Kyle Wheeler wrote:
I did something like that. The trick is you can't just give people blank access to a procmailrc file because they can use procmail to execute arbitrary commands with vpopmail permissions.
Absolutely. besides a messed up procmailrc can cause all incoming mail to be lost in the bit bucket =)
The way I did it was via PHP script that uses a very simple setuid binary to fetch and save the procmailrc to and from the user's vpopmail home directory. It's not very complicated, and not very capable, but it lets users file and delete mails based on sender/destination/subject.
I could probably pull that off, and do my interface in php or cfml.... thanks for the ideas. Rick
