Why Am I Getting "Joe Job" Bounces?

I need help solving an e-mail mystery. (g)

One of my domains is being used for "Joe Job" spamming -- with forged "from"
addresses with a variety of nonsense names @mydomain.com. Naturally, many
of these spam messages are rejected. Some receiving networks send a "reply"
message saying delivery has failed.

What I don't understand is why I am getting these bounce messages. They are
sent as replies to non-existent e-mail address on my domain. The "catchall"
address is turned off in CPanel, by default. There are no forwarders. There
is only one legit address, and these spam bounces are not being sent to it.
Yet it appears that the bounces are being forwarded to my admin e-mail
address.

Any idea why this is happening, in the absence of a catchall or forwarder,
and how I can stop this?

Thanks!

Alex

Alex wrote:
> I need help solving an e-mail mystery. (g)
>
> One of my domains is being used for "Joe Job" spamming -- with forged "from"
> addresses with a variety of nonsense names @mydomain.com. Naturally, many
> of these spam messages are rejected. Some receiving networks send a "reply"
> message saying delivery has failed.
>
> What I don't understand is why I am getting these bounce messages. They are
> sent as replies to non-existent e-mail address on my domain. The "catchall"
> address is turned off in CPanel, by default. There are no forwarders. There
> is only one legit address, and these spam bounces are not being sent to it.
> Yet it appears that the bounces are being forwarded to my admin e-mail
> address.
>
> Any idea why this is happening, in the absence of a catchall or forwarder,
> and how I can stop this?
>
> Thanks!
>
> Alex
>
>
>
>

One of the requirements in the RFC's (I forget which one right now) is
to have a postmaster DeleteThis @example.com user. This is where bounce messages
are supposed to be sent. Perhaps your hosting company has this address
set to go to your admin account.

--
==================
Remove the "x" from my email address
Jerry Stuckle
JDS Computer Training Corp.
jstucklex DeleteThis @attglobal.net
==================