08T12:45:48Z")

</div>

Эта тема была автоматически закрыта через 3339 дней. Новые ответы больше не принимаются.
