Once again a user seemed valid but after a short time emailed spam to every other user. I can find no way to limit the number of private messages that can be sent by security level or to make requirements that a certain number of public posts be made before sending a lot of private messages.
Oxwall is far too mature a product to have such a serious and obvious deficiency.