Adam Kane wrote: > In the past few weeks we have been receiving e-mails coming into our > [EMAIL PROTECTED] account like the following (see below) > > our info@ account is not an actual mailbox, it is a forwarded account > that forwards to 5 people, and nobody can send from it. The subject's > of these emails are "Returned Mail: see transcript for details" > > > any suggestions would be appreciated.
Those are failed deliveries of the "german political spam" generated by the recent sober worm. An infected machine generated spam using your info address as the forged sender, and started sending messages. What you're seeing here is bounces from failed deliveries. You might want to take one of the sober spam rulesets, such as this one: http://weblog.erenkrantz.com/~jerenk/german_spam.cf and modify it into a series of body rules looking for "Subject: ...".
