35
I built a free, open-source, encrypted, and private solution at https://github.com/niftylettuce/forward-email. This service does not store logs, it is completely private and simply acts as a proxy. No email is ever stored on the server, it's all proxied in memory to the recipient's mail server (view the source on GitHub if you'd like to learn more about ...
33
At its root, this is a problem about verifying ownership of an email address, and as far as I know there are only two ways to practically verify ownership of an email address:
Send a verification email, as you mentioned.
Complete an authentication flow with the email provider, OAuth-style.
Option 2 works great if your user has an email provider that ...
answered Jan 16 '21 at 8:19
28
I have tried this solution
http://lowendtalk.com/discussion/19043/how-to-set-up-email-forwarding-for-your-domain-using-mailgun
So far, it seems to work for me even though my domain is still not yet verified. (Still in the early 24-48 hours to verify the MX records etc)
Basically the solution is to use mailgun and setup the email forwarding using their ...
20
It is valid because test could be a top-level domain and localpart@top-level-domain is a valid email address.
See for example Email address, domain part
16
I have had server IP's blacklisted by Microsoft a few times and I have had them removed reasonably quickly. I noticed that after entering and joining anti spam related services that they recommend it was faster and easier.
I recommend that you ensure that you can reply Yes to the below questions (except the last one) in the web form where you ask for ...
14
Here is a list of addresses that you may want to treat as reserved:
abuse 1,4
admin 2,3,4
administrator 2,3,4
hostmaster 1,2,3,4
info 1,3
is 3
it 3
list 1
list-request 1
majordomo 4
marketing 1
mis 3
news 1
postmaster 1,2,3,4,5
root 3,4
sales 1
security 1
ssl-admin 4
ssladmin 3
ssladministrator 3
sslwebmaster 3
support 1
sysadmin 3
trouble 1
usenet 1
uucp 1
...
answered Mar 30 '17 at 12:07
13
Register a free account at mailgun.org
add a mailgun MX record to your Cloudflare DNS
set up a forwarding rule at mailgun
Enjoy.
13
In short: you can't.
Answer depends on the definition of "bots", but if a bot can crawl the e-mail, the bot can hit the link. A bot doesn't necessarily respect robots.txt, or mentioned html meta tags.
__
However (a bit outside of the scope):
You should have the <token> be a long format random as stated on a comment to your question.
You ...
12
You can just use https://forwardemail.net. I made it completely open-source, free, encrypted, and private. There's a section on "How it works" on the website, along with a FAQ and list of features. You can even "Send Mail As" using Gmail.
12
Computers, mobiles and tablets can send fax's with software, its just like sending an email, it was added to rfc2086 15 years ago but it never took off and as far as I know no major browsers support href="fax:" they do however support href="tel:" that can be used just the same to send a fax using software.
2.3 "fax" URL scheme
...
11
They search for and fill in every form they can find. They're looking for any vulnerability that they can exploit for their gain. It might be to see if they can gain access to your site or web server. It can be to compromise your form to send out spam.
It's worth their time to do because it's all automated. They just set their bots free and let them go ...
10
One purpose is to help protect domains from incidental spam. A good practice by many large companies that have emails generated by users (either directly or via actions taken online) is to have the emails send through a completely different domain, generally from a different IP range to that of your main servers. In this way someone flagging emails as spam ...
10
Incorrectly used meta tags
Instead of using two meta tags, you should put both values into a single tag. With two tags, some search engines may choose to obey only one of the two.
<meta name="robots" content="noindex,nofollow">
Robots.txt and robots meta tags are mutually exclusive
Disallowing pages in robots.txt prevents robots ...
answered Dec 8 '20 at 16:45
9
I suggest that you use your existing email while registering a domain name. When you complete the domain registration process, most domain providers send domain info, account activation links, invoice & billing info to email address which you put in during registration.
Once you create account and register domain then you can easily create new email ...
9
Yes, different email obfuscation methods do work with varying degrees
of success.
But each has to be weighed with whether they affect the ability for your customers to communicate easily with you. I wouldn't want to be
losing any business just because a user finds it annoying or time
consuming to contact me. It would be a particularly persistent
customer who ...
9
Short Answer: You're seeing internally routed emails in your DMARC reports, for recipient domains hosted on Google GSuite.
