>Ya but is there a way to prevent it?

Imail has some simple 'tarpitting' options you can set in the registry, see 
the Imail 6 u/g, page 242. ie, you can try to slow them down, but you can't 
really pre-emptively stop them.

For near-real-time detection, a 'log surfing' pgm, probably in PERL, could 
run once an hour to check the last hour of log activity, specifically the 
"SMTP client" lines with "rdeliver" keyword and tote up how many msgs were 
'remote delivered' from each account.

When the number of msgs rdeliver'ed by any one of your mail accounts in one 
hour surpassed a threshold, the log surfer program could send a msg to the 
Imail admin box or pager so some person could intervene, inspect the logs, 
and disable the account.  Damage control, not damage avoidance.

Len

Please visit http://www.ipswitch.com/support/mailing-lists.html 
to be removed from this list.

Reply via email to