Re: sendmail is slow for mass mail

2001-04-02 Thread Craig Sanders

On Tue, Apr 03, 2001 at 12:31:27AM -0400, Haim Dimermanas wrote:
> Foreword : I *really* don't want to start a flame war on that. I
> am just _very_ curious. I am currently using Exim. I don't really
> know a whole lot about it. I just think that it's nice to have a
> human readable config file and a good documentation. I am considering
> switching to qmail or postfix (I don't know which one yet) and I would
> love to know more.

i've used pretty nearly every freely available unix MTA over the last 8
or 9 years. smail for a few years, then sendmail for a few more years,
then some experimentation with zmailer and exim before settling on qmail
for a year or so. then postfix came along and i just don't use anything
else any more. i still have a few qmail systems, but only because it's
more trouble than it's worth to convert them to postfix. all my sendmail
systems got converted to postfix long ago.

qmail doesn't offer anything that postfix doesn't have, but has
licensing problems that limit it's usefulness and it's rate of
improvement.

actually, that's not quite true. the one thing that qmail has which
postfix can't do is that ezmlm only works with qmail. ezmlm is a very
nice mailing list manager in some ways...but not that much nicer than
listar or mailman that it's worth locking yourself into qmail.

i see qmail's incompatibility with other MTAs as a huge trap - and the
same kind of trap as proprietary mailers, or proprietary software in
generalonce you convert to it, you're basically stuck there because
it's going to be an enormous pain to convert to anything else.

> > > The answer? qmail :)
> 
>  I heard that answer a LOT of times. I read (please confirm) that qmail was
> the best when it came to having a cluster of pop toasters and also that it
> was the best when it comes to virtual hosting. After all, AOL - Yahoo -
> Netscape and all are using qmail AFAIK.
> 
> > actually, the answer is postfix - especially since the original message
> > said:
> 
>  Again, from what I read, postfix's main priority was security.

and speed. and a reasonable level of backwards compatibility with
sendmail/exim/smail/etc.

>  I read your very interresting post about the differences between
> qmail and postfix when it comes to licensing issues and backward
> compatibility with sendmail. What I would like to know is your opinion
> on how postfix performs on the following points:
>
> - Ease of configuration. 

postfix's main config file (/etc/postfix/main.cf) is plain english and
well commented. it's very easy to read and understand, and the default
settings are quite sensible (i.e. it will not relay by default - in
fact, you have to go to a lot of trouble to misconfigure postfix before
it will act as an open relay).

imo, it's easier to understand and configure than exim.  YMMV.

exim is mostly compatible with sendmail in a very similar way - it can
use the same kinds of map files.

> I don't want to read a whole book to find out how I can enable relay
> for a range of IP.

e.g. in /etc/postfix/main.cf:

mynetworks = 127.0.0.0/8, 192.168.0.0/24
smtpd_recipient_restrictions = ...,  permit_mynetworks, ...

that's simplified because there are a lot of available options. mine
looks something like this:

smtpd_recipient_restrictions = hash:/etc/postfix/junk,
   reject_non_fqdn_recipient,
   reject_unknown_recipient_domain,
   reject_non_fqdn_sender,
   reject_unknown_sender_domain,
   reject_invalid_hostname,
   permit_mynetworks,
   reject_maps_rbl,
   check_relay_domains

the order of the rules is significant...which is why, for example,
reject_maps_rbl appears AFTER permit_mynetworks. one of the RBL services
i use is the MAPS DUL and i don't want to block my own dialup users from
relaying mail through the mail server.

i also have header_checks and body_checks rules which use PCRE regexps
to block common signs of spam and viruses (e.g. block all mail to/from
[EMAIL PROTECTED], or all mail containing an executable attachment).

> The fact that it is sendmail compatible scares me on that one.

it doesn't use sendmail.cf or anything like it.

the compatibility is that it can use the same format files that
sendmail used to use - aliases, virtual, transports, etc. 

for some, like /etc/aliases it can use the exact same file. for others,
they might need to be renamed (e.g. from /etc/mail/virtusertable to
/etc/postfix/virtual).


> - Scalability. Comparing apples to apples, does postfix provide the
> tools when it comes to hosting tens of thousands of virtual domains?

yes.  it scales extremely well.

> - Reliability. Email is like dial tone these days, it's important to
> know how postfix performs on this particular topic.

wellexim's a nice little MTA for small leafnode sites - it's
basically smail d

Re: sendmail is slow for mass mail

2001-04-02 Thread Haim Dimermanas
Foreword : I *really* don't want to start a flame war on that. I am just
_very_ curious. I am currently using Exim. I don't really know a whole lot
about it. I just think that it's nice to have a human readable config file
and a good documentation. I am considering switching to qmail or postfix (I
don't know which one yet) and I would love to know more.

> > The answer? qmail :)

 I heard that answer a LOT of times. I read (please confirm) that qmail was
the best when it came to having a cluster of pop toasters and also that it
was the best when it comes to virtual hosting. After all, AOL - Yahoo -
Netscape and all are using qmail AFAIK.

> actually, the answer is postfix - especially since the original message
> said:

 Again, from what I read, postfix's main priority was security.

