# Mail-Receiver - כתובת דואר אלקטרוני ציבורית, האם צריך לדאוג לספאם?

**URL:** https://meta.discourse.org/t/mail-receiver-public-email-address-do-i-need-to-worry-about-spam/322643
**Category:** Support
**Tags:** mail-receiver
**Created:** [21 באוגוסט,‏ 2024,‏ 7:13am UTC](https://meta.discourse.org/t/mail-receiver-public-email-address-do-i-need-to-worry-about-spam/322643 "2024-08-21T07:13:48Z")
**Posts on this page:** 5
**Page:** 1

<div class="post-metadata">

### Author: ![tkforbes](https://avatars.discourse-cdn.com/v4/letter/t/e95f7d/32.png) [@tkforbes](https://meta.discourse.org/u/tkforbes)
#### Post date: [21 באוגוסט,‏ 2024,‏ 7:13am UTC](https://meta.discourse.org/t/mail-receiver-public-email-address-do-i-need-to-worry-about-spam/322643/1 "2024-08-21T07:13:48Z")

</div>

## Description of regular, non-Discourse flow.

Presently (completely independent of Discourse), I use a published email address as an alias that sends an inquiry email message to a number of email addresses. The group rely on their email providers’ Spam detection. Most of them use Gmail.

People work independently on answering inquiries. It sometimes leads to duplicated effort or other problems.

## How things might change using my Discourse.

My Discourse instance is completely private and requires members to login. I’ve begun to use the Mail-Receiver plugin so members can reply to topics by email and it seems to work well.

I’ve been reading about and testing the related Groups option that accepts incoming email to a custom address. I’m considering that for an inquiries email address. I can’t see how Mail-Receiver would adequately detect and prevent Spam.

I’ve also read that the Discourse team itself is using incoming email as a Support feature, so perhaps Spam isn’t getting in their way.

---

<div class="post-metadata">

### Author: ![Architect](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/architect/32/520575_2.png) [@Architect](https://meta.discourse.org/u/Architect)
#### Post date: [21 באוגוסט,‏ 2024,‏ 1:48pm UTC](https://meta.discourse.org/t/mail-receiver-public-email-address-do-i-need-to-worry-about-spam/322643/2 "2024-08-21T13:48:16Z")

</div>

> [@tkforbes](#):
>
> I can’t see how Mail-Receiver would adequately detect and prevent Spam.

There is a guide here:

> [@Filter known-bad sender domains from your mail-receiver](https://meta.discourse.org/t/filter-known-bad-sender-domains-from-your-mail-receiver/118760):
>
> If you [run your own incoming mail](https://meta.discourse.org/t/straightforward-direct-delivery-incoming-mail/49487), and you find that you’re getting more abusive mail than you’re willing to tolerate, this guide is for you! It’ll show you how to configure your mail-receiver container to block e-mail from any domain on a list you create, and how you can add and remove domains from that list over time. Setup Using the [custom Postfix configuration guide](https://meta.discourse.org/t/customising-direct-delivery-postfix-configuration/118759), configure your mail-receiver container to have an /etc/postfix/shared volume (see the “Addendum” section at the bottom). …

I haven’t had issues with spam e-mails sent to mail-receiver address, but there is a risk that can happen if you have the address listed in public registries those can start to get spam/marketing e-mail.

---

<div class="post-metadata">

### Author: ![tkforbes](https://avatars.discourse-cdn.com/v4/letter/t/e95f7d/32.png) [@tkforbes](https://meta.discourse.org/u/tkforbes)
#### Post date: [21 באוגוסט,‏ 2024,‏ 2:21pm UTC](https://meta.discourse.org/t/mail-receiver-public-email-address-do-i-need-to-worry-about-spam/322643/3 "2024-08-21T14:21:49Z")

</div>

Yeah, I saw that guide. However, maintaining a list of banned domains isn’t an option. It’s impossible to stay ahead of the spammers - we get Spam daily to the addresses that are published on our web site, but at least most of those first go through detection services that we do not maintain i.e. Gmail, miab …

I might get brave enough to try using a Discourse Group email address although I think I can predict that we won’t be able to live with the result. We could always go back to our original process, but I really liked the idea of being able to distribute the work in a natural manner and which preserves the communications.

---

<div class="post-metadata">

### Author: ![Architect](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/architect/32/520575_2.png) [@Architect](https://meta.discourse.org/u/Architect)
#### Post date: [21 באוגוסט,‏ 2024,‏ 8:13pm UTC](https://meta.discourse.org/t/mail-receiver-public-email-address-do-i-need-to-worry-about-spam/322643/4 "2024-08-21T20:13:57Z")

</div>

> [@tkforbes](#):
>
> Spam daily to the addresses that are published on our web site

To avoid that probably protecting address from web crawlers if possible could help. I’m not certain how that is done, but have seen that implemented to have a captcha or just “click to show address” option could prevent crawler scrapping of address.

Is simple to change address if spam gets too bad.

When there is e-mail in will create staged user, with spam you can immediately block both e-mail and I.P. address of those.

---

<div class="post-metadata">

### Author: ![mpalmer](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/mpalmer/32/45740_2.png) [@mpalmer](https://meta.discourse.org/u/mpalmer)
#### Post date: [21 באוגוסט,‏ 2024,‏ 10:19pm UTC](https://meta.discourse.org/t/mail-receiver-public-email-address-do-i-need-to-worry-about-spam/322643/5 "2024-08-21T22:19:56Z")

</div>

I agree with you that blocking domains isn’t a solid general-purpose anti-spam measure – it’s more for whacking the occasional “heavy hitter”.

It is entirely possible, though, to customise `mail-receiver` to do whatever additional pre-delivery filtering you need, such as running incoming messages through SpamAssassin or similar, since you have the entire Power of Postfix at your command. I’ve been considering building a “mail receiver 9001” that incorporates these sorts of things out of the box, but it’d need to be a sponsored effort, as I don’t personally have a need for it at present.
