/ Register

Welcome to Centmin Mod Community
Become a Member

Email Sysadmin Preventing email spoof?

Discussion in 'System Administration' started by Jon Snow, Oct 14, 2018.

Previous Thread Next Thread
Loading...
  1. Oct 14, 2018 #1
    Jon Snow

    Jon Snow Active Member

    917
    188
    43
    Jun 30, 2017
    Ratings:
    +293
    Local Time:
    2:10 PM
    Nginx 1.13.9
    MariaDB 10.1.31
    I use Zoho.

    Got an email in my spam inbox today from my email address with the title "your email has been hacked". Now, I know it definitely has not been hacked but it's likely just email spoofing.

    Is there a way to prevent these types of things? I can see it doing a lot of damage.
     
  2. Oct 14, 2018 #2
    wmtech

    wmtech Active Member

    187
    44
    28
    Jul 22, 2017
    Ratings:
    +139
    Local Time:
    7:10 PM
    Use SPF and DMARC. All professional mail servers should have it set up. If you use a service without, switch the service.
     
  3. Oct 14, 2018 #3
    eva2000

    eva2000 Administrator Staff Member

    58,905
    12,490
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +19,122
    Local Time:
    3:10 AM
    Nginx 1.31.x
    MariaDB 10.x/11.4+/12.3+
    Yeahs steps for SPF/DKIM/DMARC which apply to centmin mod main host names at Email - Steps to ensure your site/server email doesn't end up in spam inboxes also apply to 3rd party @domain hosted emails like Zoho. Your Zoho setup should have instructions for SPF/DKIM setup and DMARC can be done via Postmark Email - Free Weekly DMARC Email Reports for Your Domain from Postmark

    old Zoho settings sticky including SPF/DKIM links Email - Zoho Mail Free @yourdomain.com Email Provider Setup Information
     
  4. Oct 16, 2018 #4
    Matt

    Matt Well-Known Member

    932
    415
    63
    May 25, 2014
    Rotherham, UK
    Ratings:
    +671
    Local Time:
    6:10 PM
    1.5.15
    MariaDB 10.2
    I've been seeing more and more of this. A already stated, setting a correct SPF and DKIM value. While most people set the all on the end of the SPF record to ~all, this will still be accepted as a soft fail. If you've had good deliver ability on your domain, setting -all and a hard fail should be OK and stop the spoofing.
     
  5. Oct 17, 2018 #5
    eva2000

    eva2000 Administrator Staff Member

    58,905
    12,490
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +19,122
    Local Time:
    3:10 AM
    Nginx 1.31.x
    MariaDB 10.x/11.4+/12.3+
    Yeah though tricky to decide if you want to set to hard fail vs soft fail SPF Hard Fail vs Soft Fail though from seems SPF is not enough I have SPF, do I really need DMARC to protect my domain? What does DMARC do that SPF does not?, DMARC is needed
     
  6. Oct 17, 2018 #6
    Matt

    Matt Well-Known Member

    932
    415
    63
    May 25, 2014
    Rotherham, UK
    Ratings:
    +671
    Local Time:
    6:10 PM
    1.5.15
    MariaDB 10.2
    Yeah, I have DMARC as well. It's a real minefield when it comes to email deliverability.
     
  7. Oct 17, 2018 #7
    eva2000

    eva2000 Administrator Staff Member

    58,905
    12,490
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +19,122
    Local Time:
    3:10 AM
    Nginx 1.31.x
    MariaDB 10.x/11.4+/12.3+
    Indeed that's why I wrote Email - Steps to ensure your site/server email doesn't end up in spam inboxes and why Centmin Mod doens't have native imap/pop3 support heh. Let the professional 3rd party @domain providers handle issues related to email deliverability on their end :)
     
Previous Thread Next Thread
Loading...

.