It appears my zimbra mail server is sending out spam to the world.
I have gone into /opt/zimbra/data/postfix/spool/active and run a less on several files and can see the spam. I have not been able to determine where it is being originated from. The trendmicro anti virus that is running on me client is not reporting any problems on clients. The header of the spam e-mail is pointing to 127.0.0.1, the loopback on the zimbra server. I have looked at the /var/log/zimbra.log but am not sure what it is really telling me. I am not sure where else to look or what else to do. Can someone point me in the right direction to help me (1) identify where the spam is being originated (2) what do look for and (3) ideas on how to spot it from happening again.