postfix pcre support (for pcre based message rejection)

2003-10-25 Thread Scott Edwards
I need pcre map support so I can reject possible trojan/worm/virus messages.

I'm intending to use Postix Anti-Virus/-Worm/-Trojan Header  Body Checks
from http://jimsun.linxnet.com/postfix_contrib.html.

One problem, postconf -m does not show it has support for pcre maps.  How
can I get pcre to work with postfix?  I have postfix-pcre installed.

Desired=Unknown/Install/Remove/Purge/Hold
| Status=Not/Installed/Config-files/Unpacked/Failed-config/Half-installed
|/ Err?=(none)/Hold/Reinst-required/X=both-problems (Status,Err:
uppercase=bad)
||/ Name   Version
Description

pn  amavis-postfix none
(no description available)
ii  postfix1.1.11-0.woody3
A high-performance mail transport agent
pn  postfix-devnone
(no description available)
pn  postfix-docnone
(no description available)
ii  postfix-ldap   1.1.11-0.woody3
LDAP map support for Postfix
ii  postfix-mysql  1.1.11-0.woody3
MYSQL map support for Postfix
ii  postfix-pcre   1.1.11-0.woody3
PCRE map support for Postfix
pn  postfix-snap   none
(no description available)
pn  postfix-snap-dev   none
(no description available)
pn  postfix-snap-doc   none
(no description available)
pn  postfix-snap-ldap  none
(no description available)
pn  postfix-snap-mysql none
(no description available)
pn  postfix-snap-pcre  none
(no description available)
un  postfix-snap-tls   none
(no description available)
ii  postfix-tls1.1.11+tls0.7.15-0.woody1
TLS and SASL support for Postfix
pn  webmin-postfix none
(no description available)


Thanks.


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



SCSI or IDE

2002-11-24 Thread Scott
After some talks with the person who handles the books she has given me 
the authority to bail on these Netfinity boxes and get something more 
supported by Debian.  My question is:  with IDE drives as fast as they are 
now does it really pay to go SCSI?  Are there any benefits besides RAID?
I understand fault tolerance, but how about performance?

Thanks,

-Scott



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]




Re: load average question

2002-11-23 Thread Scott St. John
At 08:40 AM 11/23/2002 +0100, Russell Coker wrote:

Apart from webmail that should be a trivial load.  Webmail systems seem to
take up lots of resources in my experience, is it an option to have a
separate machine for webmail?


I was thinking the same thing, if I can get Openwebmail to load on another 
machine
and have it check the mailboxes on the mail server it might help.

-Scott

---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.419 / Virus Database: 235 - Release Date: 11/13/2002



Re: load average question

2002-11-23 Thread Scott St. John
At 09:20 AM 11/23/2002 +0100, Torsten Krueger wrote:

Hmm - watch out for the load qpopper produces. Since the sendmail/qpopper
combination uses mbox a users mailbox is copied every time the mbox is
accessed. If you have large mailboxes (e.g. no quota an users leave mail
on server) this can produce a significant load.


We require that users download their mail and not store it on the server.  We
do have a lot of business accounts where they transfer large files, but for the
most part most of the mail boxes are small - under the 1 meg size.

I would see no problems with that. If you can make sure that the popper

produces the load I'd suggest moving to Maildir for storage of the users
mailboxes and perhaps Postfix with Courier Pop3d.


Is it possible to move current mail to the maildir format?  I inconvenienced
the clients once with the crash and now that things are not running as smooth
I don't want to run the risk of long amounts of downtime.  I really want to go
Postfix because I think it is more efficient, more secure, more reliable 
and less
of a resource pig.  Qpopper also has a habit of just stopping, I have have to
reload xinetd several times a day.


Regarding a switch to debian. Three years ago we started switching our
servers from Suse to Debian. I've never regretted that switch since
maintaining Debian is so much easier than Suse due to apt.


Had a Debian box ready to go, but when the machine crashed I had to get
something up right then and now so I went with RH because I could do it
in under 30 minutes, plus I had the Sendmail configs.  I ended up using
Suse as well for Cistron Radius.  I only have 3 of these boxes - Mandrake
for the web server, RH for the mail and Suse sits there and does Radius.
I have been planning on moving people off the Mandrake box so I might
move them to the Suse box since it only does Radius, turn the Mandrake
box into Debian and be happy :)

-Scott


---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.419 / Virus Database: 235 - Release Date: 11/13/2002



Re: load average question

2002-11-23 Thread Scott St. John
At 01:43 PM 11/23/2002 +0100, Torsten Krueger wrote:

You can convert the mboxes with mbox2maildir. Changing from Sendmail to
Postfix shouldn't bei a hassle and if properly prepared shouldn't produce
a long downtime. Depending on the amount and size of your mboxes the
conversion takes some time, but your machine should be fast enough ;-) to
do this in a reasonable time.


Since I had a Suse box doing nothing but Radius I am planning on moving the
virtual hosting clients on the Mandrake box to Suse, then install Debian on the
former Mandrake box and make that the mail server.  Sounds confusing and
it is :)  Then I will try to get Radius running on the Debian box which will
free up two more boxes.  Guess what I will be doing Thanksgiving week :)


Hmm - maintaining such a distribution zoo sounds like a headache. Switch
all the boxes to debian, install a local apt-proxy and enjoy applying
security patches to all your machines in minutes ;-)


It is, but I had to go with familiar to stop the downtime.  I knew I could 
get Radius
going on Suse, I knew I could build a quick RH mail server and over the summer
I *thought* Mandrake was a decent web server.

-Scott

---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.419 / Virus Database: 235 - Release Date: 11/13/2002



Re: load average question

2002-11-23 Thread Scott
On Sat, 23 Nov 2002, Jeremy C. Reed wrote:
 Use top(1) to to view processes.

Have been doing that constantly, my eyes hurt :)  Sendmail the top dog 
with the occasional hit from Openwebmail which shows as perl.  Popper will 
do a quick peak and then usually drop off.

 No performance issues using vm-pop3d, exim (MTA), apache and
 OpenWebMail with around 10,000 email accounts on similar hardware.

10,000 email accounts on a similar machine?  Man, I must be doing 
something wrong!  I assume you are running Debian?  Sounds more and more 
to me like a Red Hat and sendmail problem in my case if I can't handle 
2,300 mail accounts.

 In the past, when using qpopper with 10-15,000 accounts, I improved
 performance by using qpopper server mode.

I tried that and the qpopper stopped responding after about 30 minutes and 
the Outlook users would get the xinetd error.  

Thank you to everyone who responded, it is obvious that I need to get a 
Debian box up and see how it performs under this load, I am sure it will 
do much better.

-Scott



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]




Re: load average question

2002-11-23 Thread Scott
On Sun, 24 Nov 2002, Craig Sanders wrote:
  - install radius on the RH or Mandrake machine
  - configure your NAS boxes to use it
  - blow away the suse box and install debian 
  - (optionally) move radius back to it, configure NAS boxes to use it again.
  - install apache and start moving vhost clients over

Uh, considering I am running on little sleep the last week, yes that would 
make a lot more sense.  We encountered several problems getting radius to 
start on the Red Hat box and I don't trust the Mandrake box to handle it, 
I consider radius mission critical and I don't trust Mandrake in that role 
any more.  Of course we were trying with Livingston radius on Red Hat, but 
ended up using Cistron on the Suse box.  I might give Cistron a go on Red 
Hat and see if I can move radius to that box and then install Debian on 
the current Suse box.

walking away from computer with legal pad and pen to plan

-Scott



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]




load average question

2002-11-22 Thread Scott St. John
Hi Gang:

A few weeks ago we talked about me moving a server from BSDi to Debian.  As 
luck
would have it that BSDi server gave out last Monday and I had to move fast 
to replace
it.  Knowing I can do a RH install in about 30 minutes I went the route of 
familiar
territory and installed 7.2 with Sendmail/QPopper/Apache/OpenWebMail.  I am 
paying
for that now with a huge performance problem.  I am seeing Load Averages 
spiking
above 6 during the day.  Hardware is a Dual P3-600 with a gig of ram on a IBM
Netfinity Raid 5 controller.

The owner of the company wants to go back to BSD, but I want to pursue Debian.
So the question is:  is anyone running a similar set up with either Sendmail or
Posrtfix servicing 2,000+ email accounts with any performance issues?

Thank you for your time.

-Scott

---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.419 / Virus Database: 235 - Release Date: 11/13/2002



Correcting permissions on files

2002-11-01 Thread Scott St. John
Hi gang,
The Debian box has been a true blessing this week and I am ready to
move our users off BSDi/Sendmail to our new Debian/Postfix box.  I have
the accounts in the system, but am curious if anyone has some tips on
scripting a way to fix permissions on home directories and files once the
accounts are on the new server.
I am using ncftp to bring the user home directories over to the new server
and need to fix the owner/permission on each home directory and then
also do the same when I bring their email over.
Any thoughts?
Thanks,
-Scott



Re: Correcting permissions on files

2002-11-01 Thread Scott St. John
At 03:38 PM 11/1/2002 +0100, you wrote:
Or tar + plain rsh, no need to encrypt all that with ssh. Takes ages.
and the whole tree will be copied, permissions and all, even remapping
uids if the usernames on the new machine use different ones.
You do have to configure your old machine temporarily to trust
newmachine enough to give people on it root access though, but that's
all.
Heh, I have been sitting here with Perl and Awk books all morning and it's
really this simple?  You guys are going to have me off my Windows
desktop completely if this keeps up :)
Thank you!
-Scott



Re: Moving from BSDi

2002-10-29 Thread Scott St. John
At 03:31 PM 10/29/2002 +1100, you wrote:
1. (on BSDi), run pwunconv to convert to non-shadowed passwd file

I don't have that utility on any of my BSDi machines, scanning Google for
it now.


i wouldn't (voluntarily) use anything else.

actually, i still have a few solaris boxes, but they're considered
legacy machines (i.e. they'll keep running as they are until they die or
until we switch them over to debian).  for the last few years, all our
new servers have been debian.


I hear you, these BSDi boxes have been wonderful and I was hoping for the
same stability under Linux.  BSDi went away because of lack of innovation,
but there has to be a fine line between cutting edge and a reliable machine.
I need to offer my clients good service, not the latest and greatest innovation
that has not been tested.  To me it appears Debian has reached this level,
solid and innovative.

-Scott


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]




Re: Moving from BSDi

2002-10-29 Thread Scott St. John
At 12:47 PM 10/28/2002 -0800, Jeremy C. Reed wrote:
Here is my script I used a couple years ago. (I don't advocate Linux over

BSD. I do advocate freedom of choice.)


I think I will try this script, THANK YOU.  The biggest problem, which I 
think we
have all talked about is that BSDi starts at userid 100.  I think I can 
modify the
script to redo the userid count.

I have used Debian for X workstations, X servers, DNS, mail, spam
filtering, website hosting, radius, ldap, samba, printer servers, etc.


I have BSDi for DNS, Radius, Sendmail, FTP and Web.  I put up a Mandrake 
8.2 box
this summer on an IBM Netfinity Server and while the speed is impressive, 
the fact
I have to kick it every few days is not.  Cron jobs stop running with no 
mention in the
log files, ftp shuts down, etc.  I tried Red Hat 7.3 for a new mail server, 
but as
mentioned here yesterday it failed.

This is interesting. I can understand concerns with the commercial BSD/OS
(especially over past 1.5 years).


BSDi seemed to lack innovation after 1996.  The product is solid, but 
expensive and when
they started the license key with the 3.0 version I did not see any great 
innovation to
compensate for that.  It seemed they spent more time trying to get the 
license key
to work.

But what are the performance issues you have found?


By performance I mean a couple of things.  Time to deliver mail, time to 
query a database,
time to dynamically create a web page, ftp transfer speed, etc.


(By the way, if you are already a BSD administrator, it is easy to move
from BSD/OS to NetBSD or FreeBSD).


I had also considered that, but FreeBSD does not support my hardware (IBM 
ServerRAID2).

-Scott


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: Moving from BSDi

2002-10-29 Thread Scott St. John
At 03:31 PM 10/29/2002 +1100, you wrote:
1. (on BSDi), run pwunconv to convert to non-shadowed passwd file
I don't have that utility on any of my BSDi machines, scanning Google for
it now.
i wouldn't (voluntarily) use anything else.
actually, i still have a few solaris boxes, but they're considered
legacy machines (i.e. they'll keep running as they are until they die or
until we switch them over to debian).  for the last few years, all our
new servers have been debian.
I hear you, these BSDi boxes have been wonderful and I was hoping for the
same stability under Linux.  BSDi went away because of lack of innovation,
but there has to be a fine line between cutting edge and a reliable machine.
I need to offer my clients good service, not the latest and greatest innovation
that has not been tested.  To me it appears Debian has reached this level,
solid and innovative.
-Scott



Ok, I'm sold!

2002-10-29 Thread Scott St. John
Thanks to a friend very familiar with Debian I have my first Debian server up
and running on a Dual Processor IBM Netfinity Server.  One word:  ROCKS!
Just in playing around I see what I was hoping for with RH, speed, stability,
performance!  NICE :)
Moving user accounts over tonight and will start the tests for it to become a
replacement email server.
Thank you to everyone on the list for your help.
-Scott



Re: Ok, I'm sold!

