We had one of our IP nlocked at outblaze. The evidence they provide has these header

==================================
Return-Path: <rik999@yahoo.com>
Received: from tp3.pwh-r1.com (<server-hostname> [<server-ip>])
by spf16.us4.outblaze.com (Postfix) with SMTP id D4A13679D3
for <confused3sa@inorbit.com>; Wed, 5 Mar 2008 00:23:38 +0000 (GMT)
Received: from jvtdekfa (122.64.236.116)
by <server-hostname>; Tue, 4 Mar 2008 18:23:30 -0600
Date: Tue, 4 Mar 2008 18:23:30 -0600
From: <rik999@yahoo.com>
X-Mailer: The Bat! (v2.01)
Reply-To: <findjk@hotmail.com>
X-Priority: 3 (Normal)
Message-ID: <665899168.20070607041756@yahoo.com>
To: <confused3sa@inorbit.com>
Subject: World Casino!
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------A204C49FD141BB"
==================================

Though I was able to find the line in the log with reference to this message, but other than that I am not able to trace the source of this message. Also there are no x-source headers which are attached by exim.

At the time when this message was sent, we already had
log_selector = +arguments +subject
set in the exim conf. Now I have changed it to
log_selector = +all

Bye

Kirti