My question, what did I miss in in the exit policy, I have used the following in the torrc. Maybe I did not miss anything at all. Thanks for helping me to understand how the spammer could use the the exit for spamming.
Emails and spam can be send via for example: - webmail (frequently port 80/443) - 465/587
(not just port 25)