2002-10-29 Thread Scott St. John
At 11:13 PM 10/29/2002 +0100, you wrote:
Always nice to see someone fall in love with Debian :-)
Oh, I am in love alright.  I am just amazed, but sad at the same time.
This is what Linux is capable of, but there are distributions out there
that do not give this kind of performance.  I guess it comes down to
what you want the machine to do, mail is really I/O intensive.  I have
a Suse lap top that I develop web apps on and I have Xemacs and
XMMS running for days at a time with no trouble.  So, in the end I
guess it comes down to your needs.
-Scott



Re: port 137 scans

2002-10-28 Thread Scott
They are SPAM messages being set to the Windows Messenger service.  We got 
several clients who were blasted with: Get Your Degree in a windows 
pop-up.  There are spam utilities that now do this.


-Scott



On Mon, 28 Oct 2002, Russell Coker wrote:

 Does anyone know why there's been a sudden increase in port 137 UDP scans?  Is 
 there some new SMB networking hole?
 
 


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]




Moving from BSDi

2002-10-28 Thread Scott St. John
Hi gang-

I have several BSDi and FreeBSD servers here that are beyond repair and I 
had planned to
move them to Linux by now, but I am running into a few problems and wanted 
to run them
by the crew here for some thoughts.  Please note, I am new to Debian, I was 
using Mandrake
and Red Hat, but discovered very odd behavior in them so I built a Debian 
box and in my
tests it blew the pants off every one else.

First, does anyone know of a way to export the user accounts on BSDi and 
import them into
a Debian box?  I have close to 5,000 accounts I need to bring over.

Second, of the ISP's on this list, what are you using Debian 
for?  Everything?  DNS, Mail, web?
I am running an ISP now and am seriously considering looking Debian to be 
my new work
horse after a sad display of performance of the above mentioned.

Thanks,

-Scott


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: Moving from BSDi

2002-10-28 Thread Scott St. John
At 05:39 PM 10/28/2002 +0100, Russell Coker wrote:

You could create a test account and set a password, then post the lines from
/etc/passwd and /etc/shadow here and we'll try and devise some sort of
proceedure for you...


The BSDi machines use /etc/passwd and /etc/master.passwd, I think that is
MD5.


There are Debian packages for grsec (secure chroot environments, memory
address randomisation and other protections against stack smashing, network
randomisation, and much more), kernel-patch-ctx (for like BSD jails), LIDS,
and more.


I am very impressed with the package selection, what I am even more impressed
with is the fact that THEY WORK when you install them.  I am going to offer a
adult content filtering proxy to our clients if they want, I have been 
trying to get
Squid working on Mandrake and Red Hat for several weeks.  Tried the Debian
box, downloaded it and was running in 10 minutes.  The time savings and the 
less
frustration made me think this is the way to go!

For an ISP I'm sure you are very interested in security.  Debian now has 
an OK
range of options, in the next release it'll beat them all!

I think the light is starting to shine brighter :)  Thank you.

-Scott


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]




Re: port 137 scans

2002-10-28 Thread Scott
They are SPAM messages being set to the Windows Messenger service.  We got 
several clients who were blasted with: Get Your Degree in a windows 
pop-up.  There are spam utilities that now do this.


-Scott



On Mon, 28 Oct 2002, Russell Coker wrote:

 Does anyone know why there's been a sudden increase in port 137 UDP scans?  
 Is 
 there some new SMB networking hole?
 
 




Moving from BSDi

2002-10-28 Thread Scott St. John
Hi gang-
I have several BSDi and FreeBSD servers here that are beyond repair and I 
had planned to
move them to Linux by now, but I am running into a few problems and wanted 
to run them
by the crew here for some thoughts.  Please note, I am new to Debian, I was 
using Mandrake
and Red Hat, but discovered very odd behavior in them so I built a Debian 
box and in my
tests it blew the pants off every one else.

First, does anyone know of a way to export the user accounts on BSDi and 
import them into
a Debian box?  I have close to 5,000 accounts I need to bring over.

Second, of the ISP's on this list, what are you using Debian 
for?  Everything?  DNS, Mail, web?
I am running an ISP now and am seriously considering looking Debian to be 
my new work
horse after a sad display of performance of the above mentioned.

Thanks,
-Scott



Re: Moving from BSDi

2002-10-28 Thread Scott St. John
At 05:39 PM 10/28/2002 +0100, Russell Coker wrote:
You could create a test account and set a password, then post the lines from
/etc/passwd and /etc/shadow here and we'll try and devise some sort of
proceedure for you...
The BSDi machines use /etc/passwd and /etc/master.passwd, I think that is
MD5.
There are Debian packages for grsec (secure chroot environments, memory
address randomisation and other protections against stack smashing, network
randomisation, and much more), kernel-patch-ctx (for like BSD jails), LIDS,
and more.
I am very impressed with the package selection, what I am even more impressed
with is the fact that THEY WORK when you install them.  I am going to offer a
adult content filtering proxy to our clients if they want, I have been 
trying to get
Squid working on Mandrake and Red Hat for several weeks.  Tried the Debian
box, downloaded it and was running in 10 minutes.  The time savings and the 
less
frustration made me think this is the way to go!

For an ISP I'm sure you are very interested in security.  Debian now has 
an OK
range of options, in the next release it'll beat them all!
I think the light is starting to shine brighter :)  Thank you.
-Scott



Re: Moving from BSDi

2002-10-28 Thread Scott St. John
At 05:39 PM 10/28/2002 +0100, Russell Coker wrote:
Debian supports both DES and MD5 hashing of passwords.  If the BSD passwords
for your accounts are in one of those formats then it'll be trivial to
convert them.
You could create a test account and set a password, then post the lines from
/etc/passwd and /etc/shadow here and we'll try and devise some sort of
proceedure for you...
I just found a script that may do this and I copied it below.  I have 
considered using
Postfix with MySQL, is there a way to get the accounts into MySQL even though
the passwords are encrypted?

Here is the script:
#!/usr/bin/perl
#
# Simple FreeBSD-to-Linux password converter
#  -- Linux must be using shadow passwords
#
# Nickolai Zeldovich, 1998
# http://kolya.net/, [EMAIL PROTECTED]
#
# Config stuff:
#
# /etc/passwd on a FreeBSD machine
$FREEBSD_PASSWD=passwd;
# /etc/master.passwd in a FreeBSD machine
$FREEBSD_MASTER=./master.passwd;
# Where you want the Linux version of passwd file
$LINUX_PASSWD=./linux-passwd;
# Where you want the Linux version of shadow file
$LINUX_SHADOW=./linux-shadow;
# Go for it..
open(FM,$FREEBSD_MASTER);
while(FM) {
chop $_;
($user,$cryptpw,@etc)= split(/\:/);
$pw{$user}=$cryptpw;
}
close(FM);
open(FP,$FREEBSD_PASSWD);
open(LP,$LINUX_PASSWD);
open(LS,$LINUX_SHADOW);
$count = 999;
while(FP) {
$count++;
chop $_;
($user,$star,$uid,$gid,$gecos,$home,$shell)=split(/\:/);
print LP $user:x:$count:100:$gecos:/home/$user:/bin/bash\n;
print LS $user:$pw{$user}:1:0:9:7:::\n;
}
close(FP);
close(LP);
close(LS);



iODBC and MySQL

2002-08-23 Thread Scott Jardine
Hello - has anybody had any success with ODBC.pm (perl 5.6.1)?

