I have a question about exim_mainlog.
I am currently investigating a server that was used to send out spam. The log is full of messages (about 12 per min) that read;
2012-04-04 11:42:55 1SFNfz-0005Nv-EN => user R=localuser T=local_delivery
I have omitted the domain and user.
Does this log indicate that this server is not sending mail, but receiving mail from some other source?