More and more email servers and providers are being locked down with technologies such as SPF, which prevent spoofing of emails.

When Mango sends an email - for example, a contact form - it sets the "from" address as being the address the user has entered. However, many mail providers would block this as the mail server doesn't have the authority to send email from that address.

A simple change to the sendEmail method in mailer.cfc would fix this.

All mail should be sent using the "defaultFromAddress" as the from address. The actual address of the sender should then be put in the "ReplyTo" attribute.

This can be done without changing the API of sendEmail() - it can still expect "from" and "to" arguments.