OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Virtual mailboxes WITH aliases, and command delivery

From: Aaron D. Gifford (agiffordinfowest.com)
Date: Mon Mar 17 2003 - 18:24:59 CST


Hi,

There are those of us who love to use virtual mailboxes, but find that
the secure virtual delivery agent just doesn't cut it since it doesn't
support aliases or command delivery (.forward files don't really apply
for a virtual mailbox). Is there an easy way to do this? When I first
read about virtual_mailbox_domains and virtual_alias_domains maps in
2.x, I hoped that I could now do aliases AND mailboxes all within the
same domain. Sadly I was mistaken.

In the past, I've just done a local "hack" by ripping the map lookup
code out of the virtual delivery agent, adding it to a copy of the local
delivery agent, then ripping out the parts of the local (delivery to
.forward) agent that I didn't need, and using my own custom
"fullvirtual" delivery agent.

It worked for me since ALL mailboxes were virtual, but I could still
deliver to a command (which can be VERY dangerous since command to be
executed, and the uid/gid to use all come from a map table - anyone with
access to alter those tables for all practical purposes has full root
access to the system), and have aliases within the same domain.

For example:

   Virtual domain: example.com
   Alias maps:
      billexample.com => fredexample.com
      usersexample.com => billexample.com, fredexample.com,
                             aliceexample.com, shirleysome.other.domain
      shirleyexample.com => shirleysome.other.domain
   Mailbox maps:
      fredexample.com => /var/mail/example.com/fredexample.com
                           UID 10000 GID 10000
      aliceexample.com => /var/mail/example.com/aliceexample.com
                            UID 10000 GID 10000
      autoexample.com => /var/mail/example.com/scripts/autoresponder.pl

So is there any way to easily do this sort of thing in Postfix 2.x
without having to hack either local or virtual to create a custom
delivery agent that does virtual deliveries but CAN do delivery to
commands and alias resolution?

Wondering,
Aaron out.