How can I report to Sophos a fake domain that is impersonating my customer domain?
This thread was automatically locked due to age.
Sophos Email customers using IP-based mailflow rule connectors must migrate to certificate-based configuration by March 31st. To see if you're affected Click Here.
How can I report to Sophos a fake domain that is impersonating my customer domain?
LuisAyalaMagni If it is impersonating the envelope-from header then SPF checking in Sophos Email (with quarantine or reject action) should be able to stop those emails. Note that your customer domain has to have an SPF record though.
If it is impersonating the from header, then Erick's recommendation would be what can be done.
LuisAyalaMagni If it is impersonating the envelope-from header then SPF checking in Sophos Email (with quarantine or reject action) should be able to stop those emails. Note that your customer domain has to have an SPF record though.
If it is impersonating the from header, then Erick's recommendation would be what can be done.