Re: POP3 and SMTP server for an ISP

2001-02-15 Thread Litzler Mihály
>Just to help you evaluate, I am using Jeremy's gnu-pop3d patch since last
>year, and it works very, very well.  It was easy to use and setup, 15
>mins, with exim.
Oh, is it a patch under GPL? Could I download it?

>I add and remove users manually, since the changes arent much (group
>companies).  I handle password requests manually, too.

I'm afraid that is not the best idea to manage thousands of users by hand
for me. Writing couple of scripts would be a must.

>Is this POP over SSL/SSH?
By the way, does gnupop3d supports secure pop?

Thank you,
Mihaly Litzler






Re: POP3 and SMTP server for an ISP

2001-02-15 Thread Sanjeev Gupta
On Thu, 15 Feb 2001, Jeremy C. Reed wrote:

> I use a heavily patched gnu-pop3d to support the separate passwd files and
> mailbox locations. It works by IP (one IP per domain name) or by appending

Just to help you evaluate, I am using Jeremy's gnu-pop3d patch since last
year, and it works very, very well.  It was easy to use and setup, 15
mins, with exim.

> All, I need now is to make a simple management interface (web and
> console) to add, remove, edit users (and their aliases).

I add and remove users manually, since the changes arent much (group
companies).  I handle password requests manually, too.

> (My next step is to force the use of a secure POP3 for my users.)

Is this POP over SSL/SSH?

Jeremy, thanks.

--
Sanjeev "ghane" GuptaMob: +65 98551208
dotXtra Pte Ltd  Fax: +65 2275776
Singaporeemail: [EMAIL PROTECTED]
~~




Re: POP3 and SMTP server for an ISP

2001-02-15 Thread Litzler Mihály



Hi,Thanks for your quick answer. It sounds so 
interesting.>I don't use MySQL. I use exim as my smtp. All my users 
are not real unixMay I ask you how many users do you have, and have do 
you allow your usersto change their passwords? I'm wondering how do you 
handle so many users(expiration, adding/deleting users or domains and so on) 
with passwordfiles. Actually I need MySQL because of the billing system, 
that's possibleI'd also have to create scripts if  I  use 
different password files. Tellyou the truth I'd use MySQL because the web 
management also.>I use a heavily patched gnu-pop3d to support the 
separate passwd files and>mailbox locations. It works by IP (one IP per 
domain name) or by appending>the domain name to the POP3 USER 
name.Okey, what do you think about the security of 
exim?Thanks,Mihaly Litzler


Re: POP3 and SMTP server for an ISP

2001-02-15 Thread Jeremy C. Reed
On Fri, 16 Feb 2001, [iso-8859-2] Litzler Mihály wrote:

> Would anybody so kind to give me advises about creating a mail system
> (pop3+smtp) hopefully based on MySQL?
> I'd so graceful if you only say something about your mailing system (if you
> have 4-5000 users), that's no problem if you have no MySQL.

I don't use MySQL. I use exim as my smtp. All my users are not real unix
users -- they are not in the /etc/passwd file. I have separate passwd
files and aliases files for each realm (domain). (A user doesn't need to
be in an aliases file to work.) The mailboxes are delivered to
separate directories for each realm. (I can have numerous users with the
same name.) Exim works good for this.

I use a heavily patched gnu-pop3d to support the separate passwd files and
mailbox locations. It works by IP (one IP per domain name) or by appending
the domain name to the POP3 USER name.

All, I need now is to make a simple management interface (web and
console) to add, remove, edit users (and their aliases).

(My next step is to force the use of a secure POP3 for my users.)

  Jeremy C. Reed
  http://www.reedmedia.net/
  http://bsd.reedmedia.net/  -- BSD news and resources
  http://www.isp-faq.com/-- find answers to your questions




POP3 and SMTP server for an ISP

2001-02-15 Thread Litzler Mihály
Hi,

I'm just started a great project of changing my mailing system due to some
security and managing reasons.

