Bandwidth leak through SMTP

[dariofg2]

CPanel has been counting bandwidth from SMTP for about a month (or less?) now, and I've noticed a problem that has been happening all along. Although users with blocked accounts for excessive bandwidth can't access their sites, they CAN send e-mail! And lots of it, if they wish.

In my case, I have a user that's hired a 800-meg transfer plan, but has already used up 7,6 GIGABYTES (!!!) of SMTP traffic, 20 days to go until the end of the month.

CPanel feature suggestion: blocking relay for for suspended domains, i.e., no SMTP auth and no validating the IP address for SMTP after POP3 auth.

-Dario

[KingmanMe]

Hmm, that's quite a hole if suspended domains are still able to authenticate on SMTP.

Have you put in the bug report/feature request?

[AP]

and use ftp too. I reported this 2 months ago but didn't see any fixed yet.

[hostcp3]

When suspending accounts change the main password.

If its a problem with users abusing your server change all the passwords for those email accounts.

If they go further and still find a way to send emails, terminate the account entirely.

When they are ready to either pay or whatever you have them suspended for just rebuild the account from backup.

[sexy_guy]

Originally posted by dariofg2
Although users with blocked accounts for excessive bandwidth can't access their sites

Who says?

[dariofg2]

KingmanMe, it seems CPanel's Bugzilla was removed, at least I can't find it anywhere. The support form is a waste of time, your messages fall into deaf ears...

hostcp3, the main account password IS locked when the account is suspended. That does not stop the account owner from relaying his e-mails. Removing/renaming the account's passwd file by hand is too much trouble, you'll have to keep track of every account that gets blocked.

sexy_guy, have you ever seen the message "Bandwidth Limit Exceeded"???

Well, anyway, I wrote patches for /etc/exim.pl and /usr/sbin/antirelayd to do just that, block SMTP relaying for accounts that have transferred too much already. I've sent them to Nick yesterday. Still waiting for a reply, though!

-Dario

[ramprage]

Dario nice, could you please send me a copy of those?

[dariofg2]

Sure! It's attached.

-Dario