Keeps my apps simple: Just send mail using the envvars and let Cloudron figure it out. The event log is nice too, for monitoring.

The setting you mentioned would definitely help a lot, but I have a workable solution now, thanks!

A setting that would help in your specific case is to allow apps to send without MAIL FROM validation . This would avoid the whole dance around creating relay tokens cc @girish

@joseph said:

@mmolivier I think the mail relay token does what you want. All you have to do is create a token and this give you permission to send email as whatever you want for that domain (just like mailjet/sendgrid tokens work). Fix your setup to use relay@yourdomain.com as username and the token as the password. You can then send any email as anyone@yourdomain.com .

Just to ensure that we're talking about the same problem and same fix.

Old behaviour:

• App sends mail from noreply@domain.com, Email tab of the app is set to noreply@domain.com > Email is accepted and sent based on config of domain.com (which is set to Outbound only, SendGrid)
• App sends mail from noreply2@domain.com, Email tab of the app is set to noreply@domain.com > Email is accepted and sent based on config of domain.com (which is set to Outbound only, SendGrid)
• App sends mail from noreply@otherdomain.com, Email tab of the app is set to noreply@domain.com > Email is accepted and sent based on config of otherdomain.com (which is set to Outbound only, SendGrid)

Behaviour since last night:

• App sends mail from noreply@domain.com, Email tab of the app is set to noreply@domain.com > Email is accepted and sent based on config of domain.com (which is set to Outbound only, SendGrid)
• App sends mail from noreply2@domain.com, Email tab of the app is set to noreply@domain.com > Email is denied because Cloudron allows mails from noreply@domain.com only
• App sends mail from noreply@otherdomain.com, Email tab of the app is set to noreply@domain.com > Email is denied because Cloudron allows mails from noreply@domain.com only

Given this example, your suggested fix is:

• App sends mail from noreply2@domain.com, Email tab of the app is set to noreply@domain.com > Email is denied because Cloudron allows mails from noreply@domain.com only

  To fix this, I should add a "SMTP Relay" token on domain.com, make sure the app authenticates with relay@domain.com and [token of domain.com]

• App sends mail from noreply@otherdomain.com, Email tab of the app is set to noreply@domain.com > Email is denied because Cloudron allows mails from noreply@domain.com only

  To fix this, I should add a "SMTP Relay" token on otherdomain.com, make sure the app authenticates with relay@otherdomain.com and [token of otherdomain.com]

Did I interpret it correctly?

Behaviour before the update: App was capable of sending all emails, from different senders of different domains

Behaviour after the update: App runs into the "Connection denied. Authenticated user [mail address configured on the email tab, which i ignore] cannot send mail as [from address specified from within the app]"

The quickest workaround is to align the mail address configured on the app email tab with the from addresses used, but some apps send mails from other addresses (even from other domains in some cases). The domains are all configured within Cloudron. Mails are never sent from an email unknown to Cloudron.

The domains are configured like this

As far as I understand, Cloudron is being too strict here. Mailjet and SendGrid handle everything just fine.

I'd like to be able to turn off this restriction or at least be able to configure accepted mailaddresses somewhere. I can't find neither of those two options.

Cloudron 10 removed the domain level flag for security reasons. Instead, you have to either use relay tokens (under Email -> domain -> SMTP relay) or via the mailbox.