port 25 catch all the bandwidth ...
 

I have a server with more than 100 domains hosted
there are too many connection established on port 25 showing on netstat, it catch most of the bandwidth caused connection on port 80 lag seriously

I don't understand why qmail mailqueue list only listed less than 10 email in queue .... but there are more than 30 connection established on port 25.

these always happen in office hour, the traffic up to 800kb/s
after office hour, traffic drop till normal 200kb/s

Is that any way or solution can check which domain or email account sending email ?

hi,
use etherreal network tool to capture the packet and identify the problem