Spf
Results 1 to 8 of 8

Thread: Spf

  1. #1

    Spf

    I have no idea if this is the forum to ask this question; but here goes.

    I'm getting hundreds of bounced e-mails. Six thousand a day is not uncommon. The problem is that my domain name is being spoofed.

    Has anyone had any experience with SPF

    http://spf.pobox.com/

    This seems to be the ideal solution, even though it is not complete.

    Thanks

  2. #2
    Senior Member
    Join Date
    Mar 2004
    Location
    Colorado
    Posts
    421
    AFAIK, unless the mail servers taking the deliveries of the forged emails are using SPF as well, you will still probably get the NDRs.

    If I understand the technology correctly...

  3. #3
    True, but it looks as though some big players are in this game.

    AOL for one and at this point even partial relief is better than none.

  4. #4
    Just Another Geek
    Join Date
    Jul 2002
    Location
    Rotterdam, Netherlands
    Posts
    3,401
    Sometimes the original headers get send along the NDR. Can't you trace one of those to find the culpret?
    Oliver's Law:
    Experience is something you don't get until just after you need it.

  5. #5
    The culprit is

    name@co - co cc

    name can be any combination found on your keyboard.

    with link to www.blyadi.biz which goes no where.

  6. #6
    Just Another Geek
    Join Date
    Jul 2002
    Location
    Rotterdam, Netherlands
    Posts
    3,401
    Aren't there any headers in those NDRs? A source email address is useless as it's probably spoofed.

    Have you tried contacting the party that sends you the NDRs? Maybe you can work with them to trace it from their side. They'll probably have some problems to.
    Oliver's Law:
    Experience is something you don't get until just after you need it.

  7. #7
    192.168.100.200

    That number does not exist on any of my internal domains. And it should not appear at all. I thought that number would not go across the Internet, but obviously, I am wrong. Or someone knows how to spoof an IP number.

    The forwarding mail server looks like--
    adsl.nuria.telefonica-data.net at 80.28.152.240

    Tried pinging that number no responce

  8. #8
    Just Another Geek
    Join Date
    Jul 2002
    Location
    Rotterdam, Netherlands
    Posts
    3,401
    Sounds like a spanish DSL user to me.
    Can you post one of those NDRs here? Only remove the addresses that belong to you.
    Oliver's Law:
    Experience is something you don't get until just after you need it.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •