One approach I have heard of to test where the spam is getting harvested
goes like this. If you have your own domain, you can often set up an e:mail
address where all e:mail to a nonexistent e:mail account on the domain goes
to one real account. Thus, I could have bogus e:mails of
AutodeskNG@mydomain.com for here, MicrosoftNG@mydomain.com for MS
newsgroups, etc. Then I could route all of them thru a real account called
newsgroups@mydomain.com, and sort them to an NG folder. Then you just look
at the spam that arrives, and see which bogus e:mail account it went thru.
Haven't tried it yet myself, but the spam level is getting large enough that
I might. Also, my home account, which is thru a hosting company, doesn't get
much spam, while my work account, thru Exchange Server, get a ton. My guess
is my hosting service at home is blocking a lot of stuff, while Exchange
requires a costly add-on to block anything.
Best,
Gordon