On Sat, Jan 31, 2004 at 09:32:29PM -0000, Aaron Stone wrote:
> The new delivery chain requires a temporary account with the fixed user id
> number 0. The next release candidate should probably include an appropriate
> insert/update to add this user (note that it needs to be an insert and then an
> update, because the insert alone with '0' triggers the auto_increment.
> 
> INSERT INTO users (user_idnr, userid, passwd) VALUES (0, '*', '*');
> UPDATE userid SET user_idnr = 0 WHERE username = '*';

In case anyone is just trying to cut and paste (like I did :),
UPDATE users SET user_idnr = 0 WHERE userid = '*';
 
> The username '*' can be pretty much anything that you'll never be receiving
> mail for. Some more security work may need to be done to ensure that this
> account cannot be logged into, or on the flip side, to make the account into a
> postmaster account where certain types of dead-mail and bounces and such
> arrive. It may even be feasible to run Sieve scripts against all messages as
> they pass throught the postmaster and thereby establish a global mail filter.
> Lots of ideas for this, and I'd love to get a discussion going if this sounds
> like a useful feature to anyone out there.

To prevent someone from logging into the temporary account, you can set
the encryption type to md5, for example.

xn

Reply via email to