> >
> > Bad news: 66.58.160.105 is already listed in a few
> DNSBL.
> >
> >
> I don't have SPF enabled due to not having control over my
> DNS - using our domain register's. Hence we are getting
> spammers spoofing our email to some degree - I would love to
> solve that problem.
>
Not having SPF enabled isn't why the IP is listed on the DNSBL I found. It's spam received from your IP.
http://www.dnsbl.info/dnsbl-database-check.php
You might have to zgrep your gz maillogs in /var/log for the time displayed there when you look up the evidence.
I'm surprised that you can't find an access_log entry for the time the maillog shows the spam being sent out.
--
Dan Kriwitsky