spam bypassing the Mailscanner by using some accounts in whitelist

[andyhanson]

Hello to all, we are using the cPanel MailScanner Service Package and it's simply great but we are having some problems with spam bypassing the MailScanner by using some accounts in whitelist.

so customers are getting fake spam e-mail from

whitelistemail@domain0001.com to whitelistemail@domain0001.com


Is there a way to block this without the use of spf ?

Thanks and hope to have news

[sdjl]

Unfortunately if you whitelist an address that is an email account on your server, then MailScanner will whitelist to the address if it's sent from or to that account.

[andyhanson]

the problem is that some of my customers are getting a bunch of spam from their self...

no way to solve the problem ?

[Sarah]

There's no way in MailScanner to block spam sent from spoofed email addresses if you have whitelisted the email address or domain. You could try SPF.

[minadreapta]

sorry to bump up such an old thread but i have the same problem (and my customers too).
we keep receiving tons of SPAM from "ourselves" from a lot of different IP addresses.

There is no email address or domain name in the whitelist in MailScanner, we use both SPF and DKIM in cPanel.
Moreover, Exim has the "Reject SPF failures" option set to ON.

What else can we do? Any ideeas?

thanks.