So I have a couple of my users respond to a Spammer request and sent the spammer their email credentials. The Spammer then proceeded to send out thousands of emails before being caught. I have since then change the users passwords and the emails have stopped.
My question is, is there a place on my SMTP server to say something along the lines of If x number of emails are sent by a person in X amount of time, to alert the Administrators and to turn off the router?
Thanks