Question Plesk itself&also it's components (eg. Immunify360) uses my (personal,external) mail address with faked SMTP

[jmar83]

Server operating system version

10.13

Plesk version and microupdate number

18.0.77 Update #1

Hi there

Personal mail adress:
[email protected]

Plesk server:
mypleskhost.vserver-provider.com

(for example...)

Now, Plesk itself & also it's components (eg. Immunify360) uses my (personal,external) mail address with faked SMTP from [email protected]... so the mails sent by plesk will go into spam folders on many recipients.

Questions:

1.)
I can't find the point anymore, where i defined that (sender) address. So i saw, there is some e-mail-address data on account level ("admin" is the only account i use my case, Linux root user login on plesk is disabled when i remember right)... but i think there is also a GLOBAL setting for sender's mail address

2.)
Is it not possible to define an external SMTP server, eg. smtp.freemailprovider.com - so the plesk mail system (smtp, postfix etc) has 100% nothing to to with Plesk notification/warning/error mail sending? That would be a BIG advantage (if there is a local smtp service problem, it's not possible anymore to send mails!).
(As same as other systems do - e.g. my SMS-to-mail hardware gateway, where i can define external SMTP server to redirect SMS to mailboxes)

PS: I also used the command 'grep -R "[email protected]" /usr/local/psa /etc /opt 2>/dev/null' in root SSH, but it will not find what i'm searching for

Thank you very, very much for your feedback(s).

 

[Sebahat.hadzhi]

Hi, Jan. What I can suggest is checking:

1. The Contact details of the administrator user
2. If there are any custom addresses defined in Tools & Settings > Notifications
3. The panel.ini file - for a custom value defined for senderAddress

 

[jmar83]

Thank you very much for your feedback.

1.)
Yes, that mail address is defined as admin's e-mail-address in its profile settings (but i'm not 100% sure it's caused by that, because "faking" notification-mail's sender address is usually not a userprofil-defined thing? it's also more for receiving than using it as as fake sender address)

2.)
On path .../admin/notifications/email-settings there are only mail addresses to receive specific notifications (eg. plesk update, currently the only one that is used for me)

3.)
Yes, thx, will look on it asap

 

[jmar83]

Regarding 3.): No it's not in plesk.ini:
cat /usr/local/psa/admin/conf/panel.ini | grep MY_EXTERNAL_MAIL_ADDRESS

 

[Sebahat.hadzhi]

Thank you for checking.

Yes, that mail address is defined as admin's e-mail-address in its profile settings (but i'm not 100% sure it's caused by that, because "faking" notification-mail's sender address is usually not a userprofil-defined thing? it's also more for receiving than using it as as fake sender address)

By default, Plesk uses the administrator's email address for notifications. You can verify that from:

• Automatic Email Notifications
• (Plesk for Linux) System Updates

 

[jmar83]

OK, so you mean "uses" by sending (and fake SMTP, if e-mail is an extern one, not hosted by own plesk server) and also receiving (problem if not whitelisted on receiver mail server if faked from plesk server because it's an external one).

How to solve that issue? What happens if i should get a notification because if (own) smtp server "crashes"...

This is very badly implemented i.m.o, if plesk can't use external SMTP authentication and uses its own smtp server for sending FROM (also also: too) external mail address

I can't believe that to be honest - unbelievable, but yes, seems to be really (?) true...?

 

[Sebahat.hadzhi]

Currently, the logic Plesk uses is the following:

1. If senderAddress is specified in panel.ini, then use it
2. If admin email is a valid email, then use it (Even if the address is external it will be still used as long as it is valid)
3. If admin email is not valid, then send from admin_name@hostname

Thus, if you define a different address in panel.ini it will be used although your admin user is set to an external address:

• https://support.plesk.com/hc/en-us/...-in-Plesk-email-notifications-sent-to-clients

There's an initiative to change the logic behind the behavior. However, at the moment I cannot provide any ETA.

 

[jmar83]

ok thx