 I read your very interresting post about the differences between qmail and
postfix when it comes to licensing issues and backward compatibility with
sendmail. What I would like to know is your opinion on how postfix performs
on the following points:

- Ease of configuration. I don't want to read a whole book to find out how I
can enable relay for a range of IP. The fact that it is sendmail compatible
scares me on that one.

- Scalability. Comparing apples to apples, does postfix provide the tools
when it comes to hosting tens of thousands of virtual domains?

- Reliability. Email is like dial tone these days, it's important to know
how postfix performs on this particular topic.

> postfix is also faster than qmail. and more flexible. and with much
> better anti-spam features.

 Could you elaborate on that?

> by contrast, postfix has an extremely active development community with
> new features and patches being created for it all the time...some of
> which even make it into the mainline postfix release if they meet wietse
> venema's standards.

 This is a very important point. I had no idea that qmail's development was
so slow and that postfix's was so active. Again, can you give more infos?

Again, I appreciate your help in helping people like me get their foot in
this door.

Sincerely,
Haim.
-- 
Whatthehellhashappenedtomydamnspacebar?!?!?
 -- [EMAIL PROTECTED] --




Re: sendmail is slow for mass mail

2001-04-02 Thread brian moore

On Tue, Apr 03, 2001 at 02:20:51PM +0900, ARAKI Yasuhiro wrote:
> Folks,
> 
> > > postfix is also faster than qmail. and more flexible. and with much
> > > better anti-spam features.
> > 
> >  Could you elaborate on that?
> 
> Postfix use piggyback mail transfer.
> If two or more recipients are in the same domain, postfix/smtp use
> ONLY ONE smtp connection for sending message.(like a sendmail, exim..)
> BUT qmail use newly qmail-smtp each message.

And, as I recall, postfix has less file accesses than qmail.  (And a LOT
less than sendmail.)

I love postfix: it's been a pleasure to fiddle with (with a READABLE
config) and is amazingly clear code with a wide range of versatility:
one of my favorite things is that you can mix and match flat files with
db files (usually a hash) with regex's with perl-compatble regexs...

Want to have your aliases done "normally" as a hash?  Sure.. but you can
also add in a pcre file or two, and maybe even a flat file... other than
the speed issues for each, postfix doesn't care what sort of 'map' you
use.  (You can even toss in an ldap or sql map if you want, but I
haven't needed that.)

The 'sendmail compatible' is overstated.  It doesn't read sendmail.cf.
It -does- act normally with things like .forward file, and the format of
the alias file is the same and that sort of thing.  It's actually much
easier to get postfix to do Stupid MTA Tricks than it is to do the same
with sendmail (did I mention I love pcre's?  It's nice to refuse mail
from all-numeric 'local parts' in email addresses)



--  
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Re: sendmail is slow for mass mail

2001-04-02 Thread Jeremy C. Reed

On Tue, 3 Apr 2001, Haim Dimermanas wrote:

> - Ease of configuration. I don't want to read a whole book to find out how I
> can enable relay for a range of IP. The fact that it is sendmail compatible
> scares me on that one.

Postfix's configuration files and syntax are entirely different than
sendmail. Postfix's configurations are very easy to use and understand.
Postfix usage is also very different (other than common sendmail arguments
and switches). Visit www.postfix.org and read one or two documentation
pages.

  Jeremy C. Reed
...
 ISP-FAQ.com -- find answers to your questions
 http://www.isp-faq.com/


--  
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Re: sendmail is slow for mass mail

2001-04-02 Thread ARAKI Yasuhiro

Folks,

Subject: Re: sendmail is slow for mass mail
Date: Tue, 03 Apr 2001 00:31:27 -0400
Message-ID: <[EMAIL PROTECTED]>

> - Ease of configuration. I don't want to read a whole book to find out how I
> can enable relay for a range of IP. The fact that it is sendmail compatible
> scares me on that one.

If you want to stop smtp relay for all other hosts, use
# postconf -e "mynetworks_style = host"

> - Scalability. Comparing apples to apples, does postfix provide the tools
> when it comes to hosting tens of thousands of virtual domains?

Postfix can receive huge domains.  
# postconf -e "mydestination = $myhostname, localhost.localdomain, \
 hash:/etc/postfix/virtual"
You list your virtual domains in /etc/postfix/virtual file.

The function of the Virtual domains mainly provided by MDA.
You can use any MDA which is starting by lmtp, pipe, INET, UNIX domain socket.

> > postfix is also faster than qmail. and more flexible. and with much
> > better anti-spam features.
> 
>  Could you elaborate on that?

Postfix use piggyback mail transfer.
If two or more recipients are in the same domain, postfix/smtp use
ONLY ONE smtp connection for sending message.(like a sendmail, exim..)
BUT qmail use newly qmail-smtp each message.

---
ARAKI Yasuhiro  [EMAIL PROTECTED]


--  
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Re: sendmail is slow for mass mail

2001-04-02 Thread Haim Dimermanas

Foreword : I *really* don't want to start a flame war on that. I am just
_very_ curious. I am currently using Exim. I don't really know a whole lot
about it. I just think that it's nice to have a human readable config file
and a good documentation. I am considering switching to qmail or postfix (I
don't know which one yet) and I would love to know more.

