If someone is doing this you can do a couple things.
1. Ask your host to install SPF records in there DNS zones on the server for your domains.
2. If using cpanel or plesk, make sure you are not using a catch all email address as this just leaves you wide open to this.
3. Ask your host to install Helo filtering in the mail server to help further prevent faked headers and return address.