Information Security Stack Exchange is a question and answer site for information security professionals. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

At my work we have a very tricky issue with spam. We use postfix, and recently began to receive several spams mail with our own domain. This is obviously very prejudicial for us, because many customers could think that those mails were sent by our company. Anyone knows some guide or solution for this particular problem? The thing is that mail server configuration isn't my expertise, so I'm a bit lost in this.

Thanks in advance

share|improve this question
Are they only using the from tag with your domain in it or are you saying they are using your mailserver to send spam? – Chris Dale Jan 13 '11 at 14:39
I don't know exactly... I supposed postfix has some logs files, but as I said, config things isn't my expertise – Nisanio Jan 13 '11 at 16:38
up vote 7 down vote accepted

It could be that what you're seeing is a spammer using your domain name as the "From" address for a particular set of mails. This is done as a method of bypassing some spam filters (although I don't think it's particularly effective these days, as commercial mail filters still seem to be quite good at recognizing the mails as SPAM)

There's no way to directly stop the spammer from doing this, however I wouldn't worry too much about your customers seeing this as a negative, as it's a common phenomenon (a domain I've got gets this on a fairly regular basis) and not within your control to prevent.

share|improve this answer

There's no fix for this. Anyone can forge the From: address in an email, and only a technically sophisticated user can detect the forgery.

You could use DKIM and/or SPF to increase the chance that ISPs will detect the forgeries and block the emails, but this will only work sometimes.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.