> > The answer? qmail :)

 I heard that answer a LOT of times. I read (please confirm) that qmail was
the best when it came to having a cluster of pop toasters and also that it
was the best when it comes to virtual hosting. After all, AOL - Yahoo -
Netscape and all are using qmail AFAIK.

> actually, the answer is postfix - especially since the original message
> said:

 Again, from what I read, postfix's main priority was security.

 I read your very interresting post about the differences between qmail and
postfix when it comes to licensing issues and backward compatibility with
sendmail. What I would like to know is your opinion on how postfix performs
on the following points:

- Ease of configuration. I don't want to read a whole book to find out how I
can enable relay for a range of IP. The fact that it is sendmail compatible
scares me on that one.

- Scalability. Comparing apples to apples, does postfix provide the tools
when it comes to hosting tens of thousands of virtual domains?

- Reliability. Email is like dial tone these days, it's important to know
how postfix performs on this particular topic.

> postfix is also faster than qmail. and more flexible. and with much
> better anti-spam features.

 Could you elaborate on that?

> by contrast, postfix has an extremely active development community with
> new features and patches being created for it all the time...some of
> which even make it into the mainline postfix release if they meet wietse
> venema's standards.

 This is a very important point. I had no idea that qmail's development was
so slow and that postfix's was so active. Again, can you give more infos?

Again, I appreciate your help in helping people like me get their foot in
this door.

Sincerely,
Haim.
-- 
Whatthehellhashappenedtomydamnspacebar?!?!?
 -- [EMAIL PROTECTED] --


--  
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Re: how to restrict remote user login in a per user basis ?

2001-04-02 Thread Robert Davidson
On Sat, Mar 31, 2001 at 04:45:40PM -0400, Felipe Alvarez Harnecker wrote:
> 
> 
> Subject says it all.
> 
> I'm using ssh and telnet-ssl for remote logins but i have some users
> that shoud do a local login.

Maybe you could whip up a little shell script to check the tty the user 
is logging in on (say wack it in /etc/profile) and then compare that 
with a list of local / non-local tty's?

Regards,
Robert Davidson.



> 
> 
> Thanx.
> 
> -- 
> __
> 
> Felipe Alvarez Harnecker.  QlSoftware.
>   
> Tels. 665.99.41 - 09.874.60.17
> e-mail: [EMAIL PROTECTED]
> 
> http://qlsoft.cl/
> http://ql.cl/
> __
> 
> 
> --  
> To UNSUBSCRIBE, email to [EMAIL PROTECTED]
> with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
> 




Re: sendmail is slow for mass mail

2001-04-02 Thread Craig Sanders
On Thu, Mar 29, 2001 at 01:44:27AM +0100, Gavin Hamill wrote:
> > My problem: The emails are being sent out at an UNBELIEVABLY SLOW rate.
> >
> > There must be a better way!
> 
> The answer? qmail :)

actually, the answer is postfix - especially since the original message
said:

 : Also, I won't use qmail because I have too much invested in sendmail
 : at this point, and I dislike the DJB's licensing terms.

postfix addresses both issues. 

firstly, unlike qmail, it is a true open source / free software program.
anyone can modify it and redistribute their modified version if they
wish. the license isn't GPL (it's IBM's Public License) but it is
GPL compatible...the main difference is that IBM's license has some
clauses covering patent issues (requiring royalty-free licensing of any
associated patents so that it is impossible to "embrace and extend"
postfix with patented code).


secondly, it is mostly backwards compatible with sendmail. for almost
all sendmail installations, upgrading to postfix is a very simple and
straight-forward operation. you can use your old aliases, virtual user,
transport and other tables with little or no modification - the file
formats are either identical or backwards compatible (e.g. the virtual
table allows multiple addresses on the RHS). the main thing to remember
is that postfix will refuse to run any pipe alias as root so if you have
aliases which depend on being run as root you will have to think of some
other way.

postfix is also faster than qmail. and more flexible. and with much
better anti-spam features.


> It takes a bit of getting used to because it's configuration is like
> nothing else, but give it a go

this, apart from the licensing issue, is the major problem with qmail.
DJB's attitude is that you have to throw out all your previous work on
your mail system and start from scratch...reimplementing it in his One
True Way. if you don't want to do it exactly as he demands then you're
both wrong and a complete moron because djb is always right. apparently,
bernstein knows your system and your needs better than you do.

the licensing issue causes a second major problem - it forces a
reversion to the bad old days when you had to download a tarball and
then spend ages hunting for numerous patches from various sites all
over the net, download and apply them and hope that none of the patches
conflict with each other. as a result, qmail has basically stagnated for
the last few years...there is very little active development being done
on or for it.

by contrast, postfix has an extremely active development community with
new features and patches being created for it all the time...some of
which even make it into the mainline postfix release if they meet wietse
venema's standards.

for a while, if you wanted a fast secure MTA then qmail was really
the only option available...but that was 3 years ago. now, though,
postfix is a much better option - especially if you have old sendmail
(or sendmail-compatible) systems you want to upgrade.

i can't think of any valid reason to switch to qmail now...and the only
reason for staying with qmail if you already have it installed is that
it's so incompatible with the way other MTAs work that it would be a
PITA to switch.


craig

--
craig sanders <[EMAIL PROTECTED]>

  GnuPG Key: 1024D/CD5626F0 
Key fingerprint: 9674 7EE2 4AC6 F5EF 3C57  52C3 EC32 6810 CD56 26F0




Re: how to restrict remote user login in a per user basis ?

