Am 27.07.2012 13:55, schrieb Christian Rohmann: > But if I lock a (hacked) user account and prohibit further smtp auth > logins, an established connection can still be used to send messages.
thats not an easy question, allready established connection maybe a problem ever, is restart postfix an option for you? if you identified the user and ip allready why not use some firwalling too or do you search for automated solutions ? -- Best Regards MfG Robert Schetterer