How can I stop local accounts being compromised and used for spamming?
Limits to prevent guessing passwords and abusing a local account to send spam: g_recent_bypass “127.0.0.1” # bypass limits per ip address g_bad_login_ip_ignore “127.0.0.1” # bypass limits for bad logins G_BAD_LOGIN_ALLOW “10” # Number of bad logins before blocking user G_BAD_LOGIN_IP_ALLOW # number of bad logins before blocking that ip address # limit users from sending out bulk email… g_user_send_max max=”2000″ g_user_send_warning “500” G_USER_SEND_IP “true” G_USER_SEND_WHITE “127.0.0.1,other known mailling list servers” You can also check for weak passwords used by your users with the following command (run in the shell or command prompt) tellmail test_weak to find the worst accounts/passwords.
