On Tue, 3 Feb 2004, Antonio Messina wrote:

> > platform:
> > linux 2.4 i386
> > pachages: qmail+sqwebmail+qmailadmin+vpopmail-vchkpw-auth.
>
> NOT with FreeBSD 4.5, kernel GENERIC, sqwebmail 3.3.3, vpopmail 5.2
>
> However, I think it's due to a misconfiguration. Root mailbox does NOT
> exist in default qmail installation: it's just an alias, not a real
> valid user.

Sqwebmail reads the filesystem directly, so will be doing this
itself. It doesn't depend on the qmail setup. Sqwebmail is part of the
Courier suite. While I am using all the other software in the courier
suite, I'm using SquirrelMail instead of sqwebmail. Sqwebmail accesses
the filesystem directly for performance reasons. But I prefer to keep my
web server and mail servers separate.

http://www.inter7.com/sqwebmail.html

So, I place the blame squarely on sqwebmail. However, I know the
Courier folks are quite responsive to security issues, so I've included
MrSam on this message.

:)

--
Tim Nelson
Systems Administrator
Sunet Internet
Tel: +61 3 5241 1155
Fax: +61 3 5241 6187
Web: http://www.sunet.com.au/
Email: sysadmin (at) sunet.com (dot) au [email concealed]

[ reply ]