# Spam Filter / Whitelist suggestions

**URL:** https://meta.discourse.org/t/spam-filter-whitelist-suggestions/51467
**Category:** Self-hosting
**Tags:** hosting
**Created:** [12. Oktober 2016 um 20:34 UTC](https://meta.discourse.org/t/spam-filter-whitelist-suggestions/51467 "2016-10-12T20:34:58Z")
**Posts on this page:** 4
**Page:** 1

<div class="post-metadata">

### Author: ![VNVJeep](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/vnvjeep/32/61887_2.png) [@VNVJeep](https://meta.discourse.org/u/VNVJeep)
#### Post date: [12. Oktober 2016 um 20:34 UTC](https://meta.discourse.org/t/spam-filter-whitelist-suggestions/51467/1 "2016-10-12T20:34:58Z")

</div>

We’re a cloud subscriber, and about to go live. I wanted to send some warning to all of our new, incoming users on suggestions for preventing [discourse.org](http://discourse.org) emails getting stuck in their spam filters.

Does anyone have a list/block of IPs that you would suggest that need to be added to people’s whitelist? I’m assuming everything comes from \*@discourse.org, but also noticed some mailservers are using [discourse.com](http://discourse.com)?

Thanks!

---

<div class="post-metadata">

### Author: ![elijah](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/elijah/32/104055_2.png) [@elijah](https://meta.discourse.org/u/elijah)
#### Post date: [13. Oktober 2016 um 00:51 UTC](https://meta.discourse.org/t/spam-filter-whitelist-suggestions/51467/2 "2016-10-13T00:51:30Z")

</div>

I don’t have any special filtering for Discourse, but an examination of the headers shows the mail comes from \*.discourse.org hosts (eg `mx-out-04a.sjc1.discourse.org`) with from addresses at `discoursemail.com`

---

<div class="post-metadata">

### Author: ![VNVJeep](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/vnvjeep/32/61887_2.png) [@VNVJeep](https://meta.discourse.org/u/VNVJeep)
#### Post date: [14. Oktober 2016 um 13:15 UTC](https://meta.discourse.org/t/spam-filter-whitelist-suggestions/51467/3 "2016-10-14T13:15:40Z")

</div>

Thanks for that… but would you happen to know what range of IPs that the cloud version of Discourse may be using? That would definitely help.

For instance, I received an email, headers indicating: [mx-out-04b.sjc1.discourse.org](http://mx-out-04b.sjc1.discourse.org) (64.71.168.241). Is that it, or is there a block of redundant mailservers that Discourse uses that we can make sure make it on our whitelists?

---

<div class="post-metadata">

### Author: ![mpalmer](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/mpalmer/32/45740_2.png) [@mpalmer](https://meta.discourse.org/u/mpalmer)
#### Post date: [15. Oktober 2016 um 04:46 UTC](https://meta.discourse.org/t/spam-filter-whitelist-suggestions/51467/4 "2016-10-15T04:46:29Z")

</div>

All e-mail will have an envelope sender domain of `discoursemail.com`, and the SPF record for `discoursemail.com` is our authoritative list of sender addresses.

We also sign with DKIM and have a DMARC record published with rejection specified if checks fail, so whitelisting `discoursemail.com` ought to be sufficient.
