Spam relaying

[PDW]

Ok, here is the problem, I have spam being relayed through my server. Problem is Ive followed all steps to stop it except stopping the mail relay itself. Ive got smtp auth. on, Ive got it all in there.

any other suggestions, I keep stopping th eguy and he keeps finding another way in.

[dezignguy]

How do you know you're actually stopping him? Maybe he can just knock the band-aid off each time?

Have you monkeyed with any of the exim settings? Has Mailscanner or any other mailproxy, scanner or otherwise been inserted into the mailstream?

You might be looking at a vulnerable script... or less likely a mail account with an easily guessed or default password.

Search for the additional exim logging covered elsewhere in this forum, implement it, and tail your mail logs, hopefully that will help you find the source.

[chirpy]

Yup. Unless you've changed the standard Exim configuration, it's highly unlikely to be there. Much more likely is a compromised PHP or perl CGI script.