I got my first dedicated server a couple of months ago, using it to learn Linux and server admin, and to host a couple personal sites. I'm very new to Linux, so I used examples and tutorials found across the web to set up the Debian 6 install I'm using. I even kept a list of all the steps I took, which can be found here:
Anyway, a couple of weeks ago I received notification from my host that I was sending spam. My first step was to uninstall exim (which is why step 10 is crossed out), and replaced it with MSMTP, and set-up logging.
The problem is, this didn't solve the problem. I had a friend of mine look at it, who suggested it might be an open relay, but wasn't. This lead him to give up, because he can't even tell what was sending the mail.
I've set-up mail logging in php.ini, and keeping an eye on that log, but that is only reporting legitimated emails, so I'm at a complete loss. Can anyone help me out?
Below are links to a couple of the reports I've had...