Thread Info
  • State Suggested Answer
  • +1 person also asked this people also asked this
  • Locked Locked
  • Replies 3 replies
  • Answers 1 answer
  • Subscribers 6 subscribers
  • Views 6491 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

don't allow email from your own domain

Justin Beeler

I'm getting email coming in from my domain to my domain from the "untrusted" side and I'm not quite sure how to block it with the SMTP settings.  I've searched and I'm not seeing a real sure fire way to do this.  With other firewalls I've seen this blocked by default.  Still fairly new to UTM.  Any help is greatly appreciated.

 

Justin Beeler



This thread was automatically locked due to age.
Parents
  • 0

    I think what you're looking for is setting up an SPF-record in DNS. This is a special TXT record which looks like:

     

    v=spf1 a mx ip4:a.b.c.d -all

    This example configures that only any a-records, mx-records or the IP address a.b.c.d may send mail coming from your dns-domain name. All others will be hard failed (-all).

    You can add more IP-addresses or remove anything from it to further customize it. Benefit is that some external sources that also do an SPF-check will also hardfail mail coming from your domain if it's not coming from any of the preconfigured sources.

    Managing several Sophos firewalls both at work and at some home locations, dedicated to continuously improve IT-security and feeling well helping others with their IT-security challenges.

Reply
  • 0

    I think what you're looking for is setting up an SPF-record in DNS. This is a special TXT record which looks like:

     

    v=spf1 a mx ip4:a.b.c.d -all

    This example configures that only any a-records, mx-records or the IP address a.b.c.d may send mail coming from your dns-domain name. All others will be hard failed (-all).

    You can add more IP-addresses or remove anything from it to further customize it. Benefit is that some external sources that also do an SPF-check will also hardfail mail coming from your domain if it's not coming from any of the preconfigured sources.

    Managing several Sophos firewalls both at work and at some home locations, dedicated to continuously improve IT-security and feeling well helping others with their IT-security challenges.

Children
Unfiltered HTML