Issue with Spoofing emails

Portal Home > Knowledgebase > Articles Database > Issue with Spoofing emails

Posted by TheComputerGuy, 12-24-2009, 09:09 AM
Hello there guys, Somehow someone is spoofing email addresses and sending them to people that I've recently sent them to. I've changed my email addresses passwords three times. Anyway to get this under control? thanks!
Posted by david510, 12-24-2009, 09:19 AM
Have you set SPF record in your domain DNS ?
Posted by TheComputerGuy, 12-24-2009, 09:27 AM
I have not...and here is what I'm doing now http://www.webhostingtalk.com/showthread.php?t=697827
Posted by david510, 12-24-2009, 09:31 AM
You can add the following line to the domain zone file and reload zone file or restart named.
Posted by xtrac568, 12-24-2009, 11:19 AM
consider installing dkim aswell, since some mailservers don't check spf, such as yahoo. but they might be the only one... Last edited by xtrac568; 12-24-2009 at 11:25 AM.
Posted by gregm11, 12-24-2009, 11:52 AM
add SPF record to your DNS zone file. Microsoft has a SPF wizard located here. http://www.microsoft.com/mscorp/safe...nderid/wizard/
Posted by TheComputerGuy, 12-24-2009, 05:05 PM
this is what I have now. how does that look?
Posted by david510, 12-25-2009, 09:57 AM
See if has set correctly. From a remote server or local machine issue the command below to see if it is showing fine.
Posted by TheComputerGuy, 12-25-2009, 07:04 PM
This is what I get when I use Putty on the server.
Posted by david510, 12-25-2009, 07:26 PM
Check if your mails server supports SMTP_AUTH. Which mail server are you using?
Posted by TheComputerGuy, 12-25-2009, 07:28 PM
I'm running Cpanel.
Posted by david510, 12-25-2009, 07:42 PM
Issue the following command and see if it returns AUTH LOGIN telnet mail.yourdomain.com 25 Once you enter the telnet prompt type below and press enter EHLO
Posted by TheComputerGuy, 12-25-2009, 07:46 PM
Hi David, I'm getting 250-AUTH PLAIN LOGIN
Posted by david510, 12-25-2009, 08:15 PM
This means the mail server support the AUTH. Do you store the email password in your browser? If your local machine has got virus affected these stored passwords can be a threat.
Posted by TheComputerGuy, 12-25-2009, 08:29 PM
Well most users use Outlook or Thunderbird.