From owner-freebsd-questions  Sat Jan 24 20:09:20 1998
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Received: (from majordom@localhost)
          by hub.freebsd.org (8.8.8/8.8.8) id UAA10280
          for questions-outgoing; Sat, 24 Jan 1998 20:09:20 -0800 (PST)
          (envelope-from owner-freebsd-questions@FreeBSD.ORG)
Received: (from jmb@localhost)
          by hub.freebsd.org (8.8.8/8.8.8) id UAA10269;
          Sat, 24 Jan 1998 20:09:14 -0800 (PST)
          (envelope-from jmb)
From: "Jonathan M. Bresler" <jmb>
Message-Id: <199801250409.UAA10269@hub.freebsd.org>
Subject: Re: Help
In-Reply-To: <199801250341.TAA23817@cnt1.compunetlink.com> from "M. E. Boktor" at "Jan 24, 98 07:42:29 pm"
To: eboktor@compunetlink.com
Date: Sat, 24 Jan 1998 20:09:14 -0800 (PST)
Cc: freebsd-questions@FreeBSD.ORG
X-Mailer: ELM [version 2.4ME+ PL32 (25)]
MIME-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk

M. E. Boktor wrote:
> I am a small ISP in California.  I have recently found out that someone is
> been using my SMTP (SPAMING)  to send bulk mail messages.  This person is
> not one of m customers.  How can I find who it is?  How can I stop this
> from happening?  This is slowing down my server almost to a halt.  I am
> beginning to lose clients. can you help.  
> 
> I am running FreeBSD ver. 2.2.1, and sendmail.hf 8.11.
> 
> Any help would certainly be appreciated!!!

	you need to stop them from relaying mail thru you.
	look at the antt-spam web pages referenced from www.sendmail.org

	you will need to create a class with all of your domains in 
	the class.   only accept mail sent to hosts in that class
jmb