Directory / plugin

lxix Email Firewall

v1.2.0 · by lxix

Stops emails to blocked addresses and domains: checks every wp_mail() call, form notifications and WooCommerce emails.

About this plugin

lxix Email Firewall keeps your site from sending emails to the addresses and domains you block. Use it to stop mail to fake addresses left in your forms by bots, to spam traps, or to recipients who must not get any more emails from the site.

How it works

  • Every email sent with wp_mail() is checked. Blocked addresses are removed from the To, Cc and Bcc recipients, and an email without any recipient left is not sent at all. The code that sent it sees it as delivered, so forms show no errors.
  • Blocking a domain blocks its subdomains too: example.com also blocks mail.example.com.
  • Emails to the administration email address and to administrators can be exempted, so a blocked domain doesn’t cut you off from your own site.

Form integrations

When a form submission contains a blocked email address, lxix Email Firewall either accepts the submission but sends no emails for it, or rejects it with an error message. Supported form plugins:

  • Elementor Pro forms
  • WPForms
  • Contact Form 7
  • Fluent Forms
  • Forminator
  • MetForm
  • Ninja Forms
  • SureForms
  • Formidable Forms

The error message is shown at the field that holds the blocked address; MetForm and SureForms show it with the other messages of the form. Emails that a form plugin sends later for an accepted submission, for example after a payment, are suppressed too.

Each integration can be turned off in the settings.

WooCommerce

WooCommerce skips its emails to blocked recipients, without adding “email sent” or “email failed” notes to the order.

Log

Blocked emails can be logged with the address, the time, the source (for example wpforms or woocommerce) and the IP address of the request. Entries older than the retention period (30 days by default) are deleted automatically, and turning logging off deletes the whole log.

Privacy

lxix Email Firewall doesn’t contact any external service. While logging is on, it stores the blocked email addresses and the IP addresses of the requests that tried to email them in a database table of your site. It adds a suggested text for your privacy policy to the Privacy Policy Guide (Settings > Privacy).

Plugin tags