I’ve found that one of my clients is getting huge email traffic and it does not look like this is coming from real users. Could someone be using our mail server as a relay for spam?
Is there any way to check this?
Can I switch on authentication on the SMTP server?
I think you are probably getting joe jobbed, enabling SPF will help keep this from happening.
What I mean is the mail traffic is likely bounces for someone using the from address as your domain in some spam. It does NOT use these servers, but the bounces end up here Enabling SPF will help lock down who can send from your domain to many mail servers(those that check SPF)