OT - has my email domain been hijacked?

[Guy Fraser]

On Wed, 2005-14-09 at 21:06 +0100, Chris Wright wrote:
...snip...
> 
> 
> That appears to be a SPAMMER who is faking a user ID at your domain in the
> from address.
> The dumb mail server of some of the recipients hasn't worked out that the
> headers are forged, so it is returning the 'unknown address error' back to
> you instead of the source.
> What it should do is look at the headers to see that it is faked, and just
> bin it without doing nothing.
> 
...snip...
Mail servers do not generally accept a DATA command if the RCPT 
command produces an error, so the rest of the headers are not 
looked at. The proper response is to respond with a user 
undeliverable error. It is the server that is sending the 
message that generates the bounce, not the server receiving the 
the invalid mail. The likely problem is an open SMTP relay 
that is accepting mail from the spammer. If the spam is not 
being relayed then an email to abuse@<isp> with the full content 
of the bounced message, should prompt warnings to or disconnection 
of the spammer.

-- 
So it was written.
So it shall be done.
  Yul Brenner as Ramses