I have a client who is receiving lots of random and quite obvious spam. I think the spam is being generated by a rogue PC on our network rather than coming from outside, but I need advice on how to track this down. I have a Draytek router. I blocked port 25 for everyone except our Exchange Server and enabled syslog but I don't know how to find or interpret the output. Can someone please provide some useful guidance here. Thanks.