I'm not sure if it is related or not but yesterday I received a returned email due to invalid address. I knew that I had not sent out any emails so this must have been a spoofed message or the result of this hole (however, the forms I use on the web site are still working so they must not be part of what you disabled). Anyway, today when I checked email I have ~200 messages sent to various addresses, ie: xyz@mysite.com, where xyz is changing. Of course these are all from the mortgage lender, ****, and I AM A SPAMMER spammers. What is the best way to reject anyname@mysite.com and only allow the specific names I've defined?
Thanks