Right now I use exim+cucipop and my users added to /etc/passwd with shell
/bin/false. Exim has been configured for supporting virtual domains and
what's more it only delivers any message, if an alias is added to the user
(so adding a user simply makes no affect).
First I planned to keep on using exim with expanding the managing funtctions
by integrating MySQL, but because of some security reasons I give it up.

So by now I'm thinking about the installation of qmail+MySQL. The usage of
MySQL would extremly important for me, actually I tried to find an MTA
supporting MySQL.

Would anybody so kind to give me advises about creating a mail system
(pop3+smtp) hopefully based on MySQL?
I'd so graceful if you only say something about your mailing system (if you
have 4-5000 users), that's no problem if you have no MySQL.

Thanks,

Mihaly Litzler




Re: POP3 and SMTP server for an ISP

2001-02-15 Thread Litzler Mihály

>Just to help you evaluate, I am using Jeremy's gnu-pop3d patch since last
>year, and it works very, very well.  It was easy to use and setup, 15
>mins, with exim.
Oh, is it a patch under GPL? Could I download it?

>I add and remove users manually, since the changes arent much (group
>companies).  I handle password requests manually, too.

I'm afraid that is not the best idea to manage thousands of users by hand
for me. Writing couple of scripts would be a must.

>Is this POP over SSL/SSH?
By the way, does gnupop3d supports secure pop?

Thank you,
Mihaly Litzler




--  
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Re: POP3 and SMTP server for an ISP

2001-02-15 Thread Sanjeev Gupta

On Thu, 15 Feb 2001, Jeremy C. Reed wrote:

> I use a heavily patched gnu-pop3d to support the separate passwd files and
> mailbox locations. It works by IP (one IP per domain name) or by appending

Just to help you evaluate, I am using Jeremy's gnu-pop3d patch since last
year, and it works very, very well.  It was easy to use and setup, 15
mins, with exim.

> All, I need now is to make a simple management interface (web and
> console) to add, remove, edit users (and their aliases).

I add and remove users manually, since the changes arent much (group
companies).  I handle password requests manually, too.

> (My next step is to force the use of a secure POP3 for my users.)

Is this POP over SSL/SSH?

Jeremy, thanks.

--
Sanjeev "ghane" GuptaMob: +65 98551208
dotXtra Pte Ltd  Fax: +65 2275776
Singaporeemail: [EMAIL PROTECTED]
~~


--  
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Re: POP3 and SMTP server for an ISP

2001-02-15 Thread Litzler Mihály



Hi,Thanks for your quick answer. It sounds so 
interesting.>I don't use MySQL. I use exim as my smtp. All my users 
are not real unixMay I ask you how many users do you have, and have do 
you allow your usersto change their passwords? I'm wondering how do you 
handle so many users(expiration, adding/deleting users or domains and so on) 
with passwordfiles. Actually I need MySQL because of the billing system, 
that's possibleI'd also have to create scripts if  I  use 
different password files. Tellyou the truth I'd use MySQL because the web 
management also.>I use a heavily patched gnu-pop3d to support the 
separate passwd files and>mailbox locations. It works by IP (one IP per 
domain name) or by appending>the domain name to the POP3 USER 
name.Okey, what do you think about the security of 
exim?Thanks,Mihaly Litzler


Re: lpd with libwrap (or tcp wrappers)

2001-02-15 Thread Tamas TEVESZ
On Thu, 15 Feb 2001, Jeremy C. Reed wrote:

 > But is this the Debian way? What will happen when I upgrade lpr package?

i'd be more than very surprised if any automatic script would modify
any conf file i write or modify. then again, you never know what those
scripts will do, but they strongly shouldn't.

 >  Feb 15 15:36:50 pilchuck lpd[9780]: bind: Address already in use
 >  Feb 15 15:36:50 pilchuck lpd[9780]: exiting

now actually looking at lpd:), it doesn't seem to support being run
from inetd. you have several ways to go, though. first, trust it's own
builtin access control (lpd.perms or something); (possibly
additionally) put a packet filter in front of it; or you can add
libwrap support to lpd (it's not supposed to be hard); or the last
thing i can think of is to modify lpd in a way when it allows to be
run from inetd (that is, it takes its input from stdin, iirc)

having a very quick look at lpd.perms(5) i'd say its basically
equivalent (functionality-wise) to hosts.{allow,deny}, but also has
print service-specific options. i didn't find the equivalent option to
UKNOWN and PARANOID, though, but, as printing is supposed (imho) be a
`local' service, you have to maintain a consistent dns database and
you won't even need this.

