Print Page | Close Window

Problems with mails pretending to be from

Printed From: LogSat Software
Category: Spam Filter ISP
Forum Name: Spam Filter ISP Support
Forum Description: General support for Spam Filter ISP
URL: https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=5387
Printed Date: 03 June 2025 at 6:55am


Topic: Problems with mails pretending to be from
Posted By: Guests
Subject: Problems with mails pretending to be from
Date Posted: 24 November 2005 at 6:02am

Hi,

  We have the following problem:

  several addresses are marked in the blacklist "from" emails ,

  these are addresses that useally get spams and dose not exists   in our system (for e.g mailto:info@mydomain.com - info@mydomain.com ) , but since our local domain have to be also in the "Local Domain" tab in the whitelists, mails that are identifiying themselvs to be from mailto:info@mydomain.com - info@mydomain.com are bypassing all of the filters with the following message

"Bypassed all rules for: mailto:user@mydomain.com - user@mydomain.com from mailto:info@mydomain.com - info@mydomain.com ( Whitelisted Email From Domain)"

 

any ideas how to block specific address pretending to be from my local domain ?

 

Thanks

Sagi.


Replies:
Posted By: LogSat
Date Posted: 24 November 2005 at 7:32am
Sagi,

From your logs it looks as if you have your domain (mydomain.com) listed in the "Excluded FROM Emails" or in the "Excluded Domains / IPs". Please note that unless there is a very specific need to do that, you in general will want to avoid placing your own domain in your whitelists. If not, you will see exactly what is happening now, which is spammers faking your domain name that bypass all rules when sending you emails. You should only have your domain (mydomain.com) listed under the "Local Domains" whitelist. The Local Domains tell SpamFilter which emails it should receive emails for, while still applying all other filtering rules.


-------------
Roberto Franceschetti

http://www.logsat.com" rel="nofollow - LogSat Software

http://www.logsat.com/sfi-spam-filter.asp" rel="nofollow - Spam Filter ISP


Print Page | Close Window