Intrusion alert!

[tinyjo]

OK, it's much worse than I thought. Someone else is sending out a ton of spam email purporting to come from my domain. It seems to be the style of spam that I've been getting recently (prescription meds stuff) so I assume that's where they found the domain name. Now the question is, how do I get them to fuck the hell off and stop doing it? I figured out that it's not being sent from my computer because after disinfecting it, I shut it down for a bit as a test and logged onto my email using webmail and my office computer. And I've just received another bounce message stating the original mail was received at 9:06 EST (i.e. 14:06 GMT). While my laptop was turned off, and had been for a good hour. On the plus side this means that I can turn the laptop back on, reassured that it's completely clean of mail sending crap but on the minus side, what the hell do I do about this?

Comments

Close but...

[tinyjo.livejournal.com]

The thing is, it's not using my address - the emails all come from [randomlettersandnumbers]@tinyjo.net. I think klez does pick up actual email addresses, which is part of the problem.

I get the mails into my inbox because I have garbage collection on my domain pointed to my email address. Now I could turn that off, or point it to a spare account to view later at my leisure, but I would like to get whoever it is to stop bloody well doing it if possible

Re: Close but...

[mzdt.livejournal.com]

I'd love to be able to add something positive...

...but of course, the other thing to worry about is that the various spam bouncers (spamcop et al) are going to start bouncing anything from tinyjo.net... ;-(

I had a problem recently where my domain forwarders had added a spam bouncing service without asking, and started bouncing everything from another.com, just as I was organising something with someone who used it.

Re: Close but...

[(Anonymous)]

Spamcop shouldn't be a problem, as they blacklist based on IP addresses. It's unlikely that the spammers have actually hijacked the server at 80.94.195.240.

The best trick to be rid of all these bounce messages is to configure your mail server to reject all but valid recepient names at tinyjo.net.

- Adrian

Re: ...no cigar.

[mzdt.livejournal.com]

...just goes to prove I know nothing, but at least I use my ignorance for peaceful purposes.

I tend to use the company name@my domain as an email address when shopping; when anyone starts spamming me using that address, I set the forwarding to go to them. Lovely.

Not the same, but satisfying nevertheless...