Count unique recipients
Repeated messages to known recipients increase the message count, not the distinct-recipient total.
Count unique email recipients per authenticated sender using Rspamd and Redis, with alerting and Prometheus metrics.
Hundreds of messages to one familiar recipient should not look the same as a burst to hundreds of different addresses.
unique recipients
Repeated messages to known recipients increase the message count, not the distinct-recipient total.
Raise an Rspamd symbol when a sender exceeds the limit, with optional email alerts via metadata_exporter.
Expose aggregate message, recipient, new-relationship and alarm counters — without sender labels.
Short-lived recipient relationships, atomic updates and automatic cleanup after inactivity.
Simple components. No extra alerting daemon required.
Authenticated mail submission supplies the sender and SMTP envelope recipients.
Compute recipient relationship hashes and run the check, including for whitelisted senders.
Count active relationships and messages atomically. Expire inactive entries.
Trigger zero-score symbols, notify admins and make aggregate counters available.
Install the Lua callback in lua.local.d, keep the Redis Lua script separately under local.d, and configure your thresholds. The GitHub README documents all installation steps and the metadata_exporter rule.
# First recipient
OUTGUARD_OBSERVE (0) [1/50, new=1]
# Repeated recipient
OUTGUARD_OBSERVE (0) [1/50, new=0]
# Threshold exceeded
OUTGUARD_ALERT (0) [51/50]
# No SMTP rejection by default
Action: no actionRCPTWatch observes recipient counts; it does not classify message content. Its default behavior is monitoring and alerting, not blocking. Review the documentation before enabling automated enforcement.