SPAM

[jertsy]

Hi all

 

I have started to get SPAM coming in, in the message at the top it says they can be from [email protected], [email protected] or just plain old banks, HMRC etc... When I look in the message properties they are being sent from another address, usually a legitimate company who I guess have been compromised.

I have a fortigate firewall (we are with Schools Broadband) and that does some level of SPAM filtering but these always get through, we dont get any SPAM from the usual sources so I guess they get filtered out.

Is there anyway to stop these, we can block the domains on the firewall but they just seem to send from a new address the next time. Would SPAM filter software\subscription stop these?

 

Any advice please?

[elsiegee40]

Moved to correct forum

[jertsy]

oops, my bad!

[jertsy]

School broadband have turned up the email filter and they say this should stop the emails, fingers crossed!

[GRitchie]

School broadband have turned up the email filter and they say this should stop the emails, fingers crossed!

 

We're having very similar problems.

We have ended up opening our filter to the medium level as full lock down stopped other schools being able to contact us!

We just block addresses as and when, even though this doesn't always work properly...

[win]

You need to setup an spf file to stop people spoofing your domain.

 

I get a lot of fax@ fax.com spam, admin@ myfax.com etc.. so i have to manually add those to the block list.

[jertsy]

We're having very similar problems.

We have ended up opening our filter to the medium level as full lock down stopped other schools being able to contact us!

We just block addresses as and when, even though this doesn't always work properly...

 

No more SPAM as of yet, we could go a few days without any so I wont know for a couple of weeks if they have stopped. It may be the case like you that other folks cant email us either but no instances reported as of yet.

 

We were blocking the compromised domains in the firewall, but I think we were doing that wrong and we should be blocking the spoofed domain i.e. fax@mydomain as this is how the firewall sees them. If we get anymore I'm going to block *@barclays.co.uk, *@santander.co.uk etc... No one will get legitimate emails from the blocked organisations but thats the lesser of two evils as far as I am concerned.

[jertsy]

You need to setup an spf file to stop people spoofing your domain.

 

I get a lot of fax@ fax.com spam, admin@ myfax.com etc.. so i have to manually add those to the block list.

 

We do have SPF records and as far as I know, we are not being spoofed externally. We just get a lot of SPAM with other organisations being spoofed.