Actually, there is a way to stop this, though it's painful. I had the same problem with my domain. Basically, they are using a legitimate address to lower their spam score in spam filters- that's the major reason they want to use your address. So, the easy way to make it not worth their time is to switch e-mail addresses (like I said- painful). I started using a different address on my domain as my primary address and dropped that old one. When I recreated that e-mail addy a month later, I wasn't getting any of these bounces. Since it was no longer a valid e-mail address, it no longer helped them reduce their spam score, so they stopped using it! But yeah, that's the only way. I even tried tracing the guy's ip and notifying his isp- he's in russia, so they did nothing about it!