Re: [hampshire] Spoofed from address for emails

Top Page

Reply to this message
Author: Steve Kemp
Date:  
To: Hampshire LUG Discussion List
Subject: Re: [hampshire] Spoofed from address for emails
On Wed, Feb 07, 2007 at 10:37:46AM +0000, Peter Salisbury wrote:

> I'm getting a stream of emails back from all over the world saying
> that spam from our domain (lymingtonchurch.org) could not be
> delivered to their server. Two questions:


Happens to me regularly, mostly since I have a lot of domains I
guess - rather than because I'm being explicitly "attacked".

> 1) Is there any way of stopping people using my domain in a 'from'
> address? (I'm guessing not)


No. Although if you publish SPF records in your DNS zone(s) then
some recipients will be able to tell the mail wasn't sent by your
domain. Unfortunately they will most likely still bounce it so
no real change to you.

(SPF is mostly broken anyway. Ahem.)

> 2) Does this mean our domain will get listed as a spammer?


Mostly not. Mostly places like spamcop will analyze the headers to
target the real sender, which would not be you.

The best thing to do is setup a filter for mail bounces and discard
them, ignoring the problem.

Steve
--
Debian GNU/Linux System Administration
http://www.debian-administration.org/