*BSD News Article 77562


Return to BSD News archive

Path: euryale.cc.adfa.oz.au!newshost.carno.net.au!harbinger.cc.monash.edu.au!news.rmit.EDU.AU!news.unimelb.EDU.AU!munnari.OZ.AU!news.mel.connect.com.au!news.mel.aone.net.au!imci4!newsfeed.internetmci.com!in3.uu.net!van-bc!unixg.ubc.ca!umelba.Triumf.CA!felawka
From: felawka@umelba.Triumf.CA (L. Felawka)
Newsgroups: comp.unix.bsd.freebsd.misc
Subject: Re: Email only
Date: 4 Sep 1996 19:15:49 GMT
Organization: TRIUMF
Lines: 29
Distribution: world
Message-ID: <50kkh5$klc@nntp.ucs.ubc.ca>
References: <50j0d4$lia@Nntp1.mcs.net>
NNTP-Posting-Host: umelba.triumf.ca

In article <50j0d4$lia@Nntp1.mcs.net> vchiu@xnet.com writes:
>Does anyone know how to let the users be able to have nothing but email 
>capability without other internet services such as WWW, Telnet, FTP? I know I 
>can make a "false" login shell but this still allow users to access WWW.
>
>Any idea?
>
>
>Vincent


The easiest thing to do is to let the user's login "shell" be a mail
program of your choice (the user, of course, will have no choice).
The user may still be able, however, (depending on the mail program)
to access other parts of the system (via an editor, for example).

The most secure way is roll your own login "shell" (which could be a
shell script) which does a "chroot" command and restricts access to
only that part of a file system that you specify.  This is a bit
tedious to set up, however, since you have to make copies of all
needed files such as the mail program, "sendmail", mailbox for
incoming mail, spooling areas and on and on ...

Another more modest method would be to set up a bbs program (most of them
set up mail access for you).  There are even decent free bbs programs
(the name "eagles" comes to mind) which will set up "chroot" areas for you.

_____
Larry