> From: Cyborg <cyborg2@???>
> shouldn't a 5xx code end the mail delivery process instead of freezing it ?
>
> 2016-03-28 23:07:47 1akeMA-0006Jk-73 ** catarrhal@???
> R=dnslookup T=remote_smtp H=mail.enamehandle.top [104.206.92.122]: SMTP
> error from remote mail server after RCPT TO:<catarrhal@???>:
> 553 sorry, that domain isn't in my list of allowed rcpthosts (#5.7.1)
> 2016-03-28 23:07:47 1akeMA-0006Jk-73 Frozen (delivery error message)
Some message's delivery process ended unsuccessfully.
After that Exim created another bounce message 1akeMA-0006Jk-73
about that (with empty sender: "MAIL FROM:<>") and tried to deliver it.
The bounce message couldn't be delivered, so the bounce message was frozen.
The bounce message will be deleted according to "ignore_bounce_errors_after".
But why did your server try to deliver a message with "enamehandle.top"
in envelope-from? Perhaps your user's password was stolen and used
for spamming, the spammer specified "enamehandle.top" in envelope-from.
Use:
https://github.com/Exim/exim/wiki/BlockCracking
