Re: [vps-mail] Procmail problem

[Scott Wiersdorf <scottw@xxxxxxxxxxxx>]

On Tue, May 25, 2004 at 09:31:24AM +0200, Mike wrote:
> Hi,
> 
> On VPS2 server for one subhost I created mail account only for spam so users
> can check via Webmail if false positives goes to the spam account.

Aside from privacy issues (do all users' spam go to this one
account?), there are technical problems with this solution. Read on...

> Now each
> user have own .procmailrc for mail delivery and spamc is running under user
> (not server wide), but spam wouldn not be sent in spam mailbox.

If this one spam mailbox is "/var/mail/spammailbox" as you have below,
all users must be able to write to this file. The only way this can
happen is described below.

> It is normal
> delivered to the user mailbox. I have this im user .procmailrc
> 
> ----------snip--------
> ## begin spamassassin vinstall (do not remove these comments)
> TMPLOGFILE=$LOGFILE
> TMPLOGABSTRACT=$LOGABSTRACT
> TMPVERBOSE=$VERBOSE
> 
> LOGFILE=$HOME/spam.log
> LOGABSTRACT=yes
> VERBOSE=no
> 
> DROPPRIVS=yes

^^^^^^^^^^^^^^^^
This line is unnecessary for .procmailrc, but would be good for
/usr/local/etc/procmailrc

> :0fw
> |/usr/local/bin/spamc -U /var/run/spamd.sock -u username

This is fine.

> :0:
> * ^X-Spam-Status: Yes
> /var/mail/spammailbox

Here's the real problem. If this is running, as Godwin stated, out of
.procmailrc, procmail is running with that users' permissions. So
unless /var/mail/spammailbox has 777 file modes, procmail likely won't
be able to write to it (depending on who ownes spammailbox, etc.)

A better technical solution (and one that will likely be implemented
with the new VPS v2 control panel) would be to deliver mail into
$HOME/Mail/spam or $HOME/spam. This would allow the user to login via
any imap client and check that folder for false positives. I believe
squirrelmail can be configured to examine alternative mailboxes also
(can someone confirm this?)

Scott
-- 
Scott Wiersdorf
scottw@xxxxxxxxxxxx
======================================================================
This is <vps-mail@xxxxxxxxxxxx>       <http://www.perlcode.org/lists/>
Before posting a question, please search the archives (see above URL).