microtik is sending spam - but how to find

RouterOS General
1

hello,

i’ve a problem with an router with 6.43.2 software version.

the system is sending spam mails, but i cannot find the reason.
i think i now stopped it with dropping all OUTPUT pakages to port 25;
(output, but forward)

so i believe the spam mails are send by the mikrotik.

do you have any idea how to find the issue?

br johannes

2

It’s probably hacked router and enabled SOCKS server.

3

Of course … SOCKS Proxy!
Yes, this was the issue.

Now resolved.
Thanks