Hi, I'm on ISPConfig 3 and we've been hit twice by a spamming bot that figured out the credentials (via w/e method) to a mailbox account. We ended up disabling the account but we'd been flagged in spammer database in the mean time. Is there a way to have a daemon monitor usage of smtp/postfix and alert us when a user goes well beyond normal average usage? Thanks
I don't know of software which tracks how much mail users send and tries to determine what "normal" is for them, but if you can determine that yourself (ie. come up with some limit(s) above which you want to be notified), you could use postfwd (use the 'sendmail' action to send you mail when the limit hits).
