looking for a spammer/virii/malware .... on my system
bonomi at mail.r-bonomi.com
Mon Aug 15 18:57:09 UTC 2011
> From owner-freebsd-questions at freebsd.org Mon Aug 15 12:37:33 2011
> Date: Mon, 15 Aug 2011 13:05:15 -0400
> From: alexus <alexus at gmail.com>
> To: freebsd-questions at freebsd.org
> Subject: looking for a spammer/virii/malware .... on my system
> I received a SPAM complain from my ISP and we're trying to figure out
> what/where the problem is...
> from headers:
> Received: from 126.96.36.199 by webmail.west.cox.net; Sun, 14 Aug 2011
> 18:43:41 -0400
> 188.8.131.52 is an IP that resides on my box, obviously I'm not
> sending out any spam intentionally, so maybe some of my users do and
> not necessarily intentionally either could be a virus or malware or
> whatever doesn't really matter, I just want to stop it.
> so just for now I did this
> su-3.2# ipfw add 666 deny ip from any to webmail.west.cox.net via any
> 00666 deny ip from any to 184.108.40.206
> what else can I do to find it on my system who's trying to connect to
> remote webmail.west.cox.net ?
> freebsd-questions at freebsd.org mailing list
> To unsubscribe, send any mail to "freebsd-questions-unsubscribe at freebsd.org"
More information about the freebsd-questions