mtrainer@??? <mtrainer@???> (Mi 03 Feb 2016 09:49:07 CET): > We are currently using the command below to find the 30 largest
> authenticated senders on our exim mta's so we can check if it is valid
> email or spam: … > The problem with this is that it only counts emails and not recipients.
> We could have a spammer with 5 emails with 1000 recipients in each and
> we wouldn't notice from the list above
> You can use ratelimiting to count how much different recipients a given
sender addresses in a specified time frame.