-- 
[-]
So, you're a Ph.D. Just don't touch anything.




Re: POP3 and SMTP server for an ISP

2001-02-15 Thread Jeremy C. Reed

On Fri, 16 Feb 2001, [iso-8859-2] Litzler Mihály wrote:

> Would anybody so kind to give me advises about creating a mail system
> (pop3+smtp) hopefully based on MySQL?
> I'd so graceful if you only say something about your mailing system (if you
> have 4-5000 users), that's no problem if you have no MySQL.

I don't use MySQL. I use exim as my smtp. All my users are not real unix
users -- they are not in the /etc/passwd file. I have separate passwd
files and aliases files for each realm (domain). (A user doesn't need to
be in an aliases file to work.) The mailboxes are delivered to
separate directories for each realm. (I can have numerous users with the
same name.) Exim works good for this.

I use a heavily patched gnu-pop3d to support the separate passwd files and
mailbox locations. It works by IP (one IP per domain name) or by appending
the domain name to the POP3 USER name.

All, I need now is to make a simple management interface (web and
console) to add, remove, edit users (and their aliases).

(My next step is to force the use of a secure POP3 for my users.)

  Jeremy C. Reed
  http://www.reedmedia.net/
  http://bsd.reedmedia.net/  -- BSD news and resources
  http://www.isp-faq.com/-- find answers to your questions


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




POP3 and SMTP server for an ISP

2001-02-15 Thread Litzler Mihály

Hi,

I'm just started a great project of changing my mailing system due to some
security and managing reasons.

Right now I use exim+cucipop and my users added to /etc/passwd with shell
/bin/false. Exim has been configured for supporting virtual domains and
what's more it only delivers any message, if an alias is added to the user
(so adding a user simply makes no affect).
First I planned to keep on using exim with expanding the managing funtctions
by integrating MySQL, but because of some security reasons I give it up.

So by now I'm thinking about the installation of qmail+MySQL. The usage of
MySQL would extremly important for me, actually I tried to find an MTA
supporting MySQL.

Would anybody so kind to give me advises about creating a mail system
(pop3+smtp) hopefully based on MySQL?
I'd so graceful if you only say something about your mailing system (if you
have 4-5000 users), that's no problem if you have no MySQL.

Thanks,

Mihaly Litzler


--  
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Re: lpd with libwrap (or tcp wrappers)

2001-02-15 Thread Jeremy C. Reed
On Thu, 15 Feb 2001, Tamas TEVESZ wrote:

> On Thu, 15 Feb 2001, Jeremy C. Reed wrote:
> 
>  > Does anyone know of the a lpd debian package (or the correct Debian
>  > way) to use lpd with tcp_wrappers support (hosts_option(s5))?
> 
> you can just simply tell tcpd to run it, sg like
> 
> lpd stream tcp nowait root /usr/sbin/tcpd /usr/sbin/lpd args
> 
> tweak as needed.

But is this the Debian way? What will happen when I upgrade lpr package?

So I tweaked as needed (by changing service-name to printer and added
"-l" lpd logging switch).

Then I stopped lpd, added lpd to my /etc/hosts.allow, disabled it from
starting in /etc/init.d/lpd and restarted inetd.

My remote lpq says "waiting for pilchuck to come up".

The server lpr.log says a few times:

 Feb 15 15:36:50 pilchuck lpd[9780]: bind: Address already in use
 Feb 15 15:36:50 pilchuck lpd[9780]: exiting

So it looks like inetd is spawning lpd; the new lpd is trying to bind but
inetd already did.

Any other ideas?

