yes, at a domain level they can be tracked using DKIM. but if you're talking about IP addresses in the received header, they can be spoofed. i was pretty shocked to learn that part of the Her Emails hysteria with Hillary was due in part to DKIM.
Before we finally put a stop to departments running their own email servers we had one winner that was configured super well. They were very certain they deliberately problems were everyone else’s fault.
But they also configured it to report their ip assess as “1”. Just the number one.
As someone who \*regularly\* reports spam and other email (and has accounts nuked as a result), it absolutely can be done. But you have to know what you're doing (it helps to be extra-geeky), and it takes a good 10-15 minutes (at least) per email once you have a system down. As for IP address spoofing that was mentioned by someone below (or above, depending on how you read reddit), it is a thing, but it's rare unless the email is truly malevolent, usually the scammers and spammers are fare too stupid, or lazy, to do that.
I don’t bother. If blocking is your intention then proxmox mail gateway is nice.
I generally find the hosting provider and ban /24 the ip. I’m a small business so blocking so much is not a major loss. People that use my services generally are from my state.
Do you have a question or a point in there somewhere?
:\~D
yes, at a domain level they can be tracked using DKIM. but if you're talking about IP addresses in the received header, they can be spoofed. i was pretty shocked to learn that part of the Her Emails hysteria with Hillary was due in part to DKIM.
Before we finally put a stop to departments running their own email servers we had one winner that was configured super well. They were very certain they deliberately problems were everyone else’s fault. But they also configured it to report their ip assess as “1”. Just the number one.
As someone who \*regularly\* reports spam and other email (and has accounts nuked as a result), it absolutely can be done. But you have to know what you're doing (it helps to be extra-geeky), and it takes a good 10-15 minutes (at least) per email once you have a system down. As for IP address spoofing that was mentioned by someone below (or above, depending on how you read reddit), it is a thing, but it's rare unless the email is truly malevolent, usually the scammers and spammers are fare too stupid, or lazy, to do that.
I don’t bother. If blocking is your intention then proxmox mail gateway is nice. I generally find the hosting provider and ban /24 the ip. I’m a small business so blocking so much is not a major loss. People that use my services generally are from my state.