Forum Moderators: open
Google shows many incidences of spam sent by bompane@ with other email addresses, so I guess it's the same individual. (Or system?)
As the email address is my main one I can't really easily change it. It's not available on my web sites so someone probably got it from a commercial transaction.
Anyone know anything I can do to stop this?
Almost all the emails are spam originated from bompane@my-isp-address.
Can you verify that please? You'll need to check the actual email header. Anybody can put your email address in the From: line.
Sending "from" your email address is another issue. If that is the case, then your host has SMTP Relay on and that is not good.
The emails that bounce are returned to me because they have been sent with bompane@my-email-address in the "from" line. I doubt if they originate from my ISP.
The original messages are the usual spam, and I can't see anything in common with them except the name "bompane". Checking Google I see that "bompane" occurs with other email addresses in bounced emails. (Googling for 'bompane' 'spam' brings up several spam reports.) It looks to me as if these emails are being generated automatically and always insert the name bompane.
It really is a major problem for me. I'm getting about 400 a day bounced emails arrive in my inbox. Since I raised this post I have had about 150. And from the spam reports it's clearly happening to others as well.
Google shows many incidences of spam sent by bompane@ with other email addresses, so I guess it's the same individual. (Or system?)
You can bet that all the data you see is fake. It's like the abuse of server-side webform processors, chasing down any visible information will usually lead to a compromised server or someone who's managed to release an email-address-mining virus on their computer and allow it to be used as a spamming station.
Filter it, put up with it, in either case you just have to get used to it. If it's a secondary email sometimes you can just close it down, or bounce it for a while, then reactivate it later. I look at it as a form of flattery, (i.e. rationalize it,) if I've gotten under someone's skin enough to make them select me as the target of their angst, I guess I must have dones something right. Or wrong. :-)
I've prepared a form letter for those who send me those "hey stupid, you've got a virus" emails. Basically it says sorry, wasn't me, here's how it works . . . .
Your domain does not have an SPF record. This means that spammers can easily send out E-mail that looks like it came from your domain, which can make your domain look bad (if the recipient thinks you really sent it), and can cost you money (when people complain to you, rather than the spammer). You may want to add an SPF record ASAP, as 01 Oct 2004 was the target date for domains to have SPF records in place (Hotmail, for example, started checking SPF records on 01 Oct 2004).
I have set up a filter so all these bounced emails go into a seperate folder - about 700 in the last 4 days.
I have checked for an SPF record. Unfortunately the email address is a major isp, and I can't find if one is set. MYNAME.ISPNAME.CO.UK doesn't have NS records, WWW.ISPNAME.CO.UK doesn't have MX reords, and MAIL.SERVER times out. Anyway I doubt that many servers check for an SPF record.
I will set up SPF records for the domains that are under my control - but I'm not getting any spam from them!
Looks as if I will have to live with it.
Harry
