Re: postfix oddities.... 220 *******
A PIX Firewall was the reason.. thank you all for the quick help.. Now I shall have a little talk with the guy who configured that one >,-) Have a nice weekend. /Roger Roger Abrahamsson wrote: Hello. Currently trying to set up a test postfix server with smtp auth, with sasl and tls. Got everything working eventually, at least from localhost. I can login, authenticate with plaintext etc. However, when trying to access that server from a host not in "mynetworks" it echos a funny 220 header like this: Escape character is '^]'. 220 if I then try a ehlo like: ehlo localhost I get: 502 Error: command not implemented however if I do the exact same steps in connecting from a host in "mynetworks", (or localhost) I get : Trying 127.0.0.1... Connected to localhost. Escape character is '^]'. 220 tassy.obbit.se ESMTP Postfix ehlo localhost 250-tassy.obbit.se 250-PIPELINING 250-SIZE 1024 250-VRFY 250-ETRN 250-STARTTLS 250-AUTH LOGIN PLAIN CRAM-MD5 DIGEST-MD5 250-AUTH=LOGIN PLAIN CRAM-MD5 DIGEST-MD5 250-XVERP 250 8BITMIME Anyone seen this? It probably is something very simple, but I'm stuck at the moment, so any help would be appreciated. /Roger -- Roger Abrahamsson Sys/Net Admin, Obbit AB -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
postfix oddities.... 220 *******
Hello. Currently trying to set up a test postfix server with smtp auth, with sasl and tls. Got everything working eventually, at least from localhost. I can login, authenticate with plaintext etc. However, when trying to access that server from a host not in "mynetworks" it echos a funny 220 header like this: Escape character is '^]'. 220 if I then try a ehlo like: ehlo localhost I get: 502 Error: command not implemented however if I do the exact same steps in connecting from a host in "mynetworks", (or localhost) I get : Trying 127.0.0.1... Connected to localhost. Escape character is '^]'. 220 tassy.obbit.se ESMTP Postfix ehlo localhost 250-tassy.obbit.se 250-PIPELINING 250-SIZE 1024 250-VRFY 250-ETRN 250-STARTTLS 250-AUTH LOGIN PLAIN CRAM-MD5 DIGEST-MD5 250-AUTH=LOGIN PLAIN CRAM-MD5 DIGEST-MD5 250-XVERP 250 8BITMIME Anyone seen this? It probably is something very simple, but I'm stuck at the moment, so any help would be appreciated. /Roger -- Roger Abrahamsson Sys/Net Admin, Obbit AB -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: Users deleting public_html and log causing Apache to fail startup
But what happens now if you allow every user to run scripts through suexec beneath public_html? that means they "have" to own their public_html directory and thus always can change the access bits and delete it, causing the server to refuse restarting? regards /Roger -- Roger Abrahamsson Sys/Net Admin, Obbit AB -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: Users deleting public_html and log causing Apache to fail startup
But what happens now if you allow every user to run scripts through suexec beneath public_html? that means they "have" to own their public_html directory and thus always can change the access bits and delete it, causing the server to refuse restarting? regards /Roger -- Roger Abrahamsson Sys/Net Admin, Obbit AB -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: throttle pop3 access
Hello. Tinus Nijmeijers wrote: Hi, I'm having the problem that users are checking their mail (pop3) every other minute or so. no problem with the 200 accounts that we have right now, but I wouldn't mind being able to throttle their checking. max once per 10 min's for instance. Ideal would be to let the pop3 server tell them (if they checked again within 10 minutes of the last time): "no messages". any ideas where to look? Well, scripts looking into logfiles, and each account that checks too often gets suddenly blocked.. change password or whatever, and then restore it 5/10 minutes later.. that should do the trick. /Roger Tinus. -- Roger Abrahamsson Sys/Net Admin, Obbit AB -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: throttle pop3 access
Hello. Tinus Nijmeijers wrote: >Hi, > >I'm having the problem that users are checking their mail (pop3) every >other minute or so. no problem with the 200 accounts that we have right >now, but I wouldn't mind being able to throttle their checking. max once >per 10 min's for instance. >Ideal would be to let the pop3 server tell them (if they checked again >within 10 minutes of the last time): "no messages". > >any ideas where to look? > > Well, scripts looking into logfiles, and each account that checks too often gets suddenly blocked.. change password or whatever, and then restore it 5/10 minutes later.. that should do the trick. /Roger >Tinus. > > -- Roger Abrahamsson Sys/Net Admin, Obbit AB -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: Xeon on Linux
One thing, I would not go with a Xeon, only if I was planning a quad then perhaps. When you run many concurrent processes, the cache utilization goes down since you do so much context switching. Granted that recent kernels have improved much, but since you still dont have fully associative cache memories, there will be a lot of cache competition and subsequent cache flushes.. with 4+ cpu's this changes and the performance gain begins to be noticeable.. Hyperthreading do help a little bit, but not by that much.. My suggestion is go with a 2CPU Athlon or P4 system.. Compared to Xeons they are fairly cheap, and you will only loose performance in the order or 1-2%. Regards Roger Abrahamsson Cameron Moore wrote: * [EMAIL PROTECTED] (Patrick Hsieh) [2002.05.28 22:28]: How does Linux support Xeon CPU currently? I am considering to use dual P-III 1G or single Xeon 2.2G architecture. Consider the following pages: http://www.intel.com/eBusiness/products/server/processor/ http://www.intel.com/eBusiness/pdf/prod/server/xeon/wp020901.pdf According to that white paper, the Xeon's new "Hyper-Threading" technology that they're bragging about should show benefits without modifications to current apps, but they say the threading scheme makes a big difference. Having said that, unless there are some kernel developers on this list, I'd suggest searching the linux-kernel list archives for an answer or getting up the nerve to ask the kernel gurus yourself. Heck, you may even make kernel-traffic. :-) -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: Xeon on Linux
One thing, I would not go with a Xeon, only if I was planning a quad then perhaps. When you run many concurrent processes, the cache utilization goes down since you do so much context switching. Granted that recent kernels have improved much, but since you still dont have fully associative cache memories, there will be a lot of cache competition and subsequent cache flushes.. with 4+ cpu's this changes and the performance gain begins to be noticeable.. Hyperthreading do help a little bit, but not by that much.. My suggestion is go with a 2CPU Athlon or P4 system.. Compared to Xeons they are fairly cheap, and you will only loose performance in the order or 1-2%. Regards Roger Abrahamsson Cameron Moore wrote: >* [EMAIL PROTECTED] (Patrick Hsieh) [2002.05.28 22:28]: > > >>How does Linux support Xeon CPU currently? >>I am considering to use dual P-III 1G or single Xeon 2.2G architecture. >> >> > >Consider the following pages: > > http://www.intel.com/eBusiness/products/server/processor/ > http://www.intel.com/eBusiness/pdf/prod/server/xeon/wp020901.pdf > >According to that white paper, the Xeon's new "Hyper-Threading" >technology that they're bragging about should show benefits without >modifications to current apps, but they say the threading scheme makes a >big difference. Having said that, unless there are some kernel >developers on this list, I'd suggest searching the linux-kernel list >archives for an answer or getting up the nerve to ask the kernel gurus >yourself. Heck, you may even make kernel-traffic. :-) > > -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: Economy Mail Server - need advice :)
G'day You can run a fairly nice setup with a low-end machine. The biggest cpu hogs on a mailserver of what I have seen have been the pop server.. make sure you go with a mailserver that uses maildir. We use postfix here, but qmail should be nice and even good old sendmail works fine with the right delivery agent. But both qmail and postfix are easy to setup.. as for pop/imap we use courier here, it works well and isnt that slow either.. as for storage, 3GB on 400 users should be sufficient, it depends on how much mail you allow your users to store.. if they store too much mails your filesystem choice begins to matter as well, as for example current ext2 totally bogs down with over 3000 files in a directory.. and yes, we have seen email users leaving that amount in their boxes.. it's amazing how much you can cram in on 5MB :-) Anyway, what matters mostly is your user patterns.. If they are modem users that box will probably do with a little more ram and HDD.. if they are broadband/fiber users you will need to upgrade... Regards Roger Abrahamsson Michael Kean wrote: G'day all! For the last 5 years I've been running a 33.6K ISP. It's now time to upgrade. In the process I intend to change my isp name, and hopefully either build my own mail server or use someone else's. My Happy but tiny Debian box on a 686-PR200 running 150MHz with 64M RAM has been running a breed of radius, apache and squid. With roughly 400 users on the books I am quite sure my 3 Gig HDD is not going to be big enough. (perhaps it would be close if I kill squid and enable limits??) However, is the CPU and RAM sufficient to run a mail server, or is it really upgrade time. I have never set up an email server either - so am open to suggestions as to what's best to use. I have heard good reports of SpamAssassin as well, and wouldn't mind integrating that; perhaps as a later date. I may even need support from someone - so am potentially open to offers. Thanks for your time :) Debian is certainly a hell of a lot more hackerproof than RedHat was :) Cheers, Michael Kean. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: Economy Mail Server - need advice :)
G'day You can run a fairly nice setup with a low-end machine. The biggest cpu hogs on a mailserver of what I have seen have been the pop server.. make sure you go with a mailserver that uses maildir. We use postfix here, but qmail should be nice and even good old sendmail works fine with the right delivery agent. But both qmail and postfix are easy to setup.. as for pop/imap we use courier here, it works well and isnt that slow either.. as for storage, 3GB on 400 users should be sufficient, it depends on how much mail you allow your users to store.. if they store too much mails your filesystem choice begins to matter as well, as for example current ext2 totally bogs down with over 3000 files in a directory.. and yes, we have seen email users leaving that amount in their boxes.. it's amazing how much you can cram in on 5MB :-) Anyway, what matters mostly is your user patterns.. If they are modem users that box will probably do with a little more ram and HDD.. if they are broadband/fiber users you will need to upgrade... Regards Roger Abrahamsson Michael Kean wrote: >G'day all! > >For the last 5 years I've been running a 33.6K ISP. It's now time to >upgrade. In the process I intend to change my isp name, and hopefully >either build my own mail server or use someone else's. > >My Happy but tiny Debian box on a 686-PR200 running 150MHz with 64M RAM has >been running a breed of radius, apache and squid. > >With roughly 400 users on the books I am quite sure my 3 Gig HDD is not >going to be big enough. (perhaps it would be close if I kill squid and >enable limits??) However, is the CPU and RAM sufficient to run a mail >server, or is it really upgrade time. > >I have never set up an email server either - so am open to suggestions as to >what's best to use. I have heard good reports of SpamAssassin as well, and >wouldn't mind integrating that; perhaps as a later date. I may even need >support from someone - so am potentially open to offers. > >Thanks for your time :) Debian is certainly a hell of a lot more hackerproof >than RedHat was :) > >Cheers, Michael Kean. > > > > -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: user name length
Jeremy C. Reed wrote: >On Thu, 16 May 2002, Glenn Hocking wrote: > > > >>sendmail and qpopper. >> >>so that [EMAIL PROTECTED] is a total different user than >>[EMAIL PROTECTED] >> >> > > > We have run courier imap/pop with mysql support and all beneath one unix account for all mailboxes. It works like a clock, and you can have logins like that with no problems. Only one drawback I have seen, and that is that you cannot use procmail filters or any other filters that I have seen to set up automatic filtering of spam/viruses depending on each users wishes, and also there is this maildirquota that not all delivery agents support. Regards Roger A . Roger Abrahamsson Sys/Net Admin, Obbit AB -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: ISP manager.
