This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

monitor port 25

Hey guys,

How do I monitor outbound traffic for port 25? Our ISP, whoes smtp server we are using, says that we are flooding them with spam. I need to see from which internal ip those request are comming from.

Any ideas?

Thanks!

Using Astaro Security Gateway V8

This thread was automatically locked due to age.

0 BarryG over 14 years ago

Hi, you might find something in the reporting, but if you want something in real-time, I'd recommend running tcpdump from the console.
e.g. (as root)
tcpdump -i eth1 src or dst port 25

assuming eth1 is your Internal NIC.

Also, you could put in a packetfilter rule to log port 25 traffic from your LAN.

Barry
Cancel
Vote Up 0 Vote Down

Cancel
0 bobster101 over 14 years ago in reply to BarryG

Thanks Barry, that did the trick!

[:)]
Cancel
Vote Up 0 Vote Down

Cancel