Can anyone tell me about email headers?

[ecchi]

I either have a problem that my email address is being spoofed in spam (which is bad) or that someone has hacked the sendmail on my server (which is a lot worse). Can anyone tell me from the following header extract:

Received: (qmail 5181 invoked from network); 25 Sep 2005 09:45:20 -0000
Received: from ex1.exmasters.com (81.31.38.4)
by nfmail.abuse.net with SMTP; 25 Sep 2005 09:45:19 -0000
Received: by ex1.exmasters.com (Postfix, from userid 2427)
id 35C81BC59; Sun, 25 Sep 2005 11:38:56 +0200 (CEST)

If "Received: by ex1.exmasters.com" means the email "passed through" ex1.exmasters or if it means the message originated on a server where "ex1.exmasters" is the DNS address.

Thanks.

[doublep]

Looks like you have been Joejobbed. Check out the following link for more info.

http://members.cox.net/joejob/

Good luck!

Cheers.

[ecchi]

Thanks.

[natalie]

I have just had this happen with one of my domains too. I took off the catchall and sent an email to my host to see if they have any solutions.