I don't know how to detect if qmail has been hijacked
I looked and saw a bunch of
Dec 23 14:10:57 qmail: 1261606257.101924 starting delivery 36: msg 8423008 to remote [email protected] Dec 23 14:10:57 qmail: 1261606257.630379 starting delivery 22: msg 8421857 to remote [email protected]
load is at 20 think spammer is sending mail through the server?
What can I do to try and stop it, or read the mail to see where its coming from? If its a php form or pop account.