We help IT Professionals succeed at work.

We've partnered with Certified Experts, Carl Webster and Richard Faulkner, to bring you a podcast all about Citrix Workspace, moving to the cloud, and analytics & intelligence. Episode 2 coming soon!Listen Now

x

How to check I am not sending spam emails

matmos
matmos asked
on
Medium Priority
278 Views
Last Modified: 2013-12-04
Recently I'm receiving frequent messages along the lines of

Your message

  To:      (recipient)
  Subject: (subject)
  Sent:    (date)

did not reach the following recipient(s):

(email address)
 
"    You do not have permission to send to this recipient.  For assistance, contact your system administrator."

I've run all the normal packages to ensure no viral or spyware infections on my PC, and im behind a NAT router.

Is there any way to be certain that these messages are just down to my address being spoofed rather my PC actually being used to send mails ?

Thank You

Comment
Watch Question

IT Manager
CERTIFIED EXPERT
Commented:
matmos,

The biggest question is does the "recipient" match someone you emailed?  Does the email have a subject that matches one you sent?

Another expert may be able to recommend a program or something similar but you have done the steps I would suggest.  This type of spam message has become very common.  You could look to see if the message has an attachment since a legitimate message would include an attachment with your original message and often another attachment with some server response (i.e. dat file).  You could look at the headers in the original message, if attached, to see if it matches your info.  However I would usually not recommend these steps if you suspect the message is fake.  If it does have an attachment it is likely to be malicious so it is not recommended to investigate it.

I hope this helps.  Let me know if you have any questions or need more information.

b0lsc0tt

Not the solution you were looking for? Getting a personalized solution is easy.

Ask the Experts
Dean ChafeeIT/InfoSec Manager
Commented:
As you mentioned, most likely that your address is being spoofed... as many of our address and domains are these days. There are some tools to help run a secure email server so you can be quite sure that your domain is not being used as relay.

1) use the tools at www.DNSreport.com to make sure DNS is properly configured and secured.
2) Make sure you are using SPF records... see here:  http://www.openspf.org/
3) Test your email server for relay here:  http://www.abuse.net/relay.html

You can also check the headers of some of the bounce back messages you get and see if it appears to originate from your network, but these headers are also spoofed, so it's not very reliable.... if not entirely incorrect.
FS-

Author

Commented:
Thank you. The emails are not legitimate - have no connection to us. Have checked the sites in FixingStuff's comment - all passed OK apart from number 3 which returns "Mail relay testing
Not available at this time. "

So imagine points to my address just being spoofed rather than an infected PC ?
b0lsc0ttIT Manager
CERTIFIED EXPERT

Commented:
Correct, spoofing has made it almost impossible to trust the old signs of computer infection and the fakes are more prevalent than legitimate messages.  Let us know if you have other questions.

bol
b0lsc0ttIT Manager
CERTIFIED EXPERT

Commented:
I'm glad that I could be one of those that helped you.  Thank you for the grade, the points and the fun question.
Access more of Experts Exchange with a free account
Thanks for using Experts Exchange.

Create a free account to continue.

Limited access with a free account allows you to:

  • View three pieces of content (articles, solutions, posts, and videos)
  • Ask the experts questions (counted toward content limit)
  • Customize your dashboard and profile

*This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

OR

Please enter a first name

Please enter a last name

8+ characters (letters, numbers, and a symbol)

By clicking, you agree to the Terms of Use and Privacy Policy.