Thank you for being a valued part of the CNET community. As of December 1, 2020, the forums are in read-only format. In early 2021, CNET Forums will no longer be available. We are grateful for the participation and advice you have provided to one another over the years.

Thanks,

CNET Support

General discussion

hijacked Domain

Feb 11, 2004 4:48AM PST

Some evildoer has spoofed their spam as coming from my domain. This means that everytime an email system rejects an infected email, the return address sends the rejection to me. (One advantage of owning a domain is setting all the incoming mail to mydomain.com to be forwarded to myspecificbox@mydomain.com - thus I have always had the luxury of knowing how someone got my address - for example I give COMPANY X the address companyx@mydomain.com and any spam to that address tells me my name was sold by them, which makes the filtering process and the complaining process easy)
At the moment, my mailbox is full to overflowing with rejected mail for places I didn't send to with return addresses I never created, for example cxdffg@mydomain.com. I called my service provider and they said since the mail was never actually routed out through my domain's mail system, it wasn't a problem they could do anything about however there's now a bunch of places believing I sent the spam and banning mail from my domain. Any Ideas about saving my good name would be appreciated.

Discussion is locked

- Collapse -
Have you read about the MyDoom Virus?
Feb 11, 2004 4:54AM PST

Sadly, if you can stop it, we'd all be grateful. I'm just kidding, but here's the info:

http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_MYDOOM.A

"This mass-mailing worm selects from a list of email subjects, message bodies, and attachment file names for its email messages. It spoofs the sender name of its messages so that they appear to have been sent by different users instead of the actual users on infected machines."

So you can be sure that its not you but likely someone who has your e-mail address on their machine and they got it.

Bob

- Collapse -
Re:Have you read about the MyDoom Virus?
Feb 11, 2004 5:03AM PST

Sadly, the volume of returned messages and world-wide nature of the addresses targetted lead me to think that it's more organized. I suspect someone just sends out a gazillion messages spoofing a random word or fragment @mydomain.com. Reading some of these I'm sure "I"'m selling a great deal of viagra and whatnot. What's sadder yet, is some new spammers got hold of some of the spoofed addresses someword@mydomain.com and now I'm getting all THAT junk too.

- Collapse -
Re:hijacked Domain
Feb 11, 2004 4:55AM PST
- Collapse -
Re:Re:hijacked Domain
Feb 11, 2004 5:13AM PST

Yup- sounds like what's happened to me.
How long do you suppose I'd have to disconnect?
A day, a week, a month? I'd hate to try and figure out all the addresses I do use (each newsletter/ provider/friend ...eeek)

- Collapse -
Re:hijacked Domain
Feb 11, 2004 5:44AM PST