Am 04.02.2016 um 16:20 schrieb David Jones:
Are you using DKIM / SPF for your domain?  I mean, why do you accept
email apparently from your own domain when it does not come from one of
your authorised servers?

because the From header has nothing to do with the envelope sender and
so not with SPF and spoofing protections

True, but given that the original poster said nothing about the envelope
sender, we don't know what that is.  I'd be prepared to bet that implementing
this would improve his server's operation, though.

but he talks about From-Headers

Yes.  Based on his original email where it was "showing" the From address,
that would imply the From: visible in the mail client or webmail interface.
This spoofing can be blocked with a DMARC DNS record.

DMARC is a combination of SPF and DKIM plus From: header spoofing check.
You must get SPF and DKIM setup before adding the '_dmarc' DNS record for
the sending domain

tell me something new

wait i tell you something (for you) new: DMARC and mailing-lists is a awful topic - what do you think would have happened with you mail to the list if your domain would enforce DMARC and my MX reject mails violating the policy?

Attachment: signature.asc
Description: OpenPGP digital signature

Reply via email to