Rejaine Monteiro wrote:

Like a text-file based (it's not a security hole?!) or a ldap-replica on mail-server? I'm searching for more examples and other ideas and find this patch for qmail:
http://qmail.jms1.net/patches/validrcptto.cdb.shtml

I don't no if this patch is really necessary.. but it's a sugestion too...
Anyway... I'll search more and to do many tests...

Thanks...


First, that was exactly that page/patch that i was referring to. I use it here on my server and know of others who are in the exact same setup as you who also use it.

The file is a .cdb file (not text) but even if it was, i fail to see how this is a security hole. There are only a list of accounts or perhaps a wildcard ([EMAIL PROTECTED]) in this cdb file so where is the risk?

ldap-replica is way too involved for this function. Use the patch you mentioned, find a way to get qmail-ldap to output a list of addresses, build the cdb file and replicate to the server(s). Thats basically it.

-Jim

Reply via email to