I recently switched from Thunderbird to Roundcube (highly recommended), switched to the non-SSL courier daemon, and plugged the firewall hole since courier resides on the same system as my web server. Do I still need cyrus-sasl or will a webmail client authenticate directly with courier?
I have authmodulelist="authshadow" in /etc/courier/authlib/authdaemonrc. - Grant
