Now that I think about it, I'm also seeing a tremendous amount of mail sent to bogus addresses on my domain. The address is always of the form "[EMAIL PROTECTED]". It came in so heavily from Hotmail's IP range one day that I actually blocked connections to that IP block for a while.
I wonder if these two issues are related. The rafaelxxxxx messages coming into my server are being bounced to some other poor soul, much the same way my customer is receiving bounces for messages she did not send. Shayne > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Shayne Embry > Sent: Tuesday, July 15, 2003 9:43 AM > To: [EMAIL PROTECTED] > Subject: RE: [Declude.JunkMail] is this strategy? > > > I'm seeing this a lot during the last couple of days. I have > one customer specifically who has received dozens of NDR > bounce messages this week. The original spam message has her > email address as the sender, but the messages are not being > sent or relayed through my server. Most are originating outside U.S. > > > > -----Original Message----- > > From: [EMAIL PROTECTED] > > [mailto:[EMAIL PROTECTED] On Behalf Of > Markus Gufler > > Sent: Tuesday, July 15, 2003 2:00 AM > > To: [EMAIL PROTECTED] > > Subject: [Declude.JunkMail] is this strategy? > > > > > > Attached you can find a NDR that has as attachment a spam message. > > > > The spam message has my e-mail as sender address and as > > recipient a not existant address on the server that has send > > me the NDR. > > > > As I have seen this multiple times in the last days and not > > only with my sender address, I fear this is strategy to > > bypass spam filters and deliver the spam message to the real > > intended recipient: me. > > > > All the spammer need is a mailserver that includes the intire > > original (spam)message in the NDR as an attachment. > > > > Markus > > > > > > --- > > [This E-mail was scanned for viruses by Declude Virus > (http://www.declude.com)] > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type > "unsubscribe Declude.JunkMail". The archives can be found at > http://www.mail-archive.com. > > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
