find formmail spammer
I have a red hat server and someone is spamming it using formmail. I am about to get rid of the formmail script and use a secure script, but in the meantime, I wanted to know, if there is a way I can find out which particular formmail is being spammed. All of the user's access_logs are within their directory and I was thinking was there a grep command I can run to search my /home directory and try to use a phrase from the email body that is being sent out. I have this becasue spamcop sent it to me.
Would this put too much of a load on my server? What is the best way to find out which script is being spammed?
Any help would be appreciated. Thanks in advance.
