asgardian

Thanks for your replies esp. Art101. I have looked up the article on your site and this appears to be exactly what happened to me. I appreciate your offer of help. As someone else suggested, the bombardment appears to be over now so the Spammer has probably moved on. However, within my very limited technical resources I will try to trace the perpetrator using some of the tools I read about from following links to the Art101 article. Let me have a go at this and if unsuccessful I may still try calling you at a workable hour ( I assume you are West coast USA ).

Thanks for your reply. I have looked at the FAQs but I readily admit that I haven't ploughed through everyhing. If you have tech support phone number or e-mail contact for Spamcop I'd be grateful to receive it or to be told (with some precision) where to find it. Below is a sample header from one of the SPAMS caught in Held Mail: Date: Thu, 4 Nov 2004 23:01:37 +0700 [04/11/04 11:01:37 EST] From: Mail Delivery Subsystem <MAILER-DAEMON[at]DOPA.GO.TH> To: Goss[at]asgardmedia.com Subject: Returned mail: see transcript for details Headers: Show All Headers ERROR: Your message could not be delivered. The mail server generated the following error message: The original message was received at Thu, 4 Nov 2004 23:01:22 +0700 from [201.255.7.112] ----- The following addresses had permanent fatal errors ----- <cross[at]khonthai.com> (reason: 550 5.1.1 <cross[at]khonthai.com>... User unknown) ----- Transcript of session follows ----- ... while talking to khonthai.khonthai.com.: >>> RCPT To:<cross[at]khonthai.com> <<< 550 5.1.1 <cross[at]khonthai.com>... User unknown 550 5.1.1 <cross[at]khonthai.com>... User unknown Needless to say, there is no e-mail user with the address 'goss[at]asgardmedia.com', though asgardmedia is our domain. This has continued throughout the day.

Since 2pm yesterday I have received almost 1000 'bounceback' e-mails, about half of which Spamcop has 'spotted' and put in Held Mail, the other half has all got through. I am at the point next week of needing to renew my subscription to spamcop. This is the first time this has happened and I'm concerned that I have no contact details to talk to someopne at Spamcop to see what's going on. I have a McAfee security system including their firewall, and I ran a full virus scan yesterday afternoon on spotting this problem and came up clean, so I don't think I'm guilty of an e-mail virus exploiting my mail-box. Can anyone help?