Spammer Spoofing our e-mail address
 

A spam-mer is spoofing our e-mail domain. He is using a non-existing e-mail address from our domain as the spoofed return address. I only know about this since I get the rejected echo's. I have a "catch all" on the domain. If someone misspells an address, I can forward it.

Anyone have any ideas on how to stop this? Turning off the catch-all will only stop me from knowing it is happening.

Set up SPF records on your dns.

Of course, this assumes that you don't send mail thru a ton of different networks - rather, you use an in-house SMTP server and a webmail system, or perhaps one or two other SMTP servers.

SPF means "these SMTP servers are allowed to send mail that appears to come from our domain"

Sender Policy Framework - Wikipedia, the free encyclopedia

The company I worked for back when the internet was new had a domain and did email with that domain. Some spammers started spoofing it and we ended up on a black list for email. It was a real pain to ever straighten that out.

I'm on hold with my e-mail/website company. I do not want to get my domain blacklisted. The information on the site says they provide SPF for these domains.

Good news, the offer SPF, but they don't do it unless requested...

Operational in 48 hours.

Thanks, ID10T!!

This might give some help on finding out who's responsible.
The Spamhaus Project

no problem. One thing to be aware of is that if you travel and have to use someone elses outgoing (SMTP) server, it needs to be in the SPF record. Or, you can use webmail, or change to an authenticated SMTP so that you can send while connected to any network....

Our mail server is independently of the local ISP.

Irony: My spam filter just received the same message, but from a different spoofed address.