Domain Spoofing and security

[DuffKing]

Has anyone been looking into problem of Domain spoofing?

Unscrupulous third parties send large amounts of Spam e-mail reporting to come from your organisation. This results in your Domain being blacklisted.

Any ideas would be much appreciated.

 

[elgrandeperro]

Domain spoofing or forging is so easy; I am not personally aware of black lists that record or use that exclusively because it would be easy to create some denial of service by spoofing.

The problem is for remote MTAs to identify this mail is from your domain without changing the free flow of email. I believe that one technical response is the introduction of SPF records into DNS, which says which IPs can be sending your mail. The problem is that only SPF enabled MTAs will be able to leverage this, but it a start in the right direction.

gene