Blocked for spamming and not showing highest sender

[wattie]

The ****REMOVED***** account has just finished sending 200 emails.
There could be a spammer, the account could be compromised, or just sending more emails than usual.

After some processing of the /etc/virtual/usage/****REMOVED*****.bytes file, it was found that the highest sender [B]was , at 0 emails.[/B]

The file in question is not very big and contains lines like these:

1364016=type=email&email=rzi_so@****REMOVED*****&method=incoming&log_time=1418911240&id=1Y1bd7-000JQ9-6U&path=/usr/local/directadmin
86502=type=email&email=nzb@****REMOVED*****&method=incoming&log_time=1418911658&id=&path=/usr/local/directadmin
86634=type=email&email=nzb@****REMOVED*****&method=incoming&log_time=1418911658&id=1Y1bju-000KXQ-6q&path=
86825=type=email&email=nzb@****REMOVED*****&method=incoming&log_time=1418911658&id=1Y1bju-000KXQ-6q&path=
22027=type=email&email=info@****REMOVED*****&method=incoming&log_time=1418911682&id=1Y1bkG-000Kan-FR&path=
22215=type=email&email=info@****REMOVED*****&method=incoming&log_time=1418911682&id=1Y1bkG-000Kan-FR&path=
1726=type=email&email=office@****REMOVED*****&method=incoming&log_time=1418912004&id=&path=/usr/local/directadmin
2920=type=email&email=office@****REMOVED*****&method=incoming&log_time=1418912006&id=1Y1bpV-000LTL-68&path=
3114=type=email&email=office@****REMOVED*****&method=incoming&log_time=1418912006&id=1Y1bpV-000LTL-68&path=

My exim.conf file is the following:

# SpamBlockerTechnology* powered exim.conf, Version 4.2.4-alpha2
# September 9, 2014 03:03 (-0700)

I think I loaded it from http://files1.directadmin.com/services/SpamBlocker/4.2.4/

Any thoughts?


* I replaced the original username and domain with ****REMOVED****

P.S. /etc/virtual/whitelist_domains is empty file on my server

 

[zEitEr]

Did you update /etc/exim.pl? Try this:

./build update
./build set eximconf_release 4.2
./build set eximconf yes
./build exim
./build exim_conf

 

[wattie]

Exim.pl is:

#VERSION=17


I just did what you proposed. I will write if there's still an issue. It did downgrade exim.conf to 4.2.2

 

[zEitEr]

There is exim.conf 4.3 is also available. You might want to use it.

 

[wattie]

Issue is resolved.