Can I protect my domain from email spoofing?
My domain is being spoofed. How can I stop this from happening?
If you mean it's being spoofed via email -- that is, someone or something (i.e., a virus) is sending out emails that appear to be
coming from your domain, there's basically nothing you can do to prevent it. You can, however, take a couple of steps to secure your email system to deflect some common problems. That is, ensure that SMTP
relaying is disabled on your email server(s) and setup an email firewall (such as IronMail, MailMarshal, etc.) to keep rejected, spoofed and otherwise unwanted email traffic off your network.
If you're getting flame messages from disgruntled admins saying that junk is coming from your domain, try to explain to them that this issue is mostly out of your control. One thing that they can do on their end is to set their email servers to perform reverse lookups to match your valid IP address to your domain name. Many email servers have this capability.
If you want further "domain protection," check with your domain registrar to see if there's a way to remove your personal contact information that shows up via Whois queries and also see if there's a way to "lock" your domain to keep anyone else from registering it in their name.
This was first published in July 2005
Our Tips Exchange is a forum for you to share technical advice and expertise with your peers and to learn from other enterprise IT professionals. TechTarget provides the infrastructure to facilitate this sharing of information. However, we cannot guarantee the accuracy or validity of the material submitted. You agree that your use of the Ask The Expert services and your reliance on any questions, answers, information or other materials received through this Web site is at your own risk.