The worst one is when they successfully deliver their bounce to the Return-Path but then corrupt the To on the bounce to be the To on the original message and then copy their Message-ID into the original message, thus removing any chance of successfully processing anything. I never figured out the actual MTA that was doing this, but Lotus Domino was involved.

shakes fist