White-listing for incoming group email - "Auto-Submitted: auto-generated"

I’m toying with the idea of managing PayPal / Shop orders to come though to a “group inbox” so several users could manage incoming orders.

Currently this is not possible because of the recent positive additions for the detection of emails not sent my humans (with email headers like Auto-Submitted: auto-generated).

Perhaps there would be a case for white-listing domains and specific email addresses that would be allowed to by-pass these recent detections?

Doesn’t anybody else see a use-case for themselves?

3 Likes

Yes I have seen this pop up at least once before for a potential customer.

Blackberry app on iPhone adds this header for some crazy reason.

Totally support some sort of mechanism for either whitelisting or blacklisting.

1 Like

Ok, let’s start with a basic whitelist that will only match email addresses :e-mail:

https://github.com/discourse/discourse/commit/56089c48566f09789e3044f8739452a976bf0a9f

5 Likes

Hi @zogstrip @DeanMarkTaylor (et al). Trying to understand this a bit more. Is this whitelist value matched against the “From” address (sender), “To” address (in the example above, the “group inbox”), or all of the above?

Email addresses on the whitelist are matched against the “From” address.

https://github.com/discourse/discourse/blob/master/lib/email/receiver.rb#L207-L207

3 Likes

Eck, that’s what I was afraid of. Thanks.