Stopping spam from my domain name hosted by Plusnet!
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Printer Friendly Page
- Plusnet Community
- :
- Forum
- :
- Help with my Plusnet services
- :
- :
- Re: Stopping spam from my domain name hosted by Pl...
Stopping spam from my domain name hosted by Plusnet!
13-07-2012 2:18 PM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
Holywellhousepublishing.co.uk
I set up a new mailbox yesterday with CATCH ALL set on.
Within minutes I received 250 returned e-mails which had been sent from mailboxes at my domain name.
NON of these mailboxes were created by me - they were all "random combinations of characters"@holywellhousepublishing.co.uk
It has been going on for months and must have damaged the reputation of my small publishing house.
Non of these spam messages have been sent from my own mailboxes or to anybody in my address book.
I have an Apple MacBook and use Apples MAIL software for e-mail.
And have now switched off the catch all settings - but that will NOT stop the spammers sernding out mail from my domain name.
HOW CAN I ESTABLISH THE CAUSE OF THIS PROBLEM?
AND HOW CAN I STOP THIS ABUSE OF MY DOMAIN NAME?
Bill Forster
Re: Stopping spam from my domain name hosted by Plusnet!
13-07-2012 2:38 PM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
One thing you could do is add SPF records for your domain, which might mitigate the amount of bounces, (although this relies on a correctly configured mail server and spam filter, and if these mail servers are backscattering to you, then it's likely it's misconfigured anyway)
On the plus side, this will have absolutely zero effect on your domains reputation.
Re: Stopping spam from my domain name hosted by Plusnet!
13-07-2012 3:00 PM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
I appreciate your response but if I got spam from Holywell House Publishing I would be pretty p*****d off with them!
I am hoping that it is within Plusnet's capabilities to stop this abuse of my domain name.
But not being a techie I have to await their response & just keep my fingers crossed.
I am assuming this is a fairly common problem which Plusnet will have encountered before ...?
And am hoping that by switching off CATCH ALL in my mail setting I shall no longer receive "back scatter" since I was not receiving it until I set up the new mail box.
Bill
Re: Stopping spam from my domain name hosted by Plusnet!
13-07-2012 3:15 PM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
jelv (a.k.a Spoon Whittler) Why I have left Plusnet (warning: long post!) Broadband: Andrews & Arnold Home::1 (FTTC 80/20) Line rental: Pulse 8 Home Line Rental (£14.40/month) Mobile: iD mobile (£4/month) |
Re: Stopping spam from my domain name hosted by Plusnet!
13-07-2012 3:41 PM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
Or could it happen to any domain name owner? eg Microsoft?
Bill
Re: Stopping spam from my domain name hosted by Plusnet!
13-07-2012 3:45 PM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
Your email address on the site is in plain text and all the spam bot crawlers can and will pick it up
Re: Stopping spam from my domain name hosted by Plusnet!
13-07-2012 3:49 PM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
Re: Stopping spam from my domain name hosted by Plusnet!
13-07-2012 4:06 PM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
You need to make it harder for spammers to copy your email address from your website.
jelv (a.k.a Spoon Whittler) Why I have left Plusnet (warning: long post!) Broadband: Andrews & Arnold Home::1 (FTTC 80/20) Line rental: Pulse 8 Home Line Rental (£14.40/month) Mobile: iD mobile (£4/month) |
Re: Stopping spam from my domain name hosted by Plusnet!
13-07-2012 4:12 PM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
I started by using FORMS but got relaxed since Spam was minimal (thank you Plusnet) but domain names are on every page of every web site on the Internet!
And its the domain name they have copied - not the mailbox name.
Bill
Re: Stopping spam from my domain name hosted by Plusnet!
13-07-2012 4:21 PM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
jelv (a.k.a Spoon Whittler) Why I have left Plusnet (warning: long post!) Broadband: Andrews & Arnold Home::1 (FTTC 80/20) Line rental: Pulse 8 Home Line Rental (£14.40/month) Mobile: iD mobile (£4/month) |
Re: Stopping spam from my domain name hosted by Plusnet!
13-07-2012 4:55 PM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
Plusnet advise me to change my password.
That's easily done BUT is it really the explanation?
Quite apart from the fact that I have not disclosed my password - except when logging on - Jelv has (half) convinced me that one does NOT need to know my password to send spam from a fake sender name @ my domain name.
Bill
Re: Stopping spam from my domain name hosted by Plusnet!
13-07-2012 5:03 PM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
That assumes that the emails are actually coming from your account and not from another source using a spoofed sender address
Re: Stopping spam from my domain name hosted by Plusnet!
13-07-2012 5:29 PM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
----------- snip
Dear Mr Forster,
Thanks for getting back to us.
I am sorry that your issue is continuing. I agree that turning catch all off would help the situation.
However, the only way anyone is able to send email using your domain would be to have your password and username. Therefore, the easiest way to resolve this would be to change your password on your account. This would stop people being able to send email using your domain.
Please do not hesitate to get back in touch online at https://portal.plus.net/wizard/?p=search if we can be of any further assistance.
Kind regards,
-------------- end
Is this incorrect?
Bill
Re: Stopping spam from my domain name hosted by Plusnet!
13-07-2012 5:32 PM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
The emails aren't being sent from your domain but from somewhere else spoofing your domain
I used to get loads of them supposedly from my Plusnet address but they weren't and they eventually stopped
Re: Stopping spam from my domain name hosted by Plusnet!
13-07-2012 6:14 PM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
Quote from: forsterbalcke However, the only way anyone is able to send email using your domain would be to have your password and username. Therefore, the easiest way to resolve this would be to change your password on your account.
This is wrong.
As advised above it is trivially easy for a spammer to spoof mail to make it appear to come from your domain, and indeed is the modus operandi for the majority of spam/malware outfits because they have got nothing to gain (but plenty to lose) if they were to use their own domains.
There are various anti-forgery mechanisms, such as SPF as mentioned by Barry, DKIM, etc that have been developed to try and mitigate this issue but they all come with drawbacks that has resulted in their take up being relatively low. As a self-confessed non-techy you might not to wish to climb the learning curve necessary to safely implement them anyway. Furthermore, mail servers that cause backscatter (as a result of not rejecting mail during the SMTP dialogue) are most unlikely to do their bit and employ these techniques and so you would likely not see any real benefit from going down that route anyway.
There is nothing you or Plusnet can really do about it. Even removing e-mail addresses from your site won't stop the domain being picked up from other sources (search engines, whois, site trackers, domain registrars etc). Removing your catchall makes sense however not only to reduce incoming spam but also to reduce your visibility of backscatter so you are not constantly reminded of how big a problem it is.
For what it's worth, it is nothing personal - it is unlikely you have been hand-picked by a human to be spoofed but rather been picked up by their crawlers along with every other domain out there.
Mathew
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Printer Friendly Page
- Plusnet Community
- :
- Forum
- :
- Help with my Plusnet services
- :
- :
- Re: Stopping spam from my domain name hosted by Pl...