Block emails from domains

[tpritch]

Hello,

We'd like to block emails from all but a few domains. This would not be for user creation but rather to simply stop processing the email when it's received.

Here is a straight forward example: When our instance receives an email from someone@mycompany.com the system generates an incident ticket. However if the email comes from someone@LinkedIn.com (or someone@ww.gety0urgr00veback.com) our instance ignores the email.

I've poked around and found some promising leads that ended up not fulfilling the requirement 100% and haven't found a thread completely dedicated to this so I thought I'd ask.

Does anyone out here have experience with this?

Thanks.

[Robert Beeman]

Have you tried using Email Filters? We have used them with very good results.

Email Filters - ServiceNow Wiki

[tpritch]

I suppose I could use the Ignore sender record and include an "and Header does not contain" followed by the domain name. Is that how you accomplished excluding all but select domains?

[Robert Beeman]

Hi Tom,

I think I misunderstood your question originally. The Email Filters are good if you want a black list, but (after re-reading your post) it sounds like you actually want to white list your own domain(s) and ignore everything else.

I think Jessica is on the right path. We do something similar for a couple of our inbound actions. In the condition field of your inbound action you could put something like this:

email.from.toLowerCase().indexOf('@mycompany.com') > -1

Then the inbound action would create incidents for email addresses that match your domain, but will ignore everything else.

You could add OR operators if you want to have additional domains:

email.from.toLowerCase().indexOf('@mycompany1.com') > -1 || email.from.toLowerCase().indexOf('@mycompany2.com') > -1

If you have a large list of domains to white list, then you might want to consider Mike's solution.

[tpritch]

Thanks Robert. If we go that route, would there be a need for an Action script as well?