Flooded by Non-Delivery Reports

[Guest]

[dave_se]

Hi,

A  of my users recently got bombarded with around a thousand NDRs in a very short space of time.  I'm assuming that a spammer used their email as the 'from' address for their spam.  Is there any way to configure endian (or postfix directly) to discard NDRs if you get more than a  in quick succession? I can understand that you might get 1 or 2 if you make a typo or use an old email, but more than 5 would be grounds to just dump them all.

Any hints/tips/suggestions would be appreciated.

Regards,

Dave