Yep. I'm using a Postfix -> Procmail -> Sanitizer -> Cyrus IMAP process
that works quite well. This is probably not efficient but the two sites I
have this setup at are less than 50 users.
There was a write-up of a similar system on LinuxWorld pretty recently --
http://www.linuxworld.com/site-stories/2002/0408.ldap3.html
The procmail file that I have for delivery to cyrus is different than the
one in the article:
-------------------- /etc/postfix/cyprocmailrc ---------------------
PATH=/usr/cyrus/bin:/bin:/usr/bin
SHELL=/bin/bash
ANOMY=/opt/anomy
LOGFILE=/home/cyrus/logs/$USER.log
DEFAULT=/home/cyrus/failures/
VERBOSE=on
COMSAT=no
# Run all incoming email through the Anomy email sanitizer
:0 fw
|$ANOMY/bin/sanitizer.pl /etc/postfix/sanitizer.cfg
# Run user rc file, if any
INCLUDERC=/home/cyrus/rules/$USER.rc
# If we have an email extension user+40113@xyz.molar.is, set foo as delivery folder
:0 w
* EXTENSION ?? .
|/usr/cyrus/bin/deliver -a cyrus -q -m "$EXTENSION" "$USER"
:0 wE
|/usr/cyrus/bin/deliver -a cyrus -q "$USER"
# If we get this far, one of the above recipes failed
EXITCODE = $?
HOST # This is correct. Do not modify this line
-----------------------------------------------------------------------
And my entry in /etc/postfix/master.cf is different as well --
cyprocmail unix - n n - - pipe
flags=Ru user=cyrus argv=/usr/bin/procmail -p /etc/postfix/cyprocmailrc USER=${user} EXTENSION=${extension}
(the "u" portion of the flags was necessary to force the incoming email
address to lowercase -- otherwise email to DHAGBERG was not being
delivered correctly).
-=- D. J.
On Mon, 8 Apr 2002, Brian Schonecker wrote:
> ...considering moving my company's primary email access to IMAP server.
>
> Anyone using sanitizer/IMAP?
>
> So far, I've been able to get the IMAP server to start but my mail delivery
> location is in $HOME and I want to 'chroot' it to $HOME/mail so that users
> cannot access their $HOME files. This is a Linux server that is used only
> for mail access and doesn't allow logins from the outside (other than
> console).
>
> Anyone doing this already? Caveats?