Milter-greylist

Hi,

I installed milter_greylist 1.6 on my fc3 linux
system,  It looks running well.  My question is:
should I run it as root or as smmsp?  Currently, I run
it as root. I tried to run it as smmsp, but it seems
that it does not do anything.  

What should I do if I want to run it as smmsp in
addition to uncomment the line 
#user "smmsp"
in the config file greylist.conf?  
What are the advantages and disadvantages of running
it as smmsp or as root?

Thanks!

Harvey


		
__________________________________ 
Do you Yahoo!? 
Yahoo! Mail - 250MB free storage. Do more. Manage less. 
http://info.mail.yahoo.com/mail_250

On Fri, Feb 04, 2005 at 08:00:12AM -0800, H Li wrote:
> I installed milter_greylist 1.6 on my fc3 linux
> system,  It looks running well.  My question is:
> should I run it as root or as smmsp?  Currently, I run
> it as root. I tried to run it as smmsp, but it seems
> that it does not do anything.  

It's because it can't write anymore to the dump file, which is
owned by root because you already ran milter-greylist as root.

> What should I do if I want to run it as smmsp in
> addition to uncomment the line 
> #user "smmsp"
> in the config file greylist.conf?  
> What are the advantages and disadvantages of running
> it as smmsp or as root?

Running as non root is better on the security front if a
security hole is discovered in milter-greylist.

-- 
Emmanuel Dreyfus
manu@...

--- Emmanuel Dreyfus <manu@...> wrote:

> On Fri, Feb 04, 2005 at 08:00:12AM -0800, H Li
> wrote:
> > I installed milter_greylist 1.6 on my fc3 linux
> > system,  It looks running well.  My question is:
> > should I run it as root or as smmsp?  Currently, I
> run
> > it as root. I tried to run it as smmsp, but it
> seems
> > that it does not do anything.  
> 
> It's because it can't write anymore to the dump
> file, which is
> owned by root because you already ran
> milter-greylist as root.
> 
> > What should I do if I want to run it as smmsp in
> > addition to uncomment the line 
> > #user "smmsp"
> > in the config file greylist.conf?  

Then, can I just change the ownershihp of greylist.db
to smmsp to run it as smmsp?  Do I need to change the
ownership of milter-greylist.sock?  or should I stop
it first, delete the db and sock files, then start it?

Thanks!

Harvey

__________________________________________________
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com

On Fri, 4 Feb 2005 08:32:12 -0800 (PST), H Li <hvli@...> wrote:

>Then, can I just change the ownershihp of greylist.db
>to smmsp to run it as smmsp?  Do I need to change the
>ownership of milter-greylist.sock?  or should I stop
>it first, delete the db and sock files, then start it?

Stop it, then change ownership of the files.  Don't delete anything.  Make
sure that you check /etc/init.d/milter-greylist before restarting, as the
commands there may override what's in greylist.conf.
-- 
  Steve