  Jeremy C. Reed
  http://www.isp-faq.com/-- find answers to your questions




Re: lpd with libwrap (or tcp wrappers)

2001-02-15 Thread Tamas TEVESZ

On Thu, 15 Feb 2001, Jeremy C. Reed wrote:

 > But is this the Debian way? What will happen when I upgrade lpr package?

i'd be more than very surprised if any automatic script would modify
any conf file i write or modify. then again, you never know what those
scripts will do, but they strongly shouldn't.

 >  Feb 15 15:36:50 pilchuck lpd[9780]: bind: Address already in use
 >  Feb 15 15:36:50 pilchuck lpd[9780]: exiting

now actually looking at lpd:), it doesn't seem to support being run
from inetd. you have several ways to go, though. first, trust it's own
builtin access control (lpd.perms or something); (possibly
additionally) put a packet filter in front of it; or you can add
libwrap support to lpd (it's not supposed to be hard); or the last
thing i can think of is to modify lpd in a way when it allows to be
run from inetd (that is, it takes its input from stdin, iirc)

having a very quick look at lpd.perms(5) i'd say its basically
equivalent (functionality-wise) to hosts.{allow,deny}, but also has
print service-specific options. i didn't find the equivalent option to
UKNOWN and PARANOID, though, but, as printing is supposed (imho) be a
`local' service, you have to maintain a consistent dns database and
you won't even need this.

-- 
[-]
So, you're a Ph.D. Just don't touch anything.


--  
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Re: lpd with libwrap (or tcp wrappers)

2001-02-15 Thread Tamas TEVESZ
On Thu, 15 Feb 2001, Jeremy C. Reed wrote:

 > Does anyone know of the a lpd debian package (or the correct Debian
 > way) to use lpd with tcp_wrappers support (hosts_option(s5))?

you can just simply tell tcpd to run it, sg like

lpd stream tcp nowait root /usr/sbin/tcpd /usr/sbin/lpd args

tweak as needed.

-- 
[-]
So, you're a Ph.D. Just don't touch anything.




lpd with libwrap (or tcp wrappers)

2001-02-15 Thread Jeremy C. Reed
I have lpd running on a publically-available server.

Currently, it is secured with just /etc/hosts.lpd.

I have seen an lpd that I can run with a "-i" switch to use via inetd. But
it looks like the lpd from Debian (lpr 0.48-1) doesn't have this option.
(I am interested in running via inetd so I can use tcpd access controls.)

Does anyone know of the a lpd debian package (or the correct Debian
way) to use lpd with tcp_wrappers support (hosts_option(s5))?

Thanks

  Jeremy C. Reed
  http://www.reedmedia.net/




Re: lpd with libwrap (or tcp wrappers)

2001-02-15 Thread Jeremy C. Reed

On Thu, 15 Feb 2001, Tamas TEVESZ wrote:

> On Thu, 15 Feb 2001, Jeremy C. Reed wrote:
> 
>  > Does anyone know of the a lpd debian package (or the correct Debian
>  > way) to use lpd with tcp_wrappers support (hosts_option(s5))?
> 
> you can just simply tell tcpd to run it, sg like
> 
> lpd stream tcp nowait root /usr/sbin/tcpd /usr/sbin/lpd args
> 
> tweak as needed.

But is this the Debian way? What will happen when I upgrade lpr package?

So I tweaked as needed (by changing service-name to printer and added
"-l" lpd logging switch).

Then I stopped lpd, added lpd to my /etc/hosts.allow, disabled it from
starting in /etc/init.d/lpd and restarted inetd.

My remote lpq says "waiting for pilchuck to come up".

The server lpr.log says a few times:

 Feb 15 15:36:50 pilchuck lpd[9780]: bind: Address already in use
 Feb 15 15:36:50 pilchuck lpd[9780]: exiting

So it looks like inetd is spawning lpd; the new lpd is trying to bind but
inetd already did.

Any other ideas?

  Jeremy C. Reed
  http://www.isp-faq.com/-- find answers to your questions


--  
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Re: lpd with libwrap (or tcp wrappers)

2001-02-15 Thread Tamas TEVESZ

On Thu, 15 Feb 2001, Jeremy C. Reed wrote:

 > Does anyone know of the a lpd debian package (or the correct Debian
 > way) to use lpd with tcp_wrappers support (hosts_option(s5))?

you can just simply tell tcpd to run it, sg like

lpd stream tcp nowait root /usr/sbin/tcpd /usr/sbin/lpd args

tweak as needed.

-- 
[-]
So, you're a Ph.D. Just don't touch anything.


--  
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




lpd with libwrap (or tcp wrappers)

2001-02-15 Thread Jeremy C. Reed

I have lpd running on a publically-available server.

Currently, it is secured with just /etc/hosts.lpd.

I have seen an lpd that I can run with a "-i" switch to use via inetd. But
it looks like the lpd from Debian (lpr 0.48-1) doesn't have this option.
(I am interested in running via inetd so I can use tcpd access controls.)

Does anyone know of the a lpd debian package (or the correct Debian
way) to use lpd with tcp_wrappers support (hosts_option(s5))?

Thanks

  Jeremy C. Reed
  http://www.reedmedia.net/


--  
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Re: Sendmail

2001-02-15 Thread Roger Abrahamsson
On Fri, 16 Feb 2001, Ross Peachey wrote:

> On Thu, Feb 15, 2001 at 02:23:07PM +0100, Roger Abrahamsson wrote:
> > Anyone here know how to 'force' sendmail to bind to one specific ip on a
> > machine? I've just moved it, and it works fine but for one thing, it
> > stubbornly wants to use the primary ip/interface when sending messages
> > out. It's causing problems with a few customers firewalls...
> 
> 
> Use the following line in sendmail.mc to only bind to a particular IP:
> 
> define(`confDAEMON_OPTIONS', `Addr=203.43.87.56')
> 
> Not sure if this is really what you want, because this will not allow you
> to receive mail on other interface IPs.
> 
> 
> Ross.
> 




Well, just tried it, and it works fine, except for one thing as I see
it. It stops answering on localhost also, and from the machine itself I
cannot reach the ip.. 
say the machine is 192.168.1.10 and the ip for the mail server is
192.168.1.8.

i.e. I cannot telnet to 192.168.1.8 port 25 when logged in on 192.168.0.10
??

/Roger




Re: Sendmail

2001-02-15 Thread Ross Peachey
On Thu, Feb 15, 2001 at 02:23:07PM +0100, Roger Abrahamsson wrote:
> Anyone here know how to 'force' sendmail to bind to one specific ip on a
> machine? I've just moved it, and it works fine but for one thing, it
> stubbornly wants to use the primary ip/interface when sending messages
> out. It's causing problems with a few customers firewalls...


Use the following line in sendmail.mc to only bind to a particular IP:

define(`confDAEMON_OPTIONS', `Addr=203.43.87.56')

Not sure if this is really what you want, because this will not allow you
to receive mail on other interface IPs.


Ross.




Re: policy routing

2001-02-15 Thread Fraser Campbell
Cenk Hasirlioglu <[EMAIL PROTECTED]> writes:

> There is third network behind another router and we want to
> route packets coming from this network to a different
> next-hop, not to default gateway.
> 
> How can i do that policy routing with iproute or ipchains
> (kernel 2.2.x)

These two statements should be enough to get packets from the internal
network using the other gateway (I call it 172.16.1.1):

ip route add default via 172.16.1.1 proto static table 5 
ip rule add from 192.168.0.0/24 to 0/0 lookup 5 priority 999

After this issue an "ip route flush cache" ...

Note, before the default route statement you may have to throw some routes to
your other local networks if you still with wish to talk to them properly.
Something like "ip route add throw 10.0.1.0/24 table 5".

There is an excellent iproute2 document that explains all these things but
iirc it is a little short on details covering your particular scenario.

