Re: SPF rules do not look at spoofed From: address

[Reindl Harald]

Am 12.02.2015 um 17:58 schrieb francis picabia:

On Thu, Feb 12, 2015 at 12:33 PM, Kevin A. McGrail <kmcgr...@pccc.com> wrote:

Spf deals with the envelope sender not the from address.

Beyond that it, you might find dkim to be a better solution to prevent
others spoofing your domain.

Thanks for the reply.  Has anyone tried a test like the Spoofing
test available at knowb4.com?

You fill in a form, then they send a test email
from your.b...@example.com , where example.com
is your own domain.

It is not caught by SPF, and it passes DKIM.

I'm talking about inbound email at your MX,
and spoofing of the From address.  Everything
else (sender, helo) matches the origin

AGAIN: it's all about envelopes and not From-Headers



there is nothing to to about - period

YOU CAN NOT prevent "spoofing From-Header" without reject *for sure* a ton of legit mail too including your own to most mailing lists leading in a suspended subscription or unsubscribe when you permanently reject list mail

signature.asc
Description: OpenPGP digital signature