Sending Spam - Exim

[molero.renan]

I have a problem, my email server is allowing mass email sending even though there is a block of 20 per hour. Can anyone help me to block this type of situation?

This is my output

exim -bp


18h  1.9K 1sRKgE-00EYO8-0b <[email protected]>
          [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
          [email protected]
          [email protected]
        D [email protected]
          [email protected]
        D [email protected]
          [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
          [email protected]
        D [email protected]
        D [email protected]
          [email protected]
          [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
          [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
          [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
          [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
          [email protected]
          [email protected]
        D [email protected]
          [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
          [email protected]
        D [email protected]
          [email protected]
          [email protected]
        D [email protected]
          [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
          [email protected]
        D [email protected]
          [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
          [email protected]
        D [email protected]
        D [email protected]
          [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
          [email protected]
          [email protected]
          [email protected]
        D [email protected]
          [email protected]
          [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
          [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
          [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
          [email protected]
        D [email protected]
        D [email protected]
          [email protected]
          [email protected]
          [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
          [email protected]
        D [email protected]
          [email protected]
        D [email protected]
        D [email protected]
          [email protected]
        D [email protected]
          [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
          [email protected]
        D [email protected]
          [email protected]
          [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
          [email protected]
          [email protected]
        D [email protected]
        D [email protected]
          [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
          [email protected]
          [email protected]
        D [email protected]
          [email protected]
          [email protected]
        D [email protected]
        D [email protected]
          [email protected]
        D [email protected]
          [email protected]
        D [email protected]
        D [email protected]
          [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
        D [email protected]

 9h  1.7K 1sRSFe-002m5W-2y <[email protected]>
          [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
          [email protected]
          [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
          [email protected]
        D [email protected]
          [email protected]
        D [email protected]
          [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
          [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
          [email protected]
          [email protected]
          [email protected]
          [email protected]
          [email protected]
        D [email protected]
        D [email protected]
          [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
          [email protected]
        D [email protected]
        D [email protected]
          [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
          [email protected]
          [email protected]
        D [email protected]
          [email protected]
          [email protected]
        D [email protected]
        D [email protected]
          [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
          [email protected]
          [email protected]
        D [email protected]
          [email protected]
          [email protected]
        D [email protected]
          [email protected]
        D [email protected]
        D [email protected]
          [email protected]
        D [email protected]
          [email protected]
          [email protected]
        D [email protected]
          [email protected]
          [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
          [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
          [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
          [email protected]
        D [email protected]
          [email protected]
        D [email protected]
          [email protected]
        D [email protected]
        D [email protected]
          [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
          [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
          [email protected]
          [email protected]
        D [email protected]
          [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
          [email protected]
          [email protected]
        D [email protected]
        D [email protected]
          [email protected]
        D [email protected]
          [email protected]
          [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
          [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
          [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
          [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
          [email protected]
        D [email protected]
        D [email protected]
          [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
          [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
        D [email protected]
          [email protected]
          [email protected]
        D [email protected]
          [email protected]
          [email protected]
        D [email protected]
        D [email protected]
          [email protected]

[sahsanu]

I would start checking the log for message id 1sRKgE-00EYO8-0b

exigrep '1sRKgE-00EYO8-0b' /var/log/exim4/mainlog*

Take a look to the hour it was sent to check dovecot logs too to know who is the user login in with mail account [email protected].

1.- Change the password of account [email protected]
2.- Those mails have been in queue for a long time, so I suppose rate limit is working. The ones with D in front had some problem to send the mail.
3.- Delete all mails in queue from offender user.

exiqgrep -i -f [email protected] | xargs exim4 -Mrm