Below an extract of the email header. From what I have gathered, the sender 51.15.81.111 is using my server to send out spam. What I still can't figure out is how, given I have disabled mail function, ban his IP and mail is not running on plesk for this domain. Anyone?
Authentication-results...