2001-04-02 Thread Robert Davidson

On Sat, Mar 31, 2001 at 04:45:40PM -0400, Felipe Alvarez Harnecker wrote:
> 
> 
> Subject says it all.
> 
> I'm using ssh and telnet-ssl for remote logins but i have some users
> that shoud do a local login.

Maybe you could whip up a little shell script to check the tty the user 
is logging in on (say wack it in /etc/profile) and then compare that 
with a list of local / non-local tty's?

Regards,
Robert Davidson.



> 
> 
> Thanx.
> 
> -- 
> __
> 
> Felipe Alvarez Harnecker.  QlSoftware.
>   
> Tels. 665.99.41 - 09.874.60.17
> e-mail: [EMAIL PROTECTED]
> 
> http://qlsoft.cl/
> http://ql.cl/
> __
> 
> 
> --  
> To UNSUBSCRIBE, email to [EMAIL PROTECTED]
> with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
> 


--  
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Re: sendmail is slow for mass mail

2001-04-02 Thread Craig Sanders

On Thu, Mar 29, 2001 at 01:44:27AM +0100, Gavin Hamill wrote:
> > My problem: The emails are being sent out at an UNBELIEVABLY SLOW rate.
> >
> > There must be a better way!
> 
> The answer? qmail :)

actually, the answer is postfix - especially since the original message
said:

 : Also, I won't use qmail because I have too much invested in sendmail
 : at this point, and I dislike the DJB's licensing terms.

postfix addresses both issues. 

firstly, unlike qmail, it is a true open source / free software program.
anyone can modify it and redistribute their modified version if they
wish. the license isn't GPL (it's IBM's Public License) but it is
GPL compatible...the main difference is that IBM's license has some
clauses covering patent issues (requiring royalty-free licensing of any
associated patents so that it is impossible to "embrace and extend"
postfix with patented code).


secondly, it is mostly backwards compatible with sendmail. for almost
all sendmail installations, upgrading to postfix is a very simple and
straight-forward operation. you can use your old aliases, virtual user,
transport and other tables with little or no modification - the file
formats are either identical or backwards compatible (e.g. the virtual
table allows multiple addresses on the RHS). the main thing to remember
is that postfix will refuse to run any pipe alias as root so if you have
aliases which depend on being run as root you will have to think of some
other way.

postfix is also faster than qmail. and more flexible. and with much
better anti-spam features.


> It takes a bit of getting used to because it's configuration is like
> nothing else, but give it a go

this, apart from the licensing issue, is the major problem with qmail.
DJB's attitude is that you have to throw out all your previous work on
your mail system and start from scratch...reimplementing it in his One
True Way. if you don't want to do it exactly as he demands then you're
both wrong and a complete moron because djb is always right. apparently,
bernstein knows your system and your needs better than you do.

the licensing issue causes a second major problem - it forces a
reversion to the bad old days when you had to download a tarball and
then spend ages hunting for numerous patches from various sites all
over the net, download and apply them and hope that none of the patches
conflict with each other. as a result, qmail has basically stagnated for
the last few years...there is very little active development being done
on or for it.

by contrast, postfix has an extremely active development community with
new features and patches being created for it all the time...some of
which even make it into the mainline postfix release if they meet wietse
venema's standards.

for a while, if you wanted a fast secure MTA then qmail was really
the only option available...but that was 3 years ago. now, though,
postfix is a much better option - especially if you have old sendmail
(or sendmail-compatible) systems you want to upgrade.

i can't think of any valid reason to switch to qmail now...and the only
reason for staying with qmail if you already have it installed is that
it's so incompatible with the way other MTAs work that it would be a
PITA to switch.


craig

--
craig sanders <[EMAIL PROTECTED]>

  GnuPG Key: 1024D/CD5626F0 
Key fingerprint: 9674 7EE2 4AC6 F5EF 3C57  52C3 EC32 6810 CD56 26F0


--  
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Re: sendmail&smart host

2001-04-02 Thread Bulent Murtezaoglu
[...]
>> # "Smart" relay host (may be null) DS

RAN> indeed, but can only have 1 value iirc...

No, you can do 

define(`SMART_HOST',`ssmart1.isp.net:smart2.isp.net')

from your .mc and thinsg will work just fine.

cheers,

BM




Re: sendmail&smart host

2001-04-02 Thread Martin Tanzer
I changed in /etc/mail/sendmail.mc:

OSTYPE(mklinux)dnl

After a 'make' I found in sendmail.cf:

# "Smart" relay host (may be null)
DS

I did this, because sendmail refused to recieve mail with OSTYPE(Debian) -
procmail was not defined.

