Educause Security Discussion mailing list archives

Third-party external services using your email domain


From: Thomas Carter <tcarter () AUSTINCOLLEGE EDU>
Date: Tue, 23 Jan 2018 22:43:15 +0000

We're seeing an increasing number of requests for using external services to send emails to internal recipients and 
wanting to use our "@austincollege.edu" domain as the sender and reply-to. They also want to make sure our spam filters 
do not catch these emails as spam. We can whitelist the sending server(s), but more services are using large mail 
vendors like MailChimp. We can white list the specific sender, but some are wanting to use valid addresses (for 
example, "hr () austincollege edu") and whitelisting those can lead to easier phishing.

Do you allow external services to send using your domain? How are you handling these type of emails?

Thomas Carter
Network & Operations Manager / IT
Austin College
900 North Grand Avenue 
Sherman, TX 75090
Phone: 903-813-2564
www.austincollege.edu


Current thread: