Hello, I am in need of some help in finding a way to help stop my server from getting blacklisted. I have ubuntu 8.10, I have many clients that use my mail server but I have 1 that has a virus or that is sending out spam. I need a way to monitor port 25 for activity. I would like something like wireshark but it has to run in terminal mode. I do not have a GUI installed. or some way of using iptables to log to its own file and then block port 25 attempts. Any help would be great.
