Smoothwall/Firewall check for spambot on lan

More or less, this is a placeholder until I get more information.

You have smoothwall or other linux based firewall proxy.
type this
tcpdump -qt port 25
on the proxy server.
ctrl-c to abort