<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=us-ascii"><meta name=Generator content="Microsoft Word 15 (filtered medium)"><!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Consolas;
panose-1:2 11 6 9 2 2 4 3 2 4;}
@font-face
{font-family:Gadugi;
panose-1:2 11 5 2 4 2 4 2 2 3;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;
color:black;
mso-fareast-language:EN-US;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
pre
{mso-style-priority:99;
mso-style-link:"HTML Preformatted Char";
margin:0cm;
margin-bottom:.0001pt;
font-size:10.0pt;
font-family:"Courier New";
color:black;}
p.msonormal0, li.msonormal0, div.msonormal0
{mso-style-name:msonormal;
mso-margin-top-alt:auto;
margin-right:0cm;
mso-margin-bottom-alt:auto;
margin-left:0cm;
font-size:11.0pt;
font-family:"Calibri",sans-serif;
color:black;}
span.EmailStyle18
{mso-style-type:personal;
font-family:"Calibri",sans-serif;
color:windowtext;}
span.HTMLPreformattedChar
{mso-style-name:"HTML Preformatted Char";
mso-style-priority:99;
mso-style-link:"HTML Preformatted";
font-family:"Consolas",serif;
color:black;
mso-fareast-language:EN-US;}
span.EmailStyle21
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body bgcolor=white lang=en-PK link="#0563C1" vlink="#954F72"><div class=WordSection1><p class=MsoNormal><span lang=EN-US style='color:windowtext'><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US style='color:windowtext'>Thanks I will try and update .<o:p></o:p></span></p><p class=MsoNormal><span lang=en-PK style='color:windowtext'><o:p> </o:p></span></p><div><p class=MsoNormal style='line-height:90%'><b><span lang=en-PK style='line-height:90%;font-family:"Gadugi",sans-serif;color:#13A538;mso-fareast-language:#2000'>Bilal Ahmad</span></b><span lang=en-PK style='color:windowtext;mso-fareast-language:#2000'><o:p></o:p></span></p><p class=MsoNormal style='line-height:90%'><span lang=en-PK style='font-size:10.0pt;line-height:90%;font-family:"Gadugi",sans-serif;color:#203478;mso-fareast-language:#2000'>Network Administrator<o:p></o:p></span></p></div><p class=MsoNormal><span lang=en-PK style='color:windowtext'><o:p> </o:p></span></p><div><div style='border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0cm 0cm 0cm'><p class=MsoNormal><b><span lang=EN-US style='color:windowtext;mso-fareast-language:#2000'>From:</span></b><span lang=EN-US style='color:windowtext;mso-fareast-language:#2000'> MailScanner <mailscanner-bounces+bilal.ahmed=kfueit.edu.pk@lists.mailscanner.info> <b>On Behalf Of </b>admin<br><b>Sent:</b> Tuesday, 9 July 2019 9:58 PM<br><b>To:</b> mailscanner@lists.mailscanner.info<br><b>Subject:</b> Re: Spoofing Problem<o:p></o:p></span></p></div></div><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal style='margin-bottom:12.0pt'>Good Afternoon,<br><br>I have my mailscanner setup as a gateway. I use postfix in my setup and have done the following to prevent spoofing going to my domain users.<br><br>in main.cf I put the following<br>smtpd_recipient_restrictions = reject_unauth_destination, check_recipient_access hash:/etc/postfix/spoofingprotected_domains<br><br>Add your domain to the spoofingprotected_domains. So far this has worked for me.<span style='mso-fareast-language:#2000'><o:p></o:p></span></p><div><p class=MsoNormal>On 07/09/19 12:38 PM, Bilal via MailScanner wrote:<o:p></o:p></p></div><blockquote style='margin-top:5.0pt;margin-bottom:5.0pt'><p class=MsoNormal><span lang=EN-US>I am facing a problem that someone is spoofing my domain address and sending emails to my own domain users. I have set valid SPF, DKIM, DMARC for my Mail server. </span><o:p></o:p></p><p class=MsoNormal><span lang=EN-US>To sort this problem I have filter emails based on SPF checks and the email with spf fail are marked high score and marked as spam. But the issue with spf filter many legitimate email from many servers marked as spam.