[wp-trac] [WordPress Trac] #49687: wp_mail() - Why is no envelope sender defined?

[WordPress Trac]

#49687: wp_mail() - Why is no envelope sender defined?
---------------------------+------------------------------
 Reporter:  vbbp           |       Owner:  (none)
     Type:  enhancement    |      Status:  new
 Priority:  normal         |   Milestone:  Awaiting Review
Component:  Mail           |     Version:  5.4
 Severity:  major          |  Resolution:
 Keywords:  needs-testing  |     Focuses:
---------------------------+------------------------------

Comment (by SirLouen):

 === Test 2: Using qmail for the MTA

 ✅ Email is sent without troubles to a Gmail account

 This is the email with the `Sender` to false

 {{{
 Delivered-To: [REDACTED_EMAIL]
 Received: by 2002:a05:6359:6c93:b0:1ff:db44:3f60 with SMTP id
 td19csp1703922rwb;
         Fri, 8 Aug 2025 14:57:56 -0700 (PDT)
 X-Google-Smtp-Source:
 AGHT+IFZMmoiMWR1TLv6Jw+9Tyk5PKw7NVfpkZ2GOc6jR3UNiR+vhSMnbIHskMsC5oExk2A620/J
 X-Received: by 2002:a05:6512:3d86:b0:55b:94ea:1d38 with SMTP id
 2adb3069b0e04-55cc00e2bf6mr1296571e87.16.1754690276495;
         Fri, 08 Aug 2025 14:57:56 -0700 (PDT)
 ARC-Seal: i=1; a=rsa-sha256; t=1754690276; cv=none;
         d=google.com; s=arc-20240605;
 b=De5ZZn9dV3G7eVlws/t16TyX5h+muVycuiGk+sB+CU2bkHuO2QVgeNxx9ZviETyFrw
 P0IZzcK0d1Vs0S+hXC47ynGnicVBzpbnMrySbZDjG/rFDqt1qHw5eFMH8SS/GEK2Uo9Z
 7Y9XnNGPJn3FWPse4tLfLjDqtXW/+PzJ9tDnkBIpG/URuPZSLCNzQPrK5NzTkqw90K1n
 Jh95TIvLOd8Zgt7unLptFEPaa4Od7MoeN60ePNBqLCpzhSuCDbh5yyyE8Nfa+JbjAoE9
 bnAIAxA5SqjdR4eBnF0vsuUaSRs3WkoRVRnqOl8Gk5aRoyJQsrEvJ4OtgjOz0NASILux
          lgHw==
 ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com;
 s=arc-20240605;
         h=content-transfer-encoding:mime-version:message-
 id:from:date:subject
          :to;
         bh=M7YZ+toWMLXdzlEHiz0u6Kwz76TCgknk/l9AAwsdVGI=;
         fh=LnWiZB+0qsThBew1oCwmWb63UJ40SUAv5hSa6DrXbks=;
 b=Sz92Rtwz7/YZ6HlTU2Xs/FR2epwvEOyr5Uc5lFiCtl0qq1HWNhaCkDP2+IadsBGimL
 Saa9Bdw2iANi5q/e3z4OBHjpNcpep8oLSuHZBY7VXawbJkVCQ3LaoYhjbRD3b52UR2eo
 zRQerc1spy99xn2uVIj/E/JAltSpEubBoDEO+TmpJ2IglsIgDnH3HWltlPEsWdae0Wci
 TeeJYFQeCyS73WLXzc+1863tHC/mavtmCx9FtiCDEIltN1pTGcXKkXMAQi4A2uOTrRB6
 0zIdc6FySsbYooWDeLm55tLvE4B/+8NeiGtT/BK8leajhog/kdRlU4+0Q4qtNwLsGBg6
          AmaA==;
         dara=google.com
 ARC-Authentication-Results: i=1; mx.google.com;
        spf=pass (google.com: domain of anonymous@[REDACTED_SERVER_HOST]
 designates [REDACTED_SERVER_IP] as permitted sender)
 smtp.mailfrom=anonymous@[REDACTED_SERVER_HOST];
        dmarc=pass (p=REJECT sp=REJECT dis=NONE)
 header.from=[REDACTED_SERVER_HOST]
 Return-Path: <anonymous@[REDACTED_SERVER_HOST]>
 Received: from [REDACTED_SERVER_HOST] ([REDACTED_SERVER_REVERSE_NAME].
 [[REDACTED_SERVER_IP]])
         by mx.google.com with SMTP id
 2adb3069b0e04-55cc65c0f95si235275e87.304.2025.08.08.14.57.56
         for <[REDACTED_EMAIL]>;
         Fri, 08 Aug 2025 14:57:56 -0700 (PDT)
 Received-SPF: pass (google.com: domain of anonymous@[REDACTED_SERVER_HOST]
 designates [REDACTED_SERVER_IP] as permitted sender) client-
 ip=[REDACTED_SERVER_IP];
 Authentication-Results: mx.google.com;
        spf=pass (google.com: domain of anonymous@[REDACTED_SERVER_HOST]
 designates [REDACTED_SERVER_IP] as permitted sender)
 smtp.mailfrom=anonymous@[REDACTED_SERVER_HOST];
        dmarc=pass (p=REJECT sp=REJECT dis=NONE)
 header.from=[REDACTED_SERVER_HOST]
 Received: (qmail 96 invoked by uid 33); 8 Aug 2025 21:57:55 -0000
 To: [REDACTED_EMAIL]
 Subject: Health Check – Test Message from https://[REDACTED_SERVER_HOST]
 Date: Fri, 8 Aug 2025 21:57:55 +0000
 From: WordPress <wordpress@[REDACTED_SERVER_HOST]>
 Message-ID:
 <6rSEjwB8LmkIRn3qgCNhv5Z4dEAUfTeyg2N5aHxA@[REDACTED_SERVER_HOST]>
 X-Mailer: PHPMailer 6.9.3 (https://github.com/PHPMailer/PHPMailer)
 MIME-Version: 1.0
 Content-Type: text/plain; charset=UTF-8
 Content-Transfer-Encoding: 8bit


 Hi! This test message was sent by the Health Check plugin from WP Testing
 (https://[REDACTED_SERVER_HOST]) on August 8, 2025 at 9:57 pm. Since
 you’re reading this, it obviously works.

 Additional message from admin: This is a test with qmail
 }}}

 Here we can see that despite the `From:` local is `wordpress` and the
 sender envelop is `anonymous` as I was commenting in my previous message,
 both SPF and DMARC are passing. I have not added DKIM to the testing qmail
 server (because this is not the most modern technology and I have wasted a
 ton of hours trying to containerize a qmail local server with WP that
 integrates well with shell and is not a relay).

 @knutsp it seems that webhuset.no has a configuration trouble. It seems
 that the curren't qmail (I'm using notqmail 1.09 for this test because
 qmail 1.03 was too much of a hassle and required a million patches to make
 it work). I'm wondering which version of qmail they are using in
 webhuset.no

 Also noticing that for the two first tests, with Postfix and qmail, there
 is no problems either with the `Sender` `auto` enabled by default.

 For the final test I'm going with `sendmail` directly, no more wrappers.
 This is the final acid test to check if the crashes they were commenting
 in [38286] are still valid in 2025.

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/49687#comment:22>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform