Spammers spoofing my domain

[pkoutoul]

I am getting flooded with bounce messages and other junk from mail servers that have been spammed by people using my domain name. They are using made-up random names @mydomain.com. This is a real pain because I use a catch-all to forward [e-mail] to my real mailbox. I guess I can change that if I have to but it will be a pain as I have used literally hundreds of aliases at various Web sites.

My real question is, what if anything can be done about spammers spoofing my domain name? I suspect the answer is nothing given the state of (in)security on the Internet. But I thought I'd ask in case anyone else has any ideas. Thanks.

[mcavic]

SPF [spf.pobox.com] is supposed to weed out email with fraudulent return addresses. But I don't think that would help you very much unless it was implemented across the whole Internet.

I do suggest using individual addresses rather than catch-all, though, because then you can turn addresses off at will.