> >Check form network errors (netstat -i I think). > > This is what I get: > > >it may be worth still trying to set the network interface on the > server, > espcially if you are seeing any network errors. > > Do you know how I can I set my NIC's speed and duplex setting in > FreeBSD? >
In your case a 'man xl' will help > >I doubt this is the problem, It might be worth looking at > the link Eric > >supplied as well as monitoring the postfix processes for some sort of > mail > >attack. > > The result using the tool is that the machine is clean. > Excellent ! I agree that it looks like an external attack. Either SMTP based as Len has suggested or a more general attack. It is probably going to be easier to diagnose this from the border router, depending on what it is. You should be able to increase the traffic logging on the router and take a look at the traffic. If may be of a specific type or from/to a specific address and/or port. If so you should be able to implement some type of ACL's to block the traffic
