Rob Tanner:
> When a user sends too many messages to bad addresses, it?s probably
> a spammer using a compromised account. Other than a very messy
> reading and parsing of the log files, is there a way to get postfix
> to tell me when a message has bounced and who the sender was
> (perhaps a hook in the main.cf or something??).
http://www.postfix.org/postconf.5.html#notify_classes
This can report the sender, recipient, and message header to a
configurable email addresss. These can be piped into a command using
Postfix built-in mechanisms: aliases(5) including .forward files,
mailbox_command_maps, and pipe(8) commands driven by a transport
table.
> When the number of such messages from a specific user reaches a
> certain threshold, I want to be able to block that user from sending
> outgoing messages. This latter part is simple enough but getting
> the bounces information in a way I can read it programmatically
> has got me baffled.
>
> Is that even possible?
Yes, provided that you supply the tooling that processes the
notification email messages.
Wietse