Hi,

I am getting a lot of spam email where the FROM email address is an email in my own domain. I am the only person on the email system so I know it is not me. On inbound emails, I have the option on to check against AD. How do I write a rule that will check the FROM address against my AD when the FROM domain is mine and if it is not a valid user then throw it into the SPAM list. I have the community version, so there are only 5 possible users and the FROM person is not one of them. 

How do I add this kind of rule to the system?

Thanks,

Tom 

Tom,

The correct way to handle this situation is to use SPF. Check http://xeams.com/spf.htm for details. I recommend you put the following line as a TXT record in your DNS server:

v=spf1 a mx -all

Once that is done, Xeams will automatically assign a score if it detects a forgery. Besides SPF, we also recommend using DKIM and DMARC. Check http://xeams.com/dkim.htm and http://xeams.com/dmarc.htm for details.