Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have a bunch of domains as relay domains at my sendmail config, i noticed that some dirty botnet is using dns spoof to be able to send emails using those relay domains.

How it works:

a domain resolves back to, when my server tries to resolve it falls back to spoof!

Is there anyway to fix/avoid/block this? relaying only on specific server ips would be better?


share|improve this question

Do you need to have a hosts entry pointing to Perhaps you could point the hosts to your external IP instead and only allow relaying from localhost.

share|improve this answer
I'm not sure what are the implications of not relaying on, some emails are sent by crons and other server internals, not sure if those would be delivered or deferred. – Rodrigo Aug 23 '10 at 21:58
It mainly depends on the SMTP address they're using, if they're using the external IP or a hostname other than localhost, then that change would break them. – James L Aug 23 '10 at 22:11

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.