Alexandru Stefan-Voicu wrote: > Does anyone know and can recommend me a good suite of administration programs >for an ISP ? > I mean web administration from a remote computer for: > ProFTPD > BIND > Qmail > Apache > Samba > Dial-in accounts > all bundled into a single utility ? > Thank you in advance. > > > Alexandru Stefan-Voicu, Digital Design Group server administrator. > > > > > Have you looked at webmin? it's has modules for many programs, not sure which though, it was a while since I played with it.. Regards /Roger -- Roger Abrahamsson Sys/Net Admin, Obbit AB -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
slapd and pam_ldap in debian?
Hello Finally figured I would test this out and try authenticating with LDAP and see if it could be something. However my testsetup absolutely refuses to work with pam_ldap, and I wondered if anyone here got that working? I use Debian/sid and latest packages there, but dont want to use sasl/kerberos. Will pam_ldap in debian work without sasl, or at least without kerberos, without a recompile? I have verified that it is not my acl's in ldap with giving * full write access to all, and it did not help, and besides ldapadd works, if I do a simple bind... only error message I get is that I get an error in binding if I supply binddn,bindpw and rootbinddn in ldap_conf, and the dn and password is correct since I can use it in ldapadd. I am totally mystified here.. Any help would be appreciated.. Regards Roger A -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: Open LDAP for Peer Review
Steve Wright wrote: > >Yes, postfix ldap lookups are well documented. >The LDAP_README that comes with postfix source will help. > Ahh.. Should not write emails to this list late in the afternoon when my brain is fried.. :-) What I really have problems with is courier. We use postfix/courier with no "real" unix accounts. All mail is delivered and read beneath /var/mail with nobody:nogroup. But, can I migrate this to LDAP and keep this setup? I've read the docs, and all docs for courier and postfix seems to assume that you have users that you look up for delivery and maildir location, which we dont. I'm not 100% friends with LDAP yet, so bear with me if I sound confused. /Roger --- Roger Abrahamsson Sys/Net Admin, Obbit AB -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: Open LDAP for Peer Review
Interesting thread.. Does anyone here know if it is possible to do lookups in postfix ldap support as per mysql? What I mean is can I keep the system with one uid/gid for all email accounts, and skip the unix account bit alltogether? Anyone done this with LDAP? and also "default" adresses, on the form "@mydomain.com". if not, how is the support nowadays for 32 bit uids? /Roger --- Roger Abrahamsson Sys/Net Admin, Obbit AB -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: Debian GNU/Linux as email & DNS server
I'd go with postfix...You can set it up as a drop in replacement really for sendmail, it has the ability to use either mysql or ldap as backend and scales well of that I have seen. You definitively have to go with woody or sid, but as long as you run a dedicated server and dont have 4000 packages installed it tend to be pretty stable.. just dont upgrade it everyday, once a week is enough, and try and upgrade a test machine first to see that it dont turn into a veggie.. :-) It also is easy to set up to use either maildir or mailbox format, and you can then pick whatever pop3/imap server you want.. Regards Roger A
Re: Debian GNU/Linux as email & DNS server
I'd go with postfix...You can set it up as a drop in replacement really for sendmail, it has the ability to use either mysql or ldap as backend and scales well of that I have seen. You definitively have to go with woody or sid, but as long as you run a dedicated server and dont have 4000 packages installed it tend to be pretty stable.. just dont upgrade it everyday, once a week is enough, and try and upgrade a test machine first to see that it dont turn into a veggie.. :-) It also is easy to set up to use either maildir or mailbox format, and you can then pick whatever pop3/imap server you want.. Regards Roger A -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: HELP SOS
Hereward Cooper wrote: Talking about being locked out of mysql, the other day I found my machine doing very strange things at things at 6:30am very morning. It started by my root password being changed (from nothing), after which I just reinstalled. Next the grant tables got screwed up by something and I was locked out of very db on the server. I backed up the important db's and reinstalled, every thing seemed to work. The next day the exact same thing happened, at the same time. The mysql.log files listed php-nuke trying to do stuff even when it wasn't being used or hadn't been in many days. I blew away php-nuke, which I wasn't using anyhow and everything seems to be back to norm. Anyone know why this might happen? Anyone had this problem? Thanks, Hereward php-nuke has a big security hole in it.. you can read up more on it on: http://lwn.net/2001/1115/security.php3 Your server sounds compromised, I'd look deep into files or better take a copy of anything important and reinstall from scratch. /Roger
Re: HELP SOS
Hereward Cooper wrote: > > > Talking about being locked out of mysql, the other day I found my machine doing > very strange things at things at 6:30am very morning. It started by my root > password being changed (from nothing), after which I just reinstalled. Next the > grant tables got screwed up by something and I was locked out of very db on the > server. I backed up the important db's and reinstalled, every thing seemed to > work. The next day the exact same thing happened, at the same time. > The mysql.log files listed php-nuke trying to do stuff even when it wasn't being > used or hadn't been in many days. I blew away php-nuke, which I wasn't using > anyhow and everything seems to be back to norm. > Anyone know why this might happen? Anyone had this problem? > > Thanks, > > Hereward > > > php-nuke has a big security hole in it.. you can read up more on it on: http://lwn.net/2001/1115/security.php3 Your server sounds compromised, I'd look deep into files or better take a copy of anything important and reinstall from scratch. /Roger -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: HELP SOS
Craigsc wrote: Hi Guys I have succeeded in locking myself out of mysql. I need to set the root password back to nothing, can anyone help ? Or am I going to have to reinstall, in which case where is my databases stored ?> Help at this stage would be a blessing :) ..Craig Hello.. Lets see if I remember it right, check man page for exakt syntax. But run the mysql server with -Sg or --skip-grant (or something like that). It will make the whole server wide open to the whole world so be sure that noone but you can access it while you do it.. Then you just set the password you want and restart it. /Roger
Re: HELP SOS
Craigsc wrote: > Hi Guys > > > > I have succeeded in locking myself out of mysql. I need to set the > root password back > > to nothing, can anyone help ? Or am I going to have to reinstall, in > which case where > > is my databases stored ?> > > > > Help at this stage would be a blessing :) > > > > ..Craig > Hello.. Lets see if I remember it right, check man page for exakt syntax. But run the mysql server with -Sg or --skip-grant (or something like that). It will make the whole server wide open to the whole world so be sure that noone but you can access it while you do it.. Then you just set the password you want and restart it. /Roger -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: RAID & Hard disk performance
Well, my experience instead is that scsi is rock solid compared to ide as long as you choose drives with same rotational speed etc. If you get those high rpm drives you have to be very careful with cooling. I try always to get 7200rpm drives and also stay away from certain brands, and then I havent seen one failure this year. Biggest problem I see with ide is the way drives can behave so differently and that you need all your pci slots to run a decent raid5 system, if not going for one of the very rare 5+ channel hardware raid controllers. Which are just as expensive as scsi controllers and have really no good linux support that I have found. If you want anything above 6-7 disks in a raid system you really dont have any alternative than scsi, no matter if you want to run software or hardware raid. For workstations though I would go with IDE, not many people load their computers to the degree they would note the difference. So for drive failings, I would say that they much more correlate to certain drive models and/or manufacturers than ide/scsi. Personally I try and stay as far away as possible from Maxtor and Seagate, but thats me. (I used to work way back as a pc tech, and I dont think I have ever seen so many dead on arrival drives as from seagate, maxtors usually worked at first and then started dying one by one)
Re: IMAP mail for heavy users
On Mon, 24 Sep 2001, Sanjeev Gupta wrote: <-- cut away --> > > Hence pointers required: > > 1 > Should I deliver to maildir? Will IMAP access be faster in this case, > with a few hudred mails and a few hunded MB? Definitively.. mbox delivery gets very slow as soon as a mailboxes gets to a few megabyte while maildirs get slow if there are huge amounts of many small email, (this is filesystem dependent though). So over 3000 emails in a folder can make the system a bit slower, but mbox would probably slow to a crawl then. > > 2 > I like exim, any reason not to use it? > Not sure there, it depends on it's capabilities and if you like it personally. We are currently switching to postfix, which has some very nice features (MySQL maps especially) and can deliver to maildirs. > 3 > I could deliver to MySQL, which is running on the box, I just don't > understand it, and I would like to stick to a known format when > something goes wrong. Don't Generally delivering to databases is bad. you once again gets all mails in one huge file, and it is much more easy to get corruption of "all" mails instead of one users mail. > > 4 > Cyrus? Courier? > Yet again preference.. If you prefer Cyrus and it works for you, use it. I only know Courier, and it has some nice features, like MySQL lookups of users, and the pop and imap daemons both use same lookups and directory structure, which could make your migration easier. Btw, Postfix and Courier works very nicely together.. :) > 5 > What could users use to change their passwords, or vacation messages? I > persume they could use IMP to read and deply while travelling. > > 6 > And finally: Is there any standard to sync or replicate address books? Not sure there.. LDAP is a good place to start looking in any case. > > Thanks a ton for reading this. > > -- > Sanjeev Gupta > > PS: Secondary MX available for "personal" domains, I have a LARGE spool > disk, and as long as you are up once in a while, I could even bump up > the life of mails in spool beyond 5d. Ditto Primary/Secondary DNS for > personal domains of list members. > /Regards Roger Abrahamsson - Roger Abrahamsson, Sys/Net Admin, Obbit AB - -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: Failover with MySQL
On Thu, 16 Aug 2001, Buisson Olivier wrote: > Hi, > > I would like to know if anybody have a solution to put 2 mysql server in > failover. > Does anybody have setting up such architecture ? > > To be more understood: I would like to setup 2 mysql server. One is a > master and would take all requests. When it failed, the other server > takes the hand and respond to the requets. > > If someone have already setup this, i'm very interessed by his > experiment. > > Cheers, > Olivier Buisson > > -- The latest versions of mysql supports a simple replication scheme. You will need to run the mysql version from debian unstable, and I think there is documentation there of how to do it. Have not tried it myself yet though. /Roger ----- Roger Abrahamsson, Sys/Net Admin, Obbit AB Phone: (+46)(0)90 133310Fax:(+46)(0)90 133370 - -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: Clustering mail servers - Cyrus or Courier ?
