Print Page | Close Window

Getting spam from my own E-mail address!!!

Printed From: LogSat Software
Category: Spam Filter ISP
Forum Name: Spam Filter ISP Support
Forum Description: General support for Spam Filter ISP
URL: https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6468
Printed Date: 15 March 2025 at 1:05am


Topic: Getting spam from my own E-mail address!!!
Posted By: morten44
Subject: Getting spam from my own E-mail address!!!
Date Posted: 01 May 2008 at 7:47am
Hi
Filter is working great for 2 weeks now.
I have got one problem that i am not sure where to look for answers.
I have started to get some mails from my users at the domain saying that they suddenly starts to get up to 80 spam where it seems like its sent from our own users.
 
I give you an expample:
_____________________________________________________________________

Message-ID: <000601c8aaa1$06ab6a33$8086fd93@gpppsmvb>

From: "Exquisite Replica" <marie@cicd-volunteerinafrica.org>

To: "Watches" <xegtertfrt@www.net.tw>

Subject: Exquisite Replica

Date: Wed, 30 Apr 2008 07:19:52 +0000

MIME-Version: 1.0

Content-Type: multipart/alternative;

      boundary="----=_NextPart_000_0003_01C8AAA1.06A71D3C"

X-Priority: 3

X-MSMail-Priority: Normal

X-Mailer: Microsoft Outlook Express 6.00.2900.3138

X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3198

_______________________________________________________________

 

mailto:marie@cicd-volunteerinafrica.org - marie@cicd-volunteerinafrica.org is a user at our domain. She has nothing to do with "Exquisite Replica" so it seems like some are sending using her Email?

How can it happen that we get so many mails return in users inbox when she has not sent it. We are using SMTP autentication for all our users
Hope someone can point me in right direction :)
Kind REgards
Morten


Replies:
Posted By: Desperado
Date Posted: 01 May 2008 at 10:17am
Do you have any SPF records for the domains?  SPF can drastically reduce some of these.

-------------
The Desperado
Dan Seligmann.
Work: http://www.mags.net
Personal: http://www.desperado.com

Posted By: morten44
Date Posted: 01 May 2008 at 3:22pm
HI. Thanks for your answer  :)
Never heard about that before. Can i use that eaven though I am not managing my own DNS Server. Use use our IIS provider for spam filter ISP.
If not do I have to install a DNS Server on my Webserver and use that for Spam Filter ISP instead of an external one. Is that correct?
 
Is there anything that Spam Filter ISP can do to prevent this kind of fake spam mail?
 
Kind Regards
Morten

Posted By: LogSat
Date Posted: 01 May 2008 at 5:35pm
SPF is implemented by configuring a TXT record in your DNS. If you are not able to alter the DNS records, SpamFilter allows you to reject emails that are sent "from" your domain and/or when the sender is the same as the recipient. Please see this screenshot at http://www.logsat.com/sfi-spam-filter-screenshots/sfi-filtering-options.asp to locate this settings.

-------------
Roberto Franceschetti

http://www.logsat.com" rel="nofollow - LogSat Software

http://www.logsat.com/sfi-spam-filter.asp" rel="nofollow - Spam Filter ISP

Posted By: morten44
Date Posted: 01 May 2008 at 5:52pm
Hi
Thank you for your responds :)
I will try that right away.
We had to remove some of the default settings in SpamFilter ISP as many non spam mails got caught in the filter. Not due to the filter but some ISP not dooing it correct.
 
Will try to look into what you write there and I will come back with updates if any issues.
 
Thanks for your time again.
Impressed with your dedication and fast responds to questions
 
Kind Regards
Morten

Posted By: LogSat
Date Posted: 01 May 2008 at 9:52pm
Morten,

We actually have to thank our users - Desperado in this case - who was able to provide a (correct!) answer much sooner that we did :-)

-------------
Roberto Franceschetti

http://www.logsat.com" rel="nofollow - LogSat Software

http://www.logsat.com/sfi-spam-filter.asp" rel="nofollow - Spam Filter ISP


Print Page | Close Window