From owner-freebsd-questions@FreeBSD.ORG Wed Apr 13 07:30:09 2005 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id A857216A4CE for ; Wed, 13 Apr 2005 07:30:09 +0000 (GMT) Received: from ms-smtp-03-eri0.southeast.rr.com (ms-smtp-03-lbl.southeast.rr.com [24.25.9.102]) by mx1.FreeBSD.org (Postfix) with ESMTP id C582B43D46 for ; Wed, 13 Apr 2005 07:30:08 +0000 (GMT) (envelope-from pcsurplus@sc.rr.com) Received: from sambo (cpe-024-088-050-169.sc.res.rr.com [24.88.50.169]) j3D7TYY5005303 for ; Wed, 13 Apr 2005 03:30:06 -0400 (EDT) Message-ID: <000801c53ffa$7cdb7c20$a9325818@sambo> From: "Robert" To: Date: Wed, 13 Apr 2005 03:29:03 -0400 MIME-Version: 1.0 X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2800.1409 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1409 X-Virus-Scanned: Symantec AntiVirus Scan Engine Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable X-Content-Filtered-By: Mailman/MimeDel 2.1.1 Subject: spam alert X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 13 Apr 2005 07:30:09 -0000 got a message from my ISP saying that my email address was sending out = spam, possibly from a trojan on my pc that was allowing a remote program = to access my SMTP server and send email without my knowledge. I was = shocked since I'm running ZoneAlarm and don't remember getting any = alerts about a program accessing my email. I ran Norton's and it didn't = find anything. BUT it was blocking a heap of outgoing emails with = "sexually explicit content" after I disabled ZoneAlarm. So ZoneAlarm = must be blocking them when it is on, but periodically I turn it off = because some web pages don't load correctly when I use ZoneAlarm. Well I = disabled ZoneAlarm tonight and right away I got popups from Nortons = alerting me that there were sexually explicit emails trying to be sent = using my mail account, at a rate of about 20 per minute! I turned = ZoneAlarm back on and immediately it told me that IP address = 204.152.184.73 was trying to send emails and make a connection with my = mail server, which of course I blocked. 204.152.184.73 resolves to = freebsd.isc.org. what gives?