In the exim_mainlo, the following user is sending unsolicited emails:

from [email protected] U=user223 P=local S=1274 [email protected] T="spam subject was here"

Is the U=user223 the system user?

1 Answer 1


U=user223 is the user retrieved from the remote server using the ident service. These days so few servers support ident calls that I have disable the call in my configuration. It appears this is enabled in your configuration.

Based on the remote user, I suspect this may be a Spam message of some sort. However, this is only one of a number of factors I use.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .