How would you handle this spam issue?
I checked for open relays, patched sendmail/ensim, changed formmail on client accounts, match logs for any traces of the spam email's header info. loads on the server are not even high, sendmail is not even used much. all tests turn up negative.
the domain listed in the header under received from is a domain that's not even hosted by me. Ddoing an IP lookup on that domain shows a totally different IP.
Any ideas? if more info is needed, please ask.
