On 07/02/2014 07:32 AM, Tony White wrote:
Hi folks,
Not sure if there is a cure for this but I will ask.
Very recently a customer got a virus or trojan on
their machine which spammed using her account.
This caused my mail server to be spam blocked.
Not good but not permanent.
So...
1. Can we throttle the account?
Not at this point. I've spec'd out a patch to qmail-remote that will add
a throttle to it, but it remains to be coded and implemented. I think
this will be the best solution to this problem. I'll see about making
this a priority, but at this point I wouldn't expect to see anything
being done with it before the end of the year. If someone or several
someones were to sponsor this development, that would accelerate things.
2. Making the max recipients a smaller number does not seem
to slow down this sort of thing. Other alternatives?
Not that I'm aware of.
3. How do we see a high volume from a single client and stop
accepting emails from that address?
The throttle will/would do that.
4. Is there a way of monitoring the client send and if it exceeds
a set limit per minute change the client password and disconnect
them?
IIRC, someone has written a simple script to detect when this happens.
If so, please chime in. We could use an interim solution that would help
with this.
Appreciate anyone else having any thoughts or methods?
Ditto.
--
-Eric 'shubes'
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
