The spammers are probably not actually using your mail server. Viruses and spammers can easily send an e-mail from anywhere and simply put
[email protected] as the reply-to and from addresses. The To: addresses are also made up so many of them are invalid which is why you are getting...