On Mon, 6 Aug 2001, Charl Matthee wrote: > On Sun, Aug 05, 2001 at 04:10:13PM +0200, Przemyslaw Wegrzyn wrote: > > > I'm looking for good solution for big, scalabale mailserver installation, > > for 500,000 accounts and more... > > > > As for now I think: > > - sharng NFS-mounted mail storage is not so good idea. > > - scaling can be done by partitioning mail storage between servers (with > > a little less avialabilty risk). > > Sharing over NFS I would not be too spooked about, all depends more on how the NFS shares are mounted, and what directory structure you've chosen. I'm currently testing a new system here, Postfix as SMTP server, and Courier as IMAP/POP server.. Both authenticate and do lookups through MySQL, and accesstimes are quite good. With 100k accounts and about 100 mail in the maildir, login times were about 0.6 secs for pop3/imap. With this setup you also get the benefit of no real user accounts for the email, all is run as one single user/group. Postfix supports several different MySQL servers also, so you can set up replication between a couple of MySQL-servers and then add those to Postfix. Havent checked Couriers support for that though. One important thing, really try to distribute your accounts in a manner so you dont get more than say a thousand accounts in each directory. Ext2 as a filesystem has it's limitations, but I prefer that for now, as I know it's well tested and reliable. For me if I have a user called foobaren and one called fooenbar they go in /var/spool/mail/foo/bar/foobaren/ /var/spool/mail/foo/enb/fooenbar/ The quota is the problem in this setup. Courier supports maildirquota, but not verified yet if Postfix does. Possibly you could solve that by using maildrop as delivery agent. Regards Roger A - Roger Abrahamsson, Sys/Net Admin, Obbit AB Phone: (+46)(0)90 133310Fax:(+46)(0)90 133370 - -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: Software RAID...
On Wed, 1 Aug 2001, Russell Coker wrote: > > The way RAID-5 works with 3 disks is to put blocks in the following order (X > is an XOR parity block): > > 0 1 X > X 2 3 > 4 X 5 > 6 7 X > ... > > With 4 disks it will be the following: > 0 1 2 X > X 3 4 5 > 6 X 7 8 > ... > > So adding an extra disk would involve moving every block of data (apart from > the first two). Now what happens if you experience a crash or power failure > while doing such a re-build? > Well, moving the blocks of data should be pretty straightforward then. You would have to recalculate every checksum block but as I see it, it would be possible to do this on a row by row basis, and also keep a working copy of every row + a counter on a different disk or possibly way back on the new disk. So if the old system looked like this 0 1 X X 2 3 4 X 5 6 7 X X 8 9 . During rebuild you would have this: 0 1 2 X X 3 4 5 6 X 7 8 <- row you are writing 6 7 X Z Old raid + new empty blocks X 8 9 Z ... As soon as you have traversed more than in this case 2 rows you would not even need a backup copy of the blocks, only a counter of how far you have gone. This would have to be held on disk though, and all disk writes mush be synchronous to ensure that the data is safe in case of powerfail or system crash. It should really be possible to do this rebuild in a running raid system (if the rebuild process is done from the raid5 driver) , as long as you keep track of how far the rebuild has gone and lock the row in progress + in the beginning you need to lock the first rows from access. What I am worried more in this case is how the mke2fs optimisations for a raid device will affect performance if you do this repeatedly, or will a "defrag" of the raid device after this rebuid solve it? /Roger -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: Software RAID...
On Wed, 1 Aug 2001, Russell Coker wrote: > On Tue, 31 Jul 2001 16:28, Roger Abrahamsson wrote: > > Do anyone here know is if there is any way you can add disks/grow an > > existing software raid-5 system (2.4.x kernels)? > > The cost of large IDE-disks now makes it possible to have some 300+GB > > system for cheap mass storage where access times is less critical, but it > > would be nice to be able to add disks to it after demand.. > > Any info is appreciated. > > LVM is the correct solution to this problem. You can run LVM over multiple > RAID-5 and RAID-1 arrays. Then you have RAID for reliability and LVM to > allow easy growth of storage. > > I'm still not sure that LVM is ready for serious use though... > Hmm, LVM could solve it in a fashion.. However I would have to build one new raid5 array each time I uppgraded it with that solution. It would have been nice to be able to grow it with one disk at a time. I just thought it would be possible to do it, since it's all done in software in any case. As for serious use, this is still an "el cheapo" solution. It's okay for some downtime, as long as the data stays intact. Anyway thanx for the info. /Roger -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Software RAID...
Hello. Do anyone here know is if there is any way you can add disks/grow an existing software raid-5 system (2.4.x kernels)? The cost of large IDE-disks now makes it possible to have some 300+GB system for cheap mass storage where access times is less critical, but it would be nice to be able to add disks to it after demand.. Any info is appreciated. /Roger A -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: IP Accounting and 2.4
On Tue, 3 Jul 2001, Chad C. Walstrom wrote: > > Now, I searched the archives here and took someone's [7] suggestion to > look at fiprad[8]. However, it's kernel module and patch are for the > 2.2.14 kernel alone. The last update to the website looks to be in > March of 2000. I was intrigued because of the fiprad daemon that > inserted accounting for ipblocks (VERY nice way to configure by the > way), directly into MySQL (not my favorite, but not a problem). I was > also intrigued by the efficient logic for logging the packets (no nest > of ipchains rules). > > I'm interested in finding out what others have done for IP accounting > for a large number of customers. (Rate limiting and traffic shaping > aside -- a topic for another day.) If anyone else is interested in > fiprad for the 2.4 kernel, let me know. I'll send off a copy of this > to the fiprad developers and see if they've worked on it since May > 2000. Hello. Unfortunately we havent had so much time over to work on fipra, but now it is summer here and vacation times is upon us. So right now I am in the process of rewriting it to 2.4.x kernels and with the netfilter structure it seems possible that it can be totally modular finally. Hopefully we'll have some alpha release done in a week or two for the daring. Regards Roger Abrahamsson PS. We have run tests with fipra, and a PII-350 managed about 30mbit of continous throughput while logging was activated for >3000 ip adresses. (That was with the 2.2.14 kernel.) - Roger Abrahamsson, Sys/Net Admin, Obbit AB Phone: (+46)(0)90 133310Fax:(+46)(0)90 133370 -
Re: IP Accounting and 2.4
On Tue, 3 Jul 2001, Chad C. Walstrom wrote: > > Now, I searched the archives here and took someone's [7] suggestion to > look at fiprad[8]. However, it's kernel module and patch are for the > 2.2.14 kernel alone. The last update to the website looks to be in > March of 2000. I was intrigued because of the fiprad daemon that > inserted accounting for ipblocks (VERY nice way to configure by the > way), directly into MySQL (not my favorite, but not a problem). I was > also intrigued by the efficient logic for logging the packets (no nest > of ipchains rules). > > I'm interested in finding out what others have done for IP accounting > for a large number of customers. (Rate limiting and traffic shaping > aside -- a topic for another day.) If anyone else is interested in > fiprad for the 2.4 kernel, let me know. I'll send off a copy of this > to the fiprad developers and see if they've worked on it since May > 2000. Hello. Unfortunately we havent had so much time over to work on fipra, but now it is summer here and vacation times is upon us. So right now I am in the process of rewriting it to 2.4.x kernels and with the netfilter structure it seems possible that it can be totally modular finally. Hopefully we'll have some alpha release done in a week or two for the daring. Regards Roger Abrahamsson PS. We have run tests with fipra, and a PII-350 managed about 30mbit of continous throughput while logging was activated for >3000 ip adresses. (That was with the 2.2.14 kernel.) - Roger Abrahamsson, Sys/Net Admin, Obbit AB Phone: (+46)(0)90 133310Fax:(+46)(0)90 133370 - -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: Courier and MySQL
On Tue, 29 May 2001, Tamas TEVESZ wrote: > On Tue, 29 May 2001, Roger Abrahamsson wrote: > > > Iif I have a mailuser named "foo" it should be placed in a maildir at > > /var/spool/mail/f/foo > > this is _the_ 'home directory' from courier's point of view. > > Yep, thats how it is supposed to be.. but I cant get it even to connect and authenticate against mysql. The mysql logs shows no connection attempt even, in spite of me removing all but authentication through mysql. I have all daemons started, and I telnet to port 143 and talk to the imap server. if the user exists on the system I get following: Trying 127.0.0.1... Connected to localhost. Escape character is '^]'. * OK Courier-IMAP ready. Copyright 1998-2001 Double Precision, Inc. See COPYING for distribution information. aa01 login foo bar * BYE [ALERT] Fatal error: Maildir: No such file or directory Connection closed by foreign host. and if the user dont exist: aa01 login john doe aa01 NO Login failed. Basically it seems to ignore my settings, and use pam instead, which I most definitively do not want. imaplogin gets started with the argument pointing correctly to the authmysql module. If I connect to the mysql server by hand with the user and password authmysql is configured for, I get a log entry and all works fine. Is there any way I trace the courier authentication process more deeply without resorting to the source packages? /Roger
Re: Courier and MySQL
On Tue, 29 May 2001, Tamas TEVESZ wrote: > On Tue, 29 May 2001, Roger Abrahamsson wrote: > > > Iif I have a mailuser named "foo" it should be placed in a maildir at > > /var/spool/mail/f/foo > > this is _the_ 'home directory' from courier's point of view. > > Yep, thats how it is supposed to be.. but I cant get it even to connect and authenticate against mysql. The mysql logs shows no connection attempt even, in spite of me removing all but authentication through mysql. I have all daemons started, and I telnet to port 143 and talk to the imap server. if the user exists on the system I get following: Trying 127.0.0.1... Connected to localhost. Escape character is '^]'. * OK Courier-IMAP ready. Copyright 1998-2001 Double Precision, Inc. See COPYING for distribution information. aa01 login foo bar * BYE [ALERT] Fatal error: Maildir: No such file or directory Connection closed by foreign host. and if the user dont exist: aa01 login john doe aa01 NO Login failed. Basically it seems to ignore my settings, and use pam instead, which I most definitively do not want. imaplogin gets started with the argument pointing correctly to the authmysql module. If I connect to the mysql server by hand with the user and password authmysql is configured for, I get a log entry and all works fine. Is there any way I trace the courier authentication process more deeply without resorting to the source packages? /Roger -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: Courier and MySQL
