SMTP Logging? -- Spam Problem

[txr...@hotmail.com]

I have a mail server that's being used as a relay by some spammer that
knows one of my user's login and password. I've checked and tested
the server and it is not a relay. I'm thinking this guy has a virus
or trojan installed on one of my thousands of users computers and
somehow getting their login info and then using our server to send out
spam. I need to figure out what username he's using so I can take a
look at the computer and make sure there isn't something on there
secretly relaying him information.

So my question is, how can I turn on logging or where do I look to see
what username is being used to send e-mail via SMTP? I have many
users that are on the outside and are using POP3/SMTP for their e-mail
communications. I turned on SMTP logging and Message Tracking but
neither shows me what username is being used.

Does anyone know how to do this?

Posted Via Usenet.com Premium Usenet Newsgroup Services
----------------------------------------------------------
** SPEED ** RETENTION ** COMPLETION ** ANONYMITY **
----------------------------------------------------------
http://www.usenet.com

[txr...@hotmail.com]

[Leif Pedersen [MVP]]

Hi,

This should help: http://www.vamsoft.com/authattack.asp

Leif

<txr...@hotmail.com> wrote in message
news:e4su23dfforrg5aem...@4ax.com...