Peter,

have a look at g_user_send_max and g_user_send_warning.

Best,
Chris


> Am 01.06.2015 um 00:17 schriebHIDDEN@secs.net.au:
> 
> 
> Hi all.
> 
> One of my accounts on our server had been cpmpromised. The spammer logged in using a password.
> 
> Is there a setting or 2 that I can enable to detect a high rate of outgoing messages?
> 
> My server users are lucky to send 4 emails an hour. So if it starts sending 4 a second with multiple cc addresses, then its spam. Can I detect this?
> 
> 
>