I'm using
Linux version 2.4.19 ([EMAIL PROTECTED]) (gcc version 2.95.4 20011002 (Debian
prerelease))
mysql  Ver 11.16 Distrib 3.23.49, for pc-linux-gnu (i686)
MyODBC (installed before iODBC)

Oops, I was in a hurry and used dselect to install MyODBC that installed
a bunch of stuff without iODBC
Then I installed iODBC and copied DBD::ODBC from cpan. Alas, it wouldn't
build so I went to the Makfile.PL
under .cpan/build and edited the part for iODBC manager that asked for
ilib..something/lib and removed /lib
(iodbc installed to /usr/lib). That made the ODBC.pm and then a make
install put it at ...5.6.1...DBD/ODBC.pm.

Now, when I run a sample
#!/usr/bin/perl

my $dsn = 'test';
my $dbd  = 'DBI:ODBC';

use DBI;

$dbh = DBI-connect($dbd:$dsn, , , { RaiseError = 1 });

exit();

.. This is the output...
DBI-connect(test) failed: [iODBC][Driver Manager]Data source name not
found and no default driver specified. Driver could not be loaded
(SQL-IM002)(DBD: db_login/SQLConnect err=-1) at ./test_odbc.pl line 9

( I've filled in the odbc.ini )
Trace= On
TraceFile= stderr
Driver   = /usr/local/lib/libmyodbc.so
DSN  = test
SERVER   = x.x.x.x
USER =
PASSWORD = 
PORT = 3306
#OPTIONS = 1
#DATABASE= test
#SOCKET  = /tmp/mysql.sock


Any help would be greatly appreciated.

Thanks,
Scott.




Re: OT: Server side scripting languages comparison

2002-08-19 Thread Paul Scott
On Mon, 19 Aug 2002 09:00:21 -0600
Lance Levsen [EMAIL PROTECTED] wrote:

  the bigest problem with perl based solutions is ...perl. Perl is
  great provided a) you already know it well, b) you never need to fix
  it. Anyone new to scripting languages should probably not start on
  perl if they can help it. At first it will confuse and frustrate
  you, and eventualy render you indispensable as the only person in
  the company with half a chance of decrypting all the perl code
  you've written.
  
  Not wanting to start a language war... all popular languages are
  good and vise-versa... for their particular task. Everyone should
  learn them all. I'm not convinced anything big is perls particular
  task... but quick and dirty stuff...yeah.

I also don't want this to become a language war.

Having programmed many languages for over 35 years I pretty well agree with the 
above.
 
 Personally I like perl. It's way more robust then anything 
 outside of the compiled languages. 

See reference to Python below.

 It's worth knowing because 
 the applications for it are much more vast then PHP.

That's hard to argue with but many of those working app's can be called from 
code written in other languages.
 
 I can't speak about python, I know perl why would I need it?

Eric Raymond answered that question for me:

http://www.linuxjournal.com/article.php?sid=3882
 
 As Craig said, and I endorse,
 
 why bother learning a language (  ) suitable for web
 applications when for about the same effort you can learn a
 general purpose language that can be used for web applications,
 systems administration, any kind of data mangling, and other
 general scripting tasks?

Because it is so complicated compared to other languages.  I can read many 
other languages almost immediately but not so for Perl.  I have even read most 
of Programming Perl (that may not be the best place to start but I got it free 
for reviewing it).

Have fun and keep the comments objective,

Paul Scott




Re: Proftpd+SSL/TLS!!!

2002-07-31 Thread Angus Scott-Fleming
On 31 Jul 2002 at 16:24, Chris Kenrick wrote:

 Other than that, use scp.  Unfortunately, most options will involve
 some effort/difficulty on the client end. 

One problem I see with scp: no easy chroot jail, while with 
ftp I think you can limit the logins to one directory (and 
down) pretty easily.

There's an easy-to-use Windows client for SCP: WinSCP, google 
for it.  Don't know of an equivalent for *nix.

Angus S-F

-
Angus Scott-Fleming  GeoApps, Tucson, Arizona
[EMAIL PROTECTED]   1-520-290-5038 / fax 1-208-248-3124
-





Re: Newbie: Is there a basic Debian-for-ISP HOWTO?

2002-07-30 Thread Angus Scott-Fleming
Thanks to all for an interesting and informative discussion 
(so far).  It has not degenerated into flamewars; I think 
proponents of qmail and postfix have stated their cases well 
without descending into wars over The One True Way.  

Angus
-
Angus Scott-Fleming  GeoApps, Tucson, Arizona
[EMAIL PROTECTED]   1-520-290-5038 / fax 1-208-248-3124
-





Newbie: Is there a basic Debian-for-ISP HOWTO?

2002-07-29 Thread Angus Scott-Fleming
Newbie alert!  Feel free to point me to the list archives if 
you can tell me how to find what I'm looking for.

I've found the Pocket ISP setup for Redhat document, is 
there something similar for Debian available?  I searched the 
list archives for things like first time, initial setup, 
and the like, and couldn't find one.

I'm a very experienced Windows computer user (had a computer 
login of some sort since 1974 and owned MS Boxes of various 
flavours since 1984), consider myself a relative newbie with 
Debian  Linux (although I've been using Debian for years and 
have set up a few Debian and OpenBSD boxes), and need to set 
up my own virtualhost with virtualmail.  I've been co-managing 
a Debian box with virtual hosting for a number of years but 
want to get my own set up as my co-managers have made a bunch 
of changes and not told me about them (which has made my life 
much more difficult than it needs to be ;-).  

I'd really like to find a HOWTO for this.  The ftp install let 
me tell it I wanted to set up an Internet server, but after 
all the setup, it isn't set up for shared virtual hosting the 
way I need 

-
Angus Scott-Fleming  GeoApps, Tucson, Arizona
[EMAIL PROTECTED]   1-520-290-5038 / fax 1-208-248-3124
-



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]




Re: Newbie: Is there a basic Debian-for-ISP HOWTO?

2002-07-29 Thread Angus Scott-Fleming
Did you mean to reply off-list?  Please, let's take this back 
to the list.

On 29 Jul 2002 at 12:35, Bulent Murtezaoglu wrote:

 
 Hi, I occasionally train people on this and the advice that will work
 for you depends on what exactly you are after and how you like to
 learn.  If you enjoy reading as much as playing around the best advice
 I can give you is the following:
 
 -- Understand how DNS works.  This is crucial for understanding most
 of the 'virtual' stuff that goes on.  Easy to do as there's a good
 book (DNS and BIND by Albitz and Liu) but a disturbing number of
 people demonstrate a lack of clue in this regard (I won't name
 companies here).

