[email protected] <[email protected]> (Mi 03 Feb 2016 09:49:07 CET): > We are currently using the command below to find the 30 largest > authenticated senders on our exim mta's so we can check if it is valid > email or spam: … > The problem with this is that it only counts emails and not recipients. > We could have a spammer with 5 emails with 1000 recipients in each and > we wouldn't notice from the list above > You can use ratelimiting to count how much different recipients a given sender addresses in a specified time frame.
-- Heiko
signature.asc
Description: Digital signature
-- ## List details at https://lists.exim.org/mailman/listinfo/exim-users ## Exim details at http://www.exim.org/ ## Please use the Wiki with this list - http://wiki.exim.org/
