It seems there's a spammer who's latched onto my domain. They're sending out emails to thousands of people from <some random alphanumeric string>@<my domain>. Every email sent to my domain ends up in my inbox so I get all the bounces.

I've mitigated this somewhat by setting up SPF on my domain. I use Google Apps so this article was handy: http://support.google.com/a/bin/answer.py?hl=en&answer=1...

While I've trained Gmail to mark delivery status notifications as spam automatically, it's frustrating to go from maybe 5-10 real, actual emails a day and no spam at all to over ten thousand delivery status notifications a week (spammers have started using thousands of 8-character hex@domain combination addresses, and everything from my domain directs to me to catch real people I meet making typos).

I also sometimes worry that I may have to deal with some form of poorly-orchestrated vigilante retribution and/or potential blacklisting even though it's clear that the mail is not actually coming from me.

A "vigilante" confronted me on AIM, we chatted about it, and he's now one of my best friends.

Not that you want it happening, just an anecdote.