[grin] ... have the book, haven't perused it in detail.

 -- Once armed with the above, you need a basic understanding of SMTP,
 ftp, and http.  Then pick the packages for each, and learn to make
 them do what you want.  I use sendmail, proftpd and apache
 respectively.  

any comments on qmail or procmail vs sendmail welcome.  I've 
heard Bad Things about sendmail's complexity but it _is_ the 
standard ... what do you use for MLM?  mailman?

 If you know all this, you can just skip the pre-packaged installs and 
 do an apt-get install sendmail proftpd apache (and possibly bind) and
 you'll be on your way.  

will I need sourcecode for apache to set up suEXEC options for 
virtual hosting in my own choice of directory tree (i.e. 
DocRoot in /www-data instead of the default /var/www)?

 There will be other equally valid answers that recommend some easy
 plug and chug solution, but if you follow the above advice you'll
 actually _start_ from the point where you understand what you are
 doing.

Thanks. 
-
Angus Scott-Fleming  GeoApps, Tucson, Arizona
[EMAIL PROTECTED]   1-520-290-5038 / fax 1-208-248-3124
-



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]




Re: Newbie: Is there a basic Debian-for-ISP HOWTO?

2002-07-29 Thread Angus Scott-Fleming
On 29 Jul 2002 at 15:10, Bulent Murtezaoglu wrote:

 [This is exactly the kind of exchange I was trying to avoid, oh well]

IMHO as a newbie this is just the kind of exchange I was 
hoping for (trolling for?) ;-)

  EvB == Emile van Bergen [EMAIL PROTECTED] writes:
 [...]
 EvB In short, you can only compare qmail and sendmail. Not only
 EvB does the latter have a bad reputation for complexity, but for
 EvB its amount of bugs and lack of security as well. 
 
 What you say aboout sendmail was true in the late 80's to mid-90s.  Its
 recent track record is much better.  Do you know of any recent
 vulnerabilities other than the monor ones mentioned at
 http://www.sendmail.org/ ?

I see that the default MTA for OpenBSD is the OpenBSD port of 
sendmail.  That should reflect positively on its security, 
although only in the OBSD flavour (OBSD still installs BIND 4 
as the team considers 8 and 9 to be {broken,insecure}.

 Sendmail is _very_ flexible but it is probably not good for the
 inexperienced admin.  If you are willing to read documentation and M4
 doesn't scare you, it is a fairly safe bet.  In my most humble opinion
 one ought not be running an ISP of any viable size if one has trouble 
 getting sendmail to do what's needed.  

Should anyone who won't RTFM (where F==FULL) be running an 
ISP?

 I will refrain from commenting on Qmail, other than saying that it
 does work.  But if I were to learn a new MTA, I'd take a good look at
 postfix for the main reason that I like the postfix community much
 better that the Qmail community.  

What are your problems with qmail?  What do you like about the 
Postfix comm. that QMail lacks?  Not trolling for flamewars 
here, trying to decide myself which way to jump (where to 
start out -- I'll switch if I have to but I'd rather start 
with a program that comes with recommendations that have been 
{justified,explained} from 1 user.  Which is why I was 
{trolling,hoping} for comments on MTAs, MLMs, etc.

 I recommend anyone contemplating about sendmail for serious use to hang
 out in comp.mail.sendmail for a while to see if they fit into the
 profile that group is supportive of. 

Sounds like you also have issues with the sendmail community?  
Or is it just that sendmail still has holes?

 EvB It may still be the standard MTA in certain commercial
 EvB unixes, but IMHO the advantages offered by that (whatever
 EvB they may be) won't outweigh the drawbacks for most people. [...]
 
 Have you used both?  (by which I mean did you get both to work for you
 for a reasonable amount of time?).

I'd like to know this as well... BTW, a sysadmin (from another 
[non-Debian] list) I trust says 

XX A recurring comment in the mailing list moderators mailing 
   list is that djb ignores a number of standards.  Which
   aren't specified.  

Anyone here have any insight into what djb's failure-to-hew-
to-standards might be?

He also said:

XX but so far Postfix has been very, very good to me. 

He's running FreeBSD, FWIW.

-
Angus Scott-Fleming  GeoApps, Tucson, Arizona
[EMAIL PROTECTED]   1-520-290-5038 / fax 1-208-248-3124
-



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]




Re: AW: IPSEC and PPTP

2002-07-20 Thread Paul Scott
Grischa Schuering wrote:
I tried to build my own 2.4.18 kernel with make-kpkg --make-menuconfig 
--revision=2.4.18-fwipsec.1.0 kernel_image.
Everything seemed fine so far, but when installing the kernel image (ln -s 
/boot/vmlinuz.new vmlinuz), lilo, and restarting, the kernel is tried to be 
loaded by lilo but then suddenly resets the machine (after the points are being 
displayed).
What could be th prob?
Is ist that the kernel I build is not worling properly or
does it have to do anything with my old kernel set up by initrd (what is it 
anyway)?
Any ideas ?
This just happened to me and it turned that there were many choices of 
architecture and I had chosen (or not noticed that I had chosen) a different 
flavor of x86.  That was exactly my symptom.  Recheck your menuconfig carefully.
BTW: How do I tell Lilo to let me choose e.g. by a boot menu which kernelimage 
to boot from?
Here is the part of my /etc/lilo.conf that does that:
# Boot up Linux by default.
#
default=Linux-2.4.18
image=/vmlinuz
   label=Linux-2.4.18
   read-only
#   restricted
#   alias=1
image=/vmlinuz-old
   label=LinuxOld
   read-only
HTH,
Paul Scott

--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Multiple DSL lines + iproute + squid ...

2001-07-01 Thread Scott Kveton
Hello all,

I'm working on a problem that seems like it should work and am looking for
some help knocking out any obvious problems.

We currently have several DSL lines that are used for crawling websites.
Bandwidth as it is is pretty cheap via DSL (we have 6 7Mbit lines for much
less than an ~equivalent T-3).  Right now we use a single RedHat machine
that has the DSL lines attached to it and we use iproute to direct the
networks of traffic to each DSL line.

The biggest problem with this is that if a DSL line goes down we have no
real way to switch to a new line without going in and changing the rules
by hand.  The machine it currently resides on is a blackbox built by
someone who is no longer with our organization.  It ain't broke, so I
don't touch it.

I came up with the idea of bringing up a new box that has 1 internal
interface and then up to 11 external interfaces (using dual Intel NICs).
The internal interface will have squid running on it and will handle
requests from internal (10.0.0.0/8) addresses.  On each one of the
external interfaces I'll have another copy of squid running (from a
different conf file) that will be a parent to the internal interface.
Each external interface will be attached to a different DSL line.

I'm hoping that by leveraging the cache hierarchy abilities of Squid I can
essentially load-balance across all of the lines (for http requests
only).  If a line goes down, Squid should treat it as a dead parent and
not forward requests to it.

