Rob Tanner: > When a user sends too many messages to bad addresses, it?s probably > a spammer using a compromised account. Other than a very messy > reading and parsing of the log files, is there a way to get postfix > to tell me when a message has bounced and who the sender was > (perhaps a hook in the main.cf or something??).
http://www.postfix.org/postconf.5.html#notify_classes This can report the sender, recipient, and message header to a configurable email addresss. These can be piped into a command using Postfix built-in mechanisms: aliases(5) including .forward files, mailbox_command_maps, and pipe(8) commands driven by a transport table. > When the number of such messages from a specific user reaches a > certain threshold, I want to be able to block that user from sending > outgoing messages. This latter part is simple enough but getting > the bounces information in a way I can read it programmatically > has got me baffled. > > Is that even possible? Yes, provided that you supply the tooling that processes the notification email messages. Wietse
