uh oh...

[dwenius]

I just checked my 'postmaster' inbox for there.org, and apparently, my primary email address that you all know and love is now being used by a botnet :(  There were 96 bounces of the "we are rejecting your email regarding c!@Li5 and/or schlong-elongation."  What I can't tell, though, is whether or not this is a random select by the spoof engine, or whether trane.there.org is compromised, or whether speakeasy is compromised, or most importantly, whether this is affecting any of you.

I realize this is a stretch, but if you've gotten any spam lately, which slipped through because you have that address whitelisted, or if you see any spam that looks like it originated from that address, please drop me a note.  At that address.  I know, the irony.

It would suck beyond measure to have to abandon my primary domain after 11 years. 

Comments

[wisn.livejournal.com]

It's far more likely to be a joe job than a security failure.

Basically, the Evil Spammer sends out spam from wherever system he's using (usually third-party Windows systems compromised by malware), but your URL is on the 'From:' field. That's as close as it gets to threatening your site's security. There's no malice against you; they got your URL by random domain name lookup, and it will be one of several dozen URL's they'll generate each day. The giveaway is the 'From:' address is going to be an account you never used, eg. 'huifhsdhf@there.org'.

I get joe jobbed once or twice a year. Others I know are victimized more often. Raise your shields and cringe.

[(Anonymous)]

I concur. I get a storm of bounces from 6dgrku@askesis.org about as frequently. They're easy enough to filter out, but you may need a form letter for all of the earnest requests you'll also receive from people begging you to remove them from your mailing list.

[dwenius.livejournal.com]

Nope. This is my real email address.

Worrisome.