Still no way to limit messages sent to a group from external?

[alexgrutza]

Is there still no way to have a google group (say for alerts) that has to be set to "allow posting from anyone on the web" because of external services (like GOOGLE), to be able to limit what domains actually can post to the group?

We just switched over our SEG and our IT alert group just got some fresh phishing emails from wellsfargo of all places. We've yet to really tighten down on policies within the SEG I was wondering if groups ever got updated.

[icrew · Accepted solution]

Google (as far as I can tell at least) hasn't made any updates to Groups since they did the (really minor) Material Design UI refresh maybe 6+ years ago.

Specifically, there is still no way to manage the "who can send to group" list.

A workaround might be to set it to "anyone on the web can send" but also set it to have all messages moderated. Then, as emails come in from the various "good" senders, you could approve that sender to have all future messages from that sender go through without being held for moderation.

Personally, i think it's pretty clear that they're largely not interested in making further investments in Groups, which is frustrating.....

[alexgrutza]

Interesting route. I may have to moderate for the time being and allow them to always be able to send and then just ignore the other ones, didn't know that was an option.

[Kim_Nilsson]

Most definitely you can! 🙂

You use either routing or compliance to exclude incoming addresses that aren't blocked.

I've been doing that for many years.

[Kim_Nilsson]

I create a rule that requires a specific word to be included in an incoming email, or else it is blocked.

Of course that is a super-long random phrase that will never be used by anyone.

Then I just add a list, or several lists, of incoming addresses that are excluded from that rule.