Hope, this helps, martin



Jaroslaw Wencel wrote:

> does anobody know, how to set two smart hosts in sendmail?
>
> --
> >> Serafin <<\|/Registered linux user #143543
> my e-mail: [EMAIL PROTECTED]   (o o) GSM:  +48 606966141
> ooO--(_)--Ooo
>
> --
> To UNSUBSCRIBE, email to [EMAIL PROTECTED]
> with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




sendmail&smart host

2001-04-02 Thread Jaroslaw Wencel
does anobody know, how to set two smart hosts in sendmail?

-- 
>> Serafin <<\|/Registered linux user #143543
my e-mail: [EMAIL PROTECTED]   (o o) GSM:  +48 606966141
ooO--(_)--Ooo




Re: sendmail&smart host

2001-04-02 Thread Bulent Murtezaoglu

[...]
>> # "Smart" relay host (may be null) DS

RAN> indeed, but can only have 1 value iirc...

No, you can do 

define(`SMART_HOST',`ssmart1.isp.net:smart2.isp.net')

from your .mc and thinsg will work just fine.

cheers,

BM


--  
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Re: "kickstart" for debian needed

2001-04-02 Thread I. Forbes
Hello Duane 

On 27 Mar 2001, at 21:58, Duane Powers wrote:

> I don't know if anyone has the details on redhat's kickstart
> program, and whether that is something that could be ported to
> debian... Any suggestions? 

At the moment we do the following:

-   base install (3 floppies + base.tgz from nfs drive). 

-   break the installation when "dselect" starts 

-   download a "configs.tgz" from the network.  This contains
customized versions of debian "config" files in /etc as well as
other utilities in /usr/local/ and /var/www/.  This configures
/etc/apt/sources etc.  It also contains a file "/etc/deblist"
which was generated using "atp-get --set-selections".  

-   run apt --get-selections < /etc/deblist 

-   run apt-get --deselect-update 

-   manually edit /etc/... to suite the particular install. 

This is flexible, when we change something on the network, we 
change in the master "configs.tgz" and all subsequent installs get it. 
The process is not broken when there is an upstream update - 
because of debian policy for "configuration" files.

We have a script which backs up each machine and creates a 
personalized "config.tgz" file.  If we have to reload a machine, we 
just use that one instead. (It will get upgraded to the latest "stable" 
stuff during the re-install process.)

The problems:

"apt-get --deslect-upgrade" is painfully slow - particularly on slow 
hardware.  And you have to sit and watch and answer "y/n" stuff 'till 
it is finished.  (Can't wait for debconf to be working on a useful 
level).

The personalisation of the config files is slow.  I think we could do 
with a script which runs after the config.tgz has been extracted and 
asks things like domain names and user names.

I tried using a customized "base.tgz" that installed everything in one 
go.  But it was too inflexible and introduced too many bugs, so we 
went back to the old procedure as outlined above.

Regards

Ian

-
Ian Forbes ZSD
http://www.zsd.co.za
Office: +27 +21 683-1388  Fax: +27 +21 64-1106
Snail Mail: P.O. Box 46827, Glosderry, 7702, South Africa
-




Re: Streaming Video

2001-04-02 Thread Clint Adams
>   Does anyone have a suggestions about streaming video. I have a Town
>   as
> a client and they are asking about streaming their local cable access
> channel over the net.
>   I'm guessing I can grab the video feed off of the cable through a TV
> card in the Web server but then what?
>All hardware/software suggestion are welcome.

You might want to look into MBONE tools such as vic.




Re: sendmail&smart host

2001-04-02 Thread Martin Tanzer

I changed in /etc/mail/sendmail.mc:

OSTYPE(mklinux)dnl

After a 'make' I found in sendmail.cf:

# "Smart" relay host (may be null)
DS

I did this, because sendmail refused to recieve mail with OSTYPE(Debian) -
procmail was not defined.

Hope, this helps, martin



Jaroslaw Wencel wrote:

> does anobody know, how to set two smart hosts in sendmail?
>
> --
> >> Serafin <<\|/Registered linux user #143543
> my e-mail: [EMAIL PROTECTED]   (o o) GSM:  +48 606966141
> ooO--(_)--Ooo
>
> --
> To UNSUBSCRIBE, email to [EMAIL PROTECTED]
> with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]


--  
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Re: Streaming Video

2001-04-02 Thread Jeff Weatherford
I have some experience doing this, so here goes:
1.)  you need some kind of encoding equipment.  This will depend on the 
quality of video you want to stream, the format, and the bandwidth 
available.  For example, if you want to do real-time streaming, you need 
HARDWARE encoding.  Software encoding is just not fast enough for real-time 
streaming.  A word to the wise...real-time capture-streaming is 
EXPENSIVE!  As far as hardware suggestions go, I recommend either the 
Minerva box (a network appliance), or the Optibase cards.

2.)  You need to pick a streaming media server (software).  The realmedia 
streamer is free for demo, but the quality of realmedia is somewhat 
lacking, as I'm sure you know.  This may however, be a viable option 
depending on bandwidth.  If you want to stream mpeg or mpeg2, you are going 
to shell out some major cash for the software.

