OK i know that now!
So i decided that i hardened the postfix and i close up 25 port, so for now is this a step one! Also i have found a script on my server that has sendind email from my domain called pp1.php. I have closed up my ports and the messages are still comming to my queue so i found the script that was uploaded on my server via joomla.
Thanks i solved for now the problem it was not the postfix but joomla injection!!!