Automatically Disable Hacked User Account
A spammer obtained a Kerio Connect user's password. When I arrived in the morning 50,000+ emails were in the queue and the mailserver was effectively down.
Please consider a setting (per user or global) that would limit the number of emails a single user account can send in a short period, say 5 minutes. If you make it an hour, tons of spams can be generated. If the limit is exceeded, disable the account automatically and send an email notification to the administrator.