[QUOTE]Originally posted by lzyking
[B]thanks michelvd, but I found that there are a lot of address I will add to the file access , I mean perhaps I have 200 addresses that I must to reject , is this the right way I fix the problem?
It is _a_ way, we use it for the same purpose, although its the other way round, to block mail from certain domains. If you think the mails are virusses, have a look at amavis or another viruskiller.
By the way ,I found the mail server always sent mail after come off work , and there is no pc working at that time ,dose it mean the mail my email server sent is not virus email? what can I do for this?
That is possible, maybe some mail couldn't get deliverd right away and the mailserver is retrying. Do you send mail to a smarthost or not (sendmail.cf -> DS)
When I check my maillog ,I can't find record such as "from" , I just got the record such as a lot of "to " , does it mean the email is sent by my company's user?
There are always from: lines, but it could be your users are sending mail to many addresses and they get lost in the to: lines
can you do a grep on the maillog ?