Spam from [email protected]

[exlhost]

Dear DA Guru's

One of my customers received a pishing/spam mail that his account is blacklisted and he need to press the button in mailstring
The email states --> it was sending from [email protected] - usally this is the email adres my DA setup uses
I doubt this is coming from my DA vps server or (maybe it is) but the point is my server is not blacklisted or anything and is (my opinion) well secure with CSF / LMD / clamav / rootkithunter
Is this the way SPAMASSASSIN let you know you have received a spam email by sending it from [email protected]?

please advice, Any help or tips would be great

thanks D

 

[exlhost]

update:

It was a phishing mail, the header info was showing the email was send from a complete different ip address wich is scam
Please ignore these kind of mails!

 

[Richard G]

You can't just advise to ignore those emails.
Because if I'm not mistaken, when just having configured DA, then emails from the ticket system will also be send from [email protected] which is no spam and are valid mails. So it's not spam by default.

Best way to prevent these kind of behaviour is doing the things you already did and also using the latest spamblocker exim.conf which also prevents several annoying things from happening.

 

[zEitEr]

Hello,

You might consider configuring SPF, DKIM with DMARC (p=reject) for your domain, in this case they will have low chances for using your domains.