Re: tmda-check-address --all

On 2006-11-02, Todd A. Jacobs <[email protected]> wrote:
> Also, TMDA can't
> issue a challenge until the email is written into the pending
> queue--even it could, that seems problematic in that you'd be issuing a
> challenge to a mail that may yet bounce before reaching a real inbox
> (e.g. bounces from the MDA).

You're right on both accounts.  Guess I'll just have to limit it
to bounces.

> If the policy daemon runs as
> root, that could be a sore spot. 

You can specify who the daeman runs as in the master.cf file.
I would specify that it run as either mail or ofmip.  Also, it will
require that ALLOW_MODE_640 is True.

I *think* this can be safely done w/out the Rube Goldberg - but
I'm willing to be shown the error of my ways.