Re: Virtual Hosting for Email

2001-12-23 Thread Helios de Creisquer
On Fri, Dec 21, 2001 at 11:01:08PM -0800, Matthew Walkup wrote:
 Hello,

Hi !

 should be treated as seperate accounts. AND the account logins  should
 BOTH be just 'webmaster', and the pop server should be able to  figure
 out  which  user  it  is  by  the  server-name  they  are   using   ie
 'mail.client1.com' or  'mail.client2.com'.  I  dont  even  want  shell
 access for each user, so another method  of  authentication  would  be
 best anyways. I have attempted to find  some  documentation  on  this,
 (and Im sure I'll get a  lecture  for  this  ;)  but  I  havent  found
 anything that explains it well.

 Basically:

 1) Im wondering  if  this  is  possible,  or  what  is  the  next-best
solution.
 2) Im looking for documentation on this that explains WHY  you  follow
the steps you do, not just how to do it.
 3) Im looking for best deamons in your  opinions  to  use  (exim/cyrus
combo is what I use at work, but its a 1 domain environment).

As others already said, there is no 'Host: ' like in HTTP/1.x  so  users
have to put their entire mail address as a login.

The  Vhffs  subsystem  (Virtual  Hosting  For  Free  Software,  used  on
TuxFamily.org, a free software hosting service) uses exim  +  courier  +
mysql for providing multidomain pop/imap/webmail (ssl  or  not)  without
filling the passwd file with crap :)

You can just get the packages  as  examples  (Vhffs  is  actually  at  a
experimental devel stage...) at: 

deb  ftp://ftp.vhffs.org/debian vhffs  main
deb-src  ftp://ftp.vhffs.org/debian vhffs  main


 I appreciate any help you may provide,

Appreciating any feedback...

Cheers,
--
   Helios de Creisquer  [EMAIL PROTECTED]
http://www.tuxfamily.org/[EMAIL PROTECTED]
http://www.vhffs.org/  +33 (0)6 70 71 20 29  [EMAIL PROTECTED]
http://www.gnu.org/[EMAIL PROTECTED]
GPG(1024D/96EB1C44): FB11 8B80 4D86 D9C2 DE0C 11D7 2FA8 A5CC 96EB 1C44


pgprR5hNONErZ.pgp
Description: PGP signature


Re: Virtual Hosting for Email

2001-12-22 Thread Jeremy Lunn

On Fri, Dec 21, 2001 at 11:01:08PM -0800, Matthew Walkup wrote:
 a small client base now, so I think it should be alright).  So I need a
 smtp/pop package that is light-weight, and doesnt have much overhead.  The

Postfix is a great MTA (Mail Transfer Agent).  I don't know hich pop
package would be best.

Postfix supports having virtual hosts in an LDAP directory or a MySQL
table.


 should be treated as seperate accounts.  AND the account logins should BOTH
 be just 'webmaster', and the pop server should be able to figure out which
 user it is by the server-name they are using ie 'mail.client1.com' or

That is not possible with only 1 IP addr.  Pop3 has no way of getting
the client software to send the hostname that it thinks it's connecting
to.  What you might be able to do is get your clients to set their
username in the pop3 client software to their email addr.
eg '[EMAIL PROTECTED]'.

I have never tried to do that before.

 'mail.client2.com'.  I dont even want shell access for each user, so another
 method of authentication would be best anyways.  I have attempted to find

Set the users shell to /bin/false and if you want set ssh to only allow
a certain list of usernames and same with PAM for telnet/local console.

--
Jeremy Lunn
Melbourne, Australia
http://www.jabber.org/ - the next generation of Instant Messaging.


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]




RE: Virtual Hosting for Email

2001-12-22 Thread Matthew Walkup

Thanks for the replies Jeremy...