I'm currently running a Debian machine with the 2.4.5 kernel under
the testing distro for this.  The machine is setup as a firewall using
iptables (which works wonderfully).  My problem right now is I cannnot
seem to make the ip policy routing work for the external interfaces.  For
example:

cave:/etc/init.d# ip ro show
63.229.140.40/29 dev eth1  proto kernel  scope link  src 63.229.140.41
65.100.40.32/29 dev eth2  proto kernel  scope link  src 65.100.40.33
65.100.62.168/29 dev eth3  proto kernel  scope link  src 65.100.62.169
63.227.221.8/29 dev eth5  proto kernel  scope link  src 63.227.221.9
63.230.174.24/29 dev eth4  proto kernel  scope link  src 63.230.174.25
206.29.168.104/29 dev eth6  proto kernel  scope link  src 206.29.168.106
10.10.0.0/16 dev eth0  proto kernel  scope link  src 10.10.5.57

These are the routes in the main table.  Now, I have Squid bound to
63.229.140.41 and I want all traffic with that source to go out
63.229.140.46 using source routing.  I would think I would do the following:

ip ru add prio 4000 from 63.229.140.41 lookup qwest_7_1
ip ro add table qwest_7_1 via 63.229.140.46
ip ro flush cache

If I do a `ping -I 63.229.140.41 ftp.orst.edu` I get a host unreachable.
Its almost as if the rules aren't taking affect at all.  Same results for
traceroute -i eth1 ... and tcpdump on that interface shows no traffic
moving across it.

Has anyone had any problems with iproute and 2.4.5?  I've tried this with
2.2.19 as well to no avail.  Is there something blindingly obvious wrong
with my rules?!  Someone just please tell me this isn't possible so I can
get some sleep ... :-)

I have the following versions:

Kernel v2.4.5 (with CONFIG_NETLINK and CONFIG_RTNETLINK as well as a few
others enabled)
iproute2 version 20001007-1
Squid v2.4.1-5

Thank you all for you help; couldn't do my job without Debian,

Scott :-)





Load Ballancing

2001-01-15 Thread Scott Thompson

I have a small server on a DSL line. We have grown to the point that it's
not quite enough to handle the peak traffic time nicely. I would like to add
another DSL line to my network and be able to have it load balance between
the two. Is this something that is possible, or do I just try to divide the
clients through the 2 lines and just be as aware as I can to the needs of
both lines?

Thanks in advance.

Scott Thompson
Programming  Server Admin
Internet Brokers Group
[EMAIL PROTECTED]
http://www.internetbrokers.ab.ca
Office: (403) 232-1032
Fax: (403) 265-2843


--  
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




RE: Load Ballancing

2001-01-15 Thread Scott Thompson

Excellent info, I will likely then just have some on one line and some
clients on another and just watch the line loads. I have used ntop like I
use top for sampling the bandwidth usage. Is there something better that I
can use? I don't have any routers or hubs in place, just dsl into the
network card. I find that the ntop segmentfaults very often so it's ok for
guestamating but that's about it. (running v.1.2a7 of ntop by the way)

Thanks again.

Scott Thompson
Programming  Server Admin
Internet Brokers Group
[EMAIL PROTECTED]
http://www.internetbrokers.ab.ca
Office: (403) 232-1032
Fax: (403) 265-2843


 -Original Message-
 From: pete [mailto:pete]On Behalf Of Pete Billson
 Sent: Monday, January 15, 2001 3:00 PM
 To: Scott Thompson
 Cc: [EMAIL PROTECTED]
 Subject: Re: Load Ballancing


 Scott Thompson wrote:
 
  I have a small server on a DSL line. We have grown to the point
 that it's
  not quite enough to handle the peak traffic time nicely. I
 would like to add
  another DSL line to my network and be able to have it load
 balance between
  the two. Is this something that is possible, or do I just try
 to divide the
  clients through the 2 lines and just be as aware as I can to
 the needs of
  both lines?

 Scott,
   Check out the how-to from the Linux Router Project

 http://c0wz.steinkuehler.net/dox/monkeynoodle/LRP-Load-Balancing-HOWTO.txt

 Pete Billson



--  
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Correction Re: Talking to a pop server

2000-10-05 Thread Scott Thompson

Uhhh, I ment to say Neomail 1.14 not newmail.

Scott Thompson
Programming  Server Admin
Internet Brokers Group
[EMAIL PROTECTED]
http://www.internetbrokers.ab.ca
Office: (403) 232-1032
Fax: (403) 265-2843


--  
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Talking to a POP server.

2000-10-04 Thread Scott Thompson

Hello once again list. I am currently writing an online mail service similar
to hotmail or yahoo mail. I have all the elements in place except for one.
In C, how do I talk to a POP server? Is there something like 'sendmail' that
I use to easily send all my mail messages, but for receiving mail from a pop
server?

Thanks in advance!

Scott Thompson
Programming  Server Admin
Internet Brokers Group
[EMAIL PROTECTED]
http://www.internetbrokers.ab.ca
Office: (403) 232-1032
Fax: (403) 265-2843


--  
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Email Attachment addendum

2000-09-11 Thread Scott Thompson
I probably should have worded it better. I would like to send an email it
had been using an ANCI C program. I frequently use sendmail from within
these programs.  I just need to know how to attach a binary file to a
message if necessary, wrong within the software that we write.

Scott Thompson
Programming  Server Admin
Internet Brokers Group
[EMAIL PROTECTED]
http://www.internetbrokers.ab.ca
Office: (403) 232-1032
Fax: (403) 265-2843




Email Attachments Solved.

2000-09-11 Thread Scott Thompson
Sorry, I did get it figured out now :-)




Multiple 'timed' Autoresponders

2000-09-08 Thread Scott Thompson
I have a need for a service, and am quite prepated to write a little C to
take care of it. My Linux administrator suggested that it would be about the
only way that he is aware of doing what I need. I just wanted to put forth
my requirements and see if someone had done, or has an idea for me.

I would like to have the ability to send out multiple timed autoresponses.
I.E.
1) When a message is received, immediately send out a 'I got this message'
response
2) 5 Days later send out another autoresponder
3) 14 Days later send out a follow up autoresponse...
etc.

Some clients want more, some want less and the day interval needs to be
different from user to user. Also, keep in mind that each autoresponse is a
different message. I relize that I will likely have to build a web interface
to manage these responses, I was just hoping that I wouldn't have to code
the actual mailing and managment of the times.

Thanks!

