update reply-must-use-personal-email template

email_handler.py

@@ -1011,6 +1011,9 @@ def handle_unknown_mailbox(
         contact,
     )
 
+    authorize_address_link = (
+        f"{URL}/dashboard/mailbox/{alias.mailbox_id}/#authorized-address"
+    )
     send_email_with_rate_control(
         user,
         ALERT_REVERSE_ALIAS_UNKNOWN_MAILBOX,
@@ -1021,12 +1024,14 @@ def handle_unknown_mailbox(
             name=user.name,
             alias=alias,
             sender=envelope.mail_from,
+            authorize_address_link=authorize_address_link,
         ),
         render(
             "transactional/reply-must-use-personal-email.html",
             name=user.name,
             alias=alias,
             sender=envelope.mail_from,
+            authorize_address_link=authorize_address_link,
         ),
     )
 

templates/emails/transactional/reply-must-use-personal-email.html

@@ -15,16 +15,19 @@
   {% endcall %}
 
   {% call text() %}
-    This is to protect against "email spoofing", i.e. someone else sending emails from your mailbox. <br>
-    Indeed only you can send emails on behalf of your alias. <br>
-    If you think this is a wrong alert, please let us know by replying to this email.
+    This is to protect against <b>email spoofing</b>, i.e. someone else sending emails from your mailbox. <br>
+    If {{ sender }} can indeed send emails from your alias, you can add it to the allow list:
   {% endcall %}
 
+  {{ render_button("Allow " + sender, authorize_address_link) }}
+
   {% call text() %}
     Thanks, <br/>
     SimpleLogin Team.
   {% endcall %}
 
+  {{ raw_url(authorize_address_link) }}
+
 {% endblock %}
 
 

templates/emails/transactional/reply-must-use-personal-email.txt

@@ -9,7 +9,7 @@ Please note that sending from this alias only works from one of these mailboxes:
 {% endfor %}
 
 This is to protect against "email spoofing", i.e. someone else sending emails from your mailbox.
-Indeed only you can send emails on behalf of your alias.
+If {{ sender }} can indeed send emails from your alias, you can add it to the allow list on {{authorize_address_link}}
 If you think this is a wrong alert, please let us know by replying to this email.