-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Am 06.01.2014 16:12, schrieb Roland Plüss: > Now to deal with this situation in the future I would like to > automatically lock down an account if an unusual amount of mails > are sent like 60 per minute or so.
you need an anomaly checker, so first you need to have some db with multi info about "normal behave" of accounts, if "unnormal" behave is detected then you could do "something", simple example ,you know account is only used at "office" time, disable the accout if it tries to send at other times etc. Not an easy job to code, meanwhile do some amount monitoring and alarming out of syslog info , but i would create warnings for human inspection, and dont use auto mechs other way ,use policy servers with some outbound mail limit control, but this also might high support, cause some account wants to send mass mail some day Best Regards MfG Robert Schetterer - -- [*] sys4 AG http://sys4.de, +49 (89) 30 90 46 64 Franziskanerstraße 15, 81669 München Sitz der Gesellschaft: München, Amtsgericht München: HRB 199263 Vorstand: Patrick Ben Koetter, Axel von der Ohe, Marc Schiffbauer Aufsichtsratsvorsitzender: Florian Kirstein -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iQEcBAEBAgAGBQJSyssbAAoJEP8jBObu0LlEqE8IALAVzYdCiHRVTp01d/mnbGYF Hxj2dXyTQJOcXvOxVmXF1YPFtg/TjZdWkWfwagSr842vZAzSYXMqZzV10v8U3yJG 5VkimfwK0GxjYiUEahIBQlwm6tuCnb3CTjSATxIYl1uJopedkokspj9k2ongEFpu XLXmwF36N30CWXccaLY+bBhOlc5BespIBDl+Oo+wMSG+j0ZUAy3afE9mNw8QtX0M d6J6r/wwd1AD6y+LsW1uFWx28gbhInNZ+4vW6ZOwAYSi7JRfr5s2Sp6yZisznbJe 8bWV9Qdwd+GZRNigkhHh/JySegMyIT+ejJTPHfWJz1oqft6RQyOzEjROwd1Un+g= =qWKJ -----END PGP SIGNATURE-----
