Maybe we could have a list of allowed senders or domains and allow only emails from those in the list.