Hi - I've started getting large numbers of bounce messages sent to random-looking addreses at my domain (e.g. firstname.lastname@example.org
). A spammer is apparently including randomly generated addresses with my domain name in forged headers of messages they're sending out.
Since I have the catchall address turned on, I'm getting all these bounces. Presumedly I'll eventually also get complaints from annoyed recipients of the spam.
About all I can think of doing is to turn off the catchall address or, perhaps better, make it a black hole with an autoreply that explains I'm not a spammer. I hate to do this, because I've given out several hundred addresses with my domain, and have been relying on catchall to catch them. (I've been giving every web site and company I deal with a different address for me, so I can turn it off if they sell it to spammers.)
I'd be very interested in suggestions on how to handle this.