Spoofs are pretty common.  I would not be worried.<div><br></div><div>(Unless there&#39;s some indication that &quot;its coming from inside the server!&quot;)<br><br><div class="gmail_quote">On Thu, Nov 19, 2009 at 7:01 PM, DK <span dir="ltr">&lt;<a href="mailto:wplug@curlynoodle.com">wplug@curlynoodle.com</a>&gt;</span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">Hello Folks,<br>
<br>
I received two messages, filtered as spam, from<br>
<a href="mailto:postmaster@almegadoor.com">postmaster@almegadoor.com</a> indicating bounced messages from <a href="http://wplug.org" target="_blank">wplug.org</a><br>
to invalid accounts at <a href="http://almegadoor.com" target="_blank">almegadoor.com</a>.<br>
<br>
Is someone spoofing <a href="mailto:postmaster@wplug.org">postmaster@wplug.org</a>, or may our VPS be compromised?<br>
<br>
Dave<br>
_______________________________________________<br>
wplug-internet mailing list<br>
<a href="mailto:wplug-internet@wplug.org">wplug-internet@wplug.org</a><br>
<a href="http://www.wplug.org/mailman/listinfo/wplug-internet" target="_blank">http://www.wplug.org/mailman/listinfo/wplug-internet</a><br>
</blockquote></div><br></div>