On Tue, 29 May 2001, Hirling Endre wrote: > > > > May 29 11:39:39 stargate courierpop3login: Connection, ip=[:::127.0.0.1] > > May 29 11:39:48 stargate courierpop3login: Maildir: No such file ordirectory > > > > I do not have any Maildir file or directory, and no home directories for > > users either, as there is no real users here... > > If you do not have mail directory or home directory, where do you put > users' mail? > > -m- > Iif I have a mailuser named "foo" it should be placed in a maildir at /var/spool/mail/f/foo the courier-imap should pull the maildir from the mysql table, and also what uid and gid to run as for that user. earlier debian packages I managed to get working like that. /Roger
Re: Courier and MySQL
On Tue, 29 May 2001, Hirling Endre wrote: > > > > May 29 11:39:39 stargate courierpop3login: Connection, ip=[:::127.0.0.1] > > May 29 11:39:48 stargate courierpop3login: Maildir: No such file ordirectory > > > > I do not have any Maildir file or directory, and no home directories for > > users either, as there is no real users here... > > If you do not have mail directory or home directory, where do you put > users' mail? > > -m- > Iif I have a mailuser named "foo" it should be placed in a maildir at /var/spool/mail/f/foo the courier-imap should pull the maildir from the mysql table, and also what uid and gid to run as for that user. earlier debian packages I managed to get working like that. /Roger -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Courier and MySQL
Hello. Has anyone managed to get these working together from the debian packages? However I set the config files and things it seems as the mysql server never even gets a request from the imap server? having the following courier packages installed: ii courier-authda 0.34.0-1 Courier Mail Server Suite authentification d ii courier-authmy 0.34.0-1 MySQL authentification for Courier Mail Syst ii courier-base 0.34.0-1 Courier Mail Server Suite Base System ii courier-doc0.34.0-1 Documentation for the Courier Mail Server ii courier-imap 1.3.8-1IMAP daemon with PAM and Maildir support ii courier-imap-s 1.3.7-1IMAP daemon with SSL, PAM and Maildir suppor ii courier-ldap 0.34.0-1 LDAP support for Courier Mail Server suite ii courier-pop0.34.0-1 POP3 daemon with PAM and Maildir support ii courier-pop-ss 0.33.0-1 POP3 daemon with SSL, PAM and Maildir suppor ii courier-ssl0.33.0-1 Courier Mail Server SSL Package When I try the imap server I get the following in the log, and it complains about Maildir and dies. May 29 11:12:54 stargate imaplogin: Connection, ip=[:::127.0.0.1] May 29 11:13:00 stargate imaplogin: LOGIN, user=hyperion, ip=[:::127.0.0.1] The pop3sever also dies after login and gives the following in the log. May 29 11:39:39 stargate courierpop3login: Connection, ip=[:::127.0.0.1] May 29 11:39:48 stargate courierpop3login: Maildir: No such file ordirectory I do not have any Maildir file or directory, and no home directories for users either, as there is no real users here... So, anyone know how to get this working, or at least pin down the problem? Regards Roger Abrahamssson
Re: AW: LDAP as userdatabase for UNIX & W2k
Anyone knows if you can use LDAP as a frontend for MySQL? The mysql_pam module dont really gives one all needed to fully move to a mysql account based system, but then ldap is bound to it's db hashed database. It would be nice to use their combined power... /Roger
Re: AW: LDAP as userdatabase for UNIX & W2k
Anyone knows if you can use LDAP as a frontend for MySQL? The mysql_pam module dont really gives one all needed to fully move to a mysql account based system, but then ldap is bound to it's db hashed database. It would be nice to use their combined power... /Roger -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: Machine Registration
On Fri, 20 Apr 2001 [EMAIL PROTECTED] wrote: > Hi All, > I've been asked to develop something like they have in Hotels, > where, when you plug into the building Network, and fire up > Nutscrape, the only thing you can get to is a page asking you > register your machine before you can get out on the Net. > > Now I can't believe that this is so proprietary, but I've not seen > anything like this, even for $$$. Does anyone have an idea how they > do this, or, even better, have something like this working already? > > Tim > Well, it shouldnt really be that hard to do.. DHCP and use private network numbers.. A web server on the firewall that you log into, and scripts that then rewrites the firewall rules on the fly... Anyway, thats at least one way to do it. /Roger
Re: Machine Registration
On Fri, 20 Apr 2001 [EMAIL PROTECTED] wrote: > Hi All, > I've been asked to develop something like they have in Hotels, > where, when you plug into the building Network, and fire up > Nutscrape, the only thing you can get to is a page asking you > register your machine before you can get out on the Net. > > Now I can't believe that this is so proprietary, but I've not seen > anything like this, even for $$$. Does anyone have an idea how they > do this, or, even better, have something like this working already? > > Tim > Well, it shouldnt really be that hard to do.. DHCP and use private network numbers.. A web server on the firewall that you log into, and scripts that then rewrites the firewall rules on the fly... Anyway, thats at least one way to do it. /Roger -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: IMAP/POP3 + Maildir
On Mon, 26 Feb 2001, Marc Haber wrote: > On Mon, 26 Feb 2001 10:35:04 + (GMT), Gavin Hamill > <[EMAIL PROTECTED]> wrote: > >> had problems with many concurrent connections. I am very eager to try out > >> the courier pop3 server, and the imap server also, but havent sofar > >> managed to compile in MySQL support, which is necessary for us. > > > >I have only ever managed to get courier-imap 1.1 working.. anything newer > >and it fails to detect the mysql headers and libraries.. I've also had > >practically no help whatsoever from the IMAP author who simply said about > >setting env variables (which I had already tried...) > > I use courier-imap and courier-pop from Stefan Hornburg's brand new > packages that I backported to potato. I could make my potato .debs > available (for use at your own risk) and even give a working > configuration, if you are interested. > > Greetings > Marc > > -- I would also be very interested in those, as I have tried time and again to compile it with working mysql and failed. Regards Roger - Roger Abrahamsson, Sys/Net Admin, Obbit AB Radhusespl.17D, S-90328 Umea, Sweden -
Re: IMAP/POP3 + Maildir
On Mon, 26 Feb 2001, Marc Haber wrote: > On Mon, 26 Feb 2001 10:35:04 + (GMT), Gavin Hamill > <[EMAIL PROTECTED]> wrote: > >> had problems with many concurrent connections. I am very eager to try out > >> the courier pop3 server, and the imap server also, but havent sofar > >> managed to compile in MySQL support, which is necessary for us. > > > >I have only ever managed to get courier-imap 1.1 working.. anything newer > >and it fails to detect the mysql headers and libraries.. I've also had > >practically no help whatsoever from the IMAP author who simply said about > >setting env variables (which I had already tried...) > > I use courier-imap and courier-pop from Stefan Hornburg's brand new > packages that I backported to potato. I could make my potato .debs > available (for use at your own risk) and even give a working > configuration, if you are interested. > > Greetings > Marc > > -- I would also be very interested in those, as I have tried time and again to compile it with working mysql and failed. Regards Roger - Roger Abrahamsson, Sys/Net Admin, Obbit AB Radhusespl.17D, S-90328 Umea, Sweden - -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: IMAP/POP3 + Maildir
On Mon, 26 Feb 2001, Jeff Waugh wrote: > Hi all, > > I'm using the unstable courier-imap packages recompiled on potato as my IMAP > server, but I'm getting more and more requests for POP3. Supposedly there's > POP3 support in version 1.3.4, but (and this surprised me greatly) it isn't > in unstable yet. > > What can people recommend as a POP3 server that works with Maildir? > > Thanks! > > - Jeff > I can only warn about solid-pop3d. We tried it here and it showed big problems. it could take up to 30 seconds in authentication, and it also had problems with many concurrent connections. I am very eager to try out the courier pop3 server, and the imap server also, but havent sofar managed to compile in MySQL support, which is necessary for us. /Roger Abrahamsson - Roger Abrahamsson, Sys/Net Admin, Obbit AB Radhusespl.17D, S-90328 Umea, Sweden -
Re: POP3 and SMTP server for an ISP
I recently saw this article on LWN http://www.lwn.net/2001/0222/kernel.php3 Where it shows the problems with large ext2 directories and a possible future solution. I was in the process of switch to maildirs and use several servers with NFS instead, but this puts it all on the head. I dont know if any current linux fs can show good performance with large directories and also export this over NFS. ReiserFS seems good but lacks in NFS if you dont apply some serious patches to the system, and I am reluctant to do that in a production system. Basically Sendmail seems to do okay, it's the pop3 server that shows problems. Regards Roger Abgrahamsson - Roger Abrahamsson, Sys/Net Admin, Obbit AB Radhusespl.17D, S-90328 Umea, Sweden -
Re: IMAP/POP3 + Maildir
On Mon, 26 Feb 2001, Jeff Waugh wrote: > Hi all, > > I'm using the unstable courier-imap packages recompiled on potato as my IMAP > server, but I'm getting more and more requests for POP3. Supposedly there's > POP3 support in version 1.3.4, but (and this surprised me greatly) it isn't > in unstable yet. > > What can people recommend as a POP3 server that works with Maildir? > > Thanks! > > - Jeff > I can only warn about solid-pop3d. We tried it here and it showed big problems. it could take up to 30 seconds in authentication, and it also had problems with many concurrent connections. I am very eager to try out the courier pop3 server, and the imap server also, but havent sofar managed to compile in MySQL support, which is necessary for us. /Roger Abrahamsson - Roger Abrahamsson, Sys/Net Admin, Obbit AB Radhusespl.17D, S-90328 Umea, Sweden - -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: POP3 and SMTP server for an ISP
