2FA: verification e-mail sent from wrong sender (and hence rejected by Mandrill)
-
(This paragraph contains background and can be skipped. I’m trying to get 2-factor authentication by IP address to work (for users who are Subscribers). The initial e-mail sent by Simple Security Firewall to the admin address (me), to verify that it can send e-mails at all, is correctly delivered, thanks to Mandrill. Simple Security Firewall no longer shows the notice, so it has accepted that verification.)
When I try to log in as Subscriber, the log-in screen says I will need to verify my IP address and that an e-mail has been sent to me. However, this e-mail never arrives at my address, which I will call [email protected].
The problem seems to be that Simple Security Firewall is trying to send the e-mail not only to [email protected], but also from [email protected]. Mandrill tells me this:
Sender: [useraddress]@hotmail.com E-mail: [useraddress]@hotmail.com Subject: Two-Factor Login Verification for https://[mysite].nl IControlWP Mandrill [name of site] wp_ICWP_EmailProcessor_V1->sendEmailToMandrill tells me this e-mail is rejected because it is unverified, which makes sense, since I could never verify hotmail.com as a domain under my control. I have not entered this address anywhere in my WordPress site, except as the e-mail of a test user I created, so why does it try to send from that address? When I change the test user’s e-mail to [email protected], both “Sender” and “E-mail” are shown as [email protected] in Mandrill, and it is again rejected.
The initial e-mail from Simple Security Firewall to the admin, to verify that my site can send e-mail at all, was “accepted” my Mandrill and properly sent as coming from my WordPress admin address (which is on mysite.nl, the domain I have verified inside Mandrill). So Mandrill seems to work. In Simple Security Firewall’s Audit Trail, it says this:
Event: email attempt send Message: There was an attempt to send an email using the "wp_mail" function. It was sent to "[[email protected]]" with the subject "Two-Factor Login Verification for https://[mysite].nl". Username: unknown Category: 1 IP address: [my IP] YouI couldn’t find a setting in Simple Security Firewall to set from which address the verification messages to users should be sent. Any idea what I could try next?
- The topic ‘2FA: verification e-mail sent from wrong sender (and hence rejected by Mandrill)’ is closed to new replies.
