How to set Mail Control to warning after 500 emails sent on few hours?

[Sergio]

Hi, Sarah.

Is there a way to set Mail Control to warn (sent an email) when an account sends more than an amount of emails defined in a day, like a cron to run every X hours a day?

I know that we can set the emails per hour, but if an email account is compromised and the email sends less than the emails per hour and sends all day it could send thousands of email in a day and will be great to have this type of warning.

I am looking to receive an email for something like the "Top 20 Sender Domains by count".

If it is not possible to do this with Mail Control, Could you, please, share the script for the "Top Sender Domains by count", so, I can create an script for this?

Thanks in advance.

Sergio

[keat63]

If mailscanner doesnt do this, then I'm pretty sure Relay Tracking in CSF does.

[Sergio]

Thank you keat63,
I manage to create my own script and it is working great, I got every hour an email only if there are more than X emails relayed from the same account.
Unfortunately CSF could not be used to this type of chore on the first step, but it is used on my other script that blocks all the IPs that are involved on the email hack.