Question non-existence users can send email

[rout3rx]

hello
as a picture bellow i my plesk mail server, [email protected] could send email to existence users!
how can i block ?
in the picture bellow user : 2221 is not valid but can send email!



please help.
thanks

 

[rout3rx]

no body answer me?

 

[Bitpalast]

I assume that most people who read this are afraid to answer with a simple: There is not way, it cannot be done. Because there will be some way for sure, but it is probably complicated enough that comes close to a "it cannot be done".

Basically, an email sender can place anything she wants into the from field. At least the visible part. It is also possible to send emails with forged senders in the invisible part, because when email was invented, the inventors did not take all the criminals into account who are prone to abuse the Internet for their nasty stuff by the millions each day.

If you are receiving the mails from a local account (one that is located on the same server), I suggest to ask the user to stop or to leave. If you are receiving such mails from an external source, I recommend to use SPF lookup in the general mail settings to block all incoming mails that have no SPF record in their domains or an SPF record that does not match the sender's IP address. This will block most of such forged mails.

 

[mow]

Unfortunately that will block most non-forged mails too as very many senders still don't have a SPF and/or DKIM record.

And blocking just mails where SPF fails (when you have a SPF record yourself) still doesn't help against this kind of abuse: While it would seem that it should block external senders from sending mail that appear to be from your domain, to pass SPF, it is enough for the sender information in that invisible part Peter mentioned (the "smtp envelope") to be acceptable by another domain's SPF settings.

 

[rout3rx]

this is good

How to restrict the field "From" mismatch for emails and prevent outbound mail spoofing?

Applicable to: Plesk for Linux Question How to restrict the field "From" mismatch and prevent outbound mail spoofing? Answer Warning: This solution may disrupt mail functionality, such as Plesk ...

support.plesk.com

 

[mow]

this is good

How to restrict the field "From" mismatch for emails and prevent outbound mail spoofing?

Applicable to: Plesk for Linux Question How to restrict the field "From" mismatch and prevent outbound mail spoofing? Answer Warning: This solution may disrupt mail functionality, such as Plesk ...

support.plesk.com

That prevents your users froms sending mails with spoofed addresses, it does not help if such mails originate elsewhere.