diff --git a/access.lua b/access.lua
index 0452e85..bd1b7e4 100644
--- a/access.lua
+++ b/access.lua
@@ -70,6 +70,8 @@ local function check_domain(email, whitelist_failed)
       end
       return ngx.exit(ngx.HTTP_FORBIDDEN)
     end
+  elseif whitelist_failed then
+    return ngx.exit(ngx.HTTP_FORBIDDEN)
   end
 end