mass email detection rule

[Wayne Fox]

<x-flowed>
Take a look at VISPAN. It attempts to address this issue.
www.while.homeunix.net/mailstats



At 04:22 PM 5/09/2004, you wrote:
>Hi
>
>At times our mail server gets bombarded with 1000+ spam emails from the same
>recipient (well a fake hotmail address). Surely there must be a rule that
>go's like this
>
>  if someone tried to spam mailboxes on the server more that 30 per minute
>then they will get blocked for 24 hours
>
>or even better
>
>  if anyone tried to send more that 30 emails per minute for 5 consecutive
>minutes they will get blocked for 7 days
>
>I suppose the times could be adjusted
>
>
>
>or something like that?
>
>Kind Regards
>
>Stuart Clark
>Director
>Spacelink Communications Pty Ltd
>Ph. 98570800 Fx. 98597577
>
>------------------------ MailScanner list ------------------------
>To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
>'leave mailscanner' in the body of the email.
>Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
>the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
</x-flowed>