Re: [exim] Dealing with Authenticated SMTP spam

Pàgina inicial
Delete this message
Reply to this message
Autor: Jeremy Harris
Data:  
A: exim-users
Assumpte: Re: [exim] Dealing with Authenticated SMTP spam
On 27/05/14 19:03, Paul Warren wrote:
> We're seeing a growing problem of spam being sent through our servers
> using compromised authenticated SMTP credentials.

[...]
> We're currently considering rate-limiting, or trying to detect where a
> single user is using multiple IPs in quick succession.


Do you get undeliverables? Bounces? Monitor the rate.

Do they send with multiple envelope-from addresses from the one
account? Monitor that rate.
--
Jeremy