Well thats what I was looking for, and I figured that about the POP3 (kind
of a shame, isnt it :P).  I think ill go with using the full emails for
their logins.  but i dont want to use the linux auth for pop/imap/mta.  Im
expecting to have several hundred email addresses with only a few (10-20)
for ssh.  Id rather not fill my passwd file with junk.  Is this possible? =)
The other tech in my office managed to get exim/cyrus to read another file
passwords (which i could probably replicate) but we still had to add the
user to linux (just adduser --system --disabled-password userand
authenticate with a htpasswd file).

Thanks again for any more insight,

Matt

-Original Message-
From: Jeremy Lunn [mailto:[EMAIL PROTECTED]]
Sent: Saturday, December 22, 2001 2:07 AM
To: Matthew Walkup
Cc: [EMAIL PROTECTED]
Subject: Re: Virtual Hosting for Email


On Fri, Dec 21, 2001 at 11:01:08PM -0800, Matthew Walkup wrote:
 a small client base now, so I think it should be alright).  So I need a
 smtp/pop package that is light-weight, and doesnt have much overhead.  The

Postfix is a great MTA (Mail Transfer Agent).  I don't know hich pop
package would be best.

Postfix supports having virtual hosts in an LDAP directory or a MySQL
table.


 should be treated as seperate accounts.  AND the account logins should
BOTH
 be just 'webmaster', and the pop server should be able to figure out which
 user it is by the server-name they are using ie 'mail.client1.com' or

That is not possible with only 1 IP addr.  Pop3 has no way of getting
the client software to send the hostname that it thinks it's connecting
to.  What you might be able to do is get your clients to set their
username in the pop3 client software to their email addr.
eg '[EMAIL PROTECTED]'.

I have never tried to do that before.

 'mail.client2.com'.  I dont even want shell access for each user, so
another
 method of authentication would be best anyways.  I have attempted to find

Set the users shell to /bin/false and if you want set ssh to only allow
a certain list of usernames and same with PAM for telnet/local console.

--
Jeremy Lunn
Melbourne, Australia
http://www.jabber.org/ - the next generation of Instant Messaging.


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]




Re: Virtual Hosting for Email

2001-12-22 Thread Frank Louwers

 
 1) Im wondering if this is possible, or what is the next-best solution.

No. nor POP nor IMAP support HTTP 'Host: ' like constructions

Next best thing: let your users login as [EMAIL PROTECTED] or
[EMAIL PROTECTED] ...

Frank


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]




Re: Virtual Hosting for Email

2001-12-22 Thread Sean Porth

Qmail with the vpopmail addon will do all of this for you.  It will uses
it's own passwd file and such so you don't need to add users to your system
passwd file.

http://inter7.com/vpopmail/
(it even works with postfix)

Sean Porth
System Admin

Tortus Technologies
www.tortus.com


- Original Message -
From: Matthew Walkup [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Saturday, December 22, 2001 5:21 AM
Subject: RE: Virtual Hosting for Email


 Thanks for the replies Jeremy...

 Well thats what I was looking for, and I figured that about the POP3 (kind
 of a shame, isnt it :P).  I think ill go with using the full emails for
 their logins.  but i dont want to use the linux auth for pop/imap/mta.  Im
 expecting to have several hundred email addresses with only a few (10-20)
 for ssh.  Id rather not fill my passwd file with junk.  Is this possible?
=)
 The other tech in my office managed to get exim/cyrus to read another file
 passwords (which i could probably replicate) but we still had to add the
 user to linux (just adduser --system --disabled-password userand
 authenticate with a htpasswd file).

 Thanks again for any more insight,

 Matt

 -Original Message-
 From: Jeremy Lunn [mailto:[EMAIL PROTECTED]]
 Sent: Saturday, December 22, 2001 2:07 AM
 To: Matthew Walkup
 Cc: [EMAIL PROTECTED]
 Subject: Re: Virtual Hosting for Email


 On Fri, Dec 21, 2001 at 11:01:08PM -0800, Matthew Walkup wrote:
  a small client base now, so I think it should be alright).  So I need a
  smtp/pop package that is light-weight, and doesnt have much overhead.
The

 Postfix is a great MTA (Mail Transfer Agent).  I don't know hich pop
 package would be best.