From the screenshot you share, it seems like these emails sent from Google servers are actually allowed through, based on DKIM signing for your domain (100% DMARC compliance), while failing SPF alignment with your domain.
Not visible ...
8
We did two things:
Sign up with JMRP via https://postmaster.live.com/snds/JMRP.aspx
Sign up with SNDS via http://postmaster.live.com/snds
The JMRP application will go through a form and a document you need to sign. In our case it took about two days to get approved.
Make sure that your SPF/DKIM/DMARC is setup correctly - we are using Port25 and their ...
8
The deep link to get whitelisted for Microsoft's email network is:
http://go.microsoft.com/fwlink/?LinkID=614866&clcid
This gives you the form "Sender Information for Outlook.com Delivery"
8
There is not much you can do to avoid verification mails (in case you actually need to store and verify mails at all, of course): if you display it to users or sent mails to that address, you better make sure the owner has consented.
Besides verifying the email, it also somewhat is used to verify idendity (when more intrusive methods like Government eID, ...
7
nathangiesbrecht said in comments:
Mostly because many e-mail clients have really lousy support for modern HTML. While table-based layouts are incredibly old-school, most e-mail clients will display them properly. You also want to keep your CSS all in-line as many e-mail clients strip out any other CSS (think web e-mail clients, and the problems an e-mail ...
7
Not only can you not ensure it, it's highly likely that the link will be retrieved by programs not under the user's control. Many spam and phishing filters will pre-fetch any web pages linked to in an email to scan them for possible threats (I've had as many as five non-user hits recorded for a single link).
The solution is to make sure nothing sensitive is ...
6
I'm the author of the free open source Ostermiller Contact Form which is designed to thwart spammers.
I have found that the biggest reason that spammers fill in your contact form is link spam. To many spam bots, you contact form looks little different than a guest book form or a form to comment on a blog. My contact form software has rules that ...
answered May 16 '14 at 13:40
6
Are these reports something that can be acted upon?
Yes, but most of the information will hopefully be confirming all is OK with your configuration.
How Should DMARC reports such as these be acted upon at my end?
Typically these reports would be processed by an automated system which turns this data into pretty reports with graphs, statistics and issues ...
6
I can't claim to know all the motivations of spam bots, but the main motivation is creating links to help SEO. Most of the bots submitting this form don't even realize that it is a contact form. These bots submit every form they find trying to get their comments onto pages.
The bots submit text that can get indexed in search engines. Then the spammer ...
answered Aug 27 '21 at 23:35
5
Each sub-domain may have a specific email service provider designated to it using DNS MX records, however the domain portion of the email address is what determines the MX records that are read and therefore the mail server which receives the inbound emails.
For the solution you have requested where different mail service providers are used concurrently for ...
5
The header X-CNFS-Analysis is added to emails processed by Cloudmark Authority, an email filtering engine, and appliances which use this engine such as Cloudmark Security Platform. In newer versions, it has been renamed to X-Authority-Analysis.
In the case of Rackspace, they use Cloudmark Server Edition, a plugin for Microsoft Exchange, to provide filtering ...
5
Finally stumbled on the delpop command and cPanel's command-line interface.
So, assuming:
You have SSH access to your account
Your host has installed cPanel in the usual way
Then you can delete a single email account with this command, using an SSH client like PuTTY:
/usr/local/cpanel/cpanel-email delpop account_003 0 mydomain.com
To delete many ...
5
Mailchimp's blog post on this is very good.
A brief summary:
Gmail rapidly downloads and then proxies the image as soon as you load the email, so Gmail's change will not prevent image tracking. In addition, the numbers will in fact be more accurate, because every user will now have images turned on by default.
Edit:
In addition, see the bottom of the ...
5
Using the user's email address as the 'from' address in a form notification email is not a good idea because it will trigger many spam filters due to a "spoofed" sender. There are two systems which help detect spoofing: SPF and DKIM. SPF allows the email domain owner to specify which IP addresses and/or domains are valid senders for that domain. If the ...
5
What I'm more concerned is if I'd get blocked by mail servers since .xyz was also used for lot of spam mail and what not.
You can not control what/how others configure their email systems.
Various systems are broken regarding new gTLDs, some even hard code the list of possible ones, and are not updated. Others can indeed apply some filtering based on some ...
Only top voted, non community-wiki answers of a minimum length are eligible