I experienced a similar situation some months ago: one of my server
email owner was sending tons of spam
After figthing with many log files, I have discovered that the hacker
had been able to hack the mailbox pwd, and he was sending the email
using smtp autetication method.
You can find the evidence of that inside the smtp log, looking for all
the authenticated users that are sending email, and find the ones that
Il 21/05/2013 16:26, Spyros Tsiolis ha scritto:
I have a situation with an installation where someone has managed
to get hold of an e-mail address (the boss' actually) and is sending
spam to the outside world.
To an extend, I've managed to isolate the problem and it seems
it's the mail server itself.
I still don't know if it's XMail or an anti-spam solution I've adopted
since about 2004.
I would like to monitor the mail that goes out to the world.
Can I do this with XMail ? Do I check the logs ? Which logs ?
I've never done this before, so I would be greatful to any help.
xmail mailing list