homepage Welcome to WebmasterWorld Guest from 54.205.106.111
register, free tools, login, search, pro membership, help, library, announcements, recent posts, open posts,
Pubcon Platinum Sponsor 2014
Home / Forums Index / Microsoft / Microsoft IIS Web Server and ASP.NET
Forum Library, Charter, Moderators: ocean10000

Microsoft IIS Web Server and ASP.NET Forum

    
iis setup help needed
spammers using our domain name as return address
malinkam




msg:3690777
 11:32 pm on Jul 4, 2008 (gmt 0)

Some spammers have been sending thousands of spam using our domain name as return address. Obviously we get all the bounce backs. What is the latest on protecting yourself against this? Should we disable catch all account? Is this a good idea?
Most of return addresses are:
blabla@ourdomain.com
blabla2@ourdomain.com
blabla3@ourdomain.com
etc, etc.

Thank you in advance

 

malinkam




msg:3690778
 11:33 pm on Jul 4, 2008 (gmt 0)

forgot to add, it's windows 2003 server, iis 6

pageoneresults




msg:3690779
 11:34 pm on Jul 4, 2008 (gmt 0)

Are they just "spoofing" the "From Address" or are they able to send out email from your domain? Two different things to discuss here.

malinkam




msg:3690781
 11:39 pm on Jul 4, 2008 (gmt 0)

sorry, spoofing

pageoneresults




msg:3690782
 11:42 pm on Jul 4, 2008 (gmt 0)

Nothing you can really do other than educate your customers on how the From address can be spoofed by anyone.

As long as you have SPF in place and you have other bases covered like not allowing SMTP Relay, you should be fine. I say "should be" because email these days is best left for the Professionals.

malinkam




msg:3690783
 11:44 pm on Jul 4, 2008 (gmt 0)

no, no spf has been setup, I guess that's a good start and I'll look into the smtp relay as well,

malinkam




msg:3690784
 11:44 pm on Jul 4, 2008 (gmt 0)

where's my manners, thank you.

Staffa




msg:3690908
 6:17 am on Jul 5, 2008 (gmt 0)

You might also want to disable your catch all account.
It will save you from having to deal with all the bounce backs and genuine people wanting to contact you will use either your site forms or any address you gave them any way.

dukelips




msg:3692925
 5:16 am on Jul 8, 2008 (gmt 0)

Only way to stop is to remove catch all account, we had this issue and after removing catchall . the problem stopped

Global Options:
 top home search open messages active posts  
 

Home / Forums Index / Microsoft / Microsoft IIS Web Server and ASP.NET
rss feed

All trademarks and copyrights held by respective owners. Member comments are owned by the poster.
Home ¦ Free Tools ¦ Terms of Service ¦ Privacy Policy ¦ Report Problem ¦ About ¦ Library ¦ Newsletter
WebmasterWorld is a Developer Shed Community owned by Jim Boykin.
© Webmaster World 1996-2014 all rights reserved