Unknown Email sent from my domain? ...

[AnthonyCasta]

Hello ! ...

Lately, I have noticed emails in my NDR directory (folder) that are not orginating from my email boxes. i.e. support@mydomain.com, sales@mydomain.com ... These email address don't exist.

Today I noticed that I had an email sent to me from me, it contains the same information as the ones in the NDR.. I had implimented a SPF record in my server, however, I am not sure I put it in the correct place.

[Network Backround]
3 Servers running ...

Windows 2000 Advanced Server - DNS
Windows 2000 Advanced Server - WebServer (mydomain.com)
Windows 2000 Advanced Server (running exchange 2000) (mydomain.net)

Emails are sent from mydomain.com

Thanks in advance ! .. Tony

 

[Davetoo]

Look at the email headers...did they come from you or is someone simply spoofing you?

I'm Certifiable, not cert-ified.
It just means my answers are from experience, not a book.

 

[lhuegele]

More than likely you're being spoofed.

 

[AnthonyCasta]

Its someone spoofing me ... Today, I noticed that I have 65 messsages in the NDR directory. After looking at the messages there trying to be delivered to someone@yahoo.com ... Apparently they are using my server to send the message. It has my IP in the headers, but, its not my host name.

Would an SPF work for this, or do you have any other suggestions?

Thx .. Tony