> From: test test <test4offer@???>
> One of my server affected by spammers the using a login id and password one
> of mys user and sending mail via other mail ids.
Some of your honest users need to send mail with another email address
in "From:". For example, *-owner()yahoogroups.com, @ieee.org.
How to block stolen passwords automatically:
https://github.com/Exim/exim/wiki/BlockCracking