Don't know if this will help, but if you are using IMail you could try to limit the outbound mail per customer via: http://support.ipswitch.com/kb/IM-20030422-DM01.htm of course they might just reconnect and start the cycle over and over. There might be some sort of filter or (kiwi logging) you could implement that might give you the ip address of those whom are sending mass amounts of email traffic. IMHO I would hurry before your server ends up blacklisted for spam.
hth, ~Rick > > Hi List > > I have a problem with some of our cable access customers. Their PC has a = > trojan or virus and is sending out spam over our IMGate Mailserver. A = > lot of spam.. :-( > > How can I stop that ? Disconnecting or block it is a manual task and is = > only a reaction after much mail is send out, but how can I slow und = > detect them before it is to late ? > > I detect these guys normaly after >1500 mails are send out because the = > server is getting slower (I have AV + Spamassassin installed). > > Any Ideas ? > > Martin Jaggi > Network Engineer, CCNP, Compaq ASE > ______________________________________________________________________ ___________________________________________________________________ Virus Scanned and Filtered by http://www.FamHost.com E-Mail System.
