From: "Derrick T. Woolworth" <[EMAIL PROTECTED]>

> Ok, another potentially silly question:
>
> Is it true that when a user is added to courier's userdb, that user
can always
> relay through the mail server using their login/password?  Is there a
way to
> turn this off so that users cannot relay, regardless of their
authentication,
> and without having to add their IP address in smtpaccess?
>

Sam told how to stop esmtp auth altogether.  Another possibility which
might suit you if you do want esmtp auth for some users, but not for
all, is to set appropriate passwords in the userdb.  The field
"systempw" lets the user do anything, but pop3pw and imappw and esmtppw
allow access to those specific services only.  You could set your user's
pop3pw or imappw, and NOT the esmtppw or the systempw.

# man makeuserdb
...
pop3pw, esmtppw, imappw... - value specifies a separate password used
only for authenticating access using a specific service, such as POP3,
IMAP, or anything else. If not defined, systempw is always used. This
allows access to an account to be restricted only to certain services,
such as POP3, even if other services are also enabled on the server.
...

Regards,
Patrick.




-------------------------------------------------------
This SF.net email is sponsored by: VM Ware
With VMware you can run multiple operating systems on a single machine.
WITHOUT REBOOTING! Mix Linux / Windows / Novell virtual machines at the
same time. Free trial click here: http://www.vmware.com/wl/offer/345/0
_______________________________________________
courier-users mailing list
[EMAIL PROTECTED]
Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users

Reply via email to