Hi! How can I know which of my hosting costumers (about 200) is using my web/mail server to send spam? I've been blocked by hotmail for sending spam. Since the spamming costumer is using a web system for sending spam, all mail uses the "nobody" user, so I can't know which one of my costumers is the spammer.

I'm using Ensim in Cpanel/WHM.

Sorry for my bad english, hope you understand me.

Thanks!

There isn't an easy way to tell without knowing what you were reported for. You can request to see what email got you blacklisted, then you should be able to view the headers of the email message and see which domain sent it.

Enabled Exim extended logging and check the mail Ids.