List Info

Thread: Need to prevent emails with forged from addresses.




Need to prevent emails with forged from addresses.
country flaguser name
New Zealand
2007-03-22 14:11:30
Running SurgeMail Version 3.8f3-3, Built Jan 12 2007
09:50:47, Platform 
Linux

The following message was received by my server and it
claims to come 
from an account that does not exist on this domain. I also
have an SPF 
record defined and published which this of course does not
match.

SPF Record: v=spf1 a mx mx:smtphost.net -all

I have only replaced the destination address to xxxxthecolony.com. What 
settings do I need to change to prevent such emails with
forged from 
addresses from getting through?Ho

---
Received-SPF: pass (Last token {include:spf-mx.zaq.ne.jp}
(res=PASS)) 
client-ip=211.124.127.10; envelope-from=<dufjw806sakai.zaq.ne.jp>; 
x-ip-name=mogw10.zaq.ne.jp;
Received: from ougw03.zaq.ne.jp (unverified
[211.124.127.10])
by smtphost.net (smtphost 3.8b-1) with ESMTP id
397883-1867333
for <xxxxthecolony.com>; Sun, 04 Mar 2007 17:22:49 -0600
Return-Path: <dufjw806sakai.zaq.ne.jp>
X-Verify-SMTP: Host 211.124.127.10 sending to us was not
listening
Received: from ouvc01.zaq.ne.jp (ouvc01.zaq-back.ne.jp
[10.2.84.33])
by ougw03.zaq.ne.jp with ESMTP id 9DEDF1CC002
for <xxxxthecolony.com>;
Mon, 5 Mar 2007 08:22:33 +0900 (JST)
Received: from ouma04.zaq.ne.jp (ouma04.zaq-back.ne.jp
[10.2.80.36])
by ouvc01.zaq.ne.jp (Postfix) with ESMTP id 7A7F31CC002
for <xxxxthecolony.com>; Mon, 5 Mar 2007 08:22:33 +0900
(JST)
Received: from zaq3a552c0b.zaq.ne.jp (zaq3a552c0b.zaq.ne.jp
[58.85.44.11])
by ouma04.zaq.ne.jp with SMTP id DBFF98282BB
for <xxxxthecolony.com>;
Mon, 5 Mar 2007 08:22:32 +0900 (JST)
X-Original-To: xxxxthecolony.com
Delivered-To: xxxxthecolony.com
Received: from [58.85.44.11] (port=26920
helo=zaq3a552c0b.zaq.ne.jp)
by mail.smtphost.net with esmtp
id 771120-771120-60
for xxxxthecolony.com; Mon, 05 Mar 2007 08:24:39 -0000 (EET)
Message-ID: <02a201c75eff$01c75eff$0b2c553athecolony.com>
From: "Sandy" <dexvthecolony.com>
To: "Martha" <xxxxthecolony.com>
Subject: Wall Street Alert
Date: Mon, 05 Mar 2007 08:24:39 -0000 (EET)
MIME-Version: 1.0
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2900.2180
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
X-Rcpt-To: <xxxxthecolony.com>
X-SpamDetect: ***: 3.200000 From isn't in return 
path=1.1,WrongFromSpf=0.5,Suspicious proportion of text in 
CAPS=1.0,X-Verify-SMTP present=0.6
X-NotAscii: charset=us-ascii
X-IP-stats: No info recorded yet ip=211.124.127.10
X-Originating-IP: 211.124.127.10
Content-Transfer-Encoding: 7bit
Content-Transfer-Encoding: quoted-printable

--- message body removed ---


[1]

about | contact  Other archives ( Real Estate discussion Medical topics )