Internet Gurus - error messages for mail I didn't send

[turbojimmy]

I think that these are from people spoofing my e-mail address, but I want to make sure there's not anything more sinister going on.

A few times a day I get messages from mail servers that have rejected messages that it thinks I sent. Usually it's because the mail server thinks it's spam. It's usually a bunch of addresses @aol.com or whatever. Obviously it's spam. If I look at the "from" address, it's some random name @jimmyz.net. Jimmyz.net is a domain that I own, but I do not have any type of mail server set up. I just point it to my server at home which is just an IIS server hosting some static pages. It's firewalled and uses NAT. All ports are shut down other than the usual 80, 8080, and the port I use for HTTP requests (231). There's no way some spammer is using some server I'm responsible for, right? They're just using the domain name to try to mask their real identity (which is still annoying but there's little I can do about it)?

TIA,
Jim

 

[Joe 1320]

Someone is using your e-mail to send spam. Contact your ISP, they can trace it and contact their ISP and shut them down. Most likely it's from overseas.

 

[TurboJim]

Or someone with you in their address book has a worm

 

[lp2]

Yea check the emails closely, maybe contact the provider to mention it and see what's up.

Also don't forget that a lot of spam gets sent to look like it was sent from you and it failed the delivery, you might want to check the header and see if it actually bounced, or it's just some spam. I get a lot of them that look like it failed until you see what it is and then it's just a typical spam.

 

[Lee_Burough]

At the very least, I'd change every password I have

 

[wlaukaitis]

Hey!

Hi

Do you have SMTP installed? It may be "Simple SMTP installed"

You mail server is: blah-blah-blah.cirticalpath.net

It is very easy to hack mail servers, most people leave them open on the "mail" port which yours is.

People are just boucing mail off of you.

Bill

 

[turbojimmy]

Re: Hey!

Hi all,

Thanks for the replies.

It does look like people are bouncing mail off my SMTP server, but I don't have one. IIS comes with an SMTP server but it's shut down. I'll have to look a little closer at it. I don't think it's a matter of someone with a virus with me in their address book 'cause it's not my address - just my domain. The errors are for OTHER addresses @jimmyz.net - addresses that don't exist.

Thanks again,
Jim

 

[scottyb]

There was a virus going around a few months ago spoofing just like you say. I've already lost those brain cells, so I don't remember names or details. Look at sarc.com.