View Full Version : How do I stop spammers from spoofing my domain. I am constantly blackballed

04-21-2011, 09:09 PM
How do I stop email spammers from spoofing my domain. I am constantly blackballed at ATT, BellSouth, etc.. because my domain is getting the blame. I know I can apply to have it removed but they are automated like everyone else and I just end up blackballed again immediately.

This one is an example header from Montevideo, Mexico.

Return-Path: <an0124@ms29.hinet.net>
X-Spam-Checker-Version: SpamAssassin 3.2.4 (2008-01-01) on
X-Spam-Status: No, score=-0.2 required=2.0 tests=BAYES_40,UNPARSEABLE_RELAY
autolearn=ham version=3.2.4
Received: from [] ([])
by companydesigns.net (8.13.1/8.13.1) with ESMTP id p3M2Tmjf019833
for <webmaster1@companydesigns.net>; Thu, 21 Apr 2011 20:29:50 -0600
Received: from (account HELO companydesigns.net)
by companydesigns.net (CommuniGate Pro SMTP 5.2.3)
with ESMTPA id 205646526 for <webmaster1@companydesigns.net>; Thu, 21 Apr 2011 23:29:49 -0300
From: "Katyayani"@companydesigns.net
Subject: Newsletter Thu, 21 Apr 2011 23:29:49 -0300
Date: Thu, 21 Apr 2011 23:29:49 -0300
MIME-Version: 1.0
X-Mailer: lfnd_56
Message-ID: <1196854418.0BF2V5NO779020@umjwjj.yfbiyqz.biz>
X-UIDL: (g*!!A>/!!iE4!!I7"#!
X-Antivirus: AVG for E-mail 9.0.894 [271.1.1/3589]
Content-Type: multipart/mixed; boundary="=======AVGMAIL-25996E94======="

Content-Type: text/plain;
Content-Transfer-Encoding: 7bit


Do you want a suitable future, go up in money, and the praise of all?

Today only:
We can assist with Diplomas from prestigious universities based on your present knowledge and work experience.

I looked them up by IP Information - and they are in Mexico.....

Details: http://whois.arin.net/rest/nets;q=

I can't complain to their server or at least to keep on doing that willl do not good since their are thousands of these guys.....

Does this entail spoofing? And would it cause me to be blamed?

Received: from (account HELO companydesigns.net)

Whats the trick to stopping this? Certainly this can't be happening to everyone.



04-22-2011, 07:42 AM
No you can't stop folks from spoofing your domain. I assume this is an email that was sent to you. Am I right? This is not uncommon and it does happen all the time. No different then if someone sent out a snail mail and put your return address on it. They could even get that snail mail postmarked with your area by putting it in a mail drop in your area. :)

What you can do is set up an SPF record for your domain. http://www.openspf.org/ Depending on the account you have with WestHost, you may have to get them to add the record but if you are on a newer cPanel account you can do this yourself by useing the Advanced DNS Editor and adding a TXT record.