looking for a spammer/virii/malware .... on my system

[alexus]

I received a SPAM complain from my ISP and we're trying to figure out
what/where the problem is...

from headers:

Received: from 64.237.55.83 by webmail.west.cox.net; Sun, 14 Aug 2011
18:43:41 -0400

64.237.55.83 is an IP that resides on my box, obviously I'm not
sending out any spam intentionally, so maybe some of my users do and
not necessarily intentionally either could be a virus or malware or
whatever doesn't really matter, I just want to stop it.

so just for now I did this

su-3.2# ipfw add 666 deny ip from any to webmail.west.cox.net via any
00666 deny ip from any to 68.6.19.1
su-3.2#

what else can I do to find it on my system who's trying to connect to
remote webmail.west.cox.net ?


-- 
http://alexus.org/