 Postfix supports having virtual hosts in an LDAP directory or a MySQL
 table.


  should be treated as seperate accounts.  AND the account logins should
 BOTH
  be just 'webmaster', and the pop server should be able to figure out
which
  user it is by the server-name they are using ie 'mail.client1.com' or

 That is not possible with only 1 IP addr.  Pop3 has no way of getting
 the client software to send the hostname that it thinks it's connecting
 to.  What you might be able to do is get your clients to set their
 username in the pop3 client software to their email addr.
 eg '[EMAIL PROTECTED]'.

 I have never tried to do that before.

  'mail.client2.com'.  I dont even want shell access for each user, so
 another
  method of authentication would be best anyways.  I have attempted to
find

 Set the users shell to /bin/false and if you want set ssh to only allow
 a certain list of usernames and same with PAM for telnet/local console.

 --
 Jeremy Lunn
 Melbourne, Australia
 http://www.jabber.org/ - the next generation of Instant Messaging.


 --
 To UNSUBSCRIBE, email to [EMAIL PROTECTED]
 with a subject of unsubscribe. Trouble? Contact
[EMAIL PROTECTED]




-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]




Re: Virtual Hosting for Email

2001-12-22 Thread Russell Coker

On Sat, 22 Dec 2001 11:07, Jeremy Lunn wrote:
  should be treated as seperate accounts.  AND the account logins should
  BOTH be just 'webmaster', and the pop server should be able to figure out
  which user it is by the server-name they are using ie 'mail.client1.com'
  or

 That is not possible with only 1 IP addr.  Pop3 has no way of getting
 the client software to send the hostname that it thinks it's connecting
 to.  What you might be able to do is get your clients to set their
 username in the pop3 client software to their email addr.
 eg '[EMAIL PROTECTED]'.

That is one way to do it, but requires that the POP server also know about 
domains (which can be painful).  My preferred method is to have the mail go 
to a different account name that fits into the normal Unix account name 
scheme.  Then use a choice of POP and IMAP servers without needing any 
special setup.

On Sat, 22 Dec 2001 11:21, Matthew Walkup wrote:
 Thanks for the replies Jeremy...

 Well thats what I was looking for, and I figured that about the POP3 (kind
 of a shame, isnt it :P).  I think ill go with using the full emails for
 their logins.  but i dont want to use the linux auth for pop/imap/mta.  Im
 expecting to have several hundred email addresses with only a few (10-20)
 for ssh.  Id rather not fill my passwd file with junk.  Is this possible?
 =) The other tech in my office managed to get exim/cyrus to read another
 file passwords (which i could probably replicate) but we still had to add
 the user to linux (just adduser --system --disabled-password userand
 authenticate with a htpasswd file).

Use LDAP to store the account info, this will also make it easier for you 
when you want to expand to multiple servers.

-- 
http://www.coker.com.au/bonnie++/ Bonnie++ hard drive benchmark
http://www.coker.com.au/postal/   Postal SMTP/POP benchmark
http://www.coker.com.au/projects.html Projects I am working on
http://www.coker.com.au/~russell/ My home page


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]




RE: Virtual Hosting for Email

2001-12-22 Thread Matthew Walkup

Thanks everyone for the input, was very helpful...

That was my first post, and im very impressed ;)... Thanks guys for all the
tips.

-Matt


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]




Re: Virtual Hosting for Email

2001-12-22 Thread Jeremy Lunn

On Sat, Dec 22, 2001 at 02:21:22AM -0800, Matthew Walkup wrote:
 their logins.  but i dont want to use the linux auth for pop/imap/mta.  Im
 expecting to have several hundred email addresses with only a few (10-20)
 for ssh.  Id rather not fill my passwd file with junk.  Is this possible? =)

If you get pop/imap daemons that support PAM then you can authenticate
by any means you want.

