outgoing spam issue

[klemens]

Hi,

recently i have issue with outgoing spam, and i cannot found out from where the spam comes...

this is the header information of spam:

1VmRH7-000FgM-ST-H
mail 12 6
<[email protected]>
1385743841 0
-helo_name ngs.ru
-host_address 188.162.14.111.49551
-interface_address MYSERVERSIP.25
-received_protocol esmtp
-body_linecount 1
-max_received_linelength 333
-deliver_firsttime
-host_lookup_failed
XX
1
[email protected]

221P Received: from [188.162.14.111] (port=49551 helo=ngs.ru)
by mail.mydomain.com with esmtp (Exim 4.82)
(envelope-from <[email protected]>)
id 1VmRH7-000FgM-ST
for [email protected]; Fri, 29 Nov 2013 17:50:42 +0100
032 Content-Transfer-Encoding: 8bit
050 Content-Type: text/plain;
charset="windows-1251"
030F From: <[email protected]>
021T To: <[email protected]>
334 Subject: =?utf-8?B?0JzQvtC20LXQvCDRgdC+0LHRgNCw0YLRjCDQtNC70Y8g0JLQsNGBINCx0LDQt9GDINC0YdC90L3Ri9GFINGC0L7Qu9GM0LpvINCS0LDRiNC40YUg0L/QvtGC0LXQvdGG0Lhh0LvRjNC90YvRhSDQutC70LjQtdC90YJv0LIg0L1l0YHQum/Qu9GMa9C+INC00LVj0Y/RgtC6b9CyINGC0YvRgdGP0Ycg0LIg0YJl0Ydl0L3QuNC1IGPRg9GCb2sg0KPQt9C9YdC50YJlINC/b9C00YBv0LHQvWVlIElDUTogNDQ2NDQ0NjQ0?=

thanks in advacned.

 

[nobaloney]

You can find the spam in your /var/log/exim/mainlog file; it will show you how the spam is injected into your mailstream.

Jeff