SMTPDataError at /contact/

[iandriyanov]

Describe the issue

smtplib.SMTPDataError: (550, b'5.7.0 Sender address rejected: not owned by authorized user ...')

Root cause:

The error occurs because the from_email parameter in EmailMessage is set to the user’s email address from the contact form, which does not match the authorized SMTP sender address configured in settings. Yandex SMTP server rejects this sender address.

In weblate/accounts/views.py, the contact view calls EmailMessage like this (simplified):

mail = EmailMessage(
    subject=subject,
    body=body,
    to=to,
    from_email=from_email,  # this is user email from form, causes rejection
    headers=headers,
)

Proposed fix:

Use the configured DEFAULT_FROM_EMAIL as from_email, and set the user email as reply_to:

mail = EmailMessage(
    subject=subject,
    body=body,
    from_email=settings.DEFAULT_FROM_EMAIL,
    to=to,
    headers=headers,
    reply_to=[from_email],
)

This way, the SMTP sender address is authorized, and replies still go to the user's email.

I already tried

• I've read and searched the documentation.
• I've searched for similar filed issues in this repository.

Steps to reproduce the behavior

1. Go to weblate/accounts/views.py
2. Between 296-298 rows

Expected behavior

No response

Screenshots

No response

Exception traceback

How do you run Weblate?

No response

Weblate versions

No response

Weblate deploy checks

Additional context

No response

[nijel]

This is just about what the default setting for https://docs.weblate.org/en/latest/admin/config.html#contact-form does. It just uses ADMINS_CONTACT as both from/to.

[nijel]

But using DEFAULT_FROM_EMAIL is indeed a better option... #15259 fixes that.