Somehow, rogue spam emails are being sent through my domain from [email protected]. I'm using google apps to manage email, and I see no test user account, so I'm not sure what could possibly be happening.
Where should I start to debug this?
asked Dec 13, 2010 at 20:21
-
I guess question one is: what do you mean by "rogue spam emails are being sent through my domain"? Presumably you have some concrete evidence of this, hopefully in the form of a bounce, or perhaps an abuse report. Could you let us see what you've got, then we can better advise you?– MadHatterDec 13, 2010 at 20:26
Add a comment
|
2 Answers
You might want to look at the email headers and determine if the email is actually being sent from your server at all. It's easy to make the email appear as if it were coming from any address, even a non-existent one.
-
Looking at the headers, it seems as if I was getting an "SPF neutral" message with weird information. I'm setting up SPF records now, as it seems the email was just being spoofed. Dec 13, 2010 at 20:57
Anyone can send emails that appear to come from any other source domain! This is just how smtp works, which is why there is loads of spam floating around :/ Now, your best chance of fighting this, is to create a SPF record from your domain. The SPF record declares authoritative email servers, that can send email in the name of your domain. Thus, any other spam servers would not be able to send masquerading as you. Well they still could, but the receiving end should verify SPF, find out they're scammers, and then reject that email
Learn more about SPF and implementing it at http://www.google.com/support/a/bin/answer.py?hl=en&answer=33786
