Returned Mail by the 1000s

Nicholas Leippe nick at leippe.com
Tue Jan 30 10:05:15 MST 2007


On Tuesday 30 January 2007 09:52, Clint Savage wrote:
> Also, I do think it's something local on my box, but nothing really appears
> out of the ordinary.  Looking around, I've so far located a couple
> processes that are suspect, but nothing really solid.  Are there any good
> tools out there to help identify the culprit?

You might find the process with this:
iptables -I OUTPUT 1 -p tcp --dport 25 -j LOG --log-uid --log-level 7
iptables -I OUTPUT 2 -p tcp --dport 25 -j DROP

Dropping the packets should keep the process around long enough to find since 
it will probably wait for it's now failing connection to timeout.




More information about the PLUG mailing list