Good luck,
--
fraser campbell <[EMAIL PROTECTED]>  starnix inc.
tollfree: (905) 771-0017thornhill, ontario, canada
http://www.starnix.com/ professional linux services & products




Re: Sendmail

2001-02-15 Thread Nicolas Bougues
On Thu, Feb 15, 2001 at 02:23:07PM +0100, Roger Abrahamsson wrote:
> 
> Anyone here know how to 'force' sendmail to bind to one specific ip on a
> machine? I've just moved it, and it works fine but for one thing, it
> stubbornly wants to use the primary ip/interface when sending messages
> out. It's causing problems with a few customers firewalls...
> 

I'm not sure that sendmail can do that. I ran into this problem for
BIND notifications (the primary server not using the right interface,
thus the slave not accepting it).

This might be dealt with the routing table, though.

-- 
Nicolas BOUGUES




Sendmail

2001-02-15 Thread Roger Abrahamsson


Anyone here know how to 'force' sendmail to bind to one specific ip on a
machine? I've just moved it, and it works fine but for one thing, it
stubbornly wants to use the primary ip/interface when sending messages
out. It's causing problems with a few customers firewalls...

Regards
Roger A




Re: Sendmail

2001-02-15 Thread Roger Abrahamsson

On Fri, 16 Feb 2001, Ross Peachey wrote:

> On Thu, Feb 15, 2001 at 02:23:07PM +0100, Roger Abrahamsson wrote:
> > Anyone here know how to 'force' sendmail to bind to one specific ip on a
> > machine? I've just moved it, and it works fine but for one thing, it
> > stubbornly wants to use the primary ip/interface when sending messages
> > out. It's causing problems with a few customers firewalls...
> 
> 
> Use the following line in sendmail.mc to only bind to a particular IP:
> 
> define(`confDAEMON_OPTIONS', `Addr=203.43.87.56')
> 
> Not sure if this is really what you want, because this will not allow you
> to receive mail on other interface IPs.
> 
> 
> Ross.
> 




Well, just tried it, and it works fine, except for one thing as I see
it. It stops answering on localhost also, and from the machine itself I
cannot reach the ip.. 
say the machine is 192.168.1.10 and the ip for the mail server is
192.168.1.8.

i.e. I cannot telnet to 192.168.1.8 port 25 when logged in on 192.168.0.10
??

/Roger


--  
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Re: Sendmail

2001-02-15 Thread Ross Peachey

On Thu, Feb 15, 2001 at 02:23:07PM +0100, Roger Abrahamsson wrote:
> Anyone here know how to 'force' sendmail to bind to one specific ip on a
> machine? I've just moved it, and it works fine but for one thing, it
> stubbornly wants to use the primary ip/interface when sending messages
> out. It's causing problems with a few customers firewalls...


Use the following line in sendmail.mc to only bind to a particular IP:

define(`confDAEMON_OPTIONS', `Addr=203.43.87.56')

Not sure if this is really what you want, because this will not allow you
to receive mail on other interface IPs.


Ross.


--  
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Re: policy routing

2001-02-15 Thread Fraser Campbell

Cenk Hasirlioglu <[EMAIL PROTECTED]> writes:

> There is third network behind another router and we want to
> route packets coming from this network to a different
> next-hop, not to default gateway.
> 
> How can i do that policy routing with iproute or ipchains
> (kernel 2.2.x)

These two statements should be enough to get packets from the internal
network using the other gateway (I call it 172.16.1.1):

ip route add default via 172.16.1.1 proto static table 5 
ip rule add from 192.168.0.0/24 to 0/0 lookup 5 priority 999

After this issue an "ip route flush cache" ...

Note, before the default route statement you may have to throw some routes to
your other local networks if you still with wish to talk to them properly.
Something like "ip route add throw 10.0.1.0/24 table 5".

There is an excellent iproute2 document that explains all these things but
iirc it is a little short on details covering your particular scenario.

Good luck,
--
fraser campbell <[EMAIL PROTECTED]>  starnix inc.
tollfree: (905) 771-0017thornhill, ontario, canada
http://www.starnix.com/ professional linux services & products


--  
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




policy routing

2001-02-15 Thread Cenk Hasirlioglu
Hi,

There are two ethernet (also two network) appended on a
linux box.

