On 17/09/2024 12:36, Peter N. M. Hansteen wrote:
From the symptoms you describe, I would say this matches somebody running a joejob (https://en.wikipedia.org/wiki/Joe_job) campaign and most likely bought a bottom of the barrel spamto: list with a generous helping of outdated or never-existed-in-the-first-place addresses.
Thank you for taking the time to reply. The two destination email addresses - one @virginmedia.com and the other @ntlworld.com are people the sender is usually corresponding with. The sender and recipients have been talking to each other on the phone and trying to figure out why they can't email each other any more - and then they contacted me.
DMARC reporting might help identify the sources, if you and the target domains have the required bits configured. A point of idle curiosity: Are the bounce-to addresses live addresses in your domain, or random, made-up ones (I have seen a few varieties of both over the years)?
The bouncebacks are coming back to the sender on the @originprobate.com domain - if I understood your question correctly
_______________________________________________ mailop mailing list mailop@mailop.org https://list.mailop.org/listinfo/mailop
