Quote:
HangDog42 the compromised was removed and also a fresh os install was done.
|
And have you taken appropriate steps to ensure that you won't become re-compromised? By appropriate steps I don't mean changing passwords.
Quote:
I deleted their email account but it's still coming in and trying to get delivered
|
Your email program is attempting to deliver mail to a NON-EXISTENT user. You either have a misconfiguration in your exim setup or your system isn't as clean as you think it is. The appropriate response from your MTA would be to send an error code with a 500 level response. You will still get spam for this user account for a long time, but most MTAs will stop trying to deliver a particular message with this type of response.