Throttle Exim Processing

[LampedWeb]

Hi,

Backstory: A user's login details were compromised the other day and their account was used to send 44,000 spam emails. It took about an hour and got me grey/blacklisted on dozens of servers.

I've since implemented RBL and set a maximum emails per domain per hour. I'd like to set a cron job to give me hourly exim queue reports (this won't be a problem). The problem is:

If exim can throw out thousands upon thousands of emails per hour, how can I catch it in time?

I'd like to force exim to either only relay x messages per hour to external smtp servers, or have a fixed sleep for every email. Any way of throttling it will do. I'd like the aforementioned 44,000 emails to have taken a day or two to process.

Any suggestions?

 

[tcihelp]

Hi,

Backstory: A user's login details were compromised the other day and their account was used to send 44,000 spam emails. It took about an hour and got me grey/blacklisted on dozens of servers.

I've since implemented RBL and set a maximum emails per domain per hour. I'd like to set a cron job to give me hourly exim queue reports (this won't be a problem). The problem is:

If exim can throw out thousands upon thousands of emails per hour, how can I catch it in time?

I'd like to force exim to either only relay x messages per hour to external smtp servers, or have a fixed sleep for every email. Any way of throttling it will do. I'd like the aforementioned 44,000 emails to have taken a day or two to process.

Any suggestions?

I'll second that request, as an ISP. I haven't had this happen in years and believe it or not, it happens one day the the next last week. So blacklists (and DNSStuff daily report) tells me I'm black listed, but how can we be notified as the first 50 spam go out of the account? 30 to 45 minutes later is 24-48 hours of blacklist, no good. Thanks cPanel team!

 

[Infopro]

Wouldn't the Max emails sent per hour setting that you changed, help here?