# Spammer spoofing my domain address (help) **URL:** \ **Category:** Factual Questions\ **Created:** [October 9, 2003, 5:35am UTC](https://boards.straightdope.com/t/spammer-spoofing-my-domain-address-help/206436 "2003-10-09T05:35:15Z")\ **Posts on this page:** 7\ **Page:** 1
**Author:** ![SkyBum](https://avatars.discourse-cdn.com/v4/letter/s/a88e57/32.png) [@SkyBum](https://boards.straightdope.com/u/SkyBum)\ **Post date:** [October 9, 2003, 5:35am UTC](https://boards.straightdope.com/t/spammer-spoofing-my-domain-address-help/206436/1 "2003-10-09T05:35:15Z")
I’ve had a spammer spoof my domain email address many times over the last year or so. In the last 2 hours I’ve had a _flood_ of messages from Mail Delivery Subsystem notifying me of undeliverable mail. I can barely keep up with them. Not to mention some of the pissed off recipients emailing me back to inform me that I am lower than scum…this really pisses me off because the spammers are using my business email and it is giving my business and domain a bad name. My God I don’t even know what Viagra looks like yet apparently I am a mass marketer of it. I’m not going to stand by and let this happen without putting up a fight. Unfortunately I do not have a clue how to fight back. Could any of you point me to information on how to track down these bastards? I realize that I can never win this battle but there have got to be some options here. Are there any actions I can take? Thanks. ---
**Author:** ![abby](https://avatars.discourse-cdn.com/v4/letter/a/48db29/32.png) [@abby](https://boards.straightdope.com/u/abby)\ **Post date:** [October 9, 2003, 7:13am UTC](https://boards.straightdope.com/t/spammer-spoofing-my-domain-address-help/206436/2 "2003-10-09T07:13:33Z")
Hiya SkyBum Others will be more qualified than I, but to stop the mass of returned messages, get your domain host admin people set up a filter, so any message with a certain phrase gets deleted. This will allow your legit mail to come thru, and not make you wade thru heaps of trash. abby ---
**Author:** ![SkyBum](https://avatars.discourse-cdn.com/v4/letter/s/a88e57/32.png) [@SkyBum](https://boards.straightdope.com/u/SkyBum)\ **Post date:** [October 9, 2003, 9:18am UTC](https://boards.straightdope.com/t/spammer-spoofing-my-domain-address-help/206436/3 "2003-10-09T09:18:50Z")
Thanks **abby**. My ISP utilizes Spam Assassin for an email filter and I have had GREAT results in filtering out spam at the mail server level. What I am more interested in however, is not finding a way to ignore whomever is spoofing my address, but to find a way to fight back. If that means learning how to trace the real sender through IP logs and such, then I will. If any of you can provide links to sites that would teach me more about this subject, or if you have personal anecdotes, I would appreciate hearing of them. ---
**Author:** ![Nanoda](https://avatars.discourse-cdn.com/v4/letter/n/ce73a5/32.png) [@Nanoda](https://boards.straightdope.com/u/Nanoda)\ **Post date:** [October 9, 2003, 9:41am UTC](https://boards.straightdope.com/t/spammer-spoofing-my-domain-address-help/206436/4 "2003-10-09T09:41:02Z")
Well… you could ask [this guy](http://yro.slashdot.org/article.pl?sid=03/10/01/0120242&mode=thread&tid=111&tid=126&tid=95) what he did. ---
**Author:** ![Lynn\_Bodoni](https://avatars.discourse-cdn.com/v4/letter/l/e47c2d/32.png) [@Lynn\_Bodoni](https://boards.straightdope.com/u/Lynn_Bodoni)\ **Post date:** [October 9, 2003, 10:45am UTC](https://boards.straightdope.com/t/spammer-spoofing-my-domain-address-help/206436/5 "2003-10-09T10:45:44Z")
You might try using the tools at Sam Spade. I’m afraid you ARE going to have to exert some mental effort to dig out the spammer. {edited to fix link. Lynn} ---
**Author:** ![SkyBum](https://avatars.discourse-cdn.com/v4/letter/s/a88e57/32.png) [@SkyBum](https://boards.straightdope.com/u/SkyBum)\ **Post date:** [October 9, 2003, 11:42pm UTC](https://boards.straightdope.com/t/spammer-spoofing-my-domain-address-help/206436/6 "2003-10-09T23:42:55Z")
Thanks a lot! I feel better already. I have nearly 200 bounced back notifications from the last 2 days and now I can start digging to see if I can identify this person. Who knows, maybe I can get his/her ISP account canceled and cause them the trouble of having to set up yet another. Thanks for the links. ---
**Author:** ![SkyBum](https://avatars.discourse-cdn.com/v4/letter/s/a88e57/32.png) [@SkyBum](https://boards.straightdope.com/u/SkyBum)\ **Post date:** [October 15, 2003, 11:41am UTC](https://boards.straightdope.com/t/spammer-spoofing-my-domain-address-help/206436/7 "2003-10-15T11:41:16Z")
I found an interesting webtool the other day at [DnsStuff.com](http://www.dnsstuff.com/). All these tools on one simple page: DNS Report - Finds lots of common DNS problems. DNS Timing - See how long your DNS servers take to respond WHOIS Lookup - Lists contact info for a domain/IP (about 150 TLDs!). Abuse Lookup - Finds abuse contact for a domain from [abuse.net](http://abuse.net). WHOIS Search - True WHOIS search, using www.whois.sc. URL deobfuscator - De-obfuscates confusing URLs. Free E-mail Lookup - Is an E-mail address a known free one? Spam database lookup - See if a mail server is listed in 150+ spam databases. Reverse DNS lookup - See if your IP has a reverse DNS entry. IPWHOIS Lookup - Lists contact info for an IP (or domain). NetGeo IP Lookup - Shows geographical location of an IP (or domain). IP Routing Lookup - Shows IP routing info, from RADB. CIDR/Netmask Lookup - Calculates CIDR ranges (e.g. 192.168.112.0/24). DNS lookup - Look up a DNS record (A, MX, NS, SOA, etc.) Ping - Shows how long it takes for packets to reach a host. Tracert - Traces the route packets take to this host. ISP cached DNS lookup - Check cached DNS at major ISPs. Decimal IPs - Decimal IPs Quite an amazing resource. All of the above services have a text field where you can enter your search term.