I do have a SPF record. I just dont understand how I can recieve a email from myself. In the headers it show a completely different address. I am not a open relay . I think will try domain keys.....next.
Rob McEwen <[EMAIL PROTECTED]> 08/22/2008 01:00 PM To "users@spamassassin.apache.org" <users@spamassassin.apache.org> cc Subject Re: Spam from your email address. [EMAIL PROTECTED] wrote: > How can I tackle spam that came from my own e-mail address that I did not > send. Any info on how to prevent this will be greatly appreciated. > I'm not a big fan of Sender Policy Framework (SPF). But if/when something like this happens to me or a client, I find it helps to set a very strict SFP record saying that mail from that domain should *only* come from your main official mail server. That way, recipients of such spam will have more tools available for blocking such messages. The second problem is that you are probably seeing much backscatter from mis-configured servers sending out separate e-mails to your address complaining about spam you didn't send. A good solution for that is to run UCEProtect's backscatterer list.(http://www.backscatterer.org/). But don't outright block on that list (unless you are disparate, this can be applied to a single account, and are unable to do my additional recommendations...) Instead, it would be better to block if the sending IP is in backscatterer.org *combined* with another attribute, such as the SMTP Envelope reporting a "from" address that contains the term "postmaster" or "mailer-daemon". Otherwise, you will probably have a significant amount of FPs. Hope this helps! -- Rob McEwen http://dnsbl.invaluement.com/ [EMAIL PROTECTED] +1 (478) 475-9032
