Email Server Sending Spam
My zimbra mail server is spamming. I know because of the reports, from daily reports.
The thing is, its an outside account of my domain, a gmail account, i already modify zmmta.cf so it only accept sending emails from my domain, but the spam continue to go out.
I try following the logs, zimbra.log, audit.log and mail.log, but i cant see which is the user account that has been compromised.
Could somebody point me in the rigth direction to determine which user account is being used to spam, any help would be apreciate it.
Unable to locate any entries per your post
I do not have any entries for "sasl_username=" in mail.log
I have the same issue with spamming. I can stop it from the queue, but our server contiues to send 1,000's of emails every night around 10pm and 6am local time.