Would it be possible to have an option to turn off SquirrelMail and/or mailboxes.yourdomain.com in the admin panel? The same goes for phpmyAdmin on the mysql hostname, too. I know these are great and I know many folks appreciate them, I'm just thinking about the security conscious; is there a way to disable them?
Also, is it possible with SquirrelMail to track incorrect login attempts somehow? Or maybe restrict logins to specific IP addresses (I think there is a plugin for this?).
If there is no easy way to do this, I guess I can tweak with the MX/DNS records to switch these features off?