title: Spam is being sent using my domain, what can I do?
body: <p>Since it was released I've been using Google Apps FYD for <code>stackednotion.com</code>. All of the email I send goes through Google's servers and I use Gmail to view my email. I haven't had any issues before, however recently I've been seeing weird bouncebacks ending up in the catch all account. It looks like somebody is using my domain to send spam. I don't really want my domain getting marked with a bad reputation, so how can I stop this?</p>
  
  <p>I have setup SPF, DMARC and DKIM on the domain by following the guides on Google Apps, here is my zone file:</p>
  
  <pre><code>; stackednotion.com [9548]
  $TTL 86400
  @   IN  SOA ns1.linode.com. luca.stackednotion.com. 2012072633 7200 7200 1209600 86400
  @       NS  ns1.linode.com.
  @       NS  ns2.linode.com.
  @       NS  ns3.linode.com.
  @       NS  ns4.linode.com.
  @       NS  ns5.linode.com.
  @           MX  1   ASPMX.L.GOOGLE.COM.
  @           MX  5   ALT1.ASPMX.L.GOOGLE.COM.
  @           MX  5   ALT2.ASPMX.L.GOOGLE.COM.
  @           MX  10  ASPMX2.GOOGLEMAIL.COM.
  @           MX  10  ASPMX3.GOOGLEMAIL.COM.
  @           MX  30  ASPMX4.GOOGLEMAIL.COM.
  @           MX  30  ASPMX5.GOOGLEMAIL.COM.
  @           TXT "v=spf1 include:_spf.google.com ~all"
  google._domainkey           TXT "v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDi19ipSdqDEpnJEWrVF7MarSLnlzXi0wPOHws2BY6oMQInbY5OHzdw9LcFr1biVvipErm4odyJfjZAIp5s8r6z50ZxQdW5Uwdy9krA1A9HMPaqVN+fm2xpntU//uXn0wD8sGc9CljYQIl+MusxQ690PfVGnAz/QeLqaZFxpHHmmQIDAQAB"
  _dmarc          TXT "v=DMARC1; p=quarantine; rua=mailto:dmarc@stackednotion.com"
  @           A   178.79.164.64
  *           A   178.79.164.64
  _xmpp-server._tcp       SRV 5 0 5269 xmpp-server.l.google.com.
  _xmpp-server._tcp       SRV 20 0 5269 alt1.xmpp-server.l.google.com.
  </code></pre>
  
  <p>Also here are the headers of a spam message (somebody tried to susbscribe me to a Zend mailing list, what kind of sick people are they?!?):</p>
  
  <pre><code>Return-Path: &lt;F776387@stackednotion.com&gt;
  Received: (qmail 20117 invoked from network); 27 Jul 2012 06:51:01 -0000
  Received: from exprod7mx200.postini.com (HELO psmtp.com) (64.18.2.92)
    by rsmx2.zend.com with SMTP; 27 Jul 2012 06:51:01 -0000
  Received: from source ([188.51.41.223]) by exprod7mx200.postini.com ([64.18.6.13]) with SMTP;
          Fri, 27 Jul 2012 02:51:00 EDT
  To: &lt;fw-docs-subscribe@lists.zend.com&gt;
  Subject: Invoice #48469883494
  From: "Order" &lt;F776387@stackednotion.com&gt;
  Date: Sat, 28 Jul 2012 09:40:03 +0300
  X-Priority: 3
  X-MSMail-Priority: Normal
  X-Mailer: IPS PHP Mailer
  MIME-Version: 1.0
  Content-type: text/plain; charset="iso-8859-1"
  Content-Transfer-Encoding: 8bit
  Message-ID: &lt;20120728094003.9312B884F9D66F02CE7C@DELL-PC&gt;
  X-pstn-neptune: 500/484/0.97/100
  X-pstn-levels:     (S: 0.00346/89.11253 CV:99.9000 FC:95.5390 LC:95.5390 R:95.9108 P:95.9108 M:97.0282 C:98.6951 )
  X-pstn-dkim: 0 skipp
  </code></pre>