CertaintyTech - Ed Henderson wrote: CEH> This question is not SA specific but just a general email sysadmin type CEH> question: What is an effective way to monitor my own dialup customers to CEH> see if any are abusing their email privilege by sending out spam? I am CEH> using qmail. Somehow monitor the volume that each local IP is sending? Just CEH> curious to see what others are using and how you do it.
You could automate monitoring the outbound mail volume. If the volume exceeds some threshold, then copy that user's outbound messages to a SA process (send unprocessed copy through to recipients for now). If SA then thinks the outbound messages look spammy, draw sysdamin attention to the user, and they can manually confirm if abuse is happening or not, and take action as appropriate. I would personally avoid actually stopping/modifying users' outbound emails, and instead simply monitor and attract attention to potential violators. Let a human make decisions about enforcement. C _______________________________________________________________ Have big pipes? SourceForge.net is looking for download mirrors. We supply the hardware. You get the recognition. Email Us: [EMAIL PROTECTED] _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
