Re: Rate limiting?
"Paul Lesniewski" <[email protected]>
| Newsgroups | gmane.mail.squirrelmail.devel |
|---|---|
| Message-ID | <[email protected]> |
On Mon, Nov 24, 2008 at 2:24 PM, Ralf Hildebrandt <[email protected]> wrote: > Recently, we have been victim of a phishing attack (read > http://www.amazon.com/gp/blog/A1XJVH38GHOSHB for details). > > I noticed that the squirrel_logger plugin does actually log: > > 11/19/2008 22:11:43 [MASS_MAILING] idiotuser (charite.de) from 65.49.2.93 (65.49.2.93): Total 340 recipients > > but > > a) It doesn't notify postmaster, although I configured it to do so That's troubling. I'll try to look later, but any additional help you can provide by running some internal tests (and watching for errors, etc.) would be appreciated. Also, please show all software versions. > $sl_send_alerts = array( > 'MASS_MAILING' => "Possible outgoing spam: by %2 (%3) at %4 on %6: %7", > ); > $sl_alert_to = array( > 'MASS_MAILING' => '[email protected]', > ); > > b) Logging is fine, but it would be cool to actually BLOCK the user > from sending mail for e.g. 15 Minutes. > > Thoughts? Are there other ways to prevent mass-mailing? The Restrict Senders plugin will actually disable sends from any account that has sent "mass mailings" to a given number of recipients in a certain timeframe. You can certainly use that or rate limit in the MTA as otherwise suggested. Any other feedback you have on why the logger plugin didn't notify you would be helpful. ------------------------------------------------------------------------- This SF.Net email is sponsored by the Moblin Your Move Developer's challenge Build the coolest Linux based applications with Moblin SDK & win great prizes Grand prize is a trip for two to an Open Source event anywhere in the world http://moblin-contest.org/redirect.php?banner_id=100&url=/ ----- squirrelmail-devel mailing list Posting guidelines: http://squirrelmail.org/postingguidelines List address: [email protected] List archives: http://news.gmane.org/gmane.mail.squirrelmail.devel List info (subscribe/unsubscribe/change options): https://lists.sourceforge.net/lists/listinfo/squirrelmail-devel