Logging outgoing mails

[l084]

Hi,

is there a possibility to log which computer is sendind emails?
The problem is, that our provider told us, that we are sending spam and has closed port 25. Now I have the problem to find the computer which is sendind the spam.
My fast solution was to deny traffic on port 25 on the LAN interface and to log it. (By the way, can I somehow download logfiles to watch them on my desktop?)
Thanks for your replies.
l084

[Guest]

No, you can't do this.

You can, however, watch to see what machine is bouncing off your firewall's TCP 25 deny rule, which you're doing.  Configure a remote syslog server to keep longer, persistent logs.

[l084]

Thanks for fast answer. Helped me a lot.