> Apart from disabling that users account (which does not stop them just > creating another)
this has a non-exim solution:
1) validate credit card numbers before turning up dial in user accounts
2) add a moderate ($500-$2000) penalty to your TOS for dial customers
for spamming incidents. after they get caught a time or too, they'll
probably go elsewhere to spam.