I know about the forged emails because I'm not only getting "normal" spam, but also automated replies to all the forged email as well.
This shows me the forgeries allege to be from diffenbach.org addresses that simply don't exist.
An example: this is the header on one of the forged emails:
Received: from canada-smtp1.consulting.fujitsu.com ([188.8.131.52]) by Montreal-NS002 (Lotus Domino Release 5.0.11) with ESMTP id 2004092708593753:19134 ; Mon, 27 Sep 2004 08:59:37 -0400 Received: from dfds.de ([184.108.40.206]) by canada-smtp1.consulting.fujitsu.com (Lotus Domino Release 6.0.3) with SMTP id 2004092709060246-38938 ; Mon, 27 Sep 2004 09:06:02 -0400 From: "Owen Quintero" [diffenbach.org address elided so spambots don't see it] Date: Mon, 27 Sep 2004 12:55:32 +0000 Message-ID:Note that the email was sent from dfds.de ([220.127.116.11]) (a German domain) to canada-smtp1.consulting.fujitsu.com ([18.104.22.168]) (a .com domain), which shouldn't have accepted it at all, and which sent it on to the victim of the spam, whose mis-configured mail server looked at the forged return address rather than the un-forged mail path, and then bounced it to me.
MIME-Version: 1.0 Subject: =?iso-8859-1?B?QnV5IFYhaWFncmEgT25saW5lIE92ZXJuaWdodCBXaXRob3V0IEEgUHJlXnNjcmlwdGlvbg==?= To: [victim's email address elided so spambots don't see it] Content-Transfer-Encoding: quoted-printable Content-Type: text/html