On Tue, 11 Aug 2009 16:52:13 -0400, Wendel, Ryan wrote: > I am trying to implement an anti-phishing strategy and was hoping some > of you could point me in the right direction. I want to keep track of > how many recipients a user sends mail to on a 24-hour basis. When a > given threshold is met, that user's email would then go into quarantine > until an admin releases it. Thing is, I'm not sure where to begin... > > Breaking this down into bite-size chunks I see the following ahead of > me: > > 1. Track the number of recipients that are sent mail on a 24-hour > per-user basis. 2. If the number of outgoing email transmissions for a > user crosses the preset threshold, add a header to the email. 3. If the > header is seen, quarantine the message. 4. Notify an admin > 5. Allow an admin to delete or release the quarantined emails. > > I'm starting into number 1 for now but am at a loss at the moment. My > thought would be to update a MySQL table with the recipient count found > in each message. How to do this escapes me. > > I know amavisd will handle some of this but I'm also aware that I made > need SpamAssassin as well. If anyone could help with any part of this, I > would greatly appreciate it. >
postfix policyd (www.policyd.org (for me the site's not working right now)) is able to track message counts (or maybe also size) and block mails if there are too much (not quarantine). - Thomas ------------------------------------------------------------------------------ Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day trial. Simplify your report design, integration and deployment - and focus on what you do best, core application coding. Discover what's new with Crystal Reports now. http://p.sf.net/sfu/bobj-july _______________________________________________ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
