Identifying repeat offenders using the tuplets

Matt Bostock <[email protected]> Sat, 23 Jun 2007 18:22:36 +0000
Newsgroups gmane.mail.exim.spamassassin
Message-ID <f71a477dca5c507496b885576da90ba6@localhost>
Hello all,

I've been using SA-Exim for a few months and it has been BRILLIANT. I just recently increased the score weightings for the Razor2 and DCC plugins for SA, and combined with SA-Exim and effect has been phenomenal.

I want to parse the tuplets dir to search for 'repeat offenders', i.e. IP addresses that send high-scoring spam to multiple recipients. What do I need to look for in the tuplets files? For example, what does the 'Query Count' represent?

Many thanks for your help,
Matt :-)