<HTML><BODY style="word-wrap: break-word; -khtml-nbsp-mode: space; -khtml-line-break: after-white-space; ">You could do this with a Custom Function very easily. Just hook Spam Actions and its brethren, test the number of recipients and return "delete" if that's what you want it to do with it.<DIV><BR class="khtml-block-placeholder"></DIV><DIV>Or else, which would be faster, is to set</DIV><DIV>High Scoring Spam Actions = delete</DIV><DIV>Is Definitely Spam = &CheckRecips</DIV><DIV>Definite Spam is High Scoring = yes</DIV><DIV><BR class="khtml-block-placeholder"></DIV><DIV>then just check the number of recipients in &CheckRecips, returning 1 if it has too many recipients and 0 otherwise.</DIV><DIV><BR class="khtml-block-placeholder"></DIV><DIV>There are loads of other places you could hook it in, but the idea is very similar. You could even implement it as a generic virus scanner or spam scanner. If you go down the generic virus scanner route, just say it's a virus if it has too many recipients, and then use the Silent Viruses facility to cause the message to be binned completely.</DIV><DIV><BR><DIV><DIV>On Wed28 Jun 06, at 17:04, Rob Morin wrote:</DIV><BR class="Apple-interchange-newline"><BLOCKQUOTE type="cite"><DIV>I would like to have any emails with more that 20 recipients, NOT delivered and simply discarded from the queueu and sent to never never land!</DIV><DIV><BR></DIV><DIV>I would lover to shoot these people that put up exploitable scripts , but of course they always end up being high end clients, and the powers at be , say , just fix it and shut up....</DIV><DIV><BR></DIV><DIV>:(</DIV><DIV><BR></DIV><DIV>So in the end i have to deal with it!</DIV><DIV><BR></DIV><DIV>:(</DIV><DIV><BR></DIV><DIV>Thanks!</DIV><DIV><BR></DIV><DIV>Rob Morin</DIV><DIV>Dido InterNet Inc.</DIV><DIV>Montreal, Canada</DIV><DIV><A href="Http://www.dido.ca">Http://www.dido.ca</A></DIV><DIV>514-990-4444</DIV><DIV><BR></DIV><DIV><BR></DIV><DIV><BR></DIV><DIV>Drew Marshall wrote:</DIV> <BLOCKQUOTE type="cite"><DIV>On Wed, June 28, 2006 15:42, Rob Morin wrote:</DIV><DIV> <BR class="khtml-block-placeholder"></DIV> <BLOCKQUOTE type="cite"><DIV>Hello all...</DIV><DIV> <BR class="khtml-block-placeholder"></DIV> </BLOCKQUOTE><DIV><BR></DIV><DIV>Hi Rob</DIV><DIV> <BR class="khtml-block-placeholder"></DIV> <BLOCKQUOTE type="cite"><DIV>I have a couple hosted websites that have exploitable forms, that can be</DIV><DIV>used to spam. i contact the person(s) as soon as i find out it is being</DIV><DIV>exploited and remove the offending form/script, whatever...</DIV><DIV> <BR class="khtml-block-placeholder"></DIV> </BLOCKQUOTE><DIV><BR></DIV><DIV>Nice. Might be customers but they clearly need shooting!</DIV><DIV><BR></DIV><DIV> <BR class="khtml-block-placeholder"></DIV> <BLOCKQUOTE type="cite"><DIV>but by this time the damage is done. I have all email from my webserver</DIV><DIV>that goes out to go to my MX server running MS with postfix. now it</DIV><DIV>catches some of the spam as usual, but some not. Now some of the emails</DIV><DIV>come with over 25 recipients in the To field. my question is how am i</DIV><DIV>suppose to limit this...??</DIV><DIV> <BR class="khtml-block-placeholder"></DIV> </BLOCKQUOTE><DIV><BR></DIV><DIV>Are you trying to just remove the offending mail or just clear the server</DIV><DIV>to allow it to process other mail to? I would suggest if possible you</DIV><DIV>don't want to deliver the Spam, so I would kill postfix and just let MS/</DIV><DIV>SA do it's bit and see what's left.</DIV><DIV><BR></DIV><DIV> <BR class="khtml-block-placeholder"></DIV> <BLOCKQUOTE type="cite"><DIV>I added this to the main.cf of postfix smtpd_recipient_limit=20 but</DIV><DIV>when i check the logs i still see email with 25 going through, i did</DIV><DIV>reload postfix.... i made these changes after these emails where in the</DIV><DIV>queue , does this setting only affect new emails? And what happens to</DIV><DIV>the email that does go over 20, does it get rejected or just delete ??</DIV><DIV> <BR class="khtml-block-placeholder"></DIV> </BLOCKQUOTE><DIV><BR></DIV><DIV>That limits the number of recipients that the smtpd accepts messages for.</DIV><DIV>If your server has the mail already, it's too late. But also the overshoot</DIV><DIV>limit will kick in also.</DIV><DIV><BR></DIV><DIV>smtpd_recipient_limit (default: 1000)</DIV><DIV>The maximal number of recipients that the Postfix SMTP server accepts per</DIV><DIV>message delivery request.</DIV><DIV><BR></DIV><DIV>smtpd_recipient_overshoot_limit (default: 1000)</DIV><DIV>The number of recipients that a remote SMTP client can send in excess of</DIV><DIV>the limit specified with $smtpd_recipient_limit, before the Postfix SMTP</DIV><DIV>server increments the per-session error count for each excess recipient</DIV><DIV><BR></DIV><DIV>Hope this helps.</DIV><DIV><BR></DIV><DIV>Drew</DIV><DIV><BR></DIV><DIV><BR></DIV><DIV> <BR class="khtml-block-placeholder"></DIV> </BLOCKQUOTE><DIV>-- </DIV><DIV>MailScanner mailing list</DIV><DIV><A href="mailto:mailscanner@lists.mailscanner.info">mailscanner@lists.mailscanner.info</A></DIV><DIV><A href="http://lists.mailscanner.info/mailman/listinfo/mailscanner">http://lists.mailscanner.info/mailman/listinfo/mailscanner</A></DIV><DIV><BR></DIV><DIV>Before posting, read <A href="http://wiki.mailscanner.info/posting">http://wiki.mailscanner.info/posting</A></DIV><DIV><BR></DIV><DIV>Support MailScanner development - buy the book off the website! </DIV> </BLOCKQUOTE></DIV><BR><DIV> <SPAN class="Apple-style-span" style="border-collapse: separate; border-spacing: 0px 0px; color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; text-align: auto; -khtml-text-decorations-in-effect: none; text-indent: 0px; -apple-text-size-adjust: auto; text-transform: none; orphans: 2; white-space: normal; widows: 2; word-spacing: 0px; "><SPAN class="Apple-style-span" style="border-collapse: separate; border-spacing: 0px 0px; color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; text-align: auto; -khtml-text-decorations-in-effect: none; text-indent: 0px; -apple-text-size-adjust: auto; text-transform: none; orphans: 2; white-space: normal; widows: 2; word-spacing: 0px; "><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">-- </DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">Julian Field</DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">www.MailScanner.info</DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">Buy the MailScanner book at <A href="http://www.MailScanner.info/store">www.MailScanner.info/store</A> !</DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654</DIV></SPAN><BR class="Apple-interchange-newline"></SPAN> </DIV><BR></DIV></BODY><br />--
<br />This message has been scanned for viruses and
<br />dangerous content by
<a href="http://www.mailscanner.info/"><b>MailScanner</b></a>, and is
<br />believed to be clean.
<br />MailScanner thanks <a href="http://www.transtec.co.uk/">transtec Computers</a> for their support.
</HTML>