Bug Undeliverable emails from XenForo due to From address spoofing

There is a bug in this version
D

digitalpoint

Guest
Domain owners can instruct mail servers to reject email if it doesn't come from a whitelisted IP address (normally the mail servers for that domain). In the case of XenForo, the contact form sets the From address to be something arbitrary so that someone can respond to the user.

I know it's by design, but the "correct" way to do it would be the From address being the site's email address, but the Reply To header being the user. That would allow emails to pass DMARC policies rather...

Read more

Continue reading...