I have exchange 2010, GFI Mail Essentials to scan for spam and viruses.

I recently had an email attack on our server. We had one of our email address attacked from outside by sending thousands of email from the same address to an email address on our server.

We were able to stop it by first using the Exchange transport rules to delete the email and then we blacklisted email address in GFI. This was all done manually, and as quickly as we reacted the email attack we still had thousands of email delivered to the email box.

Is there a product that can detect the amount of emails per second from an email address or an email with the same subject that when it reaches a setting, that it will trigger the email address to be automatically blacklisted?

If anyone has had experience with this type of an attack could you share how you prevented it from happen again?

Jlh1