On Fri, Jan 28, 2011 at 1:31 PM, boniface njoroge <bonifacenjoroge5@gmail.com> wrote:
Hi guys our domain was recently blacklisted,the case was that  alot of
spam was coming from our side.Is there a way to know the specific user
that is sending the spam from my networkWe have a corporate anti virus
in this case NOD 32 .Thank you


Hello Boni,

If you have a mail server on your network, then the best thing for you to do is to enable detailed logging for SMTP sessions. Coupled with knowledge of your network (how IPs are used by your LAN hosts) it becomes very easy to figure out if it is your server that is compromised or one of the hosts on your LAN.
All other answers you will receive are wild shots:)


--
Best regards,
Odhiambo WASHINGTON,
Nairobi,KE
+254733744121/+254722743223
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _
Damn!!