1. Advertising
    y u no do it?

    Advertising (learn more)

    Advertise virtually anything here, with CPM banner ads, CPM email ads and CPC contextual links. You can target relevant areas of the site and show ads based on geographical location of the user if you wish.

    Starts at just $1 per CPM or $0.10 per CPC.

someone is using my domain e-mail account

Discussion in 'Security' started by Jalpari, May 2, 2007.

  1. #1
    someone is sending me junk e-mail by using my web e-mail address in the TO and from text box how can he/she do it ? is he knows my password and how i can block this kind of unwanted e-mails.

    he is sending e-mails almost on daily basis and these only contain one image with a hyperlink. few months back someone is also sending newsletter from viagra.com now i am sure these e-mails also contains this kind of stuff . i hear e-mail about viagra can contain spams
    is it true and how i can prevent it​

     
    Jalpari, May 2, 2007 IP
  2. Jeoru

    Jeoru Well-Known Member

    Messages:
    1,115
    Likes Received:
    45
    Best Answers:
    0
    Trophy Points:
    160
    #2
    I also receive those! Help us please. :confused:
     
    Jeoru, May 2, 2007 IP
  3. clancey

    clancey Peon

    Messages:
    1,099
    Likes Received:
    63
    Best Answers:
    0
    Trophy Points:
    0
    #3
    There are getting to be a lot of threads on this topic and the answer is always the same: There is nothing you can do to prevent this.

    The spammer is simply using your domain name in the email header. This technique is trivially simple and is one of the first things that a new spammer learns.

    One "inbox" solution to the problem is a good spam filtering system which filters against the content of the email message.

    If you control your email server, you may be able to add a locally-generated header value. If you receive an email from your domain and the message does not contain this value, then it is spam. You could try to extend the concept further by blocking email from the IP address of the sender. Since most spam is sent via trojaned computers, this block rarely interferes with your ability to receive legitimate email.

    If you never use your domain for email then the solution is simple. Write a filter for your email reader which treats all email from senders and reply-tos at your domain as spam. I have domains from which I never send email. I just might implement this!
     
    clancey, May 2, 2007 IP
  4. sweetfunny

    sweetfunny Banned

    Messages:
    5,743
    Likes Received:
    467
    Best Answers:
    0
    Trophy Points:
    0
    #4
    I get dozens from a blank title and from fields that changes IP, so i cant stop it.
     
    sweetfunny, May 2, 2007 IP
  5. Jalpari

    Jalpari Notable Member

    Messages:
    5,640
    Likes Received:
    137
    Best Answers:
    0
    Trophy Points:
    260
    #5
    how i can block that ip in the e-mail no ip is mention
     
    Jalpari, May 3, 2007 IP
  6. clancey

    clancey Peon

    Messages:
    1,099
    Likes Received:
    63
    Best Answers:
    0
    Trophy Points:
    0
    #6
    This kind of blocking requires that you control your email server and that you have advanced knowledge of how your mail server works and how email works in order to write scripts which would allow you to implement this.

    Basically, when another mail server contacts your's, your program will have the IP address. That IP address may also be located in the email header in the "Received: from" lines.

    What you need to figure out is how to get your mailserver to pass that piece of data along to a program which will analyze the entire header. That program needs to know the difference from something legitimately sent from a user at your domain and someone who is not. If the message fails, you can add the IP address to a block list.

    To implement the block list, you need to be able to compare the IP address of the sender's machine with those on the list. You then need to be able to tell your mail server to drop the message or to amend the header in some way which your mail reader can filter out those messages into a spam folder.

    Optionally, you could just have your mail reader send all messages from a user at your domain into a suspected spam folder if you never send yourself email!
     
    clancey, May 3, 2007 IP
  7. chilli_source

    chilli_source Active Member

    Messages:
    58
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    61
    #7
    do you know for sure if its going through your server or if theyre just spoofing/faking your email address as the sender?

    also do you have any contact forms on your website, as these are quite often easily exploited and abused by spammers.
     
    chilli_source, May 3, 2007 IP
  8. funtoosh

    funtoosh Active Member

    Messages:
    415
    Likes Received:
    11
    Best Answers:
    0
    Trophy Points:
    60
    #8
    Hello
    If you want to avoid others using your email to send out emails (it's basically a spoof, they are not using your mail server), you can setup SPF record to avoid it.

    you can read more about SPF at http://www.openspf.org/

    Greets
     
    funtoosh, May 4, 2007 IP
  9. venetsian

    venetsian Well-Known Member

    Messages:
    1,105
    Likes Received:
    61
    Best Answers:
    0
    Trophy Points:
    168
    #9
    The best way to fight with those fu*n spammers is to set up the DNS records for SPF.

    You must set up the following:

    domain: your domain name with dot at the end for ex: venetsian.com.
    TTL (Time To Live) 7200
    Record type: TXT
    ENTRY: "v=spf1 a mx ptr ~all"

    This will accept sender as valid if the ip is from the A record (the domain name server ip address) the MX (the mail server which can be different for example I use Google Apps). Also you can add your own IP computer/router's address as valid. All other senders will be denied as spam.

    Cheers,

    Venetsian.
     
    venetsian, May 4, 2007 IP
  10. Spartan_Strategy

    Spartan_Strategy Peon

    Messages:
    197
    Likes Received:
    5
    Best Answers:
    0
    Trophy Points:
    0
    #10
    On your mail server you can do whats called SPF (Sender Policy Framework)...take a look at mailenable.com for some info on this. We use this mail server. You can also define required authentication for senders to send through your mail server. What SPF does it it looks at the Ip of the sender and says is this really or is it trying to be forged. So this could do the trick for you but you will need your mail server admin to help you of course. You can not do this in outlook by yourself.

    One final idea is to make a filter in outlook with rules looking for situations where your name is in the to and thr from and if so deletes it. Since you most likely wont send emails to yourself oftent this should do the trick.
     
    Spartan_Strategy, May 12, 2007 IP
  11. randomIntellections

    randomIntellections Well-Known Member

    Messages:
    985
    Likes Received:
    13
    Best Answers:
    0
    Trophy Points:
    180
    #11
    actually its not that they are using your email , they are just spoofing emails , there are some bulk mailers that will spoof the from email to be = target email to avoid spam filters. Just use a good email client and enable sender verification on your mail server.
     
    randomIntellections, May 13, 2007 IP