[svlug] Figuring out who is spamming from my network???

Tim Utschig tim at tetro.net
Wed May 23 12:54:29 PDT 2007


On Wed, May 23, 2007 at 10:00:03AM -0700, Mark wrote:
> How can I find out the user id that was used to authenticate during
> the SMTP session?

If you can't find a way to make your MTA log the user authentication,
there's always tcpdump, wireshark, etc.  As long as you're/they're not
using STARTTLS.

-- 
   - Tim Utschig <tim at tetro.net>



More information about the svlug mailing list