Re: [exim] Finding largest senders

mtrainer@??? <mtrainer@???> (Mi 03 Feb 2016 09:49:07 CET):
> We are currently using the command below to find the 30 largest
> authenticated senders on our exim mta's so we can check if it is valid
> email or spam:
…
> The problem with this is that it only counts emails and not recipients.
> We could have a spammer with 5 emails with 1000 recipients in each and
> we wouldn't notice from the list above
>
You can use ratelimiting to count how much different recipients a given
sender addresses in a specified time frame.

--
Heiko