-- 
Jeremy Lunn
Melbourne, Australia
http://www.jabber.org/ - the next generation of Instant Messaging.


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]




Re: Virtual Hosting for Email

2001-12-22 Thread Jeremy Lunn
On Fri, Dec 21, 2001 at 11:01:08PM -0800, Matthew Walkup wrote:
 a small client base now, so I think it should be alright).  So I need a
 smtp/pop package that is light-weight, and doesnt have much overhead.  The

Postfix is a great MTA (Mail Transfer Agent).  I don't know hich pop
package would be best.

Postfix supports having virtual hosts in an LDAP directory or a MySQL
table.


 should be treated as seperate accounts.  AND the account logins should BOTH
 be just 'webmaster', and the pop server should be able to figure out which
 user it is by the server-name they are using ie 'mail.client1.com' or

That is not possible with only 1 IP addr.  Pop3 has no way of getting
the client software to send the hostname that it thinks it's connecting
to.  What you might be able to do is get your clients to set their
username in the pop3 client software to their email addr.
eg '[EMAIL PROTECTED]'.

I have never tried to do that before.

 'mail.client2.com'.  I dont even want shell access for each user, so another
 method of authentication would be best anyways.  I have attempted to find

Set the users shell to /bin/false and if you want set ssh to only allow
a certain list of usernames and same with PAM for telnet/local console.

--
Jeremy Lunn
Melbourne, Australia
http://www.jabber.org/ - the next generation of Instant Messaging.




RE: Virtual Hosting for Email

2001-12-22 Thread Matthew Walkup
Thanks for the replies Jeremy...

Well thats what I was looking for, and I figured that about the POP3 (kind
of a shame, isnt it :P).  I think ill go with using the full emails for
their logins.  but i dont want to use the linux auth for pop/imap/mta.  Im
expecting to have several hundred email addresses with only a few (10-20)
for ssh.  Id rather not fill my passwd file with junk.  Is this possible? =)
The other tech in my office managed to get exim/cyrus to read another file
passwords (which i could probably replicate) but we still had to add the
user to linux (just adduser --system --disabled-password userand
authenticate with a htpasswd file).

Thanks again for any more insight,

Matt

-Original Message-
From: Jeremy Lunn [mailto:[EMAIL PROTECTED]
Sent: Saturday, December 22, 2001 2:07 AM
To: Matthew Walkup
Cc: debian-isp@lists.debian.org
Subject: Re: Virtual Hosting for Email


On Fri, Dec 21, 2001 at 11:01:08PM -0800, Matthew Walkup wrote:
 a small client base now, so I think it should be alright).  So I need a
 smtp/pop package that is light-weight, and doesnt have much overhead.  The

Postfix is a great MTA (Mail Transfer Agent).  I don't know hich pop
package would be best.

Postfix supports having virtual hosts in an LDAP directory or a MySQL
table.


 should be treated as seperate accounts.  AND the account logins should
BOTH
 be just 'webmaster', and the pop server should be able to figure out which
 user it is by the server-name they are using ie 'mail.client1.com' or

That is not possible with only 1 IP addr.  Pop3 has no way of getting
the client software to send the hostname that it thinks it's connecting
to.  What you might be able to do is get your clients to set their
username in the pop3 client software to their email addr.
eg '[EMAIL PROTECTED]'.

I have never tried to do that before.

 'mail.client2.com'.  I dont even want shell access for each user, so
another
 method of authentication would be best anyways.  I have attempted to find

Set the users shell to /bin/false and if you want set ssh to only allow
a certain list of usernames and same with PAM for telnet/local console.

--
Jeremy Lunn
Melbourne, Australia
http://www.jabber.org/ - the next generation of Instant Messaging.




