I have a strange problem. My server is sending spam and I cannot locate the cause. The spool currently has about a thousand messages. When I run a System Trend  Message Traffic report, I can see that my server has sent out almost 8,000 messages today. However, when I try to view what domain is causing the issue with the System Summary Message Traffic report, the outgoing messages are nowhere near 8,000 messages. So, no domain is getting "credit" for sending out the emails. But clearly, the messages are going out from my server.  

 

I have allow relay set to "nobody". Obviously this could be a compromised password. I am just trying to isolate which domain has the compromised password. I would appreciate any help.

 

Thanks,

 

Brian