Email spoofing

hello,

we have got complaint from our client that, emails are sent using their email address, I have setup the SPF record, but still going through it. any help?

[Tris]

does it orrigionate from the IP of your server?

there is a chance a perl/cgi/php script on your server is causing the problem.

Probably it's just a virus using faked email address.

Are you sure virus was sent from YOUR server?

[Corey Bryant]

Clients contact me about this all the time. They are more than likely not sent from your mail server but just have a return / send email address of that particular domain. One of my sites that has been up since about 1996 is abused like this a lot - I get returned emails messages to something like LucienRhoadescontradistinction@example.com (just got this one now).

One way to help is to get rid of the catchall. I love my catchall but I am thinking of doing something with it. Having the SPF record will help as well since a lot of servers are checking that these days

Hello,

Eventhough, Sender Policy Framework (SPF) is an emerging standard by which the owners of domains identify their outgoing mail servers in DNS, and then SMTP servers can check the addresses in the mail headers against that information to determine whether a message contains a spoofed address.

SPF does NOT limit in ANY WAY spoofed e-mails.

This is due to the fact, that the SPF standard does not protect the "From" address, which is seen in the e-mail client, but the so-called envelope sender address, visible only, when the message source is opened (in the Return-Path header).


Users need to implement Simple Authentication and Security Layer (SASL) SMTP for sending mail. Once this is accomplished, administrators can set their domains so that unauthenticated mail sent from them will fail, and the domain’s name can’t be forged.

Other technological solutions, such as digitally signed e-mail, with either desktop or gateway verification, have been proposed by such bodies as the Anti-Phishing Working Group

Thanks,

Simon S
Technical Support Executive,
Accuwebhosting