I recently saw this article on LWN http://www.lwn.net/2001/0222/kernel.php3 Where it shows the problems with large ext2 directories and a possible future solution. I was in the process of switch to maildirs and use several servers with NFS instead, but this puts it all on the head. I dont know if any current linux fs can show good performance with large directories and also export this over NFS. ReiserFS seems good but lacks in NFS if you dont apply some serious patches to the system, and I am reluctant to do that in a production system. Basically Sendmail seems to do okay, it's the pop3 server that shows problems. Regards Roger Abgrahamsson - Roger Abrahamsson, Sys/Net Admin, Obbit AB Radhusespl.17D, S-90328 Umea, Sweden - -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: POP3 and SMTP server for an ISP
Hello again. I've been closely following this thread, and I was wondering what sort of system that would be recommendable for 50.000+ users? No local access and no home directories is wanted, but pure mass hosting. Maildirs I assume is essential. I've tried some programs, but they fail horribly when the system gets big. I have been wondering about file system limitations too. Say you have 5000 users in each subtree and they have between 100 and 30.000 emails in their folders. (The large figure is an example of a smartass like me. lol) Preferrable all user authentication is done in MySQL or other SQL server. Any recommendations, ideas or so?? /Roger Abrahamsson ----- Roger Abrahamsson, Sys/Net Admin, Obbit AB Radhusespl.17D, S-90328 Umea, Sweden -
Re: POP3 and SMTP server for an ISP
Hello again. I've been closely following this thread, and I was wondering what sort of system that would be recommendable for 50.000+ users? No local access and no home directories is wanted, but pure mass hosting. Maildirs I assume is essential. I've tried some programs, but they fail horribly when the system gets big. I have been wondering about file system limitations too. Say you have 5000 users in each subtree and they have between 100 and 30.000 emails in their folders. (The large figure is an example of a smartass like me. lol) Preferrable all user authentication is done in MySQL or other SQL server. Any recommendations, ideas or so?? /Roger Abrahamsson ----- Roger Abrahamsson, Sys/Net Admin, Obbit AB Radhusespl.17D, S-90328 Umea, Sweden - -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: Sendmail
On Fri, 16 Feb 2001, Ross Peachey wrote: > On Thu, Feb 15, 2001 at 02:23:07PM +0100, Roger Abrahamsson wrote: > > Anyone here know how to 'force' sendmail to bind to one specific ip on a > > machine? I've just moved it, and it works fine but for one thing, it > > stubbornly wants to use the primary ip/interface when sending messages > > out. It's causing problems with a few customers firewalls... > > > Use the following line in sendmail.mc to only bind to a particular IP: > > define(`confDAEMON_OPTIONS', `Addr=203.43.87.56') > > Not sure if this is really what you want, because this will not allow you > to receive mail on other interface IPs. > > > Ross. > Well, just tried it, and it works fine, except for one thing as I see it. It stops answering on localhost also, and from the machine itself I cannot reach the ip.. say the machine is 192.168.1.10 and the ip for the mail server is 192.168.1.8. i.e. I cannot telnet to 192.168.1.8 port 25 when logged in on 192.168.0.10 ?? /Roger
Sendmail
Anyone here know how to 'force' sendmail to bind to one specific ip on a machine? I've just moved it, and it works fine but for one thing, it stubbornly wants to use the primary ip/interface when sending messages out. It's causing problems with a few customers firewalls... Regards Roger A
Re: Sendmail
On Fri, 16 Feb 2001, Ross Peachey wrote: > On Thu, Feb 15, 2001 at 02:23:07PM +0100, Roger Abrahamsson wrote: > > Anyone here know how to 'force' sendmail to bind to one specific ip on a > > machine? I've just moved it, and it works fine but for one thing, it > > stubbornly wants to use the primary ip/interface when sending messages > > out. It's causing problems with a few customers firewalls... > > > Use the following line in sendmail.mc to only bind to a particular IP: > > define(`confDAEMON_OPTIONS', `Addr=203.43.87.56') > > Not sure if this is really what you want, because this will not allow you > to receive mail on other interface IPs. > > > Ross. > Well, just tried it, and it works fine, except for one thing as I see it. It stops answering on localhost also, and from the machine itself I cannot reach the ip.. say the machine is 192.168.1.10 and the ip for the mail server is 192.168.1.8. i.e. I cannot telnet to 192.168.1.8 port 25 when logged in on 192.168.0.10 ?? /Roger -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Sendmail
Anyone here know how to 'force' sendmail to bind to one specific ip on a machine? I've just moved it, and it works fine but for one thing, it stubbornly wants to use the primary ip/interface when sending messages out. It's causing problems with a few customers firewalls... Regards Roger A -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: pop3 and Maildir
On Thu, 15 Feb 2001, Eric Ravelomamantsoa wrote: > I've been following this thread with interest because I'm also looking > for a pop3 server for a Debian system . Anyway. There are some basic > points I'm missing though. What are the pros and cons of Maildir versus > other formats. What is the point with Mysql and pam authentication and > how does it affect a mail server. Can somebody, please give me some > pointers where those are explained, and what are the best current > practices for setting up a pop/imap mail server? > > Thanks to all, > > Eric. > Okay, we run pop3, imap and smtp currently on a debian box. The real advantage I see it with Maildir, is that it allows you to run your mailspool over NFS, as it require no locking. That enables you to have several different machines delivering to the same mailspool. NFS is of course slower but having several machines acting as your mail system gives you totally different possibilities of taking down one server and refit it while the customers dont notice a thing. The mailbox format is the 'defacto' standard and some claim it to be faster. But it requires locking if you use several different programs working with it at the same time. pam makes authentication 'transparent' in that it allows you to choose the authentication method separate from the program using it. If the mail program supports MySQL authentication directly, they usually also allow extra information to be pulled from the tables. Courier-IMAP is of that kind, and allows you to specify for each 'user' the uid,gid,mailbox placing, password etc. In the end that can give you a system where you dont need to give mailusers "real" unix accounts. /Roger Abrahamsson
Re: pop3 and Maildir
On Thu, 15 Feb 2001, Eric Ravelomamantsoa wrote: > I've been following this thread with interest because I'm also looking > for a pop3 server for a Debian system . Anyway. There are some basic > points I'm missing though. What are the pros and cons of Maildir versus > other formats. What is the point with Mysql and pam authentication and > how does it affect a mail server. Can somebody, please give me some > pointers where those are explained, and what are the best current > practices for setting up a pop/imap mail server? > > Thanks to all, > > Eric. > Okay, we run pop3, imap and smtp currently on a debian box. The real advantage I see it with Maildir, is that it allows you to run your mailspool over NFS, as it require no locking. That enables you to have several different machines delivering to the same mailspool. NFS is of course slower but having several machines acting as your mail system gives you totally different possibilities of taking down one server and refit it while the customers dont notice a thing. The mailbox format is the 'defacto' standard and some claim it to be faster. But it requires locking if you use several different programs working with it at the same time. pam makes authentication 'transparent' in that it allows you to choose the authentication method separate from the program using it. If the mail program supports MySQL authentication directly, they usually also allow extra information to be pulled from the tables. Courier-IMAP is of that kind, and allows you to specify for each 'user' the uid,gid,mailbox placing, password etc. In the end that can give you a system where you dont need to give mailusers "real" unix accounts. /Roger Abrahamsson -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: pop3 and Maildir
-Original Message- From: Felipe Alvarez Harnecker <[EMAIL PROTECTED]> To: Roger Abrahamsson <[EMAIL PROTECTED]> Cc: debian-isp@lists.debian.org Date: den 14 februari 2001 15:51 Subject: Re: pop3 and Maildir Well, the pam authentication only allows for cleartext or mysqls password() format, and also it dont allow for telling the server where to find the mailbox and what uid/gid to use. I've tried it, and basically it dont fill the needs I have, it would need to fill the 'account' role also. Regards Roger A > >What about cyrus* ? I'm using it and very happy. > >It has pam support so mysql auth would be no prob. > >Cheers. > >F. > >Roger Abrahamsson writes: > > On Tue, 13 Feb 2001, Christofer Algotsson wrote: > > > > Well, all I've seen is that the qmail system seems to be an integrated > > package. We here are also looking into switching to maildirs, and > > courier-imap seems very nice, especially with mysql authentication. Latest > > upstream courier-imap also have a pop3 server with it, but sofar I have > > not succeded in getting mysql support compiled in. If anyone has knowledge > > of how to get this working on a debian system I would be very happy. > > > > I've tried solid-pop3d in the unstable branch, but it seems to scale very > > poorly, with about 10.000 user accounts it gets horribly slow. > > > > > > Regards > > Roger Abrahamsson > > > > > > > > qmail's pop-3 daemon for example. > > > > > > > > > On Tue, Feb 13, 2001 at 09:18:17AM +1000, Mitchell wrote: > > > > > > > > Hi, I was wundering if anyone knows of any pop3 daemons for Debian that > > > > support the Maildir format. We are currently using exim as our MTA with > > > > courier-imap for access to the mailboxes. I have as yet been unable to > > > > find a courier-pop3d package for Debian, and it would seam that this is > > > > only available as part of the entire courier MTA package which provides > > > > imap, MTA, mailing lists, and such. > > > > > > > > vpopmail is also not an option as it depends on qmail and appears to > > > > have it's own proprietry CDB format for storing usernames and passwords. > > > > > > > > exim currently is just authenticating users from the /etc/passwd > > > > /etc/shadow files, and we are looking in to switching to mysql > > > > authentication here. > > > > > > > > pop3-lite shows promis as it's nice and modularised, but I can not yet > > > > find a plugin to allow it to read for Maildir. > > > > > > > > > > > > Any hints here would be muchly appreciated. > > > > > > > > I am not against the idea of building deb packages from sorce if there > > > > isn't currently anything pre-packaged that will do the job. > > > > > > -- > > > > > > Christofer, > > > > > > > > > -- > > > To UNSUBSCRIBE, email to [EMAIL PROTECTED] > > > with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED] > > > > > > > > > > - > > Roger Abrahamsson, Sys/Net Admin, Obbit AB > > Radhusespl.17D, S-90328 Umea, Sweden > > - > > > > > > -- > > To UNSUBSCRIBE, email to [EMAIL PROTECTED] > > with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED] > > > > >
