# White-listing for incoming group email - "Auto-Submitted: auto-generated"

**URL:** https://meta.discourse.org/t/white-listing-for-incoming-group-email-auto-submitted-auto-generated/42354
**Category:** Feature
**Created:** [April 10, 2016, 10:28pm UTC](https://meta.discourse.org/t/white-listing-for-incoming-group-email-auto-submitted-auto-generated/42354 "2016-04-10T22:28:06Z")
**Posts on this page:** 6
**Page:** 1

<div class="post-metadata">

### Author: ![DeanMarkTaylor](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/deanmarktaylor/32/102462_2.png) [@DeanMarkTaylor](https://meta.discourse.org/u/DeanMarkTaylor)
#### Post date: [April 10, 2016, 10:28pm UTC](https://meta.discourse.org/t/white-listing-for-incoming-group-email-auto-submitted-auto-generated/42354/1 "2016-04-10T22:28:06Z")

</div>

I’m toying with the idea of managing PayPal / Shop orders to come though to a [“group inbox”](https://meta.discourse.org/t/setup-incoming-emails-e-mail/42026) so several users could manage incoming orders.

Currently this is not possible because of the recent positive additions for the detection of emails not sent my humans (with email headers like `Auto-Submitted: auto-generated`).

Perhaps there would be a case for white-listing domains and specific email addresses that would be allowed to by-pass these recent detections?

Doesn’t anybody else see a use-case for themselves?

---

<div class="post-metadata">

### Author: ![sam](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/sam/32/102149_2.png) [@sam](https://meta.discourse.org/u/sam)
#### Post date: [April 10, 2016, 11:38pm UTC](https://meta.discourse.org/t/white-listing-for-incoming-group-email-auto-submitted-auto-generated/42354/2 "2016-04-10T23:38:28Z")

</div>

Yes I have seen this pop up at least once before for a potential customer.

Blackberry app on iPhone adds this header for some crazy reason.

Totally support some sort of mechanism for either whitelisting or blacklisting.

---

<div class="post-metadata">

### Author: ![zogstrip](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/zogstrip/32/512781_2.png) [@zogstrip](https://meta.discourse.org/u/zogstrip)
#### Post date: [April 11, 2016, 8:48pm UTC](https://meta.discourse.org/t/white-listing-for-incoming-group-email-auto-submitted-auto-generated/42354/3 "2016-04-11T20:48:30Z")

</div>

Ok, let’s start with a basic whitelist that will only match email addresses 📧

[https://github.com/discourse/discourse/commit/56089c48566f09789e3044f8739452a976bf0a9f](https://github.com/discourse/discourse/commit/56089c48566f09789e3044f8739452a976bf0a9f)

---

<div class="post-metadata">

### Author: ![downey](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/downey/32/166878_2.png) [@downey](https://meta.discourse.org/u/downey)
#### Post date: [November 14, 2017, 11:05pm UTC](https://meta.discourse.org/t/white-listing-for-incoming-group-email-auto-submitted-auto-generated/42354/4 "2017-11-14T23:05:52Z")

</div>

Hi @zogstrip @DeanMarkTaylor (et al). Trying to understand this a bit more. Is this whitelist value matched against the “From” address (sender), “To” address (in the example above, the “group inbox”), or all of the above?

---

<div class="post-metadata">

### Author: ![gerhard](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/gerhard/32/119479_2.png) [@gerhard](https://meta.discourse.org/u/gerhard)
#### Post date: [November 15, 2017, 12:07am UTC](https://meta.discourse.org/t/white-listing-for-incoming-group-email-auto-submitted-auto-generated/42354/5 "2017-11-15T00:07:10Z")

</div>

Email addresses on the whitelist are matched against the “From” address.

> <https://github.com/discourse/discourse/blob/main/lib/email/receiver.rb#L207-L207>

---

<div class="post-metadata">

### Author: ![downey](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/downey/32/166878_2.png) [@downey](https://meta.discourse.org/u/downey)
#### Post date: [November 16, 2017, 4:53pm UTC](https://meta.discourse.org/t/white-listing-for-incoming-group-email-auto-submitted-auto-generated/42354/6 "2017-11-16T16:53:49Z")

</div>

Eck, that’s what I was afraid of. Thanks.
