Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 2 replies
  • Subscribers 2 subscribers
  • Views 2198 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

monitor port 25

bobster101
Hey guys,

How do I monitor outbound traffic for port 25? Our ISP, whoes smtp server we are using, says that we are flooding them with spam. I need to see from which internal ip those request are comming from.

Any ideas?

Thanks!

Using Astaro Security Gateway V8


This thread was automatically locked due to age.
Parents
  • 0
    Hi, you might find something in the reporting, but if you want something in real-time, I'd recommend running tcpdump from the console.
    e.g. (as root)
    tcpdump -i eth1 src or dst port 25

    assuming eth1 is your Internal NIC.

    Also, you could put in a packetfilter rule to log port 25 traffic from your LAN.

    Barry
Reply
  • 0
    Hi, you might find something in the reporting, but if you want something in real-time, I'd recommend running tcpdump from the console.
    e.g. (as root)
    tcpdump -i eth1 src or dst port 25

    assuming eth1 is your Internal NIC.

    Also, you could put in a packetfilter rule to log port 25 traffic from your LAN.

    Barry
Children