That would be the latter. I.e. you don't need to do anything about it. I get spammage like that in all my little domains.

jan, I've been getting a small flood of those messages, too. Just ignore them. 'Tis but a wee bit of social engineering.

I've also had this kind of spam. Spam mail to me, "from me"; spam as returned mail "from me" to others. ugh. I pretty much just never use a domain address anymore, and I don't even bother with my isp email. That's completely hopeless.

And now, suddenly, I'm getting a huge flood of comment spam on a wordpress site... like one every few minutes for a few hours at a time. Comments have to be okayed on that site, so I just let them stack up (and stack up, and stack up) and then go in and click the "mark all as spam", but it's getting really distracting. I'm probably going to have to shut down commenting altogether. (It's a completely inoffensive, perfectly ordinary blog thing - unlikely that it's any kind of actual attack. I guess.)

You may have been joe jobbed. If so, legitimate messages from your address may start being swallowed by spam traps. If that rises to any great level of frustration, you may have to try to rehabilitate that address with various spam filtering organizations, but in most cases, the fact that you're being filtered by a billion people you never communicate with anyway won't amount to much inconvenience.

Lets see who really touched the email.

>Received: (qmail 27844 invoked from network); 19 Jan 2007 10:32:50 -0000

Qmail delivered it to you.

> Received: from unknown (HELO pdgkzzx) (59.92.186.4)
by static-52-210.worldinternetworkcorporation.com with SMTP; 19 Jan 2007 10:32:50 -0000

SMTP, the Simple Mail Transport Protocol, delivered it static-52-210.worldinternetworkcorporation.com (presumably, a DSL connection) from 59.92.186.4. 59.92.186.4 is a naughty mailserver that isn't advertising a PTR record in DNS (PTRs convert addresses to names, they're the converse of A records, which are names to numbers.)

So, who owns that IP?

>$ whois 59.92.186.4

> OrgName: Asia Pacific Network Information Centre
> OrgID: APNIC



> inetnum: 59.88.0.0 - 59.99.255.255
> netname: BSNLNET
> descr: NIB (National Internet Backbone)
> descr: Bharat Sanchar Nigam Limited
> descr: Sanchar Bhawan,20, Ashoka Road, New
> Delhi-110001
> country: IN


So. India. You've almost certainly been joe jobbed. Next line?

> Received: from ewo ([138.195.59.181])

Another address without reverse! Whois says this block is at...

> route: 138.195.0.0/16
> descr: RENATER
> descr: Universite Pierre et Marie Curie
> descr: 4 place Jussieu 75252 PARIS CEDEX 05
> descr: FRANCE
> origin: AS2200
> mnt-by: RENATER-MNT
> source: RIPE # Filtered

So, some spammer spammed someone in france. That message was rejected, then bounced back to the From: lie, which was a lie. Alas, it was a lie with your domain in it.

You should reject mail that doesn't have a valid user attached to it for the next few weeks -- you may get a bunch of these.

taz, are you using Akismet? It makes handling those comment spams pretty easy, all things considering. I started a new Wordpress blog and ended up having to enable Akismet within a week or so.

Thanks eriko. I have filters set up in Mailwasher Pro so that anything from an unknown source is marked in red and set for deletion from the server before I download the mail into my Outlook Express.