Author: Jasen Betts Date: To: exim-users Subject: Re: [exim] Dealing with Authenticated SMTP spam
On 2014-05-28, Todd Lyons <tlyons@???> wrote:
> Right, the trick is to automate the detection. Sounds easy, a bit
> harder in practice. Another poster I feel was extremely insightful
> with the labels of fast and slow detection.
This week looking for accounts sending mostly emails with exactly 5
recipients is a fairly good indicator.