Details
Task
Blocker
Description
Emails addressed to a department, that are from the same department email address should be silently discarded.
The Issue
A spammer sends an email to support@domain.com, and spoofs the from address as support@domain.com. The system opens a ticket and sends a reply back to support@domain.com. This creates a loop.
While we have loop detection in place, it's not very effective when checking mail via POP or IMAP, and even with it, a number of tickets are created before it kicks in.
I can't think of any legitimate reason a support department should receive an email, with the support departments address as the sender. So, we should simply silently discard any such messages.
This affects new tickets, and only those that don't match a client. So if a client happens to have the same email as the support department, then the ticket will come through. Admin's fault for using the same email.