Results 1 to 8 of 8

Thread: Spf

  1. June 24th, 2004, 07:34 PM #1
    netman4ttm
    netman4ttm is offline
    Member
    Join Date
    Aug 2002
    Posts
    67

    Spf

    I have no idea if this is the forum to ask this question; but here goes.

    I'm getting hundreds of bounced e-mails. Six thousand a day is not uncommon. The problem is that my domain name is being spoofed.

    Has anyone had any experience with SPF

    http://spf.pobox.com/

    This seems to be the ideal solution, even though it is not complete.

    Thanks
    Reply With Quote Reply With Quote
  2. June 24th, 2004, 07:51 PM #2
    ss2chef
    ss2chef is offline
    Senior Member
    Join Date
    Mar 2004
    Location
    Colorado
    Posts
    421
    AFAIK, unless the mail servers taking the deliveries of the forged emails are using SPF as well, you will still probably get the NDRs.

    If I understand the technology correctly...
    Reply With Quote Reply With Quote
  3. June 24th, 2004, 07:56 PM #3
    netman4ttm
    netman4ttm is offline
    Member
    Join Date
    Aug 2002
    Posts
    67
    True, but it looks as though some big players are in this game.

    AOL for one and at this point even partial relief is better than none.
    Reply With Quote Reply With Quote
  4. June 28th, 2004, 03:46 PM #4
    SirDice
    SirDice is offline
    Just Another Geek
    Join Date
    Jul 2002
    Location
    Rotterdam, Netherlands
    Posts
    3,401
    Sometimes the original headers get send along the NDR. Can't you trace one of those to find the culpret?
    Oliver's Law:
    Experience is something you don't get until just after you need it.
    Reply With Quote Reply With Quote
  5. June 28th, 2004, 04:37 PM #5
    netman4ttm
    netman4ttm is offline
    Member
    Join Date
    Aug 2002
    Posts
    67
    The culprit is

    name@co - co cc

    name can be any combination found on your keyboard.

    with link to www.blyadi.biz which goes no where.
    Reply With Quote Reply With Quote
  6. June 29th, 2004, 10:10 AM #6
    SirDice
    SirDice is offline
    Just Another Geek
    Join Date
    Jul 2002
    Location
    Rotterdam, Netherlands
    Posts
    3,401
    Aren't there any headers in those NDRs? A source email address is useless as it's probably spoofed.

    Have you tried contacting the party that sends you the NDRs? Maybe you can work with them to trace it from their side. They'll probably have some problems to.
    Oliver's Law:
    Experience is something you don't get until just after you need it.
    Reply With Quote Reply With Quote
  7. June 29th, 2004, 01:23 PM #7
    netman4ttm
    netman4ttm is offline
    Member
    Join Date
    Aug 2002
    Posts
    67
    192.168.100.200

    That number does not exist on any of my internal domains. And it should not appear at all. I thought that number would not go across the Internet, but obviously, I am wrong. Or someone knows how to spoof an IP number.

    The forwarding mail server looks like--
    adsl.nuria.telefonica-data.net at 80.28.152.240

    Tried pinging that number no responce
    Reply With Quote Reply With Quote
  8. June 29th, 2004, 01:30 PM #8
    SirDice
    SirDice is offline
    Just Another Geek
    Join Date
    Jul 2002
    Location
    Rotterdam, Netherlands
    Posts
    3,401
    Sounds like a spanish DSL user to me.
    Can you post one of those NDRs here? Only remove the addresses that belong to you.
    Oliver's Law:
    Experience is something you don't get until just after you need it.
    Reply With Quote Reply With Quote
« Previous Thread | Next Thread »

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

Forum Rules