Unless they've changed something, doesn't the S.A method as you are using generate backscatter, I'd be using something more efficient like MailScanner or amavisd-new either will take you no more than 15 minutes to setup and avoid the past several days of your problems, pf and dovecot work well together.
On Tue, 2009-04-14 at 08:48, James Butler wrote: > My latest test: > > spam:dovecot => user: spam > user1:dovecot => user: user1 > root:dovecot => binary: /usr/local/libexec/deliver > root:dovecot 777 => dir: /var/run/dovecot/ > > Still getting: > > deliver(user1): Can't connect to auth server at \ > /var/run/dovecot/auth-master: Permission denied > > What's the key to this problem? > > If I set spam, user1, deliver and /var/run/dovecot/ to the same group, and > give read/write permission in that directory to that group, why can't they > all use auth-master? > > 1) User 'spam:dovecot' runs Smapassassin > 2) Hands off to deliver (root:dovecot) > 3) Deliver assumes 'user1:dovecot' identity > 4) Can't access auth-master in 'root:dovecot' directory (777) > > So it's 'auth-master' that is (a) not available to 'user1' AND (b) not > available to group 'dovecot'. Huh? Why not?