>From: Dianne Skoll <d...@roaringpenguin.com>
>Sent: Thursday, February 16, 2017 8:30 AM
>To: users@spamassassin.apache.org
>Subject: Re: Filtering outbound mail
>On Thu, 16 Feb 2017 10:07:46 +0000
>David Jones <djo...@ena.com> wrote:
>> Would it make sense for me to setup/manage my own custom
>> rules for checking the To: header or could the FreeMail plugin
>> be extended to add new rules like FREEMAIL_TO?
>The To: header may not contain useful information. I don't think
>the usual spam-filtering techniques are appropriate for blocking
>internal abusers; I think you want to apply some sort of rate-limiting
>that blocks senders (possibly domains and IP addresses) that exceed some
>number of recipients per hour.
I understand that BCC'ing makes the To: header not completely
reliable but I would like to be able to catch it when it's there.
>It's not trivial to set this up, unfortunately.
I agree. Thanks for the hint. I think I already have this
information in my MailWatch database and just need
to come up with a query to count the recipients per
envelope-from over a period of time.
