I am looking for tools to monitor my Ubuntu 12.04 LTS web server. I am interested in being notified when suspicious activities are detected.
For instance, when postifx sends more than a given amount of e-mails in a given period of time (it means that the server has been compromised and turned in an emailing platform), or for any other suspicious activity.
I am mainly looking for suggestions and pointers. Thanks.