Preventing spoofed email

[dbayer]

Thank you for the response. In the future I'll create a separate post.

I hope you can post the amavis author's response here some time.

Thanks,
Daniel

[reason2008]

My server is running 8.6. How can I tell whether or not DMARC is enabled and running?

[quanah]

My server is running 8.6. How can I tell whether or not DMARC is enabled and running?

Zimbra uses SpamAssassin to flag anything that fails DMARC as a high probability SPAM. So there is nothing you have to do for DMARC to be "running" in 8.6, if you are using the Zimbra MTA with antispam installed.

For DMARC to work with your domain, you do have to set up DKIM and SPF for the domain.

[quanah]

Thank you for the response. In the future I'll create a separate post.

I hope you can post the amavis author's response here some time.

Thanks,
Daniel

Hi Daniel,

You can track the response here as well:

https://lists.amavis.org/pipermail/amav ... hread.html

I finally got the question sent out today.

Regards,
Quanah

[quanah]

Filed [bug]104677[/bug] for this issue.

[reason2008]

I've gotten both SPF and DKIM set up and working. I also have DMARC set up in DNS. I've sent some messages to gmail and I see that gmail is validating the SPF, DKIM, and DMARC records fine.

I would like to be able to somehow prevent someone from spoofing the From: header in email messages to make it look like mail is coming from internal users. Is there a score somewhere I can tweak to prevent mail that fails DMARC for my domain from being delivered?

[quanah]

I've gotten both SPF and DKIM set up and working. I also have DMARC set up in DNS. I've sent some messages to gmail and I see that gmail is validating the SPF, DKIM, and DMARC records fine.

I would like to be able to somehow prevent someone from spoofing the From: header in email messages to make it look like mail is coming from internal users. Is there a score somewhere I can tweak to prevent mail that fails DMARC for my domain from being delivered?

You can look at salocal.cf.in. It scores such spoofing as -9, which is a pretty good score.

[dbayer]

Hi Daniel,

You can track the response here as well:

https://lists.amavis.org/pipermail/amav ... hread.html

I finally got the question sent out today.

Regards,
Quanah

Thank you! I'll check it out.