Re: Eximon - on large mailqueue

> Always from the same place?

No. Apparently some friendly european pc magazine distributed the
program with the result that we're getting lots of spamming from
fairly diverse places. When we notice a new address, we block and
notify. The destinations are also not local.

I have a horrible filter design in mind that would allow one to block
addresses based on some rules where a rule is a {source,destination,yay/nay}
triplet, and a source or destination is a set of mail domains. In our
case, we would want to refuse to accept a message if neither the
source nor the destination mail domain was "approved." Aside from
blocking maliciousness, we might also be able to prevent evil mail
administrators from using our relays as MX targets without our
knowledge. This might help.