[nylug-talk] Am I Spamming?

[martin yazdzik]

>    'netstat -tapc' will give you a continuous output of all tcp connections 
> and the application that has them open.  I'd like to think that with this you 
> can "match on port 25", "remove matches for postfix", and then you'll have a 
> list of the offending application[s] that made connections output to port 25.
>    Please note that this is off-the-cuff -- I've never actually used this.
> 



This is indeed correct, will list, if you run as root, all connexions.

However, I am no certain that the returned mail is originates in
actuality from your server, rather, perhaps, someone is using a spooefed
address to relay.

Best,
Martin