The traffic you’ll want to be checking is any traffic heading to external mail servers, most commonly on port 25.
Obviously your mail server shouldn’t be restricted but anyone else should either
a) be using the local mail server
or
b) have a port limit of some sort in place.
I did not understand what I should do, keep in mind that I am not very practical about these things. come from the worlds of computers, assemble them, shelter them, but the LAN networks are quite different.
I’m interested to see if the dude can detect which computer is sending spam emails. so take it and format it.