Re: [Exim] Is this Spamming

Hi

First off I'd check the IP address. If this is a internal IP (beginning
with 192..., 10... and so on) it is a user in your local network.
Otherwise if it's an IP other than one of your network, it is most
likely that someone is abusing your server.

Unfortunately thats the best way to get on blacklists and you will soon
be unable to send mail to most of other mail servers.

Here is a snippet of my configuration file:

--- snip ---
# Allow internal network relay
hostlist relay_from_hosts = 192.168.0.0/16 : 195.143.56.0/23 :
127.0.0.1/32
hostlist auth_relay_hosts = *
domainlist host_accept_relay = 127.0.0.1 : 192.168.0.0/16

domainlist local_domains = <your local domains>
domainlist relay_domains = <your local domains>

# No reverse lookups for local clients
host_lookup = !192.168.0.0/16 : !127.0.0.1/32
--- snip ---

This config does the following:

- Allow mail relay from internal/local clients.
- Deny relay from unknown hosts/internet.
- Accept incoming mail which destination is our server (our domains).

On Thu, 4 Sep 2003 19:59:53 +0530, System wrote:
> What should i check in my exim_mainlog i mean how do i find which user has
> send or received maximum mails ?
> Is there any way to find this ?

Thanks
Basti