Are you entirely sure that no user credentials are hacked? Note that a
dictionary-attacked or bruteforced password is undetectable, and could have
happened months ago. Eg, a bot could have cracked the password, saved it
into a database, and then the owner of that bot sold the accounts to a
spammer or whatever.
So you wont see in the log that the password was cracked, unless you rummage
through months of log history.
-----Ursprungligt meddelande-----
From: Christos Chatzaras
Sent: Sunday, May 24, 2015 1:10 PM
To: postfix-users@postfix.org
Subject: Re: problem with spam
What I try to find out is how spam is sent out if only users that
authenticate can send e-mail and when no user e-mail accounts credentials
are hacked.
smime.p7s
Description: S/MIME Cryptographic Signature