Re: [Exim] exim autodetecting misuse?

Top Page
Delete this message
Reply to this message
Author: Nigel Metheringham
Date:  
To: P.A.Osborne
CC: exim-users
Subject: Re: [Exim] exim autodetecting misuse?
P.A.Osborne@??? said:
> I am wondering whether (I have had a look at the FAQ - and failed)
> exim will help do the following:


> + spot when a local user is sending large quantities of email to
>     multiple addresses (ie bulk spamming) 


> + spot when a user is (or is being) mailbombed (recently we had a user
>        mailbomb an address that diverted to a mobile phone - around
>      50,000 messages - I suspect the phone is still ringing :-)      


I have done this using a perl script to tail the log and process the
results accordingly. That works pretty well in conjunction with a
filter (dump the results into a db of some sort and check against that
in the filter.).

    Nigel.
-- 
[ - Opinions expressed are personal and may not be shared by VData - ]
[ Nigel Metheringham                  Nigel.Metheringham@??? ]
[ Phone: +44 1423 850000                         Fax +44 1423 858866 ]