Re: ipchains or iptables either way

2001-02-14 Thread Frank Kyper
Hi,
I'd say use the ipmasq package, then disable the masqing portion of 
it.  The rules take a little while to figure out, but once you do they're 
pretty easy to muck around with.

You could configure DNS to run on a certain interface (or IP) if you are 
using BIND 8.  I don't know about other DNS programs, but this should be 
basic functionality.  You could restrict the other services through 
ipchains - creating the rules in the /etc/ipmasq/rules directory.

With Apache, you can specify which IP addresses it listens to (and then set 
up virtual hosting on different IPs if you need to).  For IPs etc for the 
sub-interfaces, they can be configured through /etc/network/interfaces.

Hope this helps you our some.
- Frank
At 04:54 PM 2/14/2001, you wrote:
Can I do the following and is there a nice script to generate the firewall
rules for it?
for interface eth0: assign ip and run dns service on it only.
disallow all else accept ssh from particular source.
for eth0:1 ... n:
assigne separate ip and run httpd, and afew others on it.
basically rules for eth0:1 .. n are not the same as for eth0
or more generally be able to create and manage rules for each
sub-interface.
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: ipchains or iptables either way

2001-02-14 Thread Frank Kyper

Hi,

I'd say use the ipmasq package, then disable the masqing portion of 
it.  The rules take a little while to figure out, but once you do they're 
pretty easy to muck around with.

You could configure DNS to run on a certain interface (or IP) if you are 
using BIND 8.  I don't know about other DNS programs, but this should be 
basic functionality.  You could restrict the other services through 
ipchains - creating the rules in the /etc/ipmasq/rules directory.

With Apache, you can specify which IP addresses it listens to (and then set 
up virtual hosting on different IPs if you need to).  For IPs etc for the 
sub-interfaces, they can be configured through /etc/network/interfaces.

Hope this helps you our some.
- Frank

At 04:54 PM 2/14/2001, you wrote:
>Can I do the following and is there a nice script to generate the firewall
>rules for it?
>
>for interface eth0: assign ip and run dns service on it only.
> disallow all else accept ssh from particular source.
>for eth0:1 ... n:
> assigne separate ip and run httpd, and afew others on it.
>basically rules for eth0:1 .. n are not the same as for eth0
>or more generally be able to create and manage rules for each
>sub-interface.
>
>
>--
>To UNSUBSCRIBE, email to [EMAIL PROTECTED]
>with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]


--  
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




ipchains or iptables either way

2001-02-14 Thread Allen Ahoffman
Can I do the following and is there a nice script to generate the firewall
rules for it?

for interface eth0: assign ip and run dns service on it only.
disallow all else accept ssh from particular source.
for eth0:1 ... n:
assigne separate ip and run httpd, and afew others on it.
basically rules for eth0:1 .. n are not the same as for eth0
or more generally be able to create and manage rules for each
sub-interface.




ipchains or iptables either way

2001-02-14 Thread Allen Ahoffman

Can I do the following and is there a nice script to generate the firewall
rules for it?

for interface eth0: assign ip and run dns service on it only.
disallow all else accept ssh from particular source.
for eth0:1 ... n:
assigne separate ip and run httpd, and afew others on it.
basically rules for eth0:1 .. n are not the same as for eth0
or more generally be able to create and manage rules for each
sub-interface.


--  
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Re: pop3 and Maildir

2001-02-14 Thread Roger Abrahamsson

-Original Message-
From: Felipe Alvarez Harnecker <[EMAIL PROTECTED]>
To: Roger Abrahamsson <[EMAIL PROTECTED]>
Cc: debian-isp@lists.debian.org 
Date: den 14 februari 2001 15:51
Subject: Re: pop3 and Maildir


Well, the pam authentication only allows for cleartext
or mysqls password() format, and also it dont allow for
telling the server where to find the mailbox and what uid/gid to use.
I've tried it, and basically it dont fill the needs I have, it would need to
fill the 'account' role also.

