Discussion Locked

Spammer is using ME as a return address

0 helpful
6 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

I have a new spam problem. After setting up spam filters, using Postini, and other measures to block spam I have a new problem. Some fool is now spamming the world using my domain as his return address. Anyone how knows how to parse a mail headercan easilly see that the return is spoofed (when the IP is shown is not the same as my domain) This is causing LOTS of problems. My mail box had 7000+ returned messages, I am being blocked left and right in mail servers, I have been black listed (I assume not REALLY me but the open relays/ misconfigured proxies he is using.)

I called my ISP... their answer... change your domain name.

I called the FBI ( we are a medical manufacturer... a missed email can delay needed neurosurgery)... they didn't have any ideas.

So... how do I find out who this is? What can I do to stop/control it?? I am leary to trash all mail to postmaster... sometimes there is a critical email in there the really didn't get delivered. I want to find out who this is... and push for jail or at least my expenses dealing with this.

Thanks in advance!

6 replies

by joseph moore

Post the entire mail header from one of the mails here, and we can take a look at it.
Make sure you list everything in the headers.

I think everyone here at TR would be glad to help on this!

by joeblough

This has come to the point where I can't deal with it any more. I came in this morning to 49,000 messages! I have now turned this over to the FBI as an act of cyber-terrorism. They are going to deal with it.(For those who want to know if I am real... and why I am so anonymous... I'm already being attacked...I'm not giving out too much info and being hit with even more... if you want more info... email me!) We need to come up with a way to combat this once and for all!

by fred07

Hi Joseph, I must wonder at JOE BLOWS name and credents. I think we may be being scammed. Hope not but I did notice his name and checked his credents.

This discussion is closed to new replies.