the spammers are using [e-mail], how can I stop them?

Question

spammers have hijacked my domain. I need some more security, to stop the relay or whatever, so that other people don't get spam that has a return address at my domain name.

I use one and one. Are there more secure webhosts out there? Is there a way to turn off the relay or whatever the spammers are using?

Answer 1

If there is relaying within your mail server you must ask your ISP to turn the feature off.

Most likely this is not the (or the only) problem.

Spammers will use any random "From:" field - and mail servers without specific verification of the sender will accept it from anyone.

For example, you can send an e-mail with a forged "From:" e-mail field from an aol.com account. The spammer does not care as the "bounced" or rejected e-mails, requests of removal, and cease-and-desist notes will be going to the "From:" address. The spammer only cares about the clicks within the messages.

You can add Sender Policy Framewordk (SPF) record to your domain name records.

The SPF record is not universal, but more and more mail systems look for it.

It works the following way:
* Sender connects to mail server and says "I am mydomain.com".
* Recipient server checks IP address of connected sender.
* Recipient requests DNS record for "mydomain.com", including SPF record.
SPF record will contain valid IP addresses (and more details) of possible senders for "mydomain.com".

If the connected sender fits the valid sender's profile for "mydomain.com" mail is accepted. If it does not, connection is refused.

It is unfortunate but there is not much more you can do as a regular user.