Is there a way to disallow changing forwards in mailuser login either in general or for instance for a web? Background: I have a client who forwards mail for most employees to a central mailbox (in addition to his own). So, in case he is ill, on vacation or unavailable another employee can take care of it. They want their employees not to be able to change forwarding to that central mailbox. Any ideas? As I understand, forwarding is not done via aliases but in .forward. The first solution that comes to mind is write-protecting the file or changing the owner (at least the latter may create problems with procmail?). Not ideal in anyway I think. Can I tell postfix to forward all mail for a domain in addition to the normal destination to some mailbox? (a transport would just forward all domain mail and not deliver to the normal mailboxes as well, I think this cannot be tweaked, right?) Thanks for any better ideas.