Blocking External Mail Sent w/ Spoofed Email Address

Question

We recently got an email from an outside server that had a spoofed "From:" header that was the email address of one of our users. Is there a way to have sendmail reject emails coming in from an outside network that claim to be a specfic user, but still allow that user to send mail from our own servers? How can I set this up?

Answer 1

You can use SPF or DomainKeys Identified Mail. And configure sendmail to verify SPF and DomainKeys. This will reduce some of your received spam too.