Still having mail issues with cross contamination I suppose you can call it.

A little while ago I raised an issue with mail being seen in my sent box, from emails that seem to be unexplainable. Today I came across something that is even more unexplainable.

The following is a snippet of an interceptor that is called when a page is not found, or en event is not known. Now there is no way that this interceptor can be run manually, and it is also evident that the contents of the email indicates that it came from my site / application. But the strange thing is that email address is not the email address that I am using to send the email with, and I have also attached this below as well.

My question is (and this is a ContentBox website) but I am raising it here, because I can’t see how this can be happening from the code I have.

component extends=“coldbox.system.Interceptor” singleton {

property name=“settingService” inject=“id:settingService@cb”;

property name=“mailService” inject=“coldbox:plugin:MailService”;



private void function processNotFound(event, interceptData) {

var responseMail = “”;

var settings = settingService.getAllSettings(asStruct=true);

var mail = mailservice.newMail(to = “”,

from = settings.cb_site_outgoingEmail,

subject = “Unknown route/event has been detected”,

type = “html”,

server = settings.cb_site_mail_server,

username = settings.cb_site_mail_username,

password = settings.cb_site_mail_password,

port = settings.cb_site_mail_smtp,

useTLS = settings.cb_site_mail_tls,

useSSL = settings.cb_site_mail_ssl);

savecontent variable=“responseMail” {




mail.setBody( responseMail );

mailService.send( mail );



And the header and sending email below shows there is something wrong. The bold sections below is NOT the email address that is sending this email, and on top of that I am using secured credentials, username / password etc to connect and send via Google Apps. I am at a serious loss to explain how this code can end up in my sent box with a different email address than I told it to send with.


Received: by with SMTP id qu8csp10441pbc;

Wed, 30 Jan 2013 03:39:39 -0800 (PST)

X-Received: by with SMTP id df4mr3464339igc.60.1359545978690;

Wed, 30 Jan 2013 03:39:38 -0800 (PST)


Received: from ( [2607:f8b0:4001:c02::22c])

by with ESMTPS id c4si5068186igq.5.2013.

(version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128);

Wed, 30 Jan 2013 03:39:38 -0800 (PST)

Received-SPF: neutral ( 2607:f8b0:4001:c02::22c is neither permitted nor denied by best guess record for domain of client-ip=2607:f8b0:4001:c02::22c;


spf=neutral ( 2607:f8b0:4001:c02::22c is neither permitted nor denied by best guess record for domain of

Received: by with SMTP id u8so2186655iag.31

for; Wed, 30 Jan 2013 03:39:38 -0800 (PST)

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;; s=20120113;










X-Received: by with SMTP id ch6mr3247975igb.92.1359545978113;

Wed, 30 Jan 2013 03:39:38 -0800 (PST)


Received: from ntc20 ( [])

by with ESMTPS id px5sm5529749igc.0.2013.

(version=TLSv1 cipher=RC4-SHA bits=128/128);

Wed, 30 Jan 2013 03:39:36 -0800 (PST)