Re: Solution to SMTPAuth compromised accounts.

[Wietse Venema]

Viktor Dukhovni:
> > Can we add something similar to the "smtpd_client_restrictions" or
> > "smtpd_recipient_restrictions", and adding a new rule-entry which
> > would simply confirm that the "SMTPAuth LDAP 'user' used way back,
> > is still accountStatus=enabled" ?

Built-in message rate limit:

/etc/postfix/main.cf:
    smtpd_client_message_rate_limit = 10

External rate limit: use postfwd and the like.

        Wietse