Spoofed/Forged Email - The Community's Center for Security


The central voice for Linux and Open Source security news

Welcome!

Sign up!

EnGarde Community

Polls

What is the most important Linux security technology?

	SELinux
	grsecurity
	CIS Benchmark
	Bastille Linux
	iptables
	LIDS

Advisories

Community

Linux Events

Linux User Groups

Link to Us

Security Center

Book Reviews

Security Dictionary

Security Tips

SELinux

White Papers

Featured Blogs

All About Linux

DanWalsh LiveJournal

Securitydistro

Latest Newsletters

Linux Security Week: May 20th, 2013

Linux Advisory Watch: May 17th, 2013

LinuxSecurity Newsletters

RSS Feeds

Get the LinuxSecurity news you want faster with RSS

Spoofed/Forged Email

User Rating:

How can I rate this item?

Source: "Spoofed/Forged Email" - Posted by Administrator

This document provides a general overview of email spoofing and the problems that can result from it.

Read this full article at "Spoofed/Forged Email"

Comments

An ounce of prevention...

Written by JohnnyP on 2007-02-26 19:29:23

It's nice that we can invoke the government option for phishing and frauds and such, but wouldn't it be just maybe a little better if folks took it upon themselves to add a little prevention into their setup?

SPF records are a recently RFC'd way to declare to the net "Email from my domain must come from IP address x.y.z.q - ignore all other email claiming to be from me that's not from here."

While this doesn't universally solve the problem of making mail servers actually check SPF, it does at least help protect those people using email services that do check for it - MSM, AOL and Yahoo all check SPF on incoming email.

One SPF problem is that some of the anti-spam systems out there don't even support it by default (for example, Barracuda) while some OSS alternatives at least document how to implement it. (see http://www.piratefish.org).

For more info on setting up your SPF records, visit http://www.openspf.org. If you need a decent anti-spam filter on the cheap, see my site at http://www.piratefish.org

Only registered users can write comments.
Please login or register.

< Prev		Next >

Partner

Latest Features

Securing a Linux Web Server

Password guessing with Medusa 2.0

Password guessing as an attack vector

Squid and Digest Authentication

Squid and Basic Authentication

Demystifying the Chinese Hacking Industry: Earning 6 Million a Night

Free Online security course (LearnSIA) - A Call for Help

What You Need to Know About Linux Rootkits

Review: A Practical Guide to Fedora and Red Hat Enterprise Linux - Fifth Edition

Using the sec-wall Security Proxy

Yesterday's Edition

Samsung Galaxy S4 already hacked

WikiLeaks Donations Down to a Trickle

Partner Sponsor