Restricting Logins

[BillLeeLee]

Afternoon all,

So I am setting up a web server (VPS) and am in the process of setting up Postfix. I'm following a guide since I have never set up a mail server, and I get hung up at adding a Postfix user to hold mail until users retrieve them. The guide (from my host) recommends not giving the user login privileges, so I was wondering what the best way to go about doing this was?

One way I know of is to basically give the user some fake shell that doesn't exist in /etc/shells, but is there any better method that is possibly more secure?

Thanks!

 

[Bullitt]

set the postfix user to use shell "/bin/false"

 

[Xipher]

Also, set the passwd field in /etc/shadow to * or !, these are both invalid values, meaning no matter what any one types in, it will always fail.