[PLUG] How rcpthosts under qmail works...

Michael C. Robinson michael at robinson-west.com
Mon May 12 10:46:02 UTC 2003


I'm getting the impression that any domain that isn't under rcpthosts is
denied, but this is awfully restrictive where I want to allow my trusted
users to send to anywhere and anyone to be able to send to me.  Short of
being an open relay, what option is there to make the latter happen
transparently?

I'm guessing with smtp protocol that it doesn't know the difference
between inbound and outbound traffic.   

I would think all you'd want to block is email not going to or coming
from your local network plus spam/malicious email.  Wouldn't the latter
protect against blacklisting due to being an open relay?

Hopefully moving from kmail under Redhat 7.2 to evolution under 7.3 will
help security wise.  I've gotten Maildir boxes going for the first time
also :-)

I wonder if evolution reads rcpthosts where kmail seemingly didn't or
does this file merely affect qmail?  This is the first time I've ever
removed the mail and the procmail programs.  Has anyone experimented
with creating two home areas for their users and modifying the user
account creation scripts to place the maildir in one area while 
setting a user's home to the other?  Using UW-IMAP before I guess
creating a non-login user for the imap accounts will help seperate 
the imap files from other files.  Trouble is, I want the normal 
account name to be the email name also.  I would like the user's
home directory to be free of their email stuff although the .qmail
should stay there as should any home directory stuff for qconfirm, etc.

I used IMAP before because I figured that IMAP doesn't download files
off the server and I also figured with IMAP that one can A have multiple
email accounts and B create folders on the server.  I'm wondering what
to do now realizing that qmail has it's own pop3 program and I'm using
Maildir.  I need to set it up so that any computer on local network 
can be used to access an email account without risk of email being
loaded down onto that single client machine.  Such a download causes
email to "disappear" from the other possible client machines.  I only
want to allow deleting from the server and need to prevent any client
machine from serving one of my email accounts.  IMAP reading a listing
of the emails is also faster than POP which has to download all of them.
POP3 unless it copies the email off the server isn't going to work 
at all and could easily cause synchronization issues between what 
is on server verses the client machines.  

Since I have X Terminal support I wonder if evolution can be set to
local delivery instead of IMAP/POP?  Achieving the latter would likely
satisfy my don't download to client machine requirement for my email 
server although it might annoy my Windows user's who don't have one
of our ISP's email boxes.

BTW:
I tried out Eudora for a Window's user and it appears far more stable
than Outlook Express :-)  I get a lot of Outlook complaints because it
crashes if an account disappears or the network is momentarily down
instead of exiting nicely.  I should probably kick up to dhcp3 and
figure out how to do a backup server but I use dhcp for ltsp and I
don't want to back up that component of it only desiring to be able
to hand out the ip information to the workstations when my terminal
server/mailhub is down..





More information about the PLUG mailing list