Linked Questions

66
votes
9answers
26k views

How to stop people from using my domain to send spam? [duplicate]

I receive Mailer Daemon messages saying certain emails fail. My domain is itaccess.org which is administered by Google apps. Is there any way I can identify who is sending emails from my domain, and ...
35
votes
4answers
4k views

Is greylisting still an efficient method for preventing spam?

I've used greylisting on my servers for many years, but I don't know how effective it is nowadays. Is it still good for fighting spam in 2012? Or is the typical spammer MTA capable of resending ...
17
votes
5answers
427 views

Is it good practice or too draconian to reject mails from mailservers with no RDNS

I've recently dropped SpamAssassin and am now basing spam rejection on DNSRBL's, grey-listing and other basic tests and I'm wondering whether I should also block hosts that don't have a valid RDNS ...
14
votes
2answers
907 views

What are the best methods for catching snowshoe spam?

I'm using Smartermail for my small mailserver. We've been having a problem lately of getting waves of snowshoe spam that follow the same pattern. They come in batches of 3 or 4 at a time. The ...
12
votes
2answers
3k views

What are SPF records, and how do I configure them?

This is a canonical question about setting up SPF records. I have an office with many computers that share a single external ip (I'm unsure if the address is static or dynamic). Each computer ...
6
votes
4answers
882 views

How can I block outside mail FROM postmaster@mydomain.com?

A security firm has been testing my mail server and claims my Postfix daemon is an open relay. The evidence is as follows (valid public IP for mail.mydomain.com has been changed to 10.1.1.1 for ...
6
votes
6answers
2k views

Spam prevention tips for Postfix

Without using SpamAssasin, or similar, what are your best tips for preventing spam. Please try and provide config examples :D
6
votes
5answers
5k views

Is there any alternative to SpamAssassin? [closed]

I'm looking for alternative to spamassassin. Anyone tried rspamd from Rambler.ru (https://bitbucket.org/vstakhov/rspamd/wiki/Home)?
5
votes
1answer
260 views

How to use two mail servers in parallel, if possible?

I basically want to have two separate email servers. The first one is the GoogleApps GMail service, which is for humans to use. The second server would be for sending messages from my application (so, ...
4
votes
6answers
946 views

Prevent outgoing spam

What are some ways to prevent spam from leaving your servers should a hosting account get compromised? Have a bunch of clients on a server with cpanel but wondering if there was a way to just ...
2
votes
1answer
114 views

Does postfix reject spoofed senders?

Is there a reliable way to reject incoming mails with a spoofed e-mail address? What kind of checks does postfix run normally on incoming mails? does postfix check the reverse dns by default? does ...
2
votes
2answers
2k views

In postfix, how to enforce tls + auth over 587 while leaving tls optional for 25

I would like to host mail services for some domains. I have succesfully setup postfix to consult sql for those virtual domains. What I would like to do is: For connections on 25: 1. Deny relaying ...
2
votes
3answers
1k views

Should I reject email on SPF and/or DKIM failures? [duplicate]

I’m administering a mail server (cPanel/WHM) running Exim. It handles normally a few hundreds incoming emails per day for our customers. I’m not sure if I should reject SPF and/or DKIM failures for ...
1
vote
2answers
776 views

Spam mail through SMTP and user spoofing [closed]

I have noticed that it's possible to telnet into a mailserver that I own and send spoofed messages to other clients. This only works for the domain that the mail server is regarding; I cannot do it ...

15 30 50 per page