The Doctor: > I suspect my web user is sending spam out. > > Only Postfix is stopping this. > > How can I check to see > 1) who is using the web user to send mail > > and > 2) by what script
The client IP address and request should be logged in the http daemon (Apache) logfile. This should also give a clue which script is being exploited. Wietse