OT: how to block emails sent to too many recipients

Alex Neuman van der Hans alex at rtpty.com
Mon Dec 20 14:17:38 GMT 2010

Alex Neuman van der Hans
Reliant Technologies
+507 6781-9505
+507 832-6725
+1-440-253-9789 (USA)

Recuerda visitar http://vidadigital.com.pa/ 

Twitter: @AlexNeuman - @VidaDigitalTV
Skype: alexneuman

-----Original Message-----
From: "Denis Beauchemin" <Denis.Beauchemin at USherbrooke.ca>
Sender: mailscanner-bounces at lists.mailscanner.info
Date: Mon, 20 Dec 2010 09:00:28 
To: <mailscanner at lists.mailscanner.info>
Reply-To: MailScanner discussion <mailscanner at lists.mailscanner.info>
Subject: OT: how to block emails sent to too many recipients

Hello all,

Someone seems to have found a way to use one of our MS servers to send spam. Each spam is sent to more than 199 recipients and the envelope from is never from our domain.

I would like to block them but I am not sure how… I didn’t find anything in sendmail (except milter-limit which denies emails I have to deliver). I am now looking to SA.

Does anyone know how to get the nrcpts= value found on the from= sendmail log line?


PS: the spam is sent through our webmail (Horde). I cannot stop delivering emails from those servers.

Denis Beauchemin, analyste
Université de Sherbrooke, S.T.I.
T: 819.821.8000x62252 F: 819.821.8045

MailScanner mailing list
mailscanner at lists.mailscanner.info

Before posting, read http://wiki.mailscanner.info/posting

Support MailScanner development - buy the book off the website!

More information about the MailScanner mailing list