3.)  Storage will be important.  You will need a bit of storage if you want 
to archive anything.  Even if you don't want to archive, encoding-streaming 
will take up a chunk of space on a fast disk set as temporary files are 
created dynamically.  This being said, you are also going to have to have a 
dedicated server to stream.  The system requirements for a streaming server 
are a lot higher than you might expect.  The streaming server will choke, 
wheeze, gag, and otherwise be unhappy if you are doing ANYTHING else on 
it.  Yes, this is regardless of the OS.

4.)  I recommend you contact SICORP.  I worked for them previously as a 
tech, and they do know what they are talking about.  You want to contact 
JD.  Try him at [EMAIL PROTECTED]  If you need further contact info, I can 
provide it, you just have to tell him that Jeff send you ;-)

Regards,
Jeff
At 10:33 AM 4/2/01 -0400, you wrote:
  Does anyone have a suggestions about streaming video. I have a Town as
a client and they are asking about streaming their local cable access
channel over the net.
  I'm guessing I can grab the video feed off of the cable through a TV
card in the Web server but then what?
   All hardware/software suggestion are welcome.
Pete
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: Streaming Video

2001-04-02 Thread Marcel Hicking
Apple's Quicktime Streaming Server ("Darwin") is
is available under Apple's Public Source License
for FreeBSD 3.4, Linux, Solaris 7, WinNT and MacOS X.
http://www.apple.com/quicktime/products/qtss/
http://www.publicsource.apple.com/apsl/

RealSystem Server Plus comes for $1995 per
CPU and will serve up to 60 simultaneous users.
http://www.realnetworks.com/products/basicserverplus/

Cheers, Marcel


Peter Billson <[EMAIL PROTECTED]> 2 Apr 2001, at 10:33:

>   Does anyone have a suggestions about streaming video. I have a Town
>   as
> a client and they are asking about streaming their local cable access
> channel over the net.
>   I'm guessing I can grab the video feed off of the cable through a TV
> card in the Web server but then what?
>All hardware/software suggestion are welcome.
> 
> Pete




sendmail&smart host

2001-04-02 Thread Jaroslaw Wencel

does anobody know, how to set two smart hosts in sendmail?

-- 
>> Serafin <<\|/Registered linux user #143543
my e-mail: [EMAIL PROTECTED]   (o o) GSM:  +48 606966141
ooO--(_)--Ooo


--  
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Streaming Video

2001-04-02 Thread Peter Billson
  Does anyone have a suggestions about streaming video. I have a Town as
a client and they are asking about streaming their local cable access
channel over the net.
  I'm guessing I can grab the video feed off of the cable through a TV
card in the Web server but then what?
   All hardware/software suggestion are welcome.

Pete




RE: Firewall configuration with two ISP

2001-04-02 Thread Graf, Christian
hi mike,

actual layer 4-switches will provide you with lots of nice features:
load-balancing between providers
wire speed acl
load-balancing using acl-rules
wire speed throughput
routing protocols and of course static-routes

if you need some more information, feel free to contact me

christian

-Original Message-
From: Mike Schmitz [mailto:[EMAIL PROTECTED]
Sent: Wednesday, March 28, 2001 10:29 PM
To: debian-admintool@lists.debian.org; debian-isp@lists.debian.org;
debian-firewall@lists.debian.org
Subject: Re: Firewall configuration with two ISP


On Wed, Mar 28, 2001 at 12:50:08PM +0530, Bala wrote:
> Hello
>   In Debian GNU/Linux, I have configured three network cards. I'm having
> leased line connection from two ISP's with two different series of IP
> addersses. With first card I, have configrued ISP1 and with second card, I
> have configured with ISP2. With the third card, I have configured my LAN.
> Now I'm able to ping both the ISP's gateway from my machine. But, I'm NOT
> able to access my machine with one of the Internet IP from Internet. What
> could be the problem??

There was a list of URL posted here in the debian-firewall mailing list.
One of them had a section that might be of interest.  It has the balancing 
for the opposite direction,  but it should help get you there.

http://www.linuxsecurity.com/feature_stories/kernel-netfilter.html

The appropriate section:

So, to develop a simple and inexpensive load balanacing solution,
you might use the following to have your firewall redirect some of 
the traffic to each of the web servers at 192.168.1.100, 192.168.1.101 
and 192.168.1.102, as follows: 

 #
 # Modify destination addresses to 192.168.1.100, 
 # 192.168.1.101, or 192.168.1.102

 # iptables -t nat -A POSTROUTING -i eth1 -j DNAT \
 --to 192.168.1.100-192.168.1.102

-- 
Mike Schmitz<[EMAIL PROTECTED]> http://ddns.colug.org/mschmitz
My thoughts on h4x0rs:  Consider the complacency
and arrogance that would cause a porcupine to sleep
on its' back.


--  
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact
[EMAIL PROTECTED]




Re: "kickstart" for debian needed

2001-04-02 Thread I. Forbes

Hello Duane 

On 27 Mar 2001, at 21:58, Duane Powers wrote:

> I don't know if anyone has the details on redhat's kickstart
> program, and whether that is something that could be ported to
> debian... Any suggestions? 

