>> As for tracking such issues (and others) I'd suggest you to use >> the "outbound rate limiter" option; expand the "relaying" section >> in ASSP GUI and scroll down, you'll find the entries named >> "LocalFrequencyInt" and "LocalFrequencyNumRcpt" for a start >> set them to 1800 and 120, that means that if a given sender >> will go over the imposed "outbound email" limit ASSP will reject >> the message with an error (retry after...); now, to get a notify for >> such an event, Locate the "notifyRe" under the "Logging"
> Normally this would have caught this one...except it was sneaky. It > was only sending out about 15-20 messages a day, in batches of 4-5 > messages every few hours. Obviously spammers are trying to stay under > the radar instead of flooding servers with spam and setting off > alarms. The only reason I caught this one is because I was doing log > analysis for something else. Scott... that's something I know and (Thomas can tell that) I suggested in a recent past to setup some countermeasures in ASSP so that it wouldn't just act as a filter for "incoming spam" but would also work for "outgoing spam" :) the first attempt was that "rate limiter" which is quite good, I just hope that Thomas may add bayes checking for outbound as well, that would allow to BLOCK messages above a given "limit" or at least to set up things so that admins will get an alert, this, added to the rate-limiter and to an AV scan for outgoing messages (already in place) could allow to get in control of junk flowing out from our networks and hopefully to clean up them and help making the internet a better place ------------------------------------------------------------------------------ This SF.Net email is sponsored by the Verizon Developer Community Take advantage of Verizon's best-in-class app development support A streamlined, 14 day to market process makes app distribution fast and easy Join now and get one step closer to millions of Verizon customers http://p.sf.net/sfu/verizon-dev2dev _______________________________________________ Assp-test mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/assp-test
