-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On Wed, 27 Aug 2014, Jogi Hofmüller wrote:
Am 2014-08-26 16:48, schrieb Gregory Finch:
I don't think that LMTP/LDA use passdb. I'm pretty sure that they use
userdb only.
The delivery agents just need to lookup if the recipient exists and
where to store the mail.
OK, good point. Now I tried to disable LMTP for one user by means of a
special userdb that would return 'return-fail' when it finds a user. I
figured then LMTP would reject the message. Not so much though ...
this is the special userdb I am using. The default fields are there to
keep error messages in logs low.
userdb {
driver = passwd-file
args = /etc/dovecot/deny/%s/deny-user
default_fields = uid=vmail gid=vmail home=/tmp/%Ln
result_success = return-fail
}
Attached you find the config I tested.
you have lots of userdb's in your config. If you use %s in the general
ones, I would remove the special ones in the "lmtp" section at all.
Also, try this #1
userdb {
args = /etc/dovecot/deny/%s/deny-user
default_fields = uid=vmail gid=vmail home=/tmp/non-existant-name
driver = passwd-file
}
That way, you get an hit for that userdb. Now return an _non-existant_
mail location. You get an error in the logs, but LMTP should tempfail the
request.
===============
Try #2
If you enforce quota and tempfail the message, if the user is over quota,
lower the user's quota to 1 byte temporarily.
===============
Try this #3
Just use one userdb:
userdb {
args = /etc/dovecot/dovecot-ldap.conf.ext
driver = ldap
}
Then extent your userdb query by:
(&(original query)(!(attr=%s)))
choose any attr'ibute with text, such as description, that does no harm to
other services. Then the LMTP service should get no hit and should, IMHO,
tempfail the delivery.
- --
Steffen Kaiser
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
iQEVAwUBU/3bK3z1H7kL/d9rAQKTeQf9Eqqi+nfWEEMW3UZ3E3sg5ehOUrkInLWJ
8QPJ3A223+Uwul3662art4dbDJ1ybP5S+DxRW+K7mVjyIYEjMDGM6OkhTsFqURvw
wmlkBjIZNkF8VSAR2MjrtBlyVjSoQ3LsVljrPR3MnIF1U3lyAVhzdUCkwxYSPgP2
/ijFaO0xIl7/Xk4uok14dT3IeBkjvCe56nY9B0mjjW+v5jyfb3iPnINySYtsobT6
Hb4Sb7Ffwyc56HmSAcvjV5wa4MWDnRxqCYU77DWBTgOcVSIUfFN9VGRIDh8Q4yjr
9Ke8lmGGYLG9tO+H+dWGUlayQEZgATsWwh/eT/vf41bGtleuIbv3JA==
=coxQ
-----END PGP SIGNATURE-----
