[Mimedefang] smtp spoofing

David F. Skoll dfs at roaringpenguin.com
Thu Jun 2 14:05:01 EDT 2005


Super-Dome wrote:

> but is this possible if *TO address is for my domain ?

Sure.  Publish an SPF record for your domain, and reject mail
that claims to be from your domain, but fails the SPF test.

(Even this isn't really good enough, as I mentioned in my
earlier post.)

It will also break things like e-cards and some mailing lists.

Regards,

David.



More information about the MIMEDefang mailing list