Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 15 Aug 2011 17:19:20 -0500
From:      Paul Schmehl <>
To:        alexus <>, Chuck Swiger <>
Subject:   Re: looking for a spammer/virii/malware .... on my system
Message-ID:  <>
In-Reply-To: <>
References:  <> <> <>

Next in thread | Previous in thread | Raw E-Mail | Index | Archive | Help
--On August 15, 2011 2:04:27 PM -0400 alexus <> wrote:

> I personally leaning towards that these headers are being modified and
> that there is no spam leaving my box (I may be wrong of couse)
> here is what I did to come up with that thought....
> I sent myself an email

The tcpdump command that Chuck gave you is all you need.  *If* all traffic 
exits your network through your box, you will see anything going to port 25 
*anywhere*.  That should tell you quickly what the problem is, if there is 

Paul Schmehl, Senior Infosec Analyst
As if it wasn't already obvious, my opinions
are my own and not those of my employer.
"It is as useless to argue with those who have
renounced the use of reason as to administer
medication to the dead." Thomas Jefferson
"There are some ideas so wrong that only a very
intelligent person could believe in them." George Orwell

Want to link to this message? Use this URL: <>