Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

For a while now I've been getting logwatch reports that indicate bots/scripts are trying to login with POP3 on my server. However I have not set this up, and am not using it as far as I'm aware (using Gmail MX).

Is it save to stop running the courier-service, or are other services (perhaps postfix, logwatch or sendmail) dependend on this?

share|improve this question

1 Answer 1

If you are not using a service like courier-pop or any other service, it will be always a good idea to disable it especially for publicly-accessible machines. This provides more security (less running services/opened ports) and less resources usage.

share|improve this answer
    
Indeed, I was thinking the same. I do know non the domains on the server have MX records configured to this server (they do elsewhere). Can I safely disable courier-pop in that case? Or might sendmail or PHP be relient on this for some reason? –  Björn Aug 13 '12 at 9:52
    
@Björn: sendmail is related to SMTP and it is not related to POP. If you are not using this machine for accessing your email inbox, then you can safely disable it. –  Khaled Aug 13 '12 at 11:21
    
Okay thanks, great to hear I don't need it :) –  Björn Aug 13 '12 at 11:43
    
You need local mail delivery - just disabling Courier compromises the functionality / security your system - you need to replace it with a local MDA such as deliver / procmail –  symcbean Aug 13 '12 at 12:43
    
@symcbean: Hmm okay.. so it's a bit more complicated.. when Googling I found this: bloovis.com/wordpress/?p=176 is that a good replacement? –  Björn Aug 13 '12 at 13:58

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.