Regards
Roger A
>
>What about cyrus* ? I'm using it and very happy.
>
>It has pam support so mysql auth would be no prob.
>
>Cheers.
>
>F.
>
>Roger Abrahamsson writes:
> > On Tue, 13 Feb 2001, Christofer Algotsson wrote:
> >
> > Well, all I've seen is that the qmail system seems to be an integrated
> > package. We here are also looking into switching to maildirs, and
> > courier-imap seems very nice, especially with mysql authentication.
Latest
> > upstream courier-imap also have a pop3 server with it, but sofar I have
> > not succeded in getting mysql support compiled in. If anyone has
knowledge
> > of how to get this working on a debian system I would be very happy.
> >
> > I've tried solid-pop3d in the unstable branch, but it seems to scale
very
> > poorly, with about 10.000 user accounts it gets horribly slow.
> >
> >
> > Regards
> > Roger Abrahamsson
> >
> > >
> > > qmail's pop-3 daemon for example.
> > >
> > >
> > > On Tue, Feb 13, 2001 at 09:18:17AM +1000, Mitchell wrote:
> > > >
> > > > Hi, I was wundering if anyone knows of any pop3 daemons for Debian
that
> > > > support the Maildir format.  We are currently using exim as our MTA
with
> > > > courier-imap for access to the mailboxes.  I have as yet been unable
to
> > > > find a courier-pop3d package for Debian, and it would seam that this
is
> > > > only available as part of the entire courier MTA package which
provides
> > > > imap, MTA, mailing lists, and such.
> > > >
> > > > vpopmail is also not an option as it depends on qmail and appears to
> > > > have it's own proprietry CDB format for storing usernames and
passwords.
> > > >
> > > > exim currently is just authenticating users from the /etc/passwd
> > > > /etc/shadow files, and we are looking in to switching to mysql
> > > > authentication here.
> > > >
> > > > pop3-lite shows promis as it's nice and modularised, but I can not
yet
> > > > find a plugin to allow it to read for Maildir.
> > > >
> > > >
> > > > Any  hints here would be muchly appreciated.
> > > >
> > > > I am not against the idea of building deb packages from sorce if
there
> > > > isn't currently anything pre-packaged that will do the job.
> > >
> > > --
> > >
> > > Christofer,
> > >
> > >
> > > --
> > > To UNSUBSCRIBE, email to [EMAIL PROTECTED]
> > > with a subject of "unsubscribe". Trouble? Contact
[EMAIL PROTECTED]
> > >
> > >
> >
> > -
> > Roger Abrahamsson, Sys/Net Admin, Obbit AB
> > Radhusespl.17D, S-90328 Umea, Sweden
> > -
> >
> >
> > --
> > To UNSUBSCRIBE, email to [EMAIL PROTECTED]
> > with a subject of "unsubscribe". Trouble? Contact
[EMAIL PROTECTED]
> >
> >
>




Re: pop3 and Maildir

2001-02-14 Thread Felipe Alvarez Harnecker

What about cyrus* ? I'm using it and very happy.

It has pam support so mysql auth would be no prob.

Cheers.

F.

Roger Abrahamsson writes:
 > On Tue, 13 Feb 2001, Christofer Algotsson wrote:
 > 
 > Well, all I've seen is that the qmail system seems to be an integrated
 > package. We here are also looking into switching to maildirs, and
 > courier-imap seems very nice, especially with mysql authentication. Latest
 > upstream courier-imap also have a pop3 server with it, but sofar I have
 > not succeded in getting mysql support compiled in. If anyone has knowledge
 > of how to get this working on a debian system I would be very happy.
 > 
 > I've tried solid-pop3d in the unstable branch, but it seems to scale very
 > poorly, with about 10.000 user accounts it gets horribly slow.
 > 
 > 
 > Regards
 > Roger Abrahamsson
 > 
 > > 
 > > qmail's pop-3 daemon for example.
 > > 
 > > 
 > > On Tue, Feb 13, 2001 at 09:18:17AM +1000, Mitchell wrote:
 > > > 
 > > > Hi, I was wundering if anyone knows of any pop3 daemons for Debian that
 > > > support the Maildir format.  We are currently using exim as our MTA with
 > > > courier-imap for access to the mailboxes.  I have as yet been unable to
 > > > find a courier-pop3d package for Debian, and it would seam that this is
 > > > only available as part of the entire courier MTA package which provides
 > > > imap, MTA, mailing lists, and such. 
 > > > 
 > > > vpopmail is also not an option as it depends on qmail and appears to
 > > > have it's own proprietry CDB format for storing usernames and passwords. 
 > > > 
 > > > exim currently is just authenticating users from the /etc/passwd
 > > > /etc/shadow files, and we are looking in to switching to mysql
 > > > authentication here. 
 > > > 
 > > > pop3-lite shows promis as it's nice and modularised, but I can not yet
 > > > find a plugin to allow it to read for Maildir. 
 > > > 
 > > > 
 > > > Any  hints here would be muchly appreciated. 
 > > > 
 > > > I am not against the idea of building deb packages from sorce if there
 > > > isn't currently anything pre-packaged that will do the job. 
 > > 
 > > -- 
 > > 
 > > Christofer,
 > > 
 > > 
 > > --  
 > > To UNSUBSCRIBE, email to [EMAIL PROTECTED]
 > > with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
 > > 
 > > 
 > 
 > -
 > Roger Abrahamsson, Sys/Net Admin, Obbit AB
 > Radhusespl.17D, S-90328 Umea, Sweden
 > -
 > 
 > 
 > --  
 > To UNSUBSCRIBE, email to [EMAIL PROTECTED]
 > with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
 > 
 > 




