-2

I will like to know if this is possible if so how? Or is it someone who has access to the email and sending emails via my domain name!

I have viewed the source of the email everything seems to be legit except the ip address witch is form a different country

The domain belongs to large organization and i'm assuming that the domain and emails are protected against basic abuses, thats the part i dont understand!

[email protected] // OK

ip address // NOT OK

3
  • What is the question? Can someone spoof your email address? Yes they can. It's a trivial thing to do.
    – joeqwerty
    Jan 12, 2015 at 18:39
  • Might want to see this thread. Of course, with the almost no information you've shared, it's hard to say for sure. Jan 12, 2015 at 18:45
  • Re your edit: It is either your domain or the domain of a large organization... Also, there is no perfect protection for this. It's really easy to spoof a mail address (in some way, e-mail was designed to make this easy!) and many mail systems still do nothing or not enough to prevent it. The thing is: The owner of the domain can only help with things like SPF or DKIM, but if mail server owners don't use this information, the domain owner can do nothing more.
    – Sven
    Jan 12, 2015 at 19:48

1 Answer 1

3

Spoofing an email address is simple and requires essentially zero technical know-how.

You should set up SPF (and DKIM wouldn't hurt) on your legitimate email so email servers can identify the spoofing as spam.

4
  • the domain belongs to large organization and i'm assuming that the domain and emails are protected against basic abuses, thats the part i dont understand!
    – User6996
    Jan 12, 2015 at 18:47
  • The nature of the protocols used for email make it impossible to prevent email spoofing. Email was developed before spoofing and spam. Things like SPF and DKIM, when properly implemented, can help receiving servers determine whether incoming email is legitimate.
    – ceejayoz
    Jan 12, 2015 at 18:57
  • 1
    The receiving side also has to do SPF lookup validation and hard fail if it wants to take SPF serious. This "large organization" likely has SPF records in place.
    – TheCleaner
    Jan 12, 2015 at 19:05
  • @Power-Mosfet Unfortunately, in my experience, the larger the organization the more likely they are open to basic abuses. Organizations like banks, governments, airlines, couriers and the like rarely have SPF records.
    – BillThor
    Jan 13, 2015 at 3:10

Not the answer you're looking for? Browse other questions tagged .