Matthew Broadhead: > does anyone know of a linux module (maybe similar to fail2ban) that > could be installed which would monitor email logs (sign ins) and alert > the user to any suspicious activity on their account? i suspect it > would need to log geo location, device type and ip address to a > database. it seems like a module like this would be very useful and > should exist already? thanks in advance
Use postfwd to rate-limit email volume by sasl_username, to limit the impact from a 'stolen' password. http://postfwd.org/ratelimits.html Wietse
