Add simple whitelist to allow misconfigured domains without spam header