</span><o:p></o:p></p><p class=MsoNormal><span lang=EN-US> </span><o:p></o:p></p><p class=MsoNormal><span lang=EN-US>More importantly my own emails spf fails shown in MailScanner while I have verified through Gmail and various other tools that my SPF , DKIM, DMARC are passed.</span><o:p></o:p></p><p class=MsoNormal><span lang=EN-US> </span><o:p></o:p></p><p class=MsoNormal><span lang=EN-US>My Mail server is hosted inside in private network and NAT behind the public DNS , since in public DNS I have spf according to mail server public interface so in local intranet DNS I added SPF records according to email server private ip,</span><o:p></o:p></p><p class=MsoNormal><span lang=EN-US>Now few time spf shown as pass in mailscanner and mostly fail . Temporarily I have whitelisted my server host ip and my intranet ip to avoid email blocking due to spf fail . Please someone guide any solution to either I can stop email spoofing to my domain without spf check or otherwise how can I sort this spf fail issue on mailscanner .</span><o:p></o:p></p><p class=MsoNormal><span lang=EN-US> </span><o:p></o:p></p><p class=MsoNormal><span lang=EN-US> </span><o:p></o:p></p><p class=MsoNormal><span lang=EN-US> </span><o:p></o:p></p><p class=MsoNormal><span lang=EN-US> </span><o:p></o:p></p><p class=MsoNormal><span lang=EN-US> </span><o:p></o:p></p><p class=MsoNormal><span lang=EN-US> </span><o:p></o:p></p><p class=MsoNormal><span lang=EN-US> </span><o:p></o:p></p><p class=MsoNormal><span lang=EN-US> </span><o:p></o:p></p><p class=MsoNormal><span lang=EN-US>this also block many legitimate email with spf not set properly</span><o:p></o:p></p><p class=MsoNormal><span lang=en-PK> </span><o:p></o:p></p><p class=MsoNormal style='line-height:90%'><b><span lang=en-PK style='font-family:"Gadugi",sans-serif;color:#13A538;mso-fareast-language:#2000'>Bilal Ahmad</span></b><o:p></o:p></p><p class=MsoNormal style='line-height:90%'><span lang=en-PK style='font-size:10.0pt;line-height:90%;font-family:"Gadugi",sans-serif;color:#203478;mso-fareast-language:#2000'>Network Administrator</span><o:p></o:p></p><p class=MsoNormal style='margin-top:6.0pt;line-height:90%'><span lang=en-PK style='font-size:10.0pt;line-height:90%;font-family:"Gadugi",sans-serif;color:#203478;mso-fareast-language:#2000'>Cell: +92 333 7451870 </span><span lang=en-PK style='font-size:10.0pt;line-height:90%;font-family:"Gadugi",sans-serif;color:red;mso-fareast-language:#2000'>|</span><span lang=en-PK style='font-size:10.0pt;line-height:90%;font-family:"Gadugi",sans-serif;color:#203478;mso-fareast-language:#2000'> Tel: +92 68 5882400 </span><span lang=en-PK style='font-size:10.0pt;line-height:90%;font-family:"Gadugi",sans-serif;color:red;mso-fareast-language:#2000'>|</span><span lang=en-PK style='font-size:10.0pt;line-height:90%;font-family:"Gadugi",sans-serif;color:#203478;mso-fareast-language:#2000'> Ext. 2499</span><o:p></o:p></p><p class=MsoNormal style='line-height:90%'><span lang=en-PK style='font-size:10.0pt;line-height:90%;font-family:"Gadugi",sans-serif;color:#203478;mso-fareast-language:#2000'><a href="http://www.kfueit.edu.pk">www.kfueit.edu.pk</a></span><o:p></o:p></p><p class=MsoNormal><span lang=en-PK><a href="http://www.kfueit.edu.pk/"><span style='color:windowtext;mso-fareast-language:#2000;text-decoration:none'><img border=0 width=186 height=100 style='width:1.9416in;height:1.0416in' id="Picture_x0020_2" src="cid:image001.jpg@01D536A2.4AACD420"></span></a></span><o:p></o:p></p><p class=MsoNormal><span lang=en-PK> </span><o:p></o:p></p><p class=MsoNormal><span style='mso-fareast-language:#2000'><br>-- <br>This message has been scanned for viruses and <br>dangerous content by <a href="http://www.mailscanner.info/"><b>MailScanner</b></a>, and is <br>believed to be clean. <br><br><o:p></o:p></span></p><pre><o:p> </o:p></pre><pre><o:p> </o:p></pre></blockquote><p class=MsoNormal><span style='mso-fareast-language:#2000'><o:p> </o:p></span></p></div></body></html>