Spammers spoofing my "from" addr

[Elton Woo]

Trevor Smith wrote:

>Off topic but you folks are more knowledgable about these things than anyone I 
>know...
>
I wouldn't exactly call it off-topic, since it *does* relate to linux 
security, and I (dare to
assume that) you *are* using Fedora Core, right? Just wondering, have 
you used
spamassassin?

>I occasionally get returned mail failure notices because some jackass spammer 
>has sent out mass spam using SOMENAME at haligonian.com (which is my domain) as 
>the "from" address. When he hits nonexistent "to" addresses, the bounces come 
>to me.
>  
>

>Is there anything I *can* do? Am I ultimately going to be cut off from parts 
>of the 'net because it *looks* like *I* am spamming? Surely this can't be the 
>case or you could get anyone "banned" from certain servers just by spoofing 
>their "from" address and breaking the rules. No?
>
May I suggest something? Since some of the spam gets bounced back to you, I would recommend using http://vww.spamcop.com/. You'll
have to cut-and paste the entire message (with *full headers*)
into Spamcop's dialog box to find WHERE to send your complaints.

That done, I would send the offending message as an inline (plain text)
"attachment" explaining to the ISP that the originator is spoofing *your* legitimate domain. I realise it's a PITA to do the process,
message by message, but you'll have the satisfaction of knowing
that the problem is being handled by the admins who would (otherwise)
not be aware of the problem.

With the exception of some sites in Korea, China, and Brazil (main
"thoroughfares" of junk mail and UCE, you'll find quick responses
to your complaints.

HTH & cheers,

Elton ;-)
(... who does NOT believe in simply *deleting* offending SPAM/UCE
without a good fight...!) 


-- 
http://setiathome.ssl.berkeley.edu/stats/team/team_4504.html
"You only live once: let's make life BETTER for each other."
LINUX User #193975 [AMD ATHLON CPU] ICQ #149608718.