best way to create pop only accounts

[Pedro Zorzenon Neto <pzn@terra.com.br>]

Hi,

   Which is the best way to create a POP only account? just change the
last field in /etc/passwd to /bin/false?

   I want that the user will not be able to do anything on the machine
but retriving mail.

   I will enable APOP in qpopper or use some ssl wrapper for POP3, will
disable the plain password POP3.

   If I use APOP, then it uses /etc/pop.auth. I could then put "*" in
the password field in /etc/shadow as it will never match any password.

   What do you think about this?

    Thanks,
     Pedro