Not a facepalm from my own doing, but a worthy one.
My local Uni has an email forwarding service for students who go away for holidays etc. One particular student set up an email forward to his home account.
Unfortunately he forgot to remove the email forwarding he'd previously set up from his home account to his uni account.
You can guess what happened. It resulted in a very irate sysadmin and a ton of headaches as a wonderful company checking for spammers thought the entire uni was a spam account and blocked everyone on it. I believe he may still be trying to get it unlocked....