At the moment we do the following:

-   base install (3 floppies + base.tgz from nfs drive). 

-   break the installation when "dselect" starts 

-   download a "configs.tgz" from the network.  This contains
customized versions of debian "config" files in /etc as well as
other utilities in /usr/local/ and /var/www/.  This configures
/etc/apt/sources etc.  It also contains a file "/etc/deblist"
which was generated using "atp-get --set-selections".  

-   run apt --get-selections < /etc/deblist 

-   run apt-get --deselect-update 

-   manually edit /etc/... to suite the particular install. 

This is flexible, when we change something on the network, we 
change in the master "configs.tgz" and all subsequent installs get it. 
The process is not broken when there is an upstream update - 
because of debian policy for "configuration" files.

We have a script which backs up each machine and creates a 
personalized "config.tgz" file.  If we have to reload a machine, we 
just use that one instead. (It will get upgraded to the latest "stable" 
stuff during the re-install process.)

The problems:

"apt-get --deslect-upgrade" is painfully slow - particularly on slow 
hardware.  And you have to sit and watch and answer "y/n" stuff 'till 
it is finished.  (Can't wait for debconf to be working on a useful 
level).

The personalisation of the config files is slow.  I think we could do 
with a script which runs after the config.tgz has been extracted and 
asks things like domain names and user names.

I tried using a customized "base.tgz" that installed everything in one 
go.  But it was too inflexible and introduced too many bugs, so we 
went back to the old procedure as outlined above.

Regards

Ian

-
Ian Forbes ZSD
http://www.zsd.co.za
Office: +27 +21 683-1388  Fax: +27 +21 64-1106
Snail Mail: P.O. Box 46827, Glosderry, 7702, South Africa
-


--  
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Re: Virtual Domain Users

2001-04-02 Thread Arnd Vehling
Hi,

want u want is homedir-mailboxes or maildirs.

Nearly every mailer is able to do this. I suggest
looking at qmail or exim.

With this mailers you r independant of /etc/passwd too.

You can manage users via LDAP (which i would recommend 
for a large-scale setup) or ascii-files or sql or...

regards,

 Arnd 
-- 
NetHead Network Design and Security
Arnd Vehling[EMAIL PROTECTED]
Gummersbacherstr. 27Phone: +49 221 8809210
50679 Köln  Fax  : +49 221 8809212




Re: Virtual Domain Users

2001-04-02 Thread Haim Dimermanas
> domain users add to the confusion. Is there a method out there already that
> will allow the nice sorting of users (/home/a, /home/b, etc) and some way
> to break out virtual domain users, along with their mail, that will work
> with the POP and IMAP daemons, and exim?

in /etc/adduser.conf

# If LETTERHOMES is "yes", then the created home directories will have
# an extra directory - the first letter of the user name. For example:
# /home/u/user.
LETTERHOMES=no

As far as the mail goes for you virtual domains, I suggest you take a
look at Cyrus. It has an IMAP and POP server that can do just that.

Haim
-- 
Whatthehellhashappenedtomydamnspacebar?!?!?




Re: Streaming Video

2001-04-02 Thread Clint Adams

>   Does anyone have a suggestions about streaming video. I have a Town
>   as
> a client and they are asking about streaming their local cable access
> channel over the net.
>   I'm guessing I can grab the video feed off of the cable through a TV
> card in the Web server but then what?
>All hardware/software suggestion are welcome.

You might want to look into MBONE tools such as vic.


--  
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Re: Streaming Video

2001-04-02 Thread Jeff Weatherford

I have some experience doing this, so here goes:

1.)  you need some kind of encoding equipment.  This will depend on the 
quality of video you want to stream, the format, and the bandwidth 
available.  For example, if you want to do real-time streaming, you need 
HARDWARE encoding.  Software encoding is just not fast enough for real-time 
streaming.  A word to the wise...real-time capture-streaming is 
EXPENSIVE!  As far as hardware suggestions go, I recommend either the 
Minerva box (a network appliance), or the Optibase cards.

2.)  You need to pick a streaming media server (software).  The realmedia 
streamer is free for demo, but the quality of realmedia is somewhat 
lacking, as I'm sure you know.  This may however, be a viable option 
depending on bandwidth.  If you want to stream mpeg or mpeg2, you are going 
to shell out some major cash for the software.

3.)  Storage will be important.  You will need a bit of storage if you want 
to archive anything.  Even if you don't want to archive, encoding-streaming 
will take up a chunk of space on a fast disk set as temporary files are 
created dynamically.  This being said, you are also going to have to have a 
dedicated server to stream.  The system requirements for a streaming server 
are a lot higher than you might expect.  The streaming server will choke, 
wheeze, gag, and otherwise be unhappy if you are doing ANYTHING else on 
it.  Yes, this is regardless of the OS.

