Chris Arnold wrote:
Hello list! We are being blacklisted every few days from verizon. This
is less important right now as I need to find out if/who is sending
spam from the email server or if the server is an open relay. I am
less inclined to think postfix (which is what we use) is an open
relay. More inclined to think someone has gotten an account is sending
spam out using the server. What is the best way to find out who/if an
account is sending spam from the server?
I am trying to gain access to the mail server as we speak but the
password I have been given is not working so I can not provide you
with the version of postfix or any logs at this moment.
Once you do get on, how about loading pflogsumm from
http://jimsun.linxnet.com/postfix_contrib.html
This will assist you in determining who is sending the most messages.
Note: there is a problem of messages being counted twice if you are
running Amavis-New spamassassin.
Ciao
Justin
