Spammers using YOUR domain? Stamp it out.

**Kayla** · May 7th, 2007, 4:52 PM

This was written by Charlie in our abuse department. I think it is a really clear explanation of this annoyance! I hope it helps a traveling Surmunity user in need.

Quote:

Spammers will often pick random domains, and then forge the return address headers to look like the message is coming from that domain. This is an insecurity in the SMTP protocol in general, and not an issue with any server configuration. Because of this, nobody takes the return address as valid proof you are spamming, thus you cannot be held accountable. The thing that people look for, are the IPs which sent the spam in the first place. This will be the only true indicator of who actually sent the message.

If you have a catchall setup on your domain, this will allow those forged emails to be accepted as a catchall will route all invalid user

domain.com addresses to one main email account under your domain. So if the user is invalid, you will still get the email in the catchall inbox. This inbox is usually the main inbox for the account.

I would recommend that you disable this catchall so they at least have to forge with a valid return email address.

To disable your catchall, you simply follow these steps:

1) Login to your cpanel account
2) Click on Mail Icon
3) Click on default address
4) Under each domain for your account, enter the following into the box (Neglect quotes, they are for clarity):

---
:fail: No such User Here
---

And that will send bounce backs to all users who send to invalid email addresses.

**puckchaser** · May 7th, 2007, 4:57 PM

This really wont stamp out the root cause, but it will help with one of the side effects which is the emails returned to your domain .

Personally, I have all my mail sent to my gmail account, and find that gmail does a good job at filtering out spam.

I do this because for the last 9 years, I have had my domain and frequently 'invent' new addresses, but dont create mail boxes for them. So , I would be screwed if I failed unrecognized emails... ;-)

mgk · May 7th, 2007, 5:01 PM

Quote:

Originally Posted by puckchaser

I do this because for the last 9 years, I have had my domain and frequently 'invent' new addresses, but dont create mail boxes for them. So , I would be screwed if I failed unrecognized emails... ;-)

I have a similar problem, but at least on most domains I can apply that 'trick'

**Brandonnn** · May 7th, 2007, 6:43 PM

Quote:

Originally Posted by puckchaser

Personally, I have all my mail sent to my gmail account, and find that gmail does a good job at filtering out spam.

I know nothing about spam prevention programs but I do know that gmail does a good job at filtering out the spam... (i too have all my mail from all of my domains forwarded to my gmail account).

GMail weeds out about 12 thousand spam emails a day.

**Kayla** · May 7th, 2007, 7:18 PM

Quote:

Originally Posted by puckchaser

This really wont stamp out the root cause, but it will help with one of the side effects which is the emails returned to your domain .

Wanted a catchy title for reads, I don't have the true stamp either.

Hate spammers.

**Dan** · May 7th, 2007, 7:26 PM

Quote:

Originally Posted by Brandon

I know nothing about spam prevention programs but I do know that gmail does a good job at filtering out the spam... (i too have all my mail from all of my domains forwarded to my gmail account).

GMail weeds out about 12 thousand spam emails a day.

I could never get into gmail.. but anything that helps with the spam is good enough for me.. I'll hafta try that out

**puckchaser** · May 7th, 2007, 9:26 PM

Quote:

Originally Posted by Dan

I could never get into gmail.. but anything that helps with the spam is good enough for me.. I'll hafta try that out

Once you can get beyond the lack of folders, you're golden. For me, someone is 100% non folder oriented, it was easy. I would always search emails by sender or subject.

If you really get into gmail, you can actually have google host your domain's email natively in the google interface. for free. with 50 mail boxes, 2gb each.

That, and their spam filtering is pretty darn good.

**puckchaser** · May 7th, 2007, 9:28 PM

Quote:

Originally Posted by Kayla

Wanted a catchy title for reads, I don't have the true stamp either.

Hate spammers.

Well, I was gentle in my rebuke ;-), and yes, it was a catchy title that can effect a positive change for those that may not be aware of the :fail: default address...

(ugh... that was all corporate-y)

**Kayla** · May 7th, 2007, 10:04 PM

Peanut, peanut butter, and jelly.

May 7th, 2007, 4:57 PM	#2 (permalink)
puckchaser He shoots.. He scores! Super #1 Joined in Feb 2007 Lives in A room with no windows. Hosted on SH110 1,424 posts Gave thanks: 43 Thanked 137 times	This really wont stamp out the root cause, but it will help with one of the side effects which is the emails returned to your domain . Personally, I have all my mail sent to my gmail account, and find that gmail does a good job at filtering out spam. I do this because for the last 9 years, I have had my domain and frequently 'invent' new addresses, but dont create mail boxes for them. So , I would be screwed if I failed unrecognized emails... ;-) __________________ SH110

May 7th, 2007, 10:04 PM	#9 (permalink)
Kayla Searcher Surpass Staff Joined in May 2003 Lives in Orlando 24,509 posts Gave thanks: 936 Thanked 787 times	Peanut, peanut butter, and jelly. __________________ Follow Surpass on Twitter and Facebook Check out interesting finds on the Surpass Blog .... it's coming.

Thread Tools	Search this Thread
Show Printable Version Email this Page	Search this Thread: Advanced Search
Rate This Thread
Rate This Thread:

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)