Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

One of our client servers is receiving huge amounts of email bouncebacks from what is most likely a spoofed account spamming. Is there a way to try and prevent spoofing? I know it is hard to spoof a gmail account; why?

share|improve this question
    
most likely? Have you checked the logs and the queues of your clients server to confirm it isn't actually sending out the spam? –  DKNUCKLES Dec 11 '12 at 14:58
add comment

2 Answers

Yes, one of the most widely used methods is SPF.

Basically, in DNS you then publish the mail servers allowed to send out mail for the domain. Regular spam filters will trigger on this and raise the spam level if it encounters spoofed sender addresses in mail. It will not prevent the spammers from sending it, but it makes you a less attractive target for them.

Additional option is using DKIM to verify cryptographically the mail server delivering the message is actually approved by the domain administrator.

Large domains such as GMail have implemented both. Therefore, it's easy to verify if a genuine Google server was delivering mail from a GMail account.

share|improve this answer
add comment

I highly recommend implementing SPF and related policies so that you can use a strict policy.

You can also use BATV (Bounce Address Tag Verification) to sign the envelope from address on outgoing messages. My article on Signing Return Path Addresses with Exim describes how I implemented. Once you have this running for a couple of weeks you can start identifying faked bounce messages with ease.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.