Preventing Untrusted Users from Triggering Inbound Actions

wdookie
Mega Contributor

I am looking to prevent untrusted user from triggering inbound actions to create tickets.   I have followed:

Inbound Email Actions - ServiceNow Wiki

but still no luck.

Properties have been set appropriately:

find_real_file.png

Trusted domains when creating new users from incoming email (Ignore email from untrusted domains unless from an existing user; use * for all domains) set to mycompany.com

System Property set to false:

find_real_file.png

Guest User disabled and locked out:

find_real_file.png

But once a send an inbound email from a non-trusted domain account, sure enough I see the Incident created, with the Caller set as Guest!

On Helsinki right now, is there anything that I am misssing????

1 ACCEPTED SOLUTION

wdookie
Mega Contributor

Well folks,



Thanks for all the help on this.   To close the loop on this topic, after speaking with support, this is a known issue within Helsinki.   It will be resolved in the next release, Istanbul.  



Thanks again for the assistance and troubleshoot, I appreciate your time!



Wayne


View solution in original post

12 REPLIES 12

Michael Ritchie
ServiceNow Employee
ServiceNow Employee

You can try Email Filters:


Email Filters - ServiceNow Wiki


andrew_irwin
Kilo Expert

Did you provide your trusted domain(s) list?


Hi Andrew,



Yes I did:



find_real_file.png


jose_valle
ServiceNow Employee
ServiceNow Employee

Hi Wayne,



On the received email, does it show the user id field as a reference to an existing user or does it just show the email address that the email came from? If it is a reference to a user record, which user record is it?



-Jose