How can I track by ID, i.e. 19vDqm-0002Na-CR (which is the only thing I get in the Mail Queue that means anything) the original SMTP user, I mean if he's sending from our server via SMTP he must be authenticated, so it must be one of my users (sending this spam....).
Also, am I correct in thinking that anything exim handles is outgoing email sent from my server (SMTP) and not any incoming (POP3), so all the antivirus.exim etc is to prevent my LOCAL users from SENDING spam? or does exim also ahndle the incoming email?
