Lack of SPF leads to Email Spoofing

<div dir="ltr" style="text-align: left;" trbidi="on"> <div class="separator" style="clear: both; text-align: center;"> </div> <div> <div> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgQ7bbkgnnJdox9HZRrVqmmn-6mO6Z0FSI_TMfYokDoCljiQJEwsAdJNy3Hhfp-5OQEHcjctWQUA5FdNU4JV_D2Ce3-KhBmOf2E7EoxmoThWrEdbuJOJ0vBVn4r3IEO9G5z-SVA87WuID5v/s1600/spf2+copy.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgQ7bbkgnnJdox9HZRrVqmmn-6mO6Z0FSI_TMfYokDoCljiQJEwsAdJNy3Hhfp-5OQEHcjctWQUA5FdNU4JV_D2Ce3-KhBmOf2E7EoxmoThWrEdbuJOJ0vBVn4r3IEO9G5z-SVA87WuID5v/s1600/spf2+copy.jpg" /></a></div> The threat from malicious email represents one of</div> <div> the greatest risks to IT security. The Messaging Anti-Abuse Working Group (MAAWG)</div> <div> identifies 85% of incoming mail as abusive or malicious.  One of the best</div> <div> practices to reduce this risk is the Sender Policy Framework (SPF), an email</div> <div> validation tool to prevent the sending and receiving of forged email messages.</div> <div> When properly configured, SPF reduces both the likelihood of any domain name</div> <div> being fraudulently used to send malicious emails and the likelihood that</div> <div> organizations will receive such messages.</div> <div> <br /></div> <div> <br /></div> <div> <b>How the Sender Policy Framework Works</b></div> <div> <br /></div> <div> When an organization generates an SPF record in the Domain Name System (DNS)</div> <div> it is identifying which hosts are permitted to send email from their domain.</div> <div> This record allows message recipients to query and determine whether the</div> <div> sending server is authorized to send from a domain. This diagram shows how SPF</div> <div> is verified by the recipient’s mail system.</div> </div> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgdiudUazj_MmKl0xVcjvg1i7bWe8EJHkQLLwIHU-8Qr-NA3ib46HiwAmx4IS-ZuqT2XG5KR-SL3hnPvS_c_Dbb28YrbeMY5mvqmYHajl1IQ7f0F9atJlCWfAXG6M4qM1BPpY2v5j5hRufj/s1600/spf.JPG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgdiudUazj_MmKl0xVcjvg1i7bWe8EJHkQLLwIHU-8Qr-NA3ib46HiwAmx4IS-ZuqT2XG5KR-SL3hnPvS_c_Dbb28YrbeMY5mvqmYHajl1IQ7f0F9atJlCWfAXG6M4qM1BPpY2v5j5hRufj/s1600/spf.JPG" /></a></div> <div class="separator" style="clear: both; text-align: center;"> </div> <div class="separator" style="clear: both;"> <b><br /></b></div> <div class="separator" style="clear: both;"> <b>Testing for SPF records</b></div> <div class="separator" style="clear: both;"> <br /></div> <div class="separator" style="clear: both;"> <br /></div> <div class="separator" style="clear: both;"> The following</div> <div class="separator" style="clear: both;"> open-source tools exist to verify the SPF record for your organization:</div> <div class="separator" style="clear: both;"> <br /></div> <div class="separator" style="clear: both;"> <br /></div> <div class="separator" style="clear: both;"> SPF</div> <div class="separator" style="clear: both;"> <a href="http://www.kitterman.com/spf/validate.html" target="_blank">Record Testing Tool</a></div> <div class="separator" style="clear: both;"> <a href="http://mxtoolbox.com/spf.aspx" target="_blank">MX ToolBox SPF Lookup</a></div> <div class="separator" style="clear: both;"> <br /></div> </div>

Lack of SPF leads to Email Spoofing

The threat from malicious email represents one of the greatest risks to IT security. The Messaging Anti-Abuse Working Group (MAAWG)...

Read more »