Track down an SMTP user login on plesk 9 Qmail install.

A client contact me today to say he had received an email from his dedicated hosting provider stating that his server was sending out masses of spam.

To track down the smtp user responsible for this use the following command.

grep smtp_auth /usr/local/psa/var/log/maillog

Valid for qmail on plesk 9 installs at least may work for qmail installs on other servers.