There is third network behind another router and we want to
route packets coming from this network to a different
next-hop, not to default gateway.

How can i do that policy routing with iproute or ipchains
(kernel 2.2.x)

Regards,

Cenk Hasirlioglu




Re: Sendmail

2001-02-15 Thread Nicolas Bougues

On Thu, Feb 15, 2001 at 02:23:07PM +0100, Roger Abrahamsson wrote:
> 
> Anyone here know how to 'force' sendmail to bind to one specific ip on a
> machine? I've just moved it, and it works fine but for one thing, it
> stubbornly wants to use the primary ip/interface when sending messages
> out. It's causing problems with a few customers firewalls...
> 

I'm not sure that sendmail can do that. I ran into this problem for
BIND notifications (the primary server not using the right interface,
thus the slave not accepting it).

This might be dealt with the routing table, though.

-- 
Nicolas BOUGUES


--  
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Sendmail

2001-02-15 Thread Roger Abrahamsson



Anyone here know how to 'force' sendmail to bind to one specific ip on a
machine? I've just moved it, and it works fine but for one thing, it
stubbornly wants to use the primary ip/interface when sending messages
out. It's causing problems with a few customers firewalls...

Regards
Roger A


--  
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




policy routing

2001-02-15 Thread Cenk Hasirlioglu

Hi,

There are two ethernet (also two network) appended on a
linux box.

There is third network behind another router and we want to
route packets coming from this network to a different
next-hop, not to default gateway.

How can i do that policy routing with iproute or ipchains
(kernel 2.2.x)

Regards,

Cenk Hasirlioglu


--  
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Re: pop3 and Maildir

2001-02-15 Thread Roger Abrahamsson
On Thu, 15 Feb 2001, Eric Ravelomamantsoa wrote:

> I've been following this thread with interest because I'm also looking 
> for a pop3 server for a Debian system . Anyway. There are some basic 
> points I'm missing though. What are the pros and cons of Maildir versus 
> other formats. What is the point with Mysql and pam authentication and 
> how does it affect a mail server.  Can somebody, please give me some 
> pointers where those are explained, and what are the best current 
> practices for setting up a pop/imap mail server?
> 
> Thanks to all,
> 
> Eric.
> 

Okay, we run pop3, imap and smtp currently on a debian box. The real
advantage I see it with Maildir, is that it allows you to run your
mailspool over NFS, as it require no locking. That enables you to have
several different machines delivering to the same mailspool. NFS is of
course slower but having several machines acting as your mail system gives
you totally different possibilities of taking down one server and refit it
while the customers dont notice a thing. The mailbox format is the
'defacto' standard and some claim it to be faster. But it requires locking
if you use several different programs working with it at the same time.

pam makes authentication 'transparent' in that it allows you to choose the
authentication method separate from the program using it. If the mail 
program supports MySQL authentication directly, they usually also allow
extra information to be pulled from the tables. Courier-IMAP is of that
kind, and allows you to specify for each 'user' the uid,gid,mailbox
placing, password etc. In the end that can give you a system where you
dont need to give mailusers "real" unix accounts.

/Roger Abrahamsson




Re: pop3 and Maildir

2001-02-15 Thread Magni Onsøien
On Wed, Feb 14, 2001 at 03:28:07PM +0100, Roger Abrahamsson said:
> Well, all I've seen is that the qmail system seems to be an integrated
> package. We here are also looking into switching to maildirs, and
> courier-imap seems very nice, especially with mysql authentication. Latest
> upstream courier-imap also have a pop3 server with it, but sofar I have
> not succeded in getting mysql support compiled in. If anyone has knowledge
> of how to get this working on a debian system I would be very happy.

We are probably going to use Courier 1.3.1 on a new system. However, our
problem is that we want to use LDAP for authetication and we have to
use OpenLDAP 2 (LDAP v3) because of the rest of the system.
Unfortunately Courier can't authenticate with OpenLDAP 2 (only 1). So,
now I'm wondering if someone has used Courier IMAP with authentication
through OpenLDAP 2 and if so, if the patch or extra module is or can be
made available?

