lxix Email Firewall

lxix Email Firewall keeps your site from sending emails to the addresses and domains you block. Use it to stop mail to fake addresses left in your forms by bots, to spam traps, or to recipients who must not get any more emails from the site. How it works

• Every email sent with wp_mail() is checked. Blocked addresses are removed from the To, Cc and Bcc recipients, and an email without any recipient left is not sent at all. The code that sent it sees it as delivered, so forms show no errors.
• Blocking a domain blocks its subdomains too: example.com also blocks mail.example.com.
• Emails to the administration email address and to administrators can be exempted, so a blocked domain doesn't cut you off from your own site.

Form integrations When a form submission contains a blocked email address, lxix Email Firewall either accepts the submission but sends no emails for it, or rejects it with an error message. Supported form plugins:

• Elementor Pro forms
• WPForms
• Contact Form 7
• Fluent Forms

Each integration can be turned off in the settings. WooCommerce WooCommerce skips its emails to blocked recipients, without adding "email sent" or "email failed" notes to the order. Log Blocked emails can be logged with the address, the time, the source (for example wpforms or woocommerce) and the IP address of the request. Entries older than the retention period (30 days by default) are deleted automatically, and turning logging off deletes the whole log. Privacy lxix Email Firewall doesn't contact any external service. While logging is on, it stores the blocked email addresses and the IP addresses of the requests that tried to email them in a database table of your site. It adds a suggested text for your privacy policy to the Privacy Policy Guide (Settings > Privacy).

1.1.0

• New: Contact Form 7 and Fluent Forms integrations.
• New: suggested privacy policy text.
• The plugin is now called lxix Email Firewall. Its folder and text domain are lxix-email-firewall.
• Translations are no longer bundled with the plugin: they come from translate.wordpress.org.
• The log stores times in UTC and shows them in the site's timezone. Existing entries are converted on update.
• WooCommerce emails are always checked. The separate WooCommerce setting has been removed.
• Clearing the log works on hosts that don't grant the database DROP privilege.

1.0.0

• First release.