As a another good step, just SA scan ALL incoming and outgoing mail. Run a vulnerability scan against your server, nessus or sara against your machine to find what is being exploited.
-- Luke Computer Science System Administrator Security Administrator,College of Engineering Montana State University-Bozeman,Montana
