2014-08-24 12:52 GMT-03:00 Edwin Marqe <edwinma...@gmail.com>:

>
> Recently, we've had an issue with a stolen password of one of our
> users, resulting in a few junk mails sent out. Fortunately, we could
> change the user's password reasonably fast and it didn't do any bigger
> harm. However, after changing the password, the user was still able to
> continue sending junk mail for minimally 20 seconds, after which we
> restarted Postfix.
>
> I assume this happens because the user took advantage of the opened
> session which won't require re-authenticate and continued sending
> those mails.
>
> Is there a Postfix specific command that would end/kill a user's
> session? If not, any workaround that would disconnect that user? I've
> been trying to find something regarding this in the documentation but
> found nothing.
>
>
Saslauthd credentials cache is enabled? (looks for '-c' option saslauthd
daemon)

--
Reinaldo Gil Lima de Carvalho

Reply via email to