find out the webform that is spamming me

[AshleyU]

Ok, so i'll admit straight away i'm not a linux guru so be kind....

We rent a server from 1and1.co.uk and run Plesk 10.2, OS Linux 2.6.18-194.26.1.el5xen (CENTOS 5)

We host multiple websites for multiple customers, one of these websites i believe is submitting spam emails to the qmail queue. I'm yet to figure out what site so i can stop it.

Any ideas on how to find the source of these mail?

Thanks in advance!!!

 

[nucknuck]

what about the header of these mails and the part of mail log that belongs to it?

 

[AshleyU]

headers only seem to show it originated from localhost but i need to know which site on the server....which web form

Logs dont seem to show much that i can identify

 

[nucknuck]

compare time stamp of mail and webserver - there you should find activity