I really love the relay alert notifications, and it has been invaluable for catching spammers in the past, but how about adding the ability to prevent notifications/alerts from a particular user account? Note that I don't want to ignore all events from that user, just the relay alerts.
As an example, some users have legitimate needs to send large amounts of e-mail, and we're flooded with notification e-mails from them every time they reach the trigger threshold. Sure, we can filter these out, but it makes more sense to prevent them being sent
what if the user has a virus/email worm/malware at a given moment? like a dm.cgi script or so?
wouldn't you want to see what it sends?
you can setup some email filters if it annoys you so much.
that's what i did with some email reports - just forward them to some other let's say yahoo address which i check from time to time.
but i keep the relay alerts delivered to my main address.
minadreapta wrote:what if the user has a virus/email worm/malware at a given moment? like a dm.cgi script or so?
wouldn't you want to see what it sends?
Not really. The point of providing the exceptions is that only a very select few people would be added to the exception list to begin with. If anything it's a feature requested more for LOCALRELAY than standard SMTP relay.
you can setup some email filters if it annoys you so much.
that's what i did with some email reports - just forward them to some other let's say yahoo address which i check from time to time.
but i keep the relay alerts delivered to my main address.
You missed the point. It's far better to prevent the mails from being sent than it is to filter them out, since you're reducing traffic and server load in the process.
# This option triggers for email authenticated by SMTP AUTH
RT_AUTHRELAY_ALERT = Default: 1
RT_AUTHRELAY_LIMIT = Default: 100
RT_AUTHRELAY_BLOCK = Default: 0
# This option triggers for email authenticated by POP before SMTP
RT_POPRELAY_ALERT = Default: 1
RT_POPRELAY_LIMIT = Default: 100
RT_POPRELAY_BLOCK = Default: 0
# This option triggers for email sent via /usr/sbin/sendmail or /usr/sbin/exim
RT_LOCALRELAY_ALERT = Default: 1
RT_LOCALRELAY_LIMIT = Default: 100
# This option triggers for email sent via a local IP addresses
RT_LOCALHOSTRELAY_ALERT = Default: 1
RT_LOCALHOSTRELAY_LIMIT = Default: 100
The email I receive just says "Relay Alert for..." - it doesn't say if it is RT_RELAY_ALERT, RT_LOCALRELAY_ALERT, RT_LOCALHOSTRELAY_ALERT, etc.
Which of these does the new setting allow us to control?