On Thu, May 31, 2012 at 12:48:04PM -0400, Wietse Venema wrote: > Frank Bonnet: > > Hello > > > > Would it be possible with Postfix to have a file containing users > > authorized to > > use the .forward facility ? > > No. You can > > a) Specify a forward_path that does not include the UNIX home > directory, and move all .forward files there (leaving behind a > symlink so that users can still edit their own file). I expect that > a root-owned directory would suffice. > > b) Use a transport map and delivery agent such as virtual(8) which > does not support forwarding. That requires a bit of scripting to > generate the virtual_mailbox_uid/gid/maps files from /etc/passwd.
I implemented a hybrid of virtual(8) delivery to system users in my Postfix+SQLite HOWTO. It's not something I use in real-life, but it might serve as an example of how it can be done. > > We really need such utility , students are playing too much with > > forwarding and this generate a lot of troubles with great free > > email providers, but in the same time our professors and other > > employees really need it so we really want to separate "Normal > > users" from students for that utility. > > > > We use UNIX system with standard users ( not virtual ) If the system users are in LDAP already, this would not be much of a chore, to make virtual_[ug]id_maps and virtual_mailbox_maps queries from LDAP. Presumably you already have an attribute which indicates whether the user is student, staff or faculty. -- http://rob0.nodns4.us/ -- system administration and consulting Offlist GMX mail is seen only if "/dev/rob0" is in the Subject: