Re: Kill off one user's active sessions

2017-11-24 Thread Vegard Svanberg
* Viktor Dukhovni [2017-11-22 21:20]: > > Is there an easy way to tear down specific (by a particular user) > > connections? > > In front of permit_sasl_authenticated, use: [snip] Clever. Will give this a go. Thanks, all. -- Vegard Svanberg [*Takapa@IRC (EFnet)]

Re: Kill off one user's active sessions

2017-11-22 Thread Wietse Venema
Vegard Svanberg: [ Charset ISO-8859-1 converted... ] > Hi, > > We have a few scripts in place to handle (outgoing) spam outbreaks. > > This works well, but we struggle a bit with one scenario where the > username and password are in the wild, and the spammer connects to the > email server and sen

Re: Kill off one user's active sessions

2017-11-22 Thread Viktor Dukhovni
> On Nov 22, 2017, at 9:31 AM, Vegard Svanberg wrote: > > The same scenario occurs if a botnet has set up multiple connections, > but the server is laggy or whatever so they've authenticated, but > haven't gotten to the "DATA" part of the SMTP dialogue yet (BTW: some > spambots appear to exhibi

Re: Kill off one user's active sessions

2017-11-22 Thread Dominic Raferd
On 22 November 2017 at 14:31, Vegard Svanberg wrote: > We have a few scripts in place to handle (outgoing) spam outbreaks. > > This works well, but we struggle a bit with one scenario where the > username and password are in the wild, and the spammer connects to the > email server and sends multip

Kill off one user's active sessions

2017-11-22 Thread Vegard Svanberg
Hi, We have a few scripts in place to handle (outgoing) spam outbreaks. This works well, but we struggle a bit with one scenario where the username and password are in the wild, and the spammer connects to the email server and sends multiple emails through the same connection. Because even if we