Spoofing Problem

[bilal.ahmed at kfueit.edu.pk]

I am facing a problem that someone is spoofing my domain address and sending
emails to my own domain users.  I have set valid SPF, DKIM, DMARC for my
Mail server. 

To sort this problem I have filter emails based on SPF checks and the email
with spf fail are marked high score and marked as spam. But the issue with
spf filter many legitimate email from many servers marked as spam.

 

More importantly my own emails spf fails shown in MailScanner while I have
verified through Gmail and various other tools that my SPF , DKIM, DMARC are
passed.

 

My Mail server is hosted inside in private network and NAT behind the public
DNS , since in public DNS I have spf according to mail server public
interface so in local intranet DNS I added SPF records according to email
server private ip,

Now few time spf shown as pass in mailscanner and mostly fail . Temporarily
I have whitelisted my server host ip and my intranet ip to avoid email
blocking due to spf fail . Please someone guide any solution to either I can
stop email spoofing to my domain without spf check or otherwise how can I
sort this spf fail issue on mailscanner .

 

 

 

 

 

 

 

 

this also block many legitimate email with spf not set properly

 

Bilal Ahmad

Network Administrator

Cell: +92 333 7451870  |  Tel: +92 68 5882400  |  Ext. 2499

www.kfueit.edu.pk

 <http://www.kfueit.edu.pk/> 

 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20190709/15a3a6b5/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.jpg
Type: image/jpeg
Size: 5255 bytes
Desc: not available
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20190709/15a3a6b5/attachment.jpg>