People using our mail servers?

Hi,

I’ve found that one of my clients is getting huge email traffic and it does not look like this is coming from real users. Could someone be using our mail server as a relay for spam?

Is there any way to check this?

Can I switch on authentication on the SMTP server?

Thanks for your help.

MS

SMTP Auth is required by default.

I think you are probably getting joe jobbed, enabling SPF will help keep this from happening.

What I mean is the mail traffic is likely bounces for someone using the from address as your domain in some spam. It does NOT use these servers, but the bounces end up here :frowning: Enabling SPF will help lock down who can send from your domain to many mail servers(those that check SPF)

Thanks Stephen, what is Joe Jobbing?

Also, do I need to do anything with users settings if I enable SPF?

Thanks.

MS

Joe job - Wikipedia

After enabling SPF you don’t have to do much, it just prevent most of these joe job attacks

You use SPF…what is that?

Details here:
Sender Policy Framework - Wikipedia
http://www.openspf.org/
http://www.psoft.net/HSdocumentation/user/spf.html

I was sent to look at:

http://www.psoft.net/HSdocumentation/user/spf.html#spf_conf

it tell me to turn on SPF’s and there is no button on the control panel. Can you only turn on SPF’s if the customer is on a Unix box?

I found my answer!!!

If you are a reseller you will need to enable SPF record in the plan, what that the isue?