Equals sign in email address. Is this some kind of spammer trick, or legitmate?

jols

Well-Known Member
Mar 13, 2004
1,107
3
168
Lately I've been seeing more and more From addresses hitting the server looking something like this:

[email protected]

The "ourcustomer.com" part was changed, but typically even though this is a FROM email address, our customer's domain is there between the = sign and the @ sign.

My question is, do legitimate e-list systems use this kind of addressing, or could I just set up a rule to block any such email with a From address in this form, i.e. when the FROM address includes an equals sign?

So far I've only seen spam mail with this kind of a From address.
 

danrussell

Well-Known Member
Nov 5, 2014
61
4
58
cPanel Access Level
Root Administrator
Hello :),

You should check the Header and body of the emails you receive with the "[email protected]". If you think its junk, then you can block the sender email address. Else confirm with the your customer that if he has configured or subscribed to any system which sends email using his domain name.

Thanks.
 

cPanelMichael

Administrator
Staff member
Apr 11, 2011
47,904
2,218
463
Hello :)

You risk blocking legitimate email, so it might be a better idea to implement an alternate SPAM filtering technique instead. There are several options available in "WHM Home » Service Configuration » Exim Configuration Manager" that you might find beneficial (e.g. RBL options).

Thank you.