Hello, Recently, we've had an issue with a stolen password of one of our users, resulting in a few junk mails sent out. Fortunately, we could change the user's password reasonably fast and it didn't do any bigger harm. However, after changing the password, the user was still able to continue sending junk mail for minimally 20 seconds, after which we restarted Postfix.
I assume this happens because the user took advantage of the opened session which won't require re-authenticate and continued sending those mails. Is there a Postfix specific command that would end/kill a user's session? If not, any workaround that would disconnect that user? I've been trying to find something regarding this in the documentation but found nothing. Thank you. Edwin