Scott Thompson
Programming  Server Admin
Internet Brokers Group
[EMAIL PROTECTED]
http://www.internetbrokers.ab.ca
Office: (403) 232-1032
Fax: (403) 265-2843




RE: MySQL vs. Postgres

2000-09-02 Thread Scott Thompson

you can find the perl software i use (free) at www.awsd.com :-)

-Original Message-
From: Sanjeev Gupta [mailto:[EMAIL PROTECTED]]
Sent: Friday, September 01, 2000 1:05 AM
To: Scott Thompson
Cc: [EMAIL PROTECTED]
Subject: RE: MySQL vs. Postgres



On Wed, 30 Aug 2000, Scott Thompson wrote:

  Some stats for you. Keep in mind that these are only for the webserver.
 
  Hits   Bytes  Visits  PViews  Month
 8,891,404  58,798,965,869 211,007   1,528,073   Jun 2000
10,853,047  57,775,413,897 224,862   1,375,197   Jul 2000
 9,121,259  53,851,857,460 210,680   1,421,053   Aug 2000

Off topic:  How did you generate this table?  How are you defining Visits 
and Page Views?

Thanks

-- Ghane


--  
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




RE: MySQL vs. Postgres

2000-09-02 Thread Scott Thompson
you can find the perl software i use (free) at www.awsd.com :-)

-Original Message-
From: Sanjeev Gupta [mailto:[EMAIL PROTECTED]
Sent: Friday, September 01, 2000 1:05 AM
To: Scott Thompson
Cc: debian-isp@lists.debian.org
Subject: RE: MySQL vs. Postgres



On Wed, 30 Aug 2000, Scott Thompson wrote:

  Some stats for you. Keep in mind that these are only for the webserver.
 
  Hits   Bytes  Visits  PViews  Month
 8,891,404  58,798,965,869 211,007   1,528,073   Jun 2000
10,853,047  57,775,413,897 224,862   1,375,197   Jul 2000
 9,121,259  53,851,857,460 210,680   1,421,053   Aug 2000

Off topic:  How did you generate this table?  How are you defining Visits 
and Page Views?

Thanks

-- Ghane




RE: MySQL vs. Postgres

2000-08-31 Thread Scott Thompson
Yes it was compiled into the Apache server, as well as we were using the C
api for mysql.


On Wed, 30 Aug 2000, Scott Thompson wrote:

 SNIP

 Some stats for you. Keep in mind that these are only for the webserver.

 Hits   Bytes  Visits  PViews  Month
8,891,404  58,798,965,869 211,007   1,528,073   Jun 2000
   10,853,047  57,775,413,897 224,862   1,375,197   Jul 2000
9,121,259  53,851,857,460 210,680   1,421,053   Aug 2000

 Granted we have other clients, but I would guess that 60-80% of the
 consumers are 'real estate interested'.


  We run mySQL here and created an application with PHP3/4 to interface
with
  the SQL engine. I will tell you now, that we re-wrote all the php pages
 into
  ANSI C as the performance was PATHETIC. (p2 350 with 256 megs of ram)
The
  performance was 10 times faster than php. Another thing that I notice
 about

Was PHP installed as a server module or as a CGI app?

CGI PHP vs. CGI C of course the former is slower.

I'd like to compare modphp vs CGI C in your setup. Best way of course
would be to write your own dedicated server module in C. Best for
performance, of course...

.TM.
--
  /  /   /
 /  /   /   Marco Colombo
___/  ___  /   /  Technical Manager
   /  /   /  ESI s.r.l.
 _/ _/  _/ [EMAIL PROTECTED]


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact
[EMAIL PROTECTED]




RE: MySQL vs. Postgres

2000-08-30 Thread Scott Thompson
We run mySQL here and created an application with PHP3/4 to interface with
the SQL engine. I will tell you now, that we re-wrote all the php pages into
ANSI C as the performance was PATHETIC. (p2 350 with 256 megs of ram) The
performance was 10 times faster than php. Another thing that I notice about
mySQL is that it's load can get rather high if you have a large database.
(we have 5k records in a realestate database so there's a pile of fields too
that we have broken into 50 different tables to optimize the searches).

If you plan on running a dynamic website, we aware of the following issues.
1) You will need more horsepower that you likely think. (true in my
experience with this solution)
2) Search engines will NOT index php pages or asp pages and the like nearly
as well as static pages. This is a big deal if you are looking for traffic
to this site.
3) If you decided to go this way, offload the mySQL to a box on it's own,
you will see marked improvement. We moved ours to a 700 with 512 megs of ram
and it's almost acceptable. (we get a few searches a minute, not a lot, but
definately busy)

My 2 and a half cents

Scott Thompson
Programming  Server Admin
Internet Brokers Group
[EMAIL PROTECTED]
http://www.internetbrokers.ab.ca
Office: (403) 232-1032
Fax: (403) 265-2843


-Original Message-
From: Arno Vije [mailto:[EMAIL PROTECTED]
Sent: Wednesday, August 30, 2000 9:35 AM
To: debian-isp@lists.debian.org
Subject: MySQL vs. Postgres



Hi,

where setting up some servers for a small ISP,
they want to have a SQL database, but i`m in
doubt. Which one would you recommend, mysql or postgres?
The SQL database will be used in combination with PHP3 (or 4)
to generate dynamic websites.

greets,

:::
   (o 0)
+|||_o_|||-+
| Arno Vije|
| [EMAIL PROTECTED]  |
| www.linuxinfo.nl |
+--v---v---+



--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact
[EMAIL PROTECTED]




RE: MySQL vs. Postgres

2000-08-30 Thread Scott Thompson
SNIP

Some stats for you. Keep in mind that these are only for the webserver.

Hits   Bytes  Visits  PViews  Month
   8,891,404  58,798,965,869 211,007   1,528,073   Jun 2000
  10,853,047  57,775,413,897 224,862   1,375,197   Jul 2000
   9,121,259  53,851,857,460 210,680   1,421,053   Aug 2000

Granted we have other clients, but I would guess that 60-80% of the
consumers are 'real estate interested'.


 We run mySQL here and created an application with PHP3/4 to interface with
 the SQL engine. I will tell you now, that we re-wrote all the php pages
into
 ANSI C as the performance was PATHETIC. (p2 350 with 256 megs of ram) The
 performance was 10 times faster than php. Another thing that I notice
about

Rather surprised by that, wonder what the hit rate was.  On the web server I
run which has been pretty busy at times (1GB served less than a week, daily
access logs of 60-70MB), the php and apache usage was virtually undectable,
p3 650 256MB.

Basically DB access and network download times, swamped out anything that
the PHP interpreter does.

 mySQL is that it's load can get rather high if you have a large database.
 (we have 5k records in a realestate database so there's a pile of fields
too
 that we have broken into 50 different tables to optimize the searches).