Re: To compile cyrus under debian

2001-02-14 Thread Eric LeBlanc
On 13 Feb 2001, at 18:43, Pascal Pucci wrote:

> Hello,
> 
[snip]
> What should I install ?
> 
> Where is this DES library debian package/sources ?

apt-get install cyrus ?



Eric LeBlanc
E-Mail:[EMAIL PROTECTED]
ICQ 50571872
   
  "Well, let's just say, 'if your VCR is still blinking 12:00, you don't
   want Linux'".
--- Bruce Perens, Debian's Fearless Leader





Re: pop3 and Maildir

2001-02-14 Thread Roger Abrahamsson
On Tue, 13 Feb 2001, Christofer Algotsson wrote:

Well, all I've seen is that the qmail system seems to be an integrated
package. We here are also looking into switching to maildirs, and
courier-imap seems very nice, especially with mysql authentication. Latest
upstream courier-imap also have a pop3 server with it, but sofar I have
not succeded in getting mysql support compiled in. If anyone has knowledge
of how to get this working on a debian system I would be very happy.

I've tried solid-pop3d in the unstable branch, but it seems to scale very
poorly, with about 10.000 user accounts it gets horribly slow.


Regards
Roger Abrahamsson

> 
> qmail's pop-3 daemon for example.
> 
> 
> On Tue, Feb 13, 2001 at 09:18:17AM +1000, Mitchell wrote:
> > 
> > Hi, I was wundering if anyone knows of any pop3 daemons for Debian that
> > support the Maildir format.  We are currently using exim as our MTA with
> > courier-imap for access to the mailboxes.  I have as yet been unable to
> > find a courier-pop3d package for Debian, and it would seam that this is
> > only available as part of the entire courier MTA package which provides
> > imap, MTA, mailing lists, and such. 
> > 
> > vpopmail is also not an option as it depends on qmail and appears to
> > have it's own proprietry CDB format for storing usernames and passwords. 
> > 
> > exim currently is just authenticating users from the /etc/passwd
> > /etc/shadow files, and we are looking in to switching to mysql
> > authentication here. 
> > 
> > pop3-lite shows promis as it's nice and modularised, but I can not yet
> > find a plugin to allow it to read for Maildir. 
> > 
> > 
> > Any  hints here would be muchly appreciated. 
> > 
> > I am not against the idea of building deb packages from sorce if there
> > isn't currently anything pre-packaged that will do the job. 
> 
> -- 
> 
> Christofer,
> 
> 
> --  
> To UNSUBSCRIBE, email to [EMAIL PROTECTED]
> with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
> 
> 

-
Roger Abrahamsson, Sys/Net Admin, Obbit AB
Radhusespl.17D, S-90328 Umea, Sweden
-




Re: pop3 and Maildir

2001-02-14 Thread Roger Abrahamsson


-Original Message-
From: Felipe Alvarez Harnecker <[EMAIL PROTECTED]>
To: Roger Abrahamsson <[EMAIL PROTECTED]>
Cc: [EMAIL PROTECTED] <[EMAIL PROTECTED]>
Date: den 14 februari 2001 15:51
Subject: Re: pop3 and Maildir


Well, the pam authentication only allows for cleartext
or mysqls password() format, and also it dont allow for
telling the server where to find the mailbox and what uid/gid to use.
I've tried it, and basically it dont fill the needs I have, it would need to
fill the 'account' role also.

