Print Page | Close Window

Starting to get alot of spam throgh

Printed From: LogSat Software
Category: Spam Filter ISP
Forum Name: Spam Filter ISP Support
Forum Description: General support for Spam Filter ISP
URL: http://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6884
Printed Date: 16 December 2017 at 6:16am


Topic: Starting to get alot of spam throgh
Posted By: morten44
Subject: Starting to get alot of spam throgh
Date Posted: 23 October 2010 at 6:20am
Hi
We are using very limited filter settings to prevent users getting real mail caught in the filter

The last month we start to get a lot of spam through

Typical from users that appear to me from our own domain but is not

Some example
My address is morten@e-advice.dk
I get spam from
morten@e-advice.dk subject "RE CV"
morten@e-advice.dk subject "Greetings"
job@e-advice.dk subject "For CV"
etc

my question is
This mails are not send from our own mail server.
What settings in SPAMFILTER could be activated to get this mails blocked?

Also if i activate the settings that if to and from address is the same, i guess that will take it out, but all who normally use e-mail to send notes to them self, will also be affected. Is that right?
Anyone with some good idea how to combat this type of spam?

Regards
Morten



Replies:
Posted By: AndrewD
Date Posted: 24 October 2010 at 10:59am
Hi,
I do exactly that, turn on the email from = email to filter, as if a user sends a note to themselves then the path of the message is
Client --> Email Server (Exchange) --> back to my mailbox.
So it will never see the spamfilter server.
 
Cheers


Posted By: LogSat
Date Posted: 24 October 2010 at 10:49pm
Morten,

AndrewD is correct, legitimate users who send emails to themselves will usually do so without having SpamFilter stopping those emails, as in most implementations of SpamFilter, the end users are using your SMTP server, not SpamFilter, in their "outgoing SMTP server" configuration in their email clients.

If that is not the case (meaning your users are using SpamFilter to relay their emails rather than your SMTP server), in this case you most likely are having your users authenticate with SpamFilter (via SMTP AUTH) before sending the emails, in which case they will be whitelisted and will thus bypass the filter.

This said, usually a better method to stop these kind of emails is by implementing SPF in your DNS (see openspf.org), and enabling the SPF filter in SpamFilter. SPF allows you to control, via a special record in your DNS (the SPF TXT record), who is authorized to send emails on behalf of your domain (@e-advice.dk). Only the servers you authorize will be able to send emails from @e-advice.dk. SpamFilter will reject any such senders unless they are allowed by your SPF record.


-------------
Roberto Franceschetti

http://www.logsat.com" rel="nofollow - LogSat Software

http://www.logsat.com/sfi-spam-filter.asp" rel="nofollow - Spam Filter ISP


Posted By: morten44
Date Posted: 09 November 2010 at 12:51pm
Sorry for late update
thanks for the input
We will implement that ourself
it make sence what you are saying
local mail does not pass through spamfilter

Kind Regards
Morten



Print Page | Close Window