domain error

[saron]

hi uxbod,, r u there know, i dont get any solution for my problem.

[uxbod]

Is your problem the fact that external Spammers are using your domain name to send email to Zimbra users within your domain ?

[saron]

yes,,, absolutely.

any one can use my mail server to send the mail.

mail server did not check the user name or domain name when send the mail.

if i configure incoming and outgoing mail servers are correctly, i can send mail with any name and any domain

for eg: i can send a mail to you from the fake id someone@microsoft.com or someone@ibm.com etc
all mails are send successfully through my outgoing server.

[uxbod]

Check here is your server is a open-relay Email Server Test - Online SMTP diagnostics tool - MxToolbox

[saron]

Check here is your server is a open-relay Email Server Test - Online SMTP diagnostics tool - MxToolbox

Not an open relay.
0 seconds - Good on Connection time
1.451 seconds - Good on Transaction time
Warning - Reverse DNS does not match SMTP Banner



after the open relay test

[uxbod]

Okay that is good, so to understand, when one of your users is in the Zimbra web client they are able to send a email to somebody on the Internet using a completely different domain name ? or do you mean that somebody on the Internet can send email to your users using your own domain name ?

[saron]

Okay that is good, so to understand, when one of your users is in the Zimbra web client they are able to send a email to somebody on the Internet using a completely different domain name ? or do you mean that somebody on the Internet can send email to your users using your own domain name ?

ya, you are absolutely right. this is the problem i faced now.
i think this is not a minor problem.
so please help me.

[uxbod]

Which is it then Spammers are emailing your internal staff using your domain name ? If so please search the forums for spoofprotection.

[saron]

any other solution ???????

[uxbod]

I have replied and told you what to search for. If spammers are emailing into your server using your actual domain name then you need to reject those messages at MTA level.