Op 22-10-16 om 19:49 schreef L.P.H. van Belle:
> paul, check if there are messages still in queue. 

I've cleaned the queue every minute using crontab, removing the mail
from that specific recipient.

> i had a comprimized account also and same as you it didnt stop. it did
> after clearing up the queue list.
> 
> the user in question has used its email and pass om a website which was
>  omprimized, at least thats what i think. 

No, I know the user. He is working for me.

And the "authenticated username" does not excist on the server as a user
what can authenticate. Only as an e-mail address.

> i my case i allow my users only from specific countries for smtp, 
> limited by firewalling. (xtables geoip)

My customers go in holliday or work in other countries.

> i also use zpush (active sync) through webserver, for mobile devices for
> other countrie support.
> 
> not a fix, but help avoiding this problem is abuse.
> 
> and check if you landed on black lists. 

I am. But I am not sure I can delist, because I don't know how they did
it. Maybe they start again.

With regards,
Paul van der Vlis.

-- 
Paul van der Vlis Linux systeembeheer Groningen
https://www.vandervlis.nl/

Reply via email to