At 03:21 PM 2/11/99 +0000, Niall R. Murphy wrote:
>
>I'm wondering if anyone out there has had experience with qmail and disabling
>dot-file support.
>
>As a medium-size ISP we're considering switching to qmail for delivery purposes,
>but because of various spam attacks we'd prefer not to allow ordinary users to
>be able to use .qmail files. Of course 'alias' still has to be able to control
>arbitrary usernames such as 'postmaster' and 'mailer-daemon'.
>
>What I came up with is the patch below -- crufty or what! -- which
I'm not sure what your patch does exactly, but what I've done in the past
is, rather then turn off .qmail support, I've created a corresponding
"mailhome" for each user and placed the .qmail files in there.
These mailhome directories are not accessable to users directly.
In this way you can still use the .qmail mechanism when needed, but users
don't have the ability to change it directly.
It requires patches to qmail-getpw and checkpassword which you'll need to
make yourself and it also means you have to create and remove their mailhome
as users are created and deleted.
Regards.
