Author: Dave Evans Date: To: exim-users Subject: Re: [exim] tracing mail originating from 127.0.0.1
On Mon, Nov 24, 2008 at 09:12:11AM -0800, Jeff Lasman wrote: > Our logs show that we're receiving email from 127.0.0.1 with
> nondeliverable from addresses. So far only a few hundred a day, and
> most to addresses are also nonexistent. But it's spam.
>
> We're a webhosting company. It's hard to know where to start looking.
>
> Currently we allow relaying for email originating on the server. We'd
> like to continue allowing it, though we can remove it if necessary.
>
> Is there any easy^H^H^H^H not incredibly hard way to find from which
> user the spam really originates?