TIA.


-- 
Magni Onsøien Initio IT-løsninger AS
[EMAIL PROTECTED]  http://www.initio.no/
Tlf. 73 83 71 71/928 10 269




Re: pop3 and Maildir

2001-02-15 Thread Eric Ravelomamantsoa
I've been following this thread with interest because I'm also looking 
for a pop3 server for a Debian system . Anyway. There are some basic 
points I'm missing though. What are the pros and cons of Maildir versus 
other formats. What is the point with Mysql and pam authentication and 
how does it affect a mail server.  Can somebody, please give me some 
pointers where those are explained, and what are the best current 
practices for setting up a pop/imap mail server?

Thanks to all,
Eric.



Re: pop3 and Maildir

2001-02-15 Thread Roger Abrahamsson

On Thu, 15 Feb 2001, Eric Ravelomamantsoa wrote:

> I've been following this thread with interest because I'm also looking 
> for a pop3 server for a Debian system . Anyway. There are some basic 
> points I'm missing though. What are the pros and cons of Maildir versus 
> other formats. What is the point with Mysql and pam authentication and 
> how does it affect a mail server.  Can somebody, please give me some 
> pointers where those are explained, and what are the best current 
> practices for setting up a pop/imap mail server?
> 
> Thanks to all,
> 
> Eric.
> 

Okay, we run pop3, imap and smtp currently on a debian box. The real
advantage I see it with Maildir, is that it allows you to run your
mailspool over NFS, as it require no locking. That enables you to have
several different machines delivering to the same mailspool. NFS is of
course slower but having several machines acting as your mail system gives
you totally different possibilities of taking down one server and refit it
while the customers dont notice a thing. The mailbox format is the
'defacto' standard and some claim it to be faster. But it requires locking
if you use several different programs working with it at the same time.

pam makes authentication 'transparent' in that it allows you to choose the
authentication method separate from the program using it. If the mail 
program supports MySQL authentication directly, they usually also allow
extra information to be pulled from the tables. Courier-IMAP is of that
kind, and allows you to specify for each 'user' the uid,gid,mailbox
placing, password etc. In the end that can give you a system where you
dont need to give mailusers "real" unix accounts.

/Roger Abrahamsson


--  
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Re: pop3 and Maildir

2001-02-15 Thread Magni Onsøien

On Wed, Feb 14, 2001 at 03:28:07PM +0100, Roger Abrahamsson said:
> Well, all I've seen is that the qmail system seems to be an integrated
> package. We here are also looking into switching to maildirs, and
> courier-imap seems very nice, especially with mysql authentication. Latest
> upstream courier-imap also have a pop3 server with it, but sofar I have
> not succeded in getting mysql support compiled in. If anyone has knowledge
> of how to get this working on a debian system I would be very happy.

We are probably going to use Courier 1.3.1 on a new system. However, our
problem is that we want to use LDAP for authetication and we have to
use OpenLDAP 2 (LDAP v3) because of the rest of the system.
Unfortunately Courier can't authenticate with OpenLDAP 2 (only 1). So,
now I'm wondering if someone has used Courier IMAP with authentication
through OpenLDAP 2 and if so, if the patch or extra module is or can be
made available?

TIA.


-- 
Magni Onsøien Initio IT-løsninger AS
[EMAIL PROTECTED]  http://www.initio.no/
Tlf. 73 83 71 71/928 10 269


--  
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Re: pop3 and Maildir

2001-02-15 Thread Eric Ravelomamantsoa

I've been following this thread with interest because I'm also looking 
for a pop3 server for a Debian system . Anyway. There are some basic 
points I'm missing though. What are the pros and cons of Maildir versus 
other formats. What is the point with Mysql and pam authentication and 
how does it affect a mail server.  Can somebody, please give me some 
pointers where those are explained, and what are the best current 
practices for setting up a pop/imap mail server?

Thanks to all,

Eric.


--  
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]