Logging SMTP to disk

RouterOS General
1

I want to set MT to log to disk every outgoing SMTP connection. I cannot understand explanations offered in manual, possibly because of my english.

Reason I want to do this is to track down which local users catched troyans and are massmailing otuside. SO my idea is to set logging of SMTP to be saved on disk, so I can check it out.

Any other hint how to deal with this is welcome.

2

ghm,
‘ip firewall filter add action=log protocol=tcp dst-port=25 chain=forward log-prefix=SMTP’
system logging add topics=firewall,info, action=disk.

You are able to send logs to the remote server (action=remote).