Re: pop3 and Maildir
On Tue, 13 Feb 2001, Christofer Algotsson wrote: Well, all I've seen is that the qmail system seems to be an integrated package. We here are also looking into switching to maildirs, and courier-imap seems very nice, especially with mysql authentication. Latest upstream courier-imap also have a pop3 server with it, but sofar I have not succeded in getting mysql support compiled in. If anyone has knowledge of how to get this working on a debian system I would be very happy. I've tried solid-pop3d in the unstable branch, but it seems to scale very poorly, with about 10.000 user accounts it gets horribly slow. Regards Roger Abrahamsson > > qmail's pop-3 daemon for example. > > > On Tue, Feb 13, 2001 at 09:18:17AM +1000, Mitchell wrote: > > > > Hi, I was wundering if anyone knows of any pop3 daemons for Debian that > > support the Maildir format. We are currently using exim as our MTA with > > courier-imap for access to the mailboxes. I have as yet been unable to > > find a courier-pop3d package for Debian, and it would seam that this is > > only available as part of the entire courier MTA package which provides > > imap, MTA, mailing lists, and such. > > > > vpopmail is also not an option as it depends on qmail and appears to > > have it's own proprietry CDB format for storing usernames and passwords. > > > > exim currently is just authenticating users from the /etc/passwd > > /etc/shadow files, and we are looking in to switching to mysql > > authentication here. > > > > pop3-lite shows promis as it's nice and modularised, but I can not yet > > find a plugin to allow it to read for Maildir. > > > > > > Any hints here would be muchly appreciated. > > > > I am not against the idea of building deb packages from sorce if there > > isn't currently anything pre-packaged that will do the job. > > -- > > Christofer, > > > -- > To UNSUBSCRIBE, email to [EMAIL PROTECTED] > with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED] > > - Roger Abrahamsson, Sys/Net Admin, Obbit AB Radhusespl.17D, S-90328 Umea, Sweden -
Re: pop3 and Maildir
-Original Message- From: Felipe Alvarez Harnecker <[EMAIL PROTECTED]> To: Roger Abrahamsson <[EMAIL PROTECTED]> Cc: [EMAIL PROTECTED] <[EMAIL PROTECTED]> Date: den 14 februari 2001 15:51 Subject: Re: pop3 and Maildir Well, the pam authentication only allows for cleartext or mysqls password() format, and also it dont allow for telling the server where to find the mailbox and what uid/gid to use. I've tried it, and basically it dont fill the needs I have, it would need to fill the 'account' role also. Regards Roger A > >What about cyrus* ? I'm using it and very happy. > >It has pam support so mysql auth would be no prob. > >Cheers. > >F. > >Roger Abrahamsson writes: > > On Tue, 13 Feb 2001, Christofer Algotsson wrote: > > > > Well, all I've seen is that the qmail system seems to be an integrated > > package. We here are also looking into switching to maildirs, and > > courier-imap seems very nice, especially with mysql authentication. Latest > > upstream courier-imap also have a pop3 server with it, but sofar I have > > not succeded in getting mysql support compiled in. If anyone has knowledge > > of how to get this working on a debian system I would be very happy. > > > > I've tried solid-pop3d in the unstable branch, but it seems to scale very > > poorly, with about 10.000 user accounts it gets horribly slow. > > > > > > Regards > > Roger Abrahamsson > > > > > > > > qmail's pop-3 daemon for example. > > > > > > > > > On Tue, Feb 13, 2001 at 09:18:17AM +1000, Mitchell wrote: > > > > > > > > Hi, I was wundering if anyone knows of any pop3 daemons for Debian that > > > > support the Maildir format. We are currently using exim as our MTA with > > > > courier-imap for access to the mailboxes. I have as yet been unable to > > > > find a courier-pop3d package for Debian, and it would seam that this is > > > > only available as part of the entire courier MTA package which provides > > > > imap, MTA, mailing lists, and such. > > > > > > > > vpopmail is also not an option as it depends on qmail and appears to > > > > have it's own proprietry CDB format for storing usernames and passwords. > > > > > > > > exim currently is just authenticating users from the /etc/passwd > > > > /etc/shadow files, and we are looking in to switching to mysql > > > > authentication here. > > > > > > > > pop3-lite shows promis as it's nice and modularised, but I can not yet > > > > find a plugin to allow it to read for Maildir. > > > > > > > > > > > > Any hints here would be muchly appreciated. > > > > > > > > I am not against the idea of building deb packages from sorce if there > > > > isn't currently anything pre-packaged that will do the job. > > > > > > -- > > > > > > Christofer, > > > > > > > > > -- > > > To UNSUBSCRIBE, email to [EMAIL PROTECTED] > > > with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED] > > > > > > > > > > - > > Roger Abrahamsson, Sys/Net Admin, Obbit AB > > Radhusespl.17D, S-90328 Umea, Sweden > > - > > > > > > -- > > To UNSUBSCRIBE, email to [EMAIL PROTECTED] > > with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED] > > > > > -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: pop3 and Maildir
On Tue, 13 Feb 2001, Christofer Algotsson wrote: Well, all I've seen is that the qmail system seems to be an integrated package. We here are also looking into switching to maildirs, and courier-imap seems very nice, especially with mysql authentication. Latest upstream courier-imap also have a pop3 server with it, but sofar I have not succeded in getting mysql support compiled in. If anyone has knowledge of how to get this working on a debian system I would be very happy. I've tried solid-pop3d in the unstable branch, but it seems to scale very poorly, with about 10.000 user accounts it gets horribly slow. Regards Roger Abrahamsson > > qmail's pop-3 daemon for example. > > > On Tue, Feb 13, 2001 at 09:18:17AM +1000, Mitchell wrote: > > > > Hi, I was wundering if anyone knows of any pop3 daemons for Debian that > > support the Maildir format. We are currently using exim as our MTA with > > courier-imap for access to the mailboxes. I have as yet been unable to > > find a courier-pop3d package for Debian, and it would seam that this is > > only available as part of the entire courier MTA package which provides > > imap, MTA, mailing lists, and such. > > > > vpopmail is also not an option as it depends on qmail and appears to > > have it's own proprietry CDB format for storing usernames and passwords. > > > > exim currently is just authenticating users from the /etc/passwd > > /etc/shadow files, and we are looking in to switching to mysql > > authentication here. > > > > pop3-lite shows promis as it's nice and modularised, but I can not yet > > find a plugin to allow it to read for Maildir. > > > > > > Any hints here would be muchly appreciated. > > > > I am not against the idea of building deb packages from sorce if there > > isn't currently anything pre-packaged that will do the job. > > -- > > Christofer, > > > -- > To UNSUBSCRIBE, email to [EMAIL PROTECTED] > with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED] > > - Roger Abrahamsson, Sys/Net Admin, Obbit AB Radhusespl.17D, S-90328 Umea, Sweden - -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: NFSv3 Problem
On Mon, 5 Feb 2001, Francis 'Dexter' Gois wrote: Hello. As far as I know, to get 2GB+ file support you both need a 2.4.x kernel and a libc6 that is compiled against 2.4.x headers. I do not know if current debian unstable has this working, but that is what it takes to get it running at least. Regards /Roger Abrahamsson > Hi, > > Not sure, but i think your problem is not with the NFS but with the ext2fs > filesystem, which cannot handle files larger than 2gb. > > I think i read it in a howto. > > Does anyone has a reference ? > > > On Monday 05 February 2001 18:33, Massimiliano Mannozzi wrote: > > hi > > > > I have a problem with NFSv3, > > > > I have correctly installed kernel 2.2.18 with the NFSv3 support and > > util-linux2-10s. I have put in /etc/fstab > > 192.168.10.10:/vol/vol0/home /mnt nfs > > rsize=8192,wsize=8192,nfsvers=3,nolock,timeo=14,intr,bg 0 0 > > > > and all it works normally, but it does not write file greater than 2Gb. > > ulimit -a > > core file size (blocks) 0 > > data seg size (kbytes) unlimited > > file size (blocks) unlimited > > max locked memory (kbytes) unlimited > > max memory size (kbytes)unlimited > > > > > > > > > > why? > > > > thank's > > > > m. > > > > -- > > -- > Francis "Dexter" Gois- mailto : [EMAIL PROTECTED] > System & Network Administrator - Tiscali Belgium NV/SA > Keep the Internet Free with Tiscalinet - phone: +3224000839 > http://www.tiscalinet.be/- fax: +3224000899 > > > -- > To UNSUBSCRIBE, email to [EMAIL PROTECTED] > with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED] >
Re: NFSv3 Problem
On Mon, 5 Feb 2001, Francis 'Dexter' Gois wrote: Hello. As far as I know, to get 2GB+ file support you both need a 2.4.x kernel and a libc6 that is compiled against 2.4.x headers. I do not know if current debian unstable has this working, but that is what it takes to get it running at least. Regards /Roger Abrahamsson > Hi, > > Not sure, but i think your problem is not with the NFS but with the ext2fs > filesystem, which cannot handle files larger than 2gb. > > I think i read it in a howto. > > Does anyone has a reference ? > > > On Monday 05 February 2001 18:33, Massimiliano Mannozzi wrote: > > hi > > > > I have a problem with NFSv3, > > > > I have correctly installed kernel 2.2.18 with the NFSv3 support and > > util-linux2-10s. I have put in /etc/fstab > > 192.168.10.10:/vol/vol0/home /mnt nfs > > rsize=8192,wsize=8192,nfsvers=3,nolock,timeo=14,intr,bg 0 0 > > > > and all it works normally, but it does not write file greater than 2Gb. > > ulimit -a > > core file size (blocks) 0 > > data seg size (kbytes) unlimited > > file size (blocks) unlimited > > max locked memory (kbytes) unlimited > > max memory size (kbytes)unlimited > > > > > > > > > > why? > > > > thank's > > > > m. > > > > -- > > -- > Francis "Dexter" Gois- mailto : [EMAIL PROTECTED] > System & Network Administrator - Tiscali Belgium NV/SA > Keep the Internet Free with Tiscalinet - phone: +3224000839 > http://www.tiscalinet.be/- fax: +3224000899 > > > -- > To UNSUBSCRIBE, email to [EMAIL PROTECTED] > with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED] > -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Server Motherboards...
