Re: replacing tcpserver

Gerrit Pape <pape <at> smarden.org> writes:

> I can't help you with vpopmail, but simply using ipsvd-cdb most probably
> won't do it.  I guess vpopmail first modifies /etc/tcp.smtp and then
> runs tcprules to rebuild the cdb.
>
> ipsvd supports such dynamic rules through the instructions directory, no
> need to rebuild the constant database on each change.  Other
> applications simply need to create or delete files in the instructions
> directory to adjust the rules on the fly.
> 
> E.g., if an applications wants to have the variable RELAYCLIENT to be
> set in the environment of qmail-smtpd for connection coming from
> a.b.c.d, it simply runs
> 
>  echo '+RELAYCLIENT=' >/service/qmail-smtpd/peers/a.b.c.d
> 
> If tcpsvd runs qmail-smtpd through /service/qmail-smtpd/run, and it's
> given the -t option, it can automatically remove this authorization
> after a timeout.
> 
> relay-ctrl also may be an option, I'm not sure.
> 
> Regards, Gerrit.

Thanks for your answer Gerrit,

A possible solution is to enforce users to authorize themselves before allowing
to relay like you suggest. But my ideal solution would be to have tcpsvd consult
a mysql database relay table (updated by vpopmail vchkpw) instead of the
tcp.smtp.cdb file. This is my current configuration with tcpserver + Matt
Simerson's mysql patch. The reason I can't stick with tcpserver is that I'm
starting to have real trouble with clients tying up all smtp connections leaving
no room for legitimate users. I'll check your code to see if this is possible.

Regards, Karim.