email from same domain

jlucho

• February 12, 2026 19:03

Hi cPanel

I'm reporting the following problem: Receiving emails from the same address.

For example: I have the email address test@mydomain.com and I receive emails from test@mydomain.com.

Upon checking the header, I see that the emails were sent from a different IP address than mine; in fact, it's an IP address belonging to GoogleUserContent.com 

On the server, I have SPF, DKIM, and DMark correctly configured.

How can I, or what configuration should I apply, prevent these types of senders, who are clearly sending emails from an IP address that doesn't match the rDNS?

 

thank

• 

  cPRex Jurassic Moderator

  • February 12, 2026 20:27

  Hey there!  If you have root access to the server I would recommend the Greylisting, SMTP Restrictions, and Exim Configuration settings to ensure your mail is secured:

  https://docs.cpanel.net/knowledge-base/email/how-to-prevent-email-abuse/

  Do you have any of those in place already?

  Ultimately there is no solution that is 100% effective against spam or spoofed messages, but this would be a good start.

  0
• 

  jlucho

  • February 12, 2026 22:25

  Thanks for the guidance.

  What information do I need to enter on the greylist to block this method of spoofing my domain? Do I need to enter my domain name on the greylist? Or the IP address of GoogleUserContent?

  0
• 

  cPRex Jurassic Moderator

  • February 12, 2026 22:32

  You don't need to do anything for the Greylisting in order for that to work, and I would expect that to be one of the most effective tools to stop spoofing like this.

  Greylisting works by temporary blocking *all* emails.  If the sender is a legitimate mailserver, they will retry to send the message, but spammers and bots won't do that.  So you'll still receive the emails but greylisting helps to filter out messages sent from automated scripts.

  More details on how that works can be found here:

  https://docs.cpanel.net/whm/email/greylisting/

  You can definitely add an IP to the Trusted Hosts list if you want to ensure a certain sender never gets the greylisting delay: https://docs.cpanel.net/whm/email/greylisting/#add-an-ip-address-to-the-trusted-hosts-list

  0
• 

  jlucho

  • March 27, 2026 15:23

  I activated the Greylist

  The domain in question has SPF, Dkim and Dmark (quarantine)

  Even with these settings, email is still being received from the same domain (but using Google Content's IP address). What other options would need to be implemented to stop receiving emails from the same domain?

  0
• 

  cPRex Jurassic Moderator

  • March 27, 2026 15:40

  I'm not sure there is going to be a way to 100% filter out these type of spoofed emails.  

  0

Please sign in to leave a comment.