4.)  I recommend you contact SICORP.  I worked for them previously as a 
tech, and they do know what they are talking about.  You want to contact 
JD.  Try him at [EMAIL PROTECTED]  If you need further contact info, I can 
provide it, you just have to tell him that Jeff send you ;-)

Regards,
Jeff

At 10:33 AM 4/2/01 -0400, you wrote:
>   Does anyone have a suggestions about streaming video. I have a Town as
>a client and they are asking about streaming their local cable access
>channel over the net.
>   I'm guessing I can grab the video feed off of the cable through a TV
>card in the Web server but then what?
>All hardware/software suggestion are welcome.
>
>Pete
>
>
>--
>To UNSUBSCRIBE, email to [EMAIL PROTECTED]
>with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]


--  
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Re: Streaming Video

2001-04-02 Thread Marcel Hicking

Apple's Quicktime Streaming Server ("Darwin") is
is available under Apple's Public Source License
for FreeBSD 3.4, Linux, Solaris 7, WinNT and MacOS X.
http://www.apple.com/quicktime/products/qtss/
http://www.publicsource.apple.com/apsl/

RealSystem Server Plus comes for $1995 per
CPU and will serve up to 60 simultaneous users.
http://www.realnetworks.com/products/basicserverplus/

Cheers, Marcel


Peter Billson <[EMAIL PROTECTED]> 2 Apr 2001, at 10:33:

>   Does anyone have a suggestions about streaming video. I have a Town
>   as
> a client and they are asking about streaming their local cable access
> channel over the net.
>   I'm guessing I can grab the video feed off of the cable through a TV
> card in the Web server but then what?
>All hardware/software suggestion are welcome.
> 
> Pete


--  
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Streaming Video

2001-04-02 Thread Peter Billson

  Does anyone have a suggestions about streaming video. I have a Town as
a client and they are asking about streaming their local cable access
channel over the net.
  I'm guessing I can grab the video feed off of the cable through a TV
card in the Web server but then what?
   All hardware/software suggestion are welcome.

Pete


--  
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




RE: Firewall configuration with two ISP

2001-04-02 Thread Graf, Christian

hi mike,

actual layer 4-switches will provide you with lots of nice features:
load-balancing between providers
wire speed acl
load-balancing using acl-rules
wire speed throughput
routing protocols and of course static-routes

if you need some more information, feel free to contact me

christian

-Original Message-
From: Mike Schmitz [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, March 28, 2001 10:29 PM
To: [EMAIL PROTECTED]; [EMAIL PROTECTED];
[EMAIL PROTECTED]
Subject: Re: Firewall configuration with two ISP


On Wed, Mar 28, 2001 at 12:50:08PM +0530, Bala wrote:
> Hello
>   In Debian GNU/Linux, I have configured three network cards. I'm having
> leased line connection from two ISP's with two different series of IP
> addersses. With first card I, have configrued ISP1 and with second card, I
> have configured with ISP2. With the third card, I have configured my LAN.
> Now I'm able to ping both the ISP's gateway from my machine. But, I'm NOT
> able to access my machine with one of the Internet IP from Internet. What
> could be the problem??

There was a list of URL posted here in the debian-firewall mailing list.
One of them had a section that might be of interest.  It has the balancing 
for the opposite direction,  but it should help get you there.

http://www.linuxsecurity.com/feature_stories/kernel-netfilter.html

The appropriate section:

So, to develop a simple and inexpensive load balanacing solution,
you might use the following to have your firewall redirect some of 
the traffic to each of the web servers at 192.168.1.100, 192.168.1.101 
and 192.168.1.102, as follows: 

 #
 # Modify destination addresses to 192.168.1.100, 
 # 192.168.1.101, or 192.168.1.102

 # iptables -t nat -A POSTROUTING -i eth1 -j DNAT \
 --to 192.168.1.100-192.168.1.102

-- 
Mike Schmitz<[EMAIL PROTECTED]>http://ddns.colug.org/mschmitz
My thoughts on h4x0rs:  Consider the complacency
and arrogance that would cause a porcupine to sleep
on its' back.


--  
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact
[EMAIL PROTECTED]


--  
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Re: Virtual Domain Users

2001-04-02 Thread Arnd Vehling

Hi,

want u want is homedir-mailboxes or maildirs.

Nearly every mailer is able to do this. I suggest
looking at qmail or exim.

With this mailers you r independant of /etc/passwd too.

You can manage users via LDAP (which i would recommend 
for a large-scale setup) or ascii-files or sql or...

regards,

 Arnd 
-- 
NetHead Network Design and Security
Arnd Vehling[EMAIL PROTECTED]
Gummersbacherstr. 27Phone: +49 221 8809210
50679 Köln  Fax  : +49 221 8809212


--  
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Re: Virtual Domain Users

2001-04-02 Thread Haim Dimermanas

> domain users add to the confusion. Is there a method out there already that
> will allow the nice sorting of users (/home/a, /home/b, etc) and some way
> to break out virtual domain users, along with their mail, that will work
> with the POP and IMAP daemons, and exim?

in /etc/adduser.conf

# If LETTERHOMES is "yes", then the created home directories will have
# an extra directory - the first letter of the user name. For example:
# /home/u/user.
LETTERHOMES=no

As far as the mail goes for you virtual domains, I suggest you take a
look at Cyrus. It has an IMAP and POP server that can do just that.

Haim
-- 
Whatthehellhashappenedtomydamnspacebar?!?!?


--  
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]