Monday, August 21, 2023, 12:23
Solution ID: 00000331
How do I stop spam where the sender and recipient addresses are the same?
Spammers will spoof messages where the sending and recipient addresses are the same. It looks like your users are sending email to themselves. There are some things to check before making changes and there is a specific setting for this situation.
Looking at the message list, can you see what the message Scores are and the Result? You may see relatively high scores and the result of Whitelisted. It's common for people to whitelist their own domains, which can result in this spoofing situation. Worse still, white listing messages affects the filters. The e-mail message structures, sender addresses and message content of whitelisted messages are all trained with the dynamic spam filters. This skews the results of the dynamic filters in the wrong direction. So, if you have whitelisted your own domain, then this situation has to be dealt with along with the spoofing issue.
We have a specific setting to deal with self-sent e-mail. Navigate to ..
Filters > Filter Settings > Sender
.. and enable the feature to Block Self Sent e-mail.
If these messages were whitelisted, reset the Bayesian filters by navigating to ..
Filters > Filter Settings > Bayesian
.. navigate to the bottom of the page and click the Reset Bayesian Database button. That should get you back to a normal state.
Tags: spam, email, antispam, sender, recipient, address, same, spoofing
Link to this article: kb/sender_recipient_the_same
Updated: Monday, August 21, 2023, 12:23
-- David Rutherford