Has anyone here ever been unfortunate enough to have a spammer forge one of your domain's e-mail addresses to send out junk mail?

How did you deal with the aftermath? The typical Internet user probably won't understand that the "from:" e-mail address in spam is usually forged.

Sounds like BugBear. We get angry clients contacting us sometimes to tell us our mail server has been hacked. Qmail is bulletproof though. With BugBear, the virus finds your email address in someone's address book and instead of sending email to you, it sends it from you. Great little worm.

But, yes, spammers do it too. :angry:

I get this a few times, died down of late, bloody annoying!

Yeah happened to me... except the person at the other end got me and my mate mixed up, and as a result my mate got his site hacked.

How was it delt with? It wasn't. My mates site was established on Geocities, and what excatly did the geocities team do about it? Nothing, they didn't even delete the hackers website, probably because thats privately hosted on geocities. (paying customer) :rolleyes:

As for the actual spammer, we never found out who it was.

Originally posted by kreativ
Has anyone here ever been unfortunate enough to have a spammer forge one of your domain's e-mail addresses to send out junk mail?

How did you deal with the aftermath? The typical Internet user probably won't understand that the "from:" e-mail address in spam is usually forged.

I would first ensure that you have a Abuse@ account setup for your domain. then setup a Auto Responder (which you should have anyway if your doing hosting) In your Auto-Responder I would let everyone know that you are being "Joe-Jobbed"(the term for it) and that the address is non-existant. Put a news stippet on your home page and inform the masses in the Anti-Spam groups.

As most people would not blacklist your domain due to a return dropbox. I would still rather post the information to the Antispam community so as not to tarnish your reputation.

It has happened to me too a number of times. The bounces back from bad addresses was the worst thing to deal with, to avoid that I had to stop allowing an anything@mydomain address to work and only accept mail to specified addresses.

I did leave an abuse address active and when I do get a complaint I reply with an explaination of what happened and how to read the headers to find out who REALLY sent the spam to them. I also suggest to them that they report the spam to the ISP of the real sender if they can, and to also report the site that is being linked to if that is possible. (The site that keeps doing this to me keeps moving their site from one free host to another, subdomain URLs, so it is pretty easy to see who is hosting their site.)

Just to be on the safe side, I also let my host know what was happening as well, so if they got any complaints they were already aware of the situation.

Highly annoying! :angry:

I host a site that has managed to piss someone off who sends out spam as if it were from this site saying pro Islamist and anti American things in the spam, I occasionally get a Spamcop about it and remind them we've already discussed this and that my client hates these emails more than anyone but doesn't know who's doing it and that he's most definitely not an Islamist extremist. (His site is one of those world peace type sites).

I personally have an abuse@* setup but im going to setup forwarder on it in the future.

I do ifnd this type of spam INCREASINGLY annoying every time it happens.

I have no real way of dealing with it as it totally depends on the end-users' understand-ability of the internet mail.

it's almost as bad as those dang cybersquatters that register names suspiciously similar to other companies...

:stickout: :eek: :D

One of my email addresses is actually forged to send worms :angry: if I find that jerk....