Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

I have a vanity domain with email hosted by GMail and forwarded to my regular Gmail account. It appears that the From: line of the primary address I use has been spoofed on multiple Spam messages, and lately I have been receiving a ton of auto-replies from random addresses (i.e. not ones in my addressbook).

While most of the bounces (e.g. from Postmaster, MAILER-DAEMON, Mail Delivery System, etc.) are caught by the first gmail account and not forwarded on, a small number of them are still getting through to my regular account. Is there anything I can do at this point to stop this or prevent the emails from being created in the first place?

I've got two-factor authentication set up in both places, strong passwords, and there's nothing in the Sent Mail outboxes of either of the accounts.

share|improve this question
add comment

2 Answers 2

This is not unusual. However, usually this is a one time spam and the spammer moves on. It should stop soon. There is no way to stop a spammer form pretending to come from your address.

share|improve this answer
    
I just added an SPF record to my DNS. Will that help? Would a DKIM be possible? I don't normally actually login to my domain account, but use Gmail's "Send Mail As" feature to spoof my vanity domain address. –  Aphoid Jan 29 '13 at 16:44
    
I just added DKIM to my DNS entries as well, and at least I can send/receive messages on there to/from my work accounts. –  Aphoid Jan 29 '13 at 19:01
    
Does this have anything to do with the spam problem? –  Xavierjazz Jan 29 '13 at 20:14
    
My understanding is that having SPF and DKIM in your DNS should help as both purport to be technologies that help confirm that an email is legitimately sent and not a spoofed message. While I also understand that a receiving server might just ignore them, if mail servers silently discarded the spams rather than replying with postmaster or unknown account emails, that would help. I simply don't know if spam filters/mail servers silently discard SPF or non-DKIM validated messages or if they still respond with bounces –  Aphoid Jan 30 '13 at 21:53
add comment

Two factor authentication, SPF, and DKIM didn't seem to make any difference and the spammer kept using my password for a long time. However, after several months and thousands of spoofed bounces, they spontaneously stopped with no intervention on my part.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.