Many of our clients have noticed a problem with Spam which seems to come from email addresses at their own domain, and when this happens it looks to those recieving the emails like that client is doing the spamming when in fact they have no connection to the business sending out the unwanted email at all.

The unfortunate fact is that it is trivially easy to forge a mail header and spoof somebody else's identity in a spam email, it is now standard procedure for spammers, and is refered to as a "joe-job" by those involved in the practice.

The procedure is now so common that spam reporting tools such as spamcop.net do not even examine or report the contents of From headers anymore, assuming that they are forged and would be reporting people unrelated to the spam itself.

If the address being spoofed is not one of your production addresses, i.e. lksjdfsjd@yourdomain.com, and you are using email forwarding, you can log into your mailmaps and create a mailmap for it, enter "DISCARD" in the email field and we filter it all into the bit-bucket.

You can do a few other things as well:

• prepare a form email explaining that this spam is using a forged header and you are an innocent bystander, send that to anybody who complains to you
• post that email on usenet in news.admin.net-abuse.sightings.email
• also post it to the SPAM-L mailing list see:
http://www.claws-and-paws.com/spam-l/ (read the FAQ for posting guidelines first)

That will get the word out among the antispam circles that you are not involved.
Send a copy to abuse@easydns.com as well, we will send it onto anyone who complains to us about your domain.