My server sent spam?

[pongzaa]

My reseller user have sent spam which he didn't do it.

it's email of reseller username which sending spam.

How can i stop it? I can't delete this user.

I don't know what happen? now i have to suspend this domain.

anyone can help me

Thank you

 

[patrik]

Do you find anything in the exim log that actually indicates that the reseller have sent spam?

 

[pongzaa]

Yes, this is some exim/mainlog Can you explain what happen?

2006-10-31 23:42:07 H=ppp83-237-249-149.pppoe.mtu-net.ru [83.237.249.149] F=<[email protected]> rejected RCPT <[email protected]>: Unrouteable address
2006-10-31 23:42:07 H=ppp83-237-249-149.pppoe.mtu-net.ru [83.237.249.149] F=<[email protected]> rejected RCPT <[email protected]>: Unrouteable address
2006-10-31 23:42:08 H=ppp83-237-249-149.pppoe.mtu-net.ru [83.237.249.149] F=<[email protected]> rejected RCPT <[email protected]>: Unrouteable address
2006-10-31 23:42:08 1GeiAp-0005Yf-Nb SMTP error from remote mail server after end of data: host mailin-02.mx.aol.com [205.188.157.25]: 421-: (DYN:T1) http://postmaster.info.aol.com/errors/421dynt1.html\n421 SERVICE NOT AVAILABLE
2006-10-31 23:42:08 1GeiAp-0005Yf-Nb == [email protected] <[email protected]> R=lookuphost T=remote_smtp defer (0): SMTP error from remote mail server after end of data: host mailin-02.mx.aol.com [205.188.157.25]: 421-: (DYN:T1) http://postmaster.info.aol.com/errors/421dynt1.html\n421 SERVICE NOT AVAILABLE
2006-10-31 23:42:09 H=(202.151.178.32) [200.6.176.118] F=<[email protected]> rejected RCPT <[email protected]>: Unrouteable address
2006-10-31 23:42:09 H=ppp83-237-249-149.pppoe.mtu-net.ru [83.237.249.149] incomplete transaction (RSET) from <[email protected]>
2006-10-31 23:42:09 H=(202.151.178.32) [200.6.176.118] F=<[email protected]> rejected RCPT <[email protected]>: Unrouteable address
2006-10-31 23:42:10 H=(202.151.178.32) [200.6.176.118] F=<[email protected]> rejected RCPT <[email protected]>: Unrouteable address
2006-10-31 23:42:10 H=ppp83-237-249-149.pppoe.mtu-net.ru [83.237.249.149] F=<[email protected]> rejected RCPT <[email protected]>: Unrouteable address
2006-10-31 23:42:11 H=(202.151.178.32) [200.6.176.118] F=<[email protected]> rejected RCPT <[email protected]>: Unrouteable address