Tuesday, 13 January 2009 18:00
Last Updated on Friday, 30 January 2009 12:36
Written by Peter Banz
Viagra from the guy next door ... It's been awhile that we had to fight spoofed internal from addresses on a large scale. But it's the #1 issue today and we get calls about it everyday . In 8 out of 10 calls it turns out that the admin set a global exclude for the own domains. Not a good idea. Here is how to use XWall to get rid of all spoofed internal from spam:
Remove Global exclude email from for your domains. Instead use ip addresses ( Example 192.168.1.) and hosts like blackberry.net.
Don't have the internal from checked in the exclude options (options-global exclude-exclude options)
Block internal from (options-spam-envelope-internal from. Set the needed excluded here too - IP and hosts. If you have to outside users using POPp/SMTP without a static IP. Don't forget web and list server that send email through XWall. I usually set the action first at mark subject and see if the result is as expected.
SPF has matured. Unlike in the beginning if setup correctly it has very few false positives. Add an SPF record to your DNS and use the SPF block in your XWall (options-spam-SPF)
Enable Backscatter. Make sure your exchange or email server sends out through XWall. It will stop all the fake NFR and system messages.