"Auggie" <Imperial.Palace@Rome.It> wrote in message
news:CauBi.4539$Pd4.4097@edtnps82...
>
> "Martin Harran" <nospam@martinharran.com> wrote in message
> news:5jmak8Fb0huU1@mid.individual.net...
>> <rant_mode>
>>
>> WTF do people still send out bounces for non-existent email addresses?
>> Some f**ker is using one of my domains for dictionary style spamming and
>> I got nearly 2K bounces this morning.
>>
>> I hate people who set up these bounces almost as much as I hate
>> spammers.
>>
>> </rant_mode>
>
> It could be that this is the spam you are receiving.
>
> I've received spam where it was made to look like I tried to email spam to
> somebody and it was being bounced back to me or replied to via an
> autoreply

Yes, its known as a Reverse NDR attack
((http://www.cryer.co.uk/glossary/r/reverse_ndr.htm). The spammer uses a
remote server to delivery spam by setting the sender's address to the email
address of the target.

As the OP correctly said, this is indicative that the server generating the
NDR's is mis-configured. The server should reject the email at the point of
delivery, not receive it and then generate an NDR. I don't know about other
email systems, but the out of the box Microsoft Exchange (2003) settings
allow this type of relaying although it can (and should) be disabled.
Hopefully Microsoft have changed their default configuration for Exchange
2007.
--
Brian Cryer
www.cryer.co.uk/brian