From owner-freebsd-questions@FreeBSD.ORG Wed Aug 31 17:06:55 2005 Return-Path: X-Original-To: freebsd-questions@freebsd.org Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 2C9C516A41F for ; Wed, 31 Aug 2005 17:06:55 +0000 (GMT) (envelope-from cswiger@mac.com) Received: from smtpout.mac.com (smtpout.mac.com [17.250.248.73]) by mx1.FreeBSD.org (Postfix) with ESMTP id E6D5443D46 for ; Wed, 31 Aug 2005 17:06:54 +0000 (GMT) (envelope-from cswiger@mac.com) Received: from mac.com (smtpin01-en2 [10.13.10.146]) by smtpout.mac.com (Xserve/8.12.11/smtpout16/MantshX 4.0) with ESMTP id j7VH6rtH002976; Wed, 31 Aug 2005 10:06:53 -0700 (PDT) Received: from [10.1.1.209] (nfw1.codefab.com [199.103.21.225]) (authenticated bits=0) by mac.com (Xserve/smtpin01/MantshX 4.0) with ESMTP id j7VH6pAi025291; Wed, 31 Aug 2005 10:06:52 -0700 (PDT) In-Reply-To: <48vksc$1ctf9j6@mxip19a.cluster1.charter.net> References: <48vksc$1ctf9j6@mxip19a.cluster1.charter.net> Mime-Version: 1.0 (Apple Message framework v734) Content-Type: text/plain; charset=US-ASCII; delsp=yes; format=flowed Message-Id: Content-Transfer-Encoding: 7bit From: Charles Swiger Date: Wed, 31 Aug 2005 13:06:50 -0400 To: kdonathan@charter.net X-Mailer: Apple Mail (2.734) Cc: freebsd-questions@freebsd.org Subject: Re: problem with email... X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 31 Aug 2005 17:06:55 -0000 On Aug 31, 2005, at 12:40 PM, kdonathan@charter.net wrote: > Over the summer, I recently began getting "fake" email messages > from mail@gwhs...., admin@gwhs....., > security@gwhs....,register@gwhs...., etc. etc. etc. The subject > line is always something like "YOUR ACCOUNT IS SUSPENDED....", "You > have successfully updated your password....", etc. Each of these > contain an attachment, so I know that a virus is trying to get into > our server. I need some suggestions on what to do to make this stop. You're being spammed, some of which contains viruses. You should install amavisd-new, clamav, and SpamAssassin (or bogofilter, etc). -- -Chuck