On 27/05/14 19:03, Paul Warren wrote:
We're seeing a growing problem of spam being sent through our servers
using compromised authenticated SMTP credentials.
[...]
We're currently considering rate-limiting, or trying to detect where a
single user is using multiple IPs in quick succession.

Do you get undeliverables?  Bounces?  Monitor the rate.

Do they send with multiple envelope-from addresses from the one
account?  Monitor that rate.
--
Jeremy


--
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

Reply via email to