Gandi.net Groups

Blog General: Re: Spoofing

In topic: Spoofing

You should be logged in to post new messages. Create an account.

On Mar, 30 2007 17:39 CEST, Shan Gill wrote:
Hello,

My domain name is being spoofed in email sent around the world.  I am
getting all sorts of replies to the effect of "Knock it off."

OK.

How do I find out who is doing the spoofing?  I took a look at the
headers in the returned email, but they all seem to point back to my
domain.  So I'm not sure how to find out who is actually doing the
spoofing.

Am not really versed in this type of thing, so any help will be
appreciated.

Thanks in advance.
Hi Shan,

Unfortunately, there is no real solution to that problem, because it is
the same as if someone were to write a fake sender address on an
envelope and send it in the mail. If you want to find out who really
sent the mail, you can always begin by checking out the full header of
the mail to see more detail (for more on this:
http://spamtrackers.eu/wiki/index.php?titl... ). In such a case,
if you manage to identify the domain of the sender you could file an
abuse complaint to the registrar of that domain.

If you would like, why not send a copy (including the full header) to
abuse@gandi.net so we can have a look at it for you. Unfortunately,
even if we can identify the spammer, if the registrar does not take
action to your complaint, you are stuck... :(

Best regards,
Ryan
http://www.gandi.net/