Re: Virtual Hosting for Email

2001-12-22 Thread Mark Janssen
On Fri, Dec 21, 2001 at 11:01:08PM -0800, Matthew Walkup wrote:
 [EMAIL PROTECTED]and
 [EMAIL PROTECTED]
 
 should be treated as seperate accounts.  AND the account logins should BOTH
 be just 'webmaster', and the pop server should be able to figure out which
 user it is by the server-name they are using ie 'mail.client1.com' or
 'mail.client2.com'.  I dont even want shell access for each user, so another

Like the other poster said, this is not possible, and you need your
users to specify their entire e-mail address.

I'm currently setting something like this up for my own company, and
basing it on Courier (www.courier-mta.org). I have the following setup:

- Completely virtual accounts for all users (so no accounts for
  mail users in the regular password file, only in a
  mail-users-file)
- Virtual domains, each their own users/passwords etc
- Account info stored in mysql/postgres/gdb-file or textfile
- Imap/Pop/Webmail based on the same system with virtual
  accounts
- Support for SSL/TLS in all subsystems
  (POP3S/IMAPS/Webmail-ssl, esmtp-tls)

Setup was quite doable with the on-line documentation and some googling

Using the virtual accounts also makes sure the users can never login
using ftp/ssh/telnet/whatever, only for pop3/imap/esmtp/webmail (and you
can give them separate passwords for each if you want, so when you only
give them a pop password they cant use webmail and vice-versa)

 method of authentication would be best anyways.  I have attempted to find
 some documentation on this, (and Im sure I'll get a lecture for this ;) but
 I havent found anything that explains it well.
 
 1) Im wondering if this is possible, or what is the next-best solution.
 2) Im looking for documentation on this that explains WHY you follow the
 steps you do, not just how to do it.

The courier install docs will help you there...

Mark Janssen Unix / Linux, Open-Source and Internet Consultant @ SyConOS IT
E-mail: mark(at)markjanssen.nl / maniac(at)maniac.nl GnuPG Key Id: 357D2178
Web: Maniac.nl Unix-God.[Net|Org] MarkJanssen.[com|net|org|nl] SyConOS.[com|nl]


pgpGjBEEJp631.pgp
Description: PGP signature


Re: Virtual Hosting for Email

2001-12-22 Thread Frank Louwers
 
 1) Im wondering if this is possible, or what is the next-best solution.

No. nor POP nor IMAP support HTTP 'Host: ' like constructions

Next best thing: let your users login as [EMAIL PROTECTED] or
[EMAIL PROTECTED] ...

Frank




Re: Virtual Hosting for Email

2001-12-22 Thread Sean Porth
Qmail with the vpopmail addon will do all of this for you.  It will uses
it's own passwd file and such so you don't need to add users to your system
passwd file.

http://inter7.com/vpopmail/
(it even works with postfix)

Sean Porth
System Admin

Tortus Technologies
www.tortus.com


- Original Message -
From: Matthew Walkup [EMAIL PROTECTED]
To: debian-isp@lists.debian.org
Sent: Saturday, December 22, 2001 5:21 AM
Subject: RE: Virtual Hosting for Email


 Thanks for the replies Jeremy...

 Well thats what I was looking for, and I figured that about the POP3 (kind
 of a shame, isnt it :P).  I think ill go with using the full emails for
 their logins.  but i dont want to use the linux auth for pop/imap/mta.  Im
 expecting to have several hundred email addresses with only a few (10-20)
 for ssh.  Id rather not fill my passwd file with junk.  Is this possible?
=)
 The other tech in my office managed to get exim/cyrus to read another file
 passwords (which i could probably replicate) but we still had to add the
 user to linux (just adduser --system --disabled-password userand
 authenticate with a htpasswd file).

 Thanks again for any more insight,

 Matt

 -Original Message-
 From: Jeremy Lunn [mailto:[EMAIL PROTECTED]
 Sent: Saturday, December 22, 2001 2:07 AM
 To: Matthew Walkup
 Cc: debian-isp@lists.debian.org
 Subject: Re: Virtual Hosting for Email


 