Email notification ‘from’ address

  • Resolved corytrevor

    (@corytrevor)


    1 year, 10 months ago

    Hi

    A client of mine had their SMTP service temporarily blocked as a result of the notification emails sent by this plugin.

    In /inc/Email_Notification.php it has:

    $email_from = $from_name . ' <' . get_option( 'admin_email', $valid_emails[0] ) . '>';

    So if the WordPress admin email is a Gmail address then the from address of the email notification will be from gmail.com which the website email server or connected SMTP server aren’t authorised to send from so DKIM fails as it’s basically spoofing the sending address.

    By default WordPress sends emails from [email protected] rather than the admin email to avoid this type of issue.

Viewing 6 replies - 1 through 6 (of 6 total)
  • Plugin Support Smash Balloon Louis

    (@smashballoonlouis)

    Hi @corytrevor,

    Thank you for bringing this to our attention. I have shared this feedback with our development team so they can investigate changing this or adding an option to change this. If you have any other feedback or questions, please don’t hesitate to let us know.

    Thanks!
    Louis

    Thread Starter corytrevor

    (@corytrevor)

    Hi @smashballoonlouis

    Perfect, thanks for passing that on for the dev team to take a look at. Hopefully they can also update it on the SmashBalloon Instagram feed plugin as it uses the same notification template which causes the same issue.

    Cheers

    Plugin Support Smash Balloon Louis

    (@smashballoonlouis)

    Hi @corytrevor,

    It’s my pleasure to help! Our development team is checking into updating this in both the Facebook and Instagram feed plugins. Thanks again for bringing this to our attention, and if you ever need any other assistance, please don’t hesitate to let us know.

    Thanks!
    Louis

    Thread Starter corytrevor

    (@corytrevor)

    Awesome, thanks Louis.

    Thread Starter corytrevor

    (@corytrevor)

    Hi @smashballoonlouis

    It doesn’t look like any action has been taken on this issue as the plugin still sends email with the From address as the admin address which will cause issues for people not using an @thewebsitedomain.com email address as the admin address.

    Anyone using an @gmail.com admin email or @outlook.com email etc as the WordPress admin email which is probably at least half your users are either going to have emails blocked from sending by the outbound server or if it does send then the outbound server is going to be basically spoofing the gmail.com sending address without authorisation so SPF and DKIM will fail and the email is likely to be flagged as spam reducing the reputation of the email server.

    Fortunately it would only take a small update to one line of code to fix this. Just change the From address of the admin notification emails to [email protected]. This is the what WordPress does by default, as do plugins where email deliverability is important like Contact Form 7, Gravity Forms etc.

    Cheers

    Plugin Support Smash Balloon Louis

    (@smashballoonlouis)

    Hi @corytrevor,

    Thank you for the additional information! I have shared this with our development team and we do still plan on addressing this. Our apologies for the lack of updates and if I can provide any other assistance for now, please let me know.

    Best regards,
    Louis

Viewing 6 replies - 1 through 6 (of 6 total)
  • The topic ‘Email notification ‘from’ address’ is closed to new replies.