 If you plan on running a dynamic website, we aware of the following
issues.
 1) You will need more horsepower that you likely think. (true in my
 experience with this solution)
 2) Search engines will NOT index php pages or asp pages and the like
nearly
 as well as static pages. This is a big deal if you are looking for traffic
 to this site.
 3) If you decided to go this way, offload the mySQL to a box on it's own,
 you will see marked improvement. We moved ours to a 700 with 512 megs of
ram
 and it's almost acceptable. (we get a few searches a minute, not a lot,
but
 definately busy)





RE: sort of a load balancing question

2000-08-24 Thread Scott Thompson
We do that here. But the difference is it's not totally automated. If the
primary server goes down for whatever reason, our admin's pager will go off,
he lives 6 minutes from the office and 7 minutes from the backup server in
another building. Simply he goes and get's the backup server, restarts it
and at the lilo prompt he types 'clone' and we are back up and running.

Granted this puts us down for about 15 minutes, but it's there!

Scott Thompson
Programming  Server Admin
Internet Brokers Group
[EMAIL PROTECTED]
http://www.internetbrokers.ab.ca
Office: (403) 232-1032
Fax: (403) 265-2843


-Original Message-
From: Shao Zhang [mailto:[EMAIL PROTECTED] Behalf Of Shao
Zhang
Sent: Wednesday, August 23, 2000 7:30 PM
To: debian-isp@lists.debian.org
Subject: sort of a load balancing question


Hi,
This is not a really load balancing question, but similar sort
of thing.

We are an isp here and we would like to set up two webservers
that are completely tranparent(rsync daily).

We will only be using one webserver to server all the pages, but
if it goes down, we would like the second webserver to take over
without any downtime.

Is there any programs out there that does this?

Thanks.

Shao.

--

Shao Zhang - Running Debian 2.1  ___ _   _
Department of Communications/ __| |_  __ _ ___  |_  / |_  __ _ _ _  __ _
University of New South Wales   \__ \ ' \/ _` / _ \  / /| ' \/ _` | ' \/ _`
|
Sydney, Australia   |___/_||_\__,_\___/ /___|_||_\__,_|_||_\__,
|
Email: [EMAIL PROTECTED]
|___/

_


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact
[EMAIL PROTECTED]




webmail service.

2000-07-19 Thread Scott Thompson
Hello all. I am looking for information or links to a webmail program. I am
running Debian 2.0.38 with apache. My linux administrator is quite firm
about 'debian released packages' so if there are any that fit into that
category, that would be best, if not, any suggestions would be greatly
appreciated from any of you that have installed and maintain a service like
this.

My needs are low as well, I have about 350 active domains with about 1200
email accounts. I can't really see more that 25% of the users wanting the
service, but as you all know, in this day and age, it's the service and
features that make or break us!

Many Thanks

Scott Thompson
Programming  Server Admin
Internet Brokers Group
[EMAIL PROTECTED]
http://www.internetbrokers.ab.ca
Office: (403) 232-1032
Fax: (403) 265-2843




Webmail service addition

2000-07-19 Thread Scott Thompson
I would prefer not to have to run *SQL etc. I ultimatly would like the
service to simply plug into my existing service. I do run mySQL but I really
don't want to pound that kind of overhead (on installation and maintenance
as well as sql server load).

Thanks again

Scott Thompson
Programming  Server Admin
Internet Brokers Group
[EMAIL PROTECTED]
http://www.internetbrokers.ab.ca
Office: (403) 232-1032
Fax: (403) 265-2843




RE: IDE or SCSI ??

2000-07-10 Thread Scott Thompson
I agree, I have about 340 active domains, and my stats for may's webserver
traffic was
hits: 9,498,039
Outgoing Bytes: 58,937,127,164
Visitors: 225,193
Page Views 1,401,266

My machine is a P2 350 with 250 megs of ram. I am RARELY over .75 load
during the day (peak time for us). I also run quite a few cgi's (mostly ANSI
C).

Scott Thompson

-Original Message-
From: Russell Coker [mailto:[EMAIL PROTECTED]
Sent: Friday, July 07, 2000 1:20 AM
To: Chris Wagner; [ Francho ]
Cc: debian-isp@lists.debian.org
Subject: Re: IDE or SCSI ??


On Tue, 04 Jul 2000, Chris Wagner wrote:
Ok, ok, I'm late as hell but I had to reply. :)  You don't need SCSI unless
you're doing something fancy or insane.  Giving Apache more RAM is *vastly*
better than giving it SCSI.  The RAM lets you cache everything so the hard
disk becomes not very important for I/O.  Max out your motherboard's RAM
capacity.

One thing to consider is the amount of load.  300 domains * 300 visits /
86400 seconds in a day = 1.03 visits per second.

For such a small load I doubt that you'll need much IO, memory, or CPU,
unless it's all CGI-BIN stuff.


Russell Coker




At 10:18 AM 6/13/00 +0200, Roger Abrahamsson wrote:
On Tue, 13 Jun 2000, [ Francho ] wrote:

 I have mount a new Internet Server whith (apache, mysql, bind and
qmail).
It will be about 300 domains allocated (each domain will recibed about 300
visits/day).

 What hardware do you recommend ???

 Thanks in advance.
 --
  [EMAIL PROTECTED]

 ---


SCSI!! I/O is your main concern.. Then lots of memory.. CPU comes only as
the third factor.


-
Roger Abrahamsson, Senior Sys/Net Admin
Obbit AB
Radhusespl.17D, S-90328 Umea, Sweden
Phone: (+46)(0)90 133310Fax:(+46)(0)90 133370
-


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact
[EMAIL PROTECTED]



+---+
|-=I T ' S  P R I N C I P L E  T H A T  C O U N T S=-   |
|=-  -=ALAN KEYES FOR PRESIDENT=- -=|
| Balanced Budgets Personal Freedoms Morality Lower Tax |
|=--  http://www.Keyes2000.com.  --=|
+———+

0100


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact
[EMAIL PROTECTED]
--
My current location - X marks the spot.
X
X
X


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact
[EMAIL PROTECTED]




RE: Webserver stats for customers

2000-03-29 Thread Scott Thompson
I use weblog and logtools from www.awsd.com/scripts These are well written
reports and create very nice reports. I does a decent job of tracking
visits, page views and various top 10 lists and full details reports.
Keyword, referer and agent reports as well.

And its Free!

Scott Thompson
Programming  Server Admin
Internet Brokers Group
[EMAIL PROTECTED]
http://www.internetbrokers.ab.ca
Office: (403) 232-1032
Fax: (403) 265-2843


-Original Message-
From: Jonathan McDowell [mailto:[EMAIL PROTECTED]
Sent: Wednesday, March 29, 2000 3:55 AM
To: Debian Isp
Subject: Re: Webserver stats for customers



On Wed, Mar 29, 2000 at 12:00:35PM +0200, Jaume Teixi wrote:
 Wich one do you recomend for use with apache and separate stats for
 each domain ?

Analog for text stats that you can email to people, Webalyzer for pretty
graphical stats that you can put up on the web. We use both.

J.

--
  A fool and his money are SYSOP|   Black Cat Networks Ltd
 material.  | http://www.blackcatnetworks.co.uk/
|  UK Web, domain and email hosting


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact
[EMAIL PROTECTED]