Spam assassin etc - now caused big problem

[BahBah]

Hi,

I have disabled spam assassin completely as all of the recommended fixes have now resolved the problems my server is having.

I am now left with 1 huge problem.

One email keeps getting sent to one user repeatadly every few minutes. And it just isn't stopping. It has been doing this for the last 4 hours.

Can anyone help please ? I've tried --force reinstalling exim and that hasn't helped. I've also tried:

/usr/local/cpanel/whostmgr/bin/whostmgr2 killeximq

and that didn't help either.

[BahBah]

I should add that the email is being sent from a reputable source - a client actually. I have no reason to think he is spamming me. I am far more inclined to think this is related to the spam assassin problems.

Where does exim log receiving emails ? It's not logging in /var/log/maillog for me.

[yapluka]

Sending and receiving emails are logged in /var/log/exim_mainlog

[BahBah]

Thanks - it looks like the email is being repeatedly sent which means either:

i) Exim isn't terminating the connection correctly and saying effectively thanks for the email dont send again
ii) Their mail server is messed up

I'm going to try and firewall block their mail server to stem the tide.

Is there anything I can do to see if Exim is acknowledging receipt of an email properly ?

Please, this is quite urgent if anyone knows the answer

[BahBah]

I'm wondering if it is related to my installing:

/scripts/perlinstaller Mail::SPF Mail:omainKeys
/scripts/perlinstaller Mail:KIM Encode:etec Tie::Cache

This is why:

Received-SPF: softfail (mail5.domainco.uk: transitioning domain of domain.com does not designate xxx.xxx.xx.xxx as permitted sender)

appears a lot in the headers. I don't know why, as no other email appears to have this problem.

Any ideas anyone ?