One area Enhance needs to improve, urgently, is email monitoring.
Both protection and visually.
The server needs to have the ability to monitor log files for those logging in to IMAP/POP/SMTP to set per IP limits (i.e how many logins allowed in X period from Y unique IPs) but also per country (i.e how many logins allowed in X period from Y unique countries). The latter maybe more likely to catch issues where mail accounts are compromised as the details are usually passed around and then abused.
When this happens, the option to alert the user as well as the admin (via the configured web-hooks and/or email as setup).
There needs to be a front line of defence against compromised accounts. Simply putting a server behind a mail washing service like Mail Channels does not resolve the underlying security issue and could also be very costly.
