block rate limit recipients

[Oscar Cardiel]

Hi,

Actually we have configured rate limit for envelope senders and we only allow a list of address to send massive mails with the option ignore rate limit for address list active. We can see that these rate limits not drop messages. It slowing these down to gain time to track down the source but we really want to stop or block the e-mails with more than recipients  400.

To do that we have configured a manual filter

400_DROP:

if (NOT(mail-from-dictionary-match("dic_mass_mailing", 1))) AND ((sendergroup =="RELAY") AND (rcpt-count > 400))

{

                notify ("it@system.com","[$FilterName] $EnvelopeFrom");

                drop();

                skip-filters();

}

If I use a DROP as a final action in this filter we can stop/drop the email with more than 400 recipients but the sender doesn’t receive a notification. If I use a Bounce as a final action, the sender receives a NDR for any recipient in the email, getting the sender email box full on NDR messages.

Is there other option to do that and inform only with a NDR to the sender for example?

[Mathew Huynh]

Hello Oscar,

From looking at this filter, I believe that the skip-filters(); is not necessary as you already applied the 'drop' action before it.

Additionally, the notify filter should work in sending a notification to the Sender and also it@system.com with this syntax for notify:

notify ("it@system.com, $EnvelopeSender", "[$FilterName] $EnvelopeFrom");

Regards,

Matthew