Am 04.02.2016 um 10:55 schrieb Antony Stone:
On Thursday 04 February 2016 at 10:47:18, Chandran Manikandan wrote:1. Our users received some spam emails which is showing our domain email account in From address.Nothing unusual in that - forged From addresses have been common for many years.
like the mail from you From: Antony Stone <antony.st...@spamassassin.open.source.it> To: users@spamassassin.apache.org
Are you using DKIM / SPF for your domain? I mean, why do you accept email apparently from your own domain when it does not come from one of your authorised servers?
because the From header has nothing to do with the envelope sender and so not with SPF and spoofing protections
signature.asc
Description: OpenPGP digital signature