Hamie wrote: > How do you count 'unknown users'? Accurately I mean... > > Assuming you don't accept email in the first place if the user is > unknown (Or you might I guess, but it seems like un-necessary > processing to me) most spammers that I can see in our logs just keep > re-trying again & again & again...
We block unknown users at our MXes (sendmail using mailer-table?), then with MIMEDefang and GraphDefang, I just added a directive (in GraphDefang) to have it process the logs and produce a graph based on the text produced by sendmail when we have an unknown user attempt. It's elementary ;) hehehe couldn't resist. Frederic Tarasevicius Internet Information Services, Inc. http://www.i-is.com/ 810-794-4400
