OT: how to block emails sent to too many recipients

[Alex Neuman van der Hans]

MTA?
-- 
Alex Neuman van der Hans
Reliant Technologies
+507 6781-9505
+507 832-6725
+1-440-253-9789 (USA)

Recuerda visitar http://vidadigital.com.pa/ 

BB PIN 20EA17C5
Twitter: @AlexNeuman - @VidaDigitalTV
http://facebook.com/vidadigital
Skype: alexneuman

-----Original Message-----
From: "Denis Beauchemin" <Denis.Beauchemin at USherbrooke.ca>
Sender: mailscanner-bounces at lists.mailscanner.info
Date: Mon, 20 Dec 2010 09:00:28 
To: <mailscanner at lists.mailscanner.info>
Reply-To: MailScanner discussion <mailscanner at lists.mailscanner.info>
Subject: OT: how to block emails sent to too many recipients

Hello all,

Someone seems to have found a way to use one of our MS servers to send spam. Each spam is sent to more than 199 recipients and the envelope from is never from our domain.

I would like to block them but I am not sure how… I didn’t find anything in sendmail (except milter-limit which denies emails I have to deliver). I am now looking to SA.

Does anyone know how to get the nrcpts= value found on the from= sendmail log line?

Thanks!

Denis
PS: the spam is sent through our webmail (Horde). I cannot stop delivering emails from those servers.

Denis Beauchemin, analyste
Université de Sherbrooke, S.T.I.
T: 819.821.8000x62252 F: 819.821.8045


--
MailScanner mailing list
mailscanner at lists.mailscanner.info
http://lists.mailscanner.info/mailman/listinfo/mailscanner

Before posting, read http://wiki.mailscanner.info/posting

Support MailScanner development - buy the book off the website!