What config do you use to stop a user sending more than 10 emails?
Problem i have is because i deal with a freeisp i cannot block an ip address
as it could be reassigned when someone else dials up.
I need to dynamically stop someone emailing more than say 10-20 messages in
a given time and need to stop sending to more than say 10-20 people at the
same domain to protect against random addressing.
Any ideas?
Dave
-----Original Message-----
From: Suresh Ramasubramanian [
mailto:mallet@efn.org]
Sent: 09 August 2002 01:22
To: dave.markham@???; 'Exim User (E-mail)'
Subject: Re: [Exim] IS it possible? An idea may be
dave.markham@??? (David Markham) [Friday, August 09, 2002 1:03 AM]:
> This is outgoing mail though :( You cannot use any recipient verify
> as its not the outgoing MTA's job. I just need to dump outbound
> messages to over say 20-30 recipients at the same domain.
>
> Anyone any ideas?
Ah, outgoing mail? Then I'd strongly recommend taking a look at the DCC
(
http://www.rhyolite.com/dcc/)
The description on the site above is how to set it up as an inbound bulkmail
checker, exchanging checksum floods with peering dcc sites ... but you can
set it up to be standalone as well.
Or you could do what we do - find the account and freeze it if it starts
sending more than a certain number of emails per 10 minutes.
-srs
> From: Suresh Ramasubramanian [mailto:mallet@efn.org]
> dave.markham@??? (David Markham) [Thursday, August 08, 2002 6:49
> PM]:
> [dictionary attacks]
>> I was wondering if exim had or maybe could have a filter or something
>> which could detect if a mail had a lot of recipients to the same
>> domain . Eg a threshold which i could set and if it went above it to
>> dump the mail.
> There _is_ a setting which causes Exim to throttle incoming
> connections with too many unknown recipients over a given period of
> time ...
