Something funny I've noticed is my business account is not receiving any spam but my free gmail account is.
My account is sending spam emails
91–100 of 154 posts
Re: My account is sending spam emails
#92Earlier quoted context omitted.
Stories like this make me glad I use an email service which values me enough to have real humans who actually work there answer my support requests.
What do you use as your email service?
FastMail. I've opened a handful of support tickets and always gotten an answer within a few hours.
Re: My account is sending spam emails
#93Earlier quoted context omitted.
Telus has this entry: exists:CL.%{i}.FR.%{l}.F2.%{o}.spf.nssi.telus.com Reading RFC 7208, that would be expanded to exists:CL.69.64.35.11.FR.reply.F2.telus.com.spf.nssi.telus.com which means if that any record exists at that name, it will pass. dig +short cl.69.64.35.11.fr.reply.f2.telus.com.spf.nssi.telus.com 127.0.0.1 trying a few other values, it seems that telus.com is saying ALL IP addresses are allowed to send…
It seems like everything in the zone "spf.nssi.telus.com" resolves, regardless of further DNS labels. So yeah, I'd say every host with any IP is allowed to send mails as anything from telus.com. That's a bit unsettling.
They appear to have quitely fixed it.
Re: My account is sending spam emails
#94This is pretty alarming. Is there another service to switch to that's as reliable and more generally safe as Gmail?
Re: My account is sending spam emails
#95The emails are spoofed. The bug is Google is labeling emails with "Sent Mail" because "from:" header matches your email.
I think the "bug" was that not all "Received-SPF" headers are not correctly checked (only first one was checked). However, I'm not even sure if this is a bug since I'm not sure if their migration of emails into G Suite will work if they start not trusting "from: header.
The real bug is probably that email is not marked as spam :)
Re: My account is sending spam emails
#96Relevant security issue Gmail declined to fix over a year ago: https://www.zdnet.com/article/spammers-delight-gmail-weirdly...
I'm not sure how they would fix that, assuming that's even a bug. The email protocol is completely unverified, anyone can send the header they please, including spoofed From: headers. The GMail client itself even allows it, when you compose a new email you can change the "From" to anything. That's actually a rather useful feature when you have several addresses redirecting to one gmail address.
Re: My account is sending spam emails
#97So it's not so simple. You could use DMARC to tell mail servers which honor DMARC to drop all e-mails that have @gmail.com addresses that don't come from gmail.com servers. In fact, this is how @google.com e-mail addresses are treated, and I believe this is a setting which G-Suite administrators can set up for their domains.
BUT. It comes with a downside. Suppose you want to send e-mail from your Linux laptop, or from a Linux mail server you control, without hard-coding your account password in a text file so you can send e-mail via a GMail server. Or suppose you want to subscribe to a mailing list which rewrites the subject line to include the mailing list name. DMARC breaks all of this. Horribly. So yes, it's more secure, but it comes with a massive cost.
What this means, for example, is I recommend people who work at Google, and who want to interact with either IETF mailing lists or the Linux-kernel mailing lists at vger.kernel.org to send their patches and PULL requests using their @gmail.com address. If they send it using their @google.com address, the same security settings that will prevent this spammers from "faking" e-mails that didn't come from gmail servers, will also break git send-email (unless you want to save your password into at text file --- which is against policy and common sense) and it will break traditional mailing lists.
Re: My account is sending spam emails
#98Earlier quoted context omitted.
Gmail's sent folder isn't a sent folder in the traditional sense. It's a label that just filters mails based on the "from" address.
Are you sure about that? I have gotten many spoofed spam emails before but I've never seen them appear in my sent folder before. Furthermore when I search "from:[my email]", I see a different listing than when I look in the sent folder.
I have a very short gmail address so I get _loads_ of spam daily. The above is actually correct. Emails from my address, even though they are spoofed will show up in my Sent folder until I mark them as Junk. I just checked with the 3-4 spams I received last night all all where in Sent.
Re: My account is sending spam emails
#99Re: My account is sending spam emails
#100So who is Telus, and why are they special?
Is it Google who has a relationship with Telus -- because I'm pretty sure I don't.
Can Google prevent Telus from doing whatever they're doing? Or is Telus just the victim/conduit of the real spammers?