Hello. Thought to hear if anyone has tried running linux servers on ASUS CUR-DLS160 motherboards? They look very promising, but I have heard somewhere that the ServerWorks chipsets can be troublesome with Linux?? Regards Roger Abrahamsson - Roger Abrahamsson, Sys/Net Admin, Obbit AB Radhusespl.17D, S-90328 Umea, Sweden -
Server Motherboards...
Hello. Thought to hear if anyone has tried running linux servers on ASUS CUR-DLS160 motherboards? They look very promising, but I have heard somewhere that the ServerWorks chipsets can be troublesome with Linux?? Regards Roger Abrahamsson - Roger Abrahamsson, Sys/Net Admin, Obbit AB Radhusespl.17D, S-90328 Umea, Sweden - -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: Debian vs. freeBSD
On Tue, 23 Jan 2001, Debian Ghost wrote: > Hey All, > I know I've been causing a lot of mail on the list lately, but I hope to > get a good response out of this one too. My manager has asked me to write > a proposal on installing Debian or FreeBSD on a few servers here that will > be used (internally to the company- i.e- non production) for basic > services such as NFS, mail, apache (backing a request tracker ticketing > system), internal DNS and ftp services. I've been using > debian for about a year and a half and have used freeBSD for a few months > back in 1998 before laying it aside for linux. From my experiences I > can't really see why one would be superior to the other if configured > properly. Do any of you as debian-ispers have any opinions of things I > could list in the proposal? > > Thanks for the time. This is the best list I've seen in quite some time as > everyone is curtious and non FLAMEboyant :) > > Kindly, > > Ashby Gochenour > NTELOS > NOC > Well, I would say go with what you know the best. As you will most likely run the exact same programs, but compiled for your system, you can always change later if you find any problems. As far as I know FreeBSD is supposedly a tad sharper with very heavy load, but Linux supports more hardware and can be easier to start with. Regards Roger Abrahamsson - Roger Abrahamsson, Sys/Net Admin, Obbit AB Radhusespl.17D, S-90328 Umea, Sweden - -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: traffic accounting
On Thu, 18 Jan 2001, Teun Vink wrote: > > Hi, > > I would like to setup up some sort of traffic accounting in our > network. I know how to do this using ipchains rules, but the problem is > that our network is completely redundant, so each machine in the network > has two gateways (both Debian boxes). > > Does anybody know of a tool which can automatically combine the accounting > of multiple routers into one set of statistics? > There is a tool called 'fipra' which I and a friend developed. it pulls what netblock it should log and to where from a mysql server. You can find it out on the net and it works with linux kernels up to 2.2.16.. I have a new patch done that works with later 2.2.x kernels and I will push that out before the weekend. it can easily handle accounting of 5000 ip's traffic att 30mbit or more, depending on the speed of the machine. Regards Roger A -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Postfix with mysql support compiled in
Hello.. Has anyone here managed to compile a debian package of postfix with mysql support? I've added -DHAS_MYSQL into the compiling options and has libmysqclient10-dev installed, but it still complains over a missing mysql.h file.. Regards Roger A - Roger Abrahamsson, Sys/Net Admin, Obbit AB Radhusespl.17D, S-90328 Umea, Sweden - -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: SQL & ISP Accountancy Package
On Fri, 24 Nov 2000, Robert Davidson wrote: > > Hi People, > > I'm just wondering something about SQL. I maintain an accountancy > package for ISPs that still use dialup modems and the ones who allow > shell logins. > > The package keeps track of data downloaded/uploaded, subscription > expirys, idle limits, user process cpu load, time limits, subscription > expiry notices and so on. > > I want to know if I should be using SQL. I've had a few people ask me > for it in the last year or so, but I havn't been very keen to implement > it because I only see SQL slowing it down, causing more network > traffic, cpu load, etc. > > What I really want to know is if SQL would be a good idea, and why, I > need some good points to SQL to get the enthusiasm up to actually do > it. I think I want to do it, but I'm not sure if SQL is going to be > all that great. > > Also, does anyone know where I could find a *free* guide to writing sql > programs, and efficient sql commands or whatever? > > If anyone's interested, the url for the package I'm talking about > is http://acua.ebbs.com.au > > Thanks in advance, > Robert Davidson. > > I run an accounting system for traffic here that logs about 3000 lines every 5 minutes to an MySQL server.. I could just as well write it to a file I guess, but when it later comes to sorting and sifting through those amounts of data that generates during 24 hours it quickly becomes another matter.. Not to talk about sifting throught a whole months worth of data. It's also very handy when you want several different programs spread out over a whole network to work together with the data. As for 'SQL' there is lots of different 'dialects' abound. Pick a server you like, and learn that.. I'd recommend MySQL, as it is very spread and pretty simple to set up. It lacks some features, but overall I think it's nice to work with. Regards Roger Abrahamsson - Roger Abrahamsson, Sys/Net Admin, Obbit AB Radhusespl.17D, S-90328 Umea, Sweden - -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: transparent accounting system
On Tue, 17 Oct 100, Allen Ahoffman wrote: > I'm looking for any new info on instructions on how to set up a > transparent ip accounting system. > e.g. > sits between rouer or anything and a pile of servers and just counts > everything. > and will tkae 100mbps traffic reliablly. > You can check out something called 'fipra'... Me and a friend wrote that to log ip traffic into an mysql database at high speeds.. It can handle thousands of ip's at at least 60Mbs reliably, all really depending on the speed of the machine it's running on. It's in two parts, one kernel patch and one daemon pushing the data to the sql server. Currently it only handles ipv4, a new version is coming in a while. You can find it at http://www.umplug.org/fipra, or if that site is down just search on the net for it. Hope this can help. Regards Roger Abrahamsson ----- Roger Abrahamsson, Sys/Net Admin, Obbit AB Radhusespl.17D, S-90328 Umea, Sweden - -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: High Availability... again
On Wed, 11 Oct 2000, Russell Coker wrote: > On 2000-10-11 05:49, Roger Abrahamsson wrote: > >First of all, thanx for all the answers, I've gotten a bit further now. > >One thing I'm thinking of.. Does anyone know any hardware or software for > >Linux that allows an existing RAID system to be grown/shrunken later on? > >Would be a shame having this nice system up and running and then stop when > >we run out of disk space.. > > LVM does growing and shrinking. I believe that it has (or is destined to > have) mirroring support (which is far from full RAID support). I doubt that > LVM is what you want to use for RAID type functionality. > > For changing the size of a software RAID partition in Linux you would want to > have all your storage as a single software RAID, run LVM on top of that, and > then use LVM partitions for all file systems. This allows you to dynamically > grow and shrink file systems within the same storage pool. > > However if you want to add extra hard drives to add extra space then I think > you currently can't do it. Let me know if this is what you require and I'll > investigate it further. > Well, was not thinking of software raid here. However LVM seems to be what I need, as it apparently seems to work well with hardware raid. I can grow and shrink filesystems residing on several different raid systems as they will appear as only one disk each.. Now if the tcp/ip stack in 2.4.x kernels will be reentrant perhaps I could handle some heavy load on this too. As I understand this I will be able to add new things as I go, as one machine always can be shut down, added more raid cards to and then change the LVM settings on it when it has become the active box. Then repeat that for the other... /Roger - Roger Abrahamsson, Sys/Net Admin, Obbit AB Radhusespl.17D, S-90328 Umea, Sweden - -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
High Availability... again
First of all, thanx for all the answers, I've gotten a bit further now. One thing I'm thinking of.. Does anyone know any hardware or software for Linux that allows an existing RAID system to be grown/shrunken later on? Would be a shame having this nice system up and running and then stop when we run out of disk space.. Regards /Roger A ----- Roger Abrahamsson, Sys/Net Admin, Obbit AB Radhusespl.17D, S-90328 Umea, Sweden Phone: (+46)(0)90 133310Fax:(+46)(0)90 133370 - -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: Hello.
Well, all you guys forgot one thing.. The Art!!! All we want to do is to create The Ultimate Code, the one we cry when we see. And as all true artists we are shunned by the people, those cretins who dont see the light. (Wonder if it's time for cutting of one ear now??) :-) Then of course, it's also the pure joy of revelling in the sea of knowledge, and oppress the poor lusers and management.. :-) /Roger A -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: High Availability..
On Fri, 6 Oct 2000, Gregory Wood wrote: > Several years ago, I sudied the HP 9000 family. It had this ability. > Their system had different programs running on different servers which > minimized the file locking issues. When one computer failed, the other > would start up the tasks from the failed machine. The switch over time >was under a few seconds. > > There is a software package (I don't remember the name) that runs on > Novell and NT, that keeps a full duplicate of the primary server. If > the primary fails for any reason, the backup comes on-line in under a > second. > Well, the thing I had thought to do was having one central file server for a whole bunch of other servers. This server has to be able to do keep running even during hardware failures, and also scheduled uppgrades.. The packages you talk about are when you want a failsafe between say two webbservers, but I'm talking about a pure network storage thing here.. There should be about 10 machines accessing this, and they must under no circumstance have the disk mounted locally, as these are 'open' systems and might be compromised. As NFS *is* supposedly stateless, you should be able to switch the server you are talking to between two nfs packets. But I'm not sure how this NFS locking works? It really has to be implemented in the server, but how does this comply with the "statelessness" ?? I know there are solutions which might fix my problem.. Symmetrix is one.. But we havent reached there quite yet, as they can be a bit costly. As for Novell & NT, I wouldnt touch those without a very good reason (gun pointing at my head would be one :)). /Roger A - Roger Abrahamsson, Sys/Net Admin, Obbit AB Radhusespl.17D, S-90328 Umea, Sweden - -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
High Availability..
Hello.. Has anyone tried to set up any such debian systems?? I'm thinking of trying to set up two machines sharing the same raid disksystem as an NFS server with some sort of ip-takeover between them.. There are several things I'm seeing as possible problems, one is NFS file locking, and another is two RAID cards accessing the same disk subsystem... Any suggestions and comments are welcome, as this is totally new territory to me. Regards Roger Abrahamsson ----- Roger Abrahamsson, Sys/Net Admin, Obbit AB Radhusespl.17D, S-90328 Umea, Sweden - -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: Four-Ports Fast Ethernet Card.
