Invalid email addresses being delivered to users

[Spirit]

Hi,

I am seeing a lot of emails being delivered where there is a variation on the email address i.e.
3DJoe.Blogs@me.com or SMTPJoe.Blogs@me.com or even e_smtp@me.com is being delivered to Joe.Blogs@me.com.

Its a bit worrying / confusing as the typical email header is;
Received: from lykjxo.com (host81-137-227-247.in-addr.btopenworld.com [81.137.227.247]) by EMAILSERVER.ME.com with SMTP (Microsoft Exchange Internet Mail Service Version 5.5.2658.3)
id FJ7GQN2G; Wed, 18 May 2005 08:41:53 +0100
From: astorfade@aol.com
To: 3DJoe.Blogs@me.com
Date: Wed, 18 May 2005 07:41:49 GMT

Subject: Massenhafter Steuerbetrug durch auslaendische Arbeitnehmer
Importance: Normal
X-Priority: 3 (Normal)
MIME-Version: 1.0
Message-ID: <657be.1dcf60bc1c@ME.com>
Content-Transfer-Encoding: 7bit
Content-Type: text/plain; charset="us-ascii"

Previously when I have had problems such as this the real email address is hidden somewhere but not in these cases.

If you need any more info then let me know.

Thanks for your help.

Iain

 

[Spirit]

**Additional**

The also occurrs to
sue.blogs@me.com
eveyname@me.com

So its not a case of NDR's being delivered..... ooooh no that would be too easy

 

[Dyadmin]

Sounds like they are hiding the address in the BCC field, it's a common technique for spammers to use BCC. Try eliminating that host from the IMC. It kinda works, but a 3rd party works better.

 

[Spirit]

Certainly sounds like the best solution so far, is there any way to confirm this? I've tried to look at the BCC but can't find a way to force them to appear. Suppose that's pretty much the point?

If its not possible does anyone out there know how to block all messages from the internet that are BCC'd?

Thanks again,
Iain

 

[zbnet]

You'll struggle, I think, as not every BCCed message is spam (just most of them!). XWall can certainly monitor and report all imcoming messages that use BCC, and it's quite powerful and reasonably priced as well.

 

[zbnet]

Sorry, left off the URL :-(

http://www.dataenter.co.at/products/xwall.htm

 

[Spirit]

Cheers Chaps,

That BCC is a tricky one, I didn't even think of that.

Thanks for the link, its pretty cheap.

Thanks again.

Iain