[rfrassetti]

Hi,
Please bare with me as I am not very knowledgeable concerning spam and email problems, Over the last week I have had 4 instances of returned mail from accounts I do not have. Below is an example of one of the emails I received:

_______________________________________________________________________


From : <MAILER-DAEMON@su9189250.aspadmin.net>
Sent : Saturday, September 24, 2005 1:17 AM
To : clamwj@frassettirealtors.com
Subject : failure notice

| | | Inbox


Received: from server24.totalchoicehosting.com ([207.44.242.2]) by mc5-f2.hotmail.com with Microsoft SMTPSVC(6.0.3790.211); Fri, 23 Sep 2005 23:19:28 -0700
Received: from [216.98.145.11] (helo=su9189250.aspadmin.net)by server24.totalchoicehosting.com with esmtps (TLSv1:AES256-SHA:256)(Exim 4.52)id 1EJ3NZ-0007nr-47for clamwj@frassettirealtors.com; Sat, 24 Sep 2005 02:19:21 -0400
Received: (qmail 8079 invoked for bounce); 24 Sep 2005 06:17:51 -0000
X-Message-Info: 6sSXyD95QpXOEB6SlXwKqVgMBX8+Why6LuxiL9ctGtE=
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - server24.totalchoicehosting.com
X-AntiAbuse: Original Domain - frassettirealtors.com
X-AntiAbuse: Originator/Caller UID/GID - [0 0] / [47 12]
X-AntiAbuse: Sender Address Domain -
X-Source:
X-Source-Args:
X-Source-Dir:
Return-Path: <>
X-OriginalArrivalTime: 24 Sep 2005 06:19:29.0118 (UTC) FILETIME=[EB77AFE0:01C5C0CF]

--------------------------------------------------------------------------------

View E-mail Message Source
Content-Type: multipart/mixed


Content-Type: text/plain


Hi. This is the qmail-send program at su9189250.aspadmin.net.
I'm afraid I wasn't able to deliver your message to the following addresses.
This is a permanent error; I've given up. Sorry it didn't work out.

<newman@coronafirm.com>:
This address no longer accepts mail.

--- Below this line is a copy of the message.





Content-Type: message/rfc822


From: Claude Lam <clamwj@frassettirealtors.com>
Subject: we want you
Sent: Saturday, September 24, 2005 1:16 AM

Received: (qmail 8065 invoked from network); 24 Sep 2005 06:17:46 -0000
Received: from adsl-mum-203.94.209.88.mtnl.net.in (HELO ch.mmm.com) (203.94.209.88) by su9114511.aspadmin.net with SMTP; 24 Sep 2005 06:17:46 -0000
Return-Path: <clamwj@frassettirealtors.com>
X-MimeOLE: Produced By Microsoft Exchange V6.0.6726.0 Content-Type: text/html; charset=us-ascii
Content-Transfer-Encoding: 8bit


Hey I am Farrah
I have been modeling for over 2 years now, and so have all my friends. We have been told to post our profile on the below site.

Go to below site and check me and my friends out..

anulfriendly.com

Please check us out, and give us some comments.

You will also find millions of other great singles on the site, its one of the largest dating sites right now on the world wide web. You will find large communites from your area.

Give it a try and give us a shout thru the website.

Thank You very much

_______________________________________________________________________________

What does this mean? Is someone using my account to send spam? If so what can I do to stop it? As I said, I'm not very knowledgeable about things like this so any advise will be greatly appreciated.
Thanks for your help.
Bob






Following is another example of what I received. The other 2 have been deleted. Hope this helps in the "diagnosis". Thanks again, Bob
_________________________________________


From : Mail Delivery System <Mailer-Daemon@mail.jodapro.com>
Sent : Saturday, September 24, 2005 6:23 AM
To : g_wagnerte@frassettirealtors.com
Subject : Mail delivery failed: returning message to sender

| | | Inbox


Received: from server24.totalchoicehosting.com ([207.44.242.2]) by mc4-f8.hotmail.com with Microsoft SMTPSVC(6.0.3790.211); Sat, 24 Sep 2005 04:23:14 -0700
Received: from [216.170.113.130] (helo=mail.jodapro.com)by server24.totalchoicehosting.com with esmtps (TLSv1:DES-CBC3-SHA:168)(Exim 4.52)id 1EJ87c-0007lr-FJfor g_wagnerte@frassettirealtors.com; Sat, 24 Sep 2005 07:23:12 -0400
Received: from smmsp by mail.jodapro.com with local (Exim 4.22)id INBJN5-000G00-5Nfor g_wagnerte@frassettirealtors.com; Sat, 24 Sep 2005 04:23:29 -0700
X-Message-Info: JGTYoYF78jGoNcABN5ATiaLm4OfbXVdKzbOmTuiStag=
X-Failed-Recipients: root@mail.jodapro.com
Auto-Submitted: auto-generated
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - server24.totalchoicehosting.com
X-AntiAbuse: Original Domain - frassettirealtors.com
X-AntiAbuse: Originator/Caller UID/GID - [0 0] / [47 12]
X-AntiAbuse: Sender Address Domain -
X-Source:
X-Source-Args:
X-Source-Dir:
Return-Path: <>
X-OriginalArrivalTime: 24 Sep 2005 11:23:14.0768 (UTC) FILETIME=[5ACD2D00:01C5C0FA]

--------------------------------------------------------------------------------

View E-mail Message Source
Content-Type: text/plain


This message was created automatically by mail delivery software.

A message that you sent could not be delivered to one or more of its
recipients. This is a permanent error. The following address(es) failed:

root@mail.jodapro.com
(generated from webmaster@sfmds.com)
Operation timed out:
retry timeout exceeded

[TCH-Don]

Most likely this is spoofing to send spam
and make it look like it came from your domain.

I get the same all the time
and not much we can do about it.

[rfrassetti]

Appreciate the info, I was worried it was worse.
Thanks,
Bob

[dhilke]

I just came to search the forum to see if I'm the only one having this problem, and I see that I am not! It's a lot more than 4 instances for me though... over just the last few days I've had HUNDREDS of messages flood my account, all returned mail from different places, coming back as undeliverable, as though they were sent from my domain.

This started suddenly, just a few days ago. It's as though someone is sending out SPAM from my domain, using random.names@myacount.com and all the undeliverables are coming back to my default mail account.

I saw the reply that this was probably just a tricky way to get a message into my inbox, but it sure seems like more than that. These are coming from so many different places... and it just started over night.

Does anyone have any ideas??

This post has been edited by dhilke: 30 September 2005 - 08:16 PM

[Madmanmcp]

What you are seeing is the fallout from one or more of the current Virus/trojans that are infecting thousands of computers out there. These programs search the net or the infected persons email addresses and use the domains it finds and assigns random names or letter to them and sends out Spam. There is not much you can do but weather the storm or set you default mail to ::fail::.

[stevevan]

What Bob says is very true. Although nothing, I'm afraid, will stop spam completely, it will help cut down on the amount. I'm getting spam email sent to my "test" domain...and I don't even have any email accounts set up there! Such is life on the Internet!