System wrote:
> I am on linux 7.3 with exim running on my server. From few days the server
> load have been really high because of exim.
>
> I could see the following in the maillog. Does this mean anyone is spamming
> mails from my server or a spam mail was identified on the server?
>
> Please reply....
>
> Jul 5 09:13:26 server spamd[2121]: connection from localhost [127.0.0.1] at
> port 41044
> Jul 5 09:13:26 server spamd[11193]: info: setuid to submissi succeeded
> Jul 5 09:13:26 server spamd[11193]: processing message
> <2-3-56ryy$df7g-l-1e1@???.0r33d> for submissi:32117.
> Jul 5 09:13:26 server spamd[11193]: identified spam (10.9/5.0) for
> submissi:32117 in 0.3 seconds, 1522 bytes.
Maybe spamd receives mail from exim, which is on localhost, and scans
it? Try to match that message-id with a message-id from your exim logs.
srs
