[CletusJones]

For the past several days I've been getting delivery failed messages for mail that I obviously haven't sent (spam) and in the transcript it lists a blackberry address as the originating server. How is this possible? Could I have a rogue program on my device? I haven't installed anything that I can think of.

Here's a copy of the relevant portions of the email header. Any ideas?

Return-Path: <srs0=hu3awr=2a=omg-stfu.com=josh@srs.bis.na.blackberry.com>
Received: (qmail 23721 invoked from network); 22 Sep 2008 10:25:30 -0000
Received: from unknown (HELO hisar.endersys.com) (213.144.99.107)
by 0 with SMTP; 22 Sep 2008 10:25:30 -0000
Received: (surgate 85384 invoked by uid 1001); 22 Sep 2008 10:24:54 -0000
Received: from unknown (HELO smtp10.bis.na.blackberry.com) (216.9.248.57) by 0 with SMTP; 22 Sep 2008 10:24:51 -0000
Received: from bda471.bisx.prod.on.blackberry (bda471.bisx.prod.on.blackberry [172.20.218.16])by srs.bis.na.blackberry.com (8.13.7 TEAMON/8.13.7) with ESMTP id m8MAQBrD001274for <kuchiutu_2000@EnderUNIX.org>; Mon, 22 Sep 2008 10:26:11 GMT
Received: from bda471.bisx.prod.on.blackberry (localhost.localdomain [127.0.0.1])by bda471.bisx.prod.on.blackberry (8.13.7 TEAMON/8.13.7) with ESMTP id m8MAQ8r5021427for <kuchiutu_2000@EnderUNIX.org>; Mon, 22 Sep 2008 10:26:08 GMT
Message-ID: <1850735552-1222079167-cardhu_decombobulator_blackberry.rim.net-1724798101-@bxe195.bisx.prod.on.blackberry>

[JSanders]

There are no viri on the BB.

You can post your email address somewhere and a net spider or whatever catches it, and uses it to send spam, using that as the originating address. It has happened on my personal domain email email address?

[paulbblc]

And here I thought that you just enjoyed spamming my inbox with pron links J...

[CletusJones]

Originally Posted by JSanders

There are no viri on the BB.

You can post your email address somewhere and a net spider or whatever catches it, and uses it to send spam, using that as the originating address. It has happened on my personal domain email email address?

Understood, but why then does it list the originating server as a bis.na.blackberry address? Shouldn't it be my mail server (mail.omg-stfu.com) instead?

[JSanders]

213.144.99.107 is endersys.com, a Turkish-based anitspam and anti virus software company.

Perhaps it was caught by them...

I don't know.

[CletusJones]

Hmmm. I guess I'll just have to investigate. I'd hate to have my domain flagged as spam.

[daphne]

Spammers may be spoofing your domain to send spam. That doesn't mean spam is coming from your domain, but the headers can be spoofed to make it look like the spam is coming from your domain. It happens to me on a fairly regular basis.