got it
Norm's mail generated a message from admin@lawrencemarshall.com, subject
Symantec Mail Security detected a repairable/quarantined virus based on a message you sent (SYM:08866454622982849720)
body
Subject of the message: Server Report
Recipient of the message: "robert@lawrencemarshall.com"
<robert@lawrencemarshall.com>
My mail is working, but something curious happened - I was getting 30 spams a day to my ant...sbc...account, this has dropped to zero. My news server is also not forwarding my posts to my physics group - so I assume somehow the newsserver was compromised by spammers. Messages from some non-physics drone started showing up in my news, that were not dup'ed on groups.yahoo.com - so they had to be originating on my news server itself. Thus this newsserver must have been the source of the torrents of spam.
-drl