Hello,

Recently, we've had an issue with a stolen password of one of our
users, resulting in a few junk mails sent out. Fortunately, we could
change the user's password reasonably fast and it didn't do any bigger
harm. However, after changing the password, the user was still able to
continue sending junk mail for minimally 20 seconds, after which we
restarted Postfix.

I assume this happens because the user took advantage of the opened
session which won't require re-authenticate and continued sending
those mails.

Is there a Postfix specific command that would end/kill a user's
session? If not, any workaround that would disconnect that user? I've
been trying to find something regarding this in the documentation but
found nothing.

Thank you.

Edwin

Reply via email to