E-mail spamming derived from my domain

[md16185]

I noticed a recent busrt of spam e-mails sent from my domain, with non-exsistant accounts. Is there any way to stop this? How can someone do that, when I'm the only one who logs into the e-mail server?

[SKULLZ1987]

This is called Spoofing.

It seems that you have a “Catch All Account”. This basically means that you could send e-mail to SPAM_CENTRAL@Your_domain.com and you would receive it.

If however you turn the “Catch All Account” off and setup what accounts you want up as aliases this should dramatically cut down spam e-mails.

[waresoft]

Another way to combat this problem is to set up an SPF record. ISP's and others that get those bogus emails supposedly originating from you can have their mail servers check your SPF record and drop the email because they know it didn't originate from your server.

Here is more information:

Sender Policy Framework