On Wed, 4 Oct 2000, Antonio Moragues wrote: > > Anyone know any Four-Ports Fast Ethernet Card working fine under Linux?. > > Thanks. Dlink DFE-570TX /Roger Abrahamsson -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: Multiport ethernet cards
On Thu, 28 Sep 2000, Kim Lundgren wrote: > I'm looking for cards that let me fill a box up with as many ethernet > ports as possible. The purpose is to build a router-type machine, so > they don't need to be 100mbit interfaces even if that's a plus. The only > card I know of that seems to work on Linux is the DFE-570TX (Dlink card > with 4 100mbit ports), but I can't find confirmation that it would > actually give me 4 eth devices. > > In short, HELP! :) > > // Kim Lundgren We run a Linux router with 4 DFE-570TX cards in it, for a total of 16 100mbit ports.. As it's a PII-350 it can handle a continous load of about 30mbit (without fastroute). However to be able to correctly configure and handle more than 8 interfaces you need to apply some small patches to the kernel and network drivers (there are some constants you need to change etc). If you need to scale beyond 4 cards you have to be careful what motherboard you select, simple because even if they have five or six pci interfaces it's not certain they can handle pci bus mastering interfaces on all. /Roger ----- Roger Abrahamsson, Senior Sys/Net Admin, Obbit AB Radhusespl.17D, S-90328 Umea, Sweden Phone: (+46)(0)90 133310Fax:(+46)(0)90 133370 - -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
More than 65K users..
Hello We are risking to pass this magic number in a short while.. Is there any neat way to handle more than this as I recall you can only have 2^16 UIDS?? /Roger - Roger Abrahamsson, Sys/Net Admin Obbit AB
More than 65K users..
Hello We are risking to pass this magic number in a short while.. Is there any neat way to handle more than this as I recall you can only have 2^16 UIDS?? /Roger - Roger Abrahamsson, Sys/Net Admin Obbit AB -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: apache wml/wap support
On Wed, 16 Aug 2000, Erik Peter P. Abella wrote: > Hello All, > > I was told that I can tweak my apache mime extensions to support wml > browsing? is this true and has anyone in the list been able to do this? > and if so, where can I find some howto? > > Thanks, > > Erik Peter P. Abella > Add the following lines to /etc/mime.types: text/vnd.wap.wmlwml text/vnd.wap.wmlscript wmls application/vnd.wap.wmlcwmlc application/vnd.wap.wmlscriptc wmlsc image/vnd.wap.wbmp wbmp ----- Roger Abrahamsson, Senior System/Network Admin Obbit AB Radhusespl.17D, S-90328 Umea, Sweden Phone: (+46)(0)90 133310Fax:(+46)(0)90 133370 -
Re: apache wml/wap support
On Wed, 16 Aug 2000, Erik Peter P. Abella wrote: > Hello All, > > I was told that I can tweak my apache mime extensions to support wml > browsing? is this true and has anyone in the list been able to do this? > and if so, where can I find some howto? > > Thanks, > > Erik Peter P. Abella > Add the following lines to /etc/mime.types: text/vnd.wap.wmlwml text/vnd.wap.wmlscript wmls application/vnd.wap.wmlcwmlc application/vnd.wap.wmlscriptc wmlsc image/vnd.wap.wbmp wbmp ----- Roger Abrahamsson, Senior System/Network Admin Obbit AB Radhusespl.17D, S-90328 Umea, Sweden Phone: (+46)(0)90 133310Fax:(+46)(0)90 133370 - -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: Very slow login
On Wed, 28 Jun 2000, Áts Attila wrote: > Dear group, > > I've installed a server. Logging in at the console is very fast. > But when I make a connection through Teknet or FTP it takes very > long to get the login prompt. What can be the problem and the > solution? > > Regards > > Attila It sounds like either identd or lack of reverse lookup entries in the DNS. /Roger > ----- Roger Abrahamsson, Senior System/Network Admin Obbit AB Radhusespl.17D, S-90328 Umea, Sweden Phone: (+46)(0)90 133310Fax:(+46)(0)90 133370 -
Re: Very slow login
On Wed, 28 Jun 2000, Áts Attila wrote: > Dear group, > > I've installed a server. Logging in at the console is very fast. > But when I make a connection through Teknet or FTP it takes very > long to get the login prompt. What can be the problem and the > solution? > > Regards > > Attila It sounds like either identd or lack of reverse lookup entries in the DNS. /Roger > ----- Roger Abrahamsson, Senior System/Network Admin Obbit AB Radhusespl.17D, S-90328 Umea, Sweden Phone: (+46)(0)90 133310Fax:(+46)(0)90 133370 - -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: IDE or SCSI ??
On Tue, 13 Jun 2000, [ Francho ] wrote: > I have mount a new Internet Server whith (apache, mysql, bind and qmail). It > will be about 300 domains allocated (each domain will recibed about 300 > visits/day). > > What hardware do you recommend ??? > > Thanks in advance. > -- > <<< [EMAIL PROTECTED] >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>> > --- > SCSI!! I/O is your main concern.. Then lots of memory.. CPU comes only as the third factor. - Roger Abrahamsson, Senior Sys/Net Admin Obbit AB Radhusespl.17D, S-90328 Umea, Sweden Phone: (+46)(0)90 133310Fax:(+46)(0)90 133370 -
Re: IDE or SCSI ??
On Tue, 13 Jun 2000, [ Francho ] wrote: > I have mount a new Internet Server whith (apache, mysql, bind and qmail). It will be >about 300 domains allocated (each domain will recibed about 300 visits/day). > > What hardware do you recommend ??? > > Thanks in advance. > -- > <<< Net.Zaragoza@FchX >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>> > --- > SCSI!! I/O is your main concern.. Then lots of memory.. CPU comes only as the third factor. - Roger Abrahamsson, Senior Sys/Net Admin Obbit AB Radhusespl.17D, S-90328 Umea, Sweden Phone: (+46)(0)90 133310Fax:(+46)(0)90 133370 - -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: where to find web browser statistics information?
On Tue, 23 May 2000, Sergey A. Ribalchenko wrote: > > On Mon, 22 May 2000, Chris Wagner wrote: > > > >to yanks, socialism is an evil, dirty word - roughly equivalent > > >to satanism. but we understand why you're like that...you've been > > >brainwashed with anti-socialist bullshit since you were small children. > > > > Hahah, Satanism, that was a good one. :) But I still prefer individualism >^^ > > to socialism. > > m.b. you missed, did you mean onanism? > > > Best wishes, > Sergey. > Naah, lets have technocraty, with all us Unix people in the leading role, and all M$ people as our servants.. :) (just couldnt resist) /Roger
Re: Exim Subject rejection, (* **** ***)
Anyone know if you can do this in sendmail and if so, how? /Roger Abrahamsson On Mon, 8 May 2000, Peter Gervai wrote: > On Sun, May 07, 2000 at 12:35:38PM -0700, Kevin wrote: > > How hard would it be to filter *.vbs attachments out. It was fairly simple > > to do with NT based MDaemon, but I'm not sure how to go about it with exim > > or postfix. > > variation of an exim global filter: > > if $message_body: contains ".vbs\"" or >$message_body: contains ".wsc\"" or >$message_body: contains ".jse\"" or >$message_body: contains ".js\"" or >$message_body: contains ".vbe\"" then > headers add "X-Virus-Alert: WARNING possible Visual Basic/JS Trojan > Attachment\n" > deliver "[EMAIL PROTECTED]" > endif > > ===+= >Peter "grin" Gervai | "It was like a visit by Don Corleone. I > Linux root at Cory-Net Ltd.|expected to find a bloody computer monitor in >Szekszard, Hungary |my bed the next day." -- Mark Andreessen of > [EMAIL PROTECTED] on #linux.hu |Netscape regarding the visit from > microsoft. > > > -- > To UNSUBSCRIBE, email to [EMAIL PROTECTED] > with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED] > - Roger Abrahamsson, Sys/Net Admin Obbit AB Radhusespl.17D, S-90328 Umea, Sweden Phone: (+46)(0)90 133310Fax:(+46)(0)90 133370 -
Re: CGI errors
On Tue, 14 Mar 2000, Don Hatch wrote: > I have a client whose cgi scripts have recently stopped working. The error > log gives this error: > > [error][client ip address](24)Too many open files: counldn't spawn child > process: /path/to/cgi-bin/script.cgi > > Does anyone have any suggestions? Where would I start looking? I'm running > Debian 2.1 and I checked a couple of files like /etc/limits but everything is > still commented out. Any help is appreciated. > > Thanks, > > Don Hatch > [EMAIL PROTECTED] > This sounds like you have run into kernel limits.. if you run 2.2.x kernels check out the files beneath /proc/sys/fs especially file-max and inode-max Roger Abrahamsson
Re: bean counters
On Sat, 11 Mar 100, Allen Ahoffman wrote: > Hi: > Is there anyone outthere selling a Debian based box that will: > allow complete real time ip stats for several inside hosts. > e.g. > one linux box where all the data goes thru and it presents me with > incoming and outgoing traffic use by bytes for each ip? > I don't want it to filter packets, reroute packets, or anything, just > count everything. > > rate control would be nice but can cause problems. > Any suggestions for whichpackages to set up or is there a consulting bunch > recommended to sell a box for this purpose. > > > -- > To UNSUBSCRIBE, email to [EMAIL PROTECTED] > with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED] > I and a friend have written a little kernel patch for Linux that allows exactly that. It's basically intended for boxes running as routers, and can log traffic at about 30MB/sec on a PII-350. It also includes a daemon which pulls data from the kernel at a speficied rate and pushes that to an SQL server. All code is GPL, but it's officially not released yet, we've been a bit lazy.. :) If you're interested in trying this just let me know.. /Roger Roger Abrahamsson Senior System/Network Administrator Obbit Skynet AB
Webshop solution for Unix/Linux?
Hello. Just had a great discussion with one of our salespersons about webshop solutions. He's just found some shop running on NT/asp and is just delirious. I've been propagating for MiniVend, but they just want a ready solution to push to customers. So my question is if there exists any 'turn key' solution with Minivend or perhaps some other shopping cart for Linux that anyone knows of? I would much rather try and keep as much as possible on Unix, as they never seem to crash.. :) Regards /Roger --- Roger Abrahamsson Senior System/Network Administrator Obbit Skynet AB
