From owner-freebsd-questions@FreeBSD.ORG  Wed Aug 31 17:00:14 2005
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
X-Original-To: freebsd-questions@freebsd.org
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 21E8816A41F
	for <freebsd-questions@freebsd.org>;
	Wed, 31 Aug 2005 17:00:14 +0000 (GMT)
	(envelope-from noeldude@gmail.com)
Received: from wproxy.gmail.com (wproxy.gmail.com [64.233.184.201])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 9F5EC43D45
	for <freebsd-questions@freebsd.org>;
	Wed, 31 Aug 2005 17:00:13 +0000 (GMT)
	(envelope-from noeldude@gmail.com)
Received: by wproxy.gmail.com with SMTP id i21so939160wra
	for <freebsd-questions@freebsd.org>;
	Wed, 31 Aug 2005 10:00:13 -0700 (PDT)
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com;
	h=received:message-id:date:from:to:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references;
	b=XbrFBhP6dFT9z02EF3cQGqkwrmvtpnhVVoBedwyiOOGVkHBbpm/DLC/wyvdRM50mSN+36QsP/KSgN+UBUVCz0AYAzHsaCXtmZpHnV3bYOnLBRiF/gx9PtC6J09Tlz6111hjK6AowQDxhOq0kTdOH1XsMcWVPkcKAZIeQJnCswRc=
Received: by 10.54.23.40 with SMTP id 40mr439076wrw;
	Wed, 31 Aug 2005 10:00:12 -0700 (PDT)
Received: by 10.54.83.12 with HTTP; Wed, 31 Aug 2005 10:00:12 -0700 (PDT)
Message-ID: <cce506b050831100060e271c3@mail.gmail.com>
Date: Wed, 31 Aug 2005 12:00:12 -0500
From: Noel Jones <noeldude@gmail.com>
To: freebsd-questions@freebsd.org
In-Reply-To: <48vksc$1ctf9j6@mxip19a.cluster1.charter.net>
Mime-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
References: <48vksc$1ctf9j6@mxip19a.cluster1.charter.net>
Subject: Re: problem with email...
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 31 Aug 2005 17:00:14 -0000

On 8/31/05, kdonathan@charter.net <kdonathan@charter.net> wrote:
> Hello,
>=20
> Thank you in advance for your help.  My name is Karen Donathan and I am t=
he Computer Science teacher at George Washington High School in Charleston,=
 WV.  (http://gwhs.kana.k12.wv.us).  We have been running FreeBSD on our we=
bserver for abuot 5 years.
>=20
> Over the summer, I recently began getting "fake" email messages from mail=
@gwhs...., admin@gwhs....., security@gwhs....,register@gwhs...., etc. etc. =
etc.  The subject line is always something like "YOUR ACCOUNT IS SUSPENDED.=
...", "You have successfully updated your password....", etc.   Each of the=
se contain an attachment, so I know that a virus is trying to get into our =
server.  I need some suggestions on what to do to make this stop.
>=20


The general answers are:
- add a virus scanner to your mail server (clamav works well)
- reject mail with invalid local sender addresses
- add some spam controls to your mail server

Specific answers depend on what mail software (sendmail? postfix?
exim? qmail? something else?) you are using and how strict rules you
can apply.

--=20
Noel Jones