Overview

Spammers can spoof email addresses and send messages that appear as if they are sent from legitimate email addresses. To prevent this, users can configure and enable anti-spoofing in Kerio Connect. The process is described in this article.

Please note that emails from automated bulk marketing systems, such as Shopify, MailChimp, etc might be rejected or not received correctly due to Anti-Spoofing protection enabled.

Process

Configure anti-spoofing for the server:
1. In the administration interface, Navigate to Configuration > Security > Sender Policy.
2. Select the option User must authenticate in order to send messages from a local domain.
3. Click the sender policy link to view which types of addresses are available to the users in the domain.
4. Define a group of trusted IP addresses.
5. Click Apply.
Enable anti-spoofing for each domain:
1. In the administration interface, Navigate to Configuration > Domain.
2. Double-click a domain and go to Security.
3. Check the Reject messages with spoofed sender identity option. If the option is not available, anti-spoofing has not been configured for the server.
4. Click OK.