Regards
Roger A
>
>What about cyrus* ? I'm using it and very happy.
>
>It has pam support so mysql auth would be no prob.
>
>Cheers.
>
>F.
>
>Roger Abrahamsson writes:
> > On Tue, 13 Feb 2001, Christofer Algotsson wrote:
> >
> > Well, all I've seen is that the qmail system seems to be an integrated
> > package. We here are also looking into switching to maildirs, and
> > courier-imap seems very nice, especially with mysql authentication.
Latest
> > upstream courier-imap also have a pop3 server with it, but sofar I have
> > not succeded in getting mysql support compiled in. If anyone has
knowledge
> > of how to get this working on a debian system I would be very happy.
> >
> > I've tried solid-pop3d in the unstable branch, but it seems to scale
very
> > poorly, with about 10.000 user accounts it gets horribly slow.
> >
> >
> > Regards
> > Roger Abrahamsson
> >
> > >
> > > qmail's pop-3 daemon for example.
> > >
> > >
> > > On Tue, Feb 13, 2001 at 09:18:17AM +1000, Mitchell wrote:
> > > >
> > > > Hi, I was wundering if anyone knows of any pop3 daemons for Debian
that
> > > > support the Maildir format.  We are currently using exim as our MTA
with
> > > > courier-imap for access to the mailboxes.  I have as yet been unable
to
> > > > find a courier-pop3d package for Debian, and it would seam that this
is
> > > > only available as part of the entire courier MTA package which
provides
> > > > imap, MTA, mailing lists, and such.
> > > >
> > > > vpopmail is also not an option as it depends on qmail and appears to
> > > > have it's own proprietry CDB format for storing usernames and
passwords.
> > > >
> > > > exim currently is just authenticating users from the /etc/passwd
> > > > /etc/shadow files, and we are looking in to switching to mysql
> > > > authentication here.
> > > >
> > > > pop3-lite shows promis as it's nice and modularised, but I can not
yet
> > > > find a plugin to allow it to read for Maildir.
> > > >
> > > >
> > > > Any  hints here would be muchly appreciated.
> > > >
> > > > I am not against the idea of building deb packages from sorce if
there
> > > > isn't currently anything pre-packaged that will do the job.
> > >
> > > --
> > >
> > > Christofer,
> > >
> > >
> > > --
> > > To UNSUBSCRIBE, email to [EMAIL PROTECTED]
> > > with a subject of "unsubscribe". Trouble? Contact
[EMAIL PROTECTED]
> > >
> > >
> >
> > -
> > Roger Abrahamsson, Sys/Net Admin, Obbit AB
> > Radhusespl.17D, S-90328 Umea, Sweden
> > -
> >
> >
> > --
> > To UNSUBSCRIBE, email to [EMAIL PROTECTED]
> > with a subject of "unsubscribe". Trouble? Contact
[EMAIL PROTECTED]
> >
> >
>


--  
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Re: pop3 and Maildir

2001-02-14 Thread Felipe Alvarez Harnecker


What about cyrus* ? I'm using it and very happy.

It has pam support so mysql auth would be no prob.

Cheers.

F.

Roger Abrahamsson writes:
 > On Tue, 13 Feb 2001, Christofer Algotsson wrote:
 > 
 > Well, all I've seen is that the qmail system seems to be an integrated
 > package. We here are also looking into switching to maildirs, and
 > courier-imap seems very nice, especially with mysql authentication. Latest
 > upstream courier-imap also have a pop3 server with it, but sofar I have
 > not succeded in getting mysql support compiled in. If anyone has knowledge
 > of how to get this working on a debian system I would be very happy.
 > 
 > I've tried solid-pop3d in the unstable branch, but it seems to scale very
 > poorly, with about 10.000 user accounts it gets horribly slow.
 > 
 > 
 > Regards
 > Roger Abrahamsson
 > 
 > > 
 > > qmail's pop-3 daemon for example.
 > > 
 > > 
 > > On Tue, Feb 13, 2001 at 09:18:17AM +1000, Mitchell wrote:
 > > > 
 > > > Hi, I was wundering if anyone knows of any pop3 daemons for Debian that
 > > > support the Maildir format.  We are currently using exim as our MTA with
 > > > courier-imap for access to the mailboxes.  I have as yet been unable to
 > > > find a courier-pop3d package for Debian, and it would seam that this is
 > > > only available as part of the entire courier MTA package which provides
 > > > imap, MTA, mailing lists, and such. 
 > > > 
 > > > vpopmail is also not an option as it depends on qmail and appears to
 > > > have it's own proprietry CDB format for storing usernames and passwords. 
 > > > 
 > > > exim currently is just authenticating users from the /etc/passwd
 > > > /etc/shadow files, and we are looking in to switching to mysql
 > > > authentication here. 
 > > > 
 > > > pop3-lite shows promis as it's nice and modularised, but I can not yet
 > > > find a plugin to allow it to read for Maildir. 
 > > > 
 > > > 
 > > > Any  hints here would be muchly appreciated. 
 > > > 
 > > > I am not against the idea of building deb packages from sorce if there
 > > > isn't currently anything pre-packaged that will do the job. 
 > > 
 > > -- 
 > > 
 > > Christofer,
 > > 
 > > 
 > > --  
 > > To UNSUBSCRIBE, email to [EMAIL PROTECTED]
 > > with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
 > > 
 > > 
 > 
 > -
 > Roger Abrahamsson, Sys/Net Admin, Obbit AB
 > Radhusespl.17D, S-90328 Umea, Sweden
 > -
 > 
 > 
 > --  
 > To UNSUBSCRIBE, email to [EMAIL PROTECTED]
 > with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
 > 
 > 


--  
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Re: To compile cyrus under debian

2001-02-14 Thread Eric LeBlanc

On 13 Feb 2001, at 18:43, Pascal Pucci wrote:

> Hello,
> 
[snip]
> What should I install ?
> 
> Where is this DES library debian package/sources ?

apt-get install cyrus ?



