XF 2.3 Unauthorized emails being sent from closed forum

[Codelizard]

Hi

I moved my forum to a new host and upgraded to xf 2.3. Im still working on this, and the forum has been closed for over a week while we get everything ironed out.

Now, as part of this upgrade, I signed up with smtp2go. I went into the forum config and set up the smtp of the smtp2go server along with my default email address, no-reply@domain-name.com.

Now, in smtp2go's dashboard, Im getting alerts of invalid senders. I whitelisted my domain-name.com as a sender, but Im seeing emails from No-reply@domainname.com being rejected (but still counted as emails) in the dashboard. For them to even get in the dashboard, they had to be sent from the forums with my smtp2go credentials.

So... my question: How can emails be triggered to be sent when the board is closed? And, are there other spots where a "from" email address is in the system that could be misconfigured? Just worried about people being able to somehow send spam through the forum, even when its closed.

 

[ENF]

So... my question: How can emails be triggered to be sent when the board is closed? And, are there other spots where a "from" email address is in the system that could be misconfigured? Just worried about people being able to somehow send spam through the forum, even when its closed.

Do you have automated emails that would be sent on a schedule?

In the meantime, you can disable all email at the closed site by adding this to your config.php:

$config['enableMail'] = false;

This will stop all mail from ever being sent from within XenForo. The primary 'from' address is set in your ACP Email Options.
If you're still having issues, I'd suggest getting a new access key from your smtp provider, which will lockout any mail attempts on your account (aside from where it should be, from your live site)