Eric LeBlanc
E-Mail:[EMAIL PROTECTED]
ICQ 50571872
   
  "Well, let's just say, 'if your VCR is still blinking 12:00, you don't
   want Linux'".
--- Bruce Perens, Debian's Fearless Leader



--  
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Re: pop3 and Maildir

2001-02-14 Thread Roger Abrahamsson

On Tue, 13 Feb 2001, Christofer Algotsson wrote:

Well, all I've seen is that the qmail system seems to be an integrated
package. We here are also looking into switching to maildirs, and
courier-imap seems very nice, especially with mysql authentication. Latest
upstream courier-imap also have a pop3 server with it, but sofar I have
not succeded in getting mysql support compiled in. If anyone has knowledge
of how to get this working on a debian system I would be very happy.

I've tried solid-pop3d in the unstable branch, but it seems to scale very
poorly, with about 10.000 user accounts it gets horribly slow.


Regards
Roger Abrahamsson

> 
> qmail's pop-3 daemon for example.
> 
> 
> On Tue, Feb 13, 2001 at 09:18:17AM +1000, Mitchell wrote:
> > 
> > Hi, I was wundering if anyone knows of any pop3 daemons for Debian that
> > support the Maildir format.  We are currently using exim as our MTA with
> > courier-imap for access to the mailboxes.  I have as yet been unable to
> > find a courier-pop3d package for Debian, and it would seam that this is
> > only available as part of the entire courier MTA package which provides
> > imap, MTA, mailing lists, and such. 
> > 
> > vpopmail is also not an option as it depends on qmail and appears to
> > have it's own proprietry CDB format for storing usernames and passwords. 
> > 
> > exim currently is just authenticating users from the /etc/passwd
> > /etc/shadow files, and we are looking in to switching to mysql
> > authentication here. 
> > 
> > pop3-lite shows promis as it's nice and modularised, but I can not yet
> > find a plugin to allow it to read for Maildir. 
> > 
> > 
> > Any  hints here would be muchly appreciated. 
> > 
> > I am not against the idea of building deb packages from sorce if there
> > isn't currently anything pre-packaged that will do the job. 
> 
> -- 
> 
> Christofer,
> 
> 
> --  
> To UNSUBSCRIBE, email to [EMAIL PROTECTED]
> with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
> 
> 

-
Roger Abrahamsson, Sys/Net Admin, Obbit AB
Radhusespl.17D, S-90328 Umea, Sweden
-


--  
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Re: linking devices

2001-02-14 Thread Russell Coker
On Tuesday 13 February 2001 12:02, Kozman Balint wrote:
> is there any way to link two (or more) block devices (ex: two hard disks)
> into one logical block device? I need this to be able to copy a file of
> 70Gb to a machine which has two disks of 40 Gb.

RAID-0 is quite solid and stable.  LVM is still very experimental and there 
are numerous issues if you want to try to upgrade your kernel.

Use RAID-0 instead of LVM if all you want is a large partition.

-- 
http://www.coker.com.au/bonnie++/ Bonnie++ hard drive benchmark
http://www.coker.com.au/postal/   Postal SMTP/POP benchmark
http://www.coker.com.au/projects.html Projects I am working on
http://www.coker.com.au/~russell/ My home page




Re: linking devices

2001-02-14 Thread Russell Coker

On Tuesday 13 February 2001 12:02, Kozman Balint wrote:
> is there any way to link two (or more) block devices (ex: two hard disks)
> into one logical block device? I need this to be able to copy a file of
> 70Gb to a machine which has two disks of 40 Gb.

RAID-0 is quite solid and stable.  LVM is still very experimental and there 
are numerous issues if you want to try to upgrade your kernel.

Use RAID-0 instead of LVM if all you want is a large partition.

-- 
http://www.coker.com.au/bonnie++/ Bonnie++ hard drive benchmark
http://www.coker.com.au/postal/   Postal SMTP/POP benchmark
http://www.coker.com.au/projects.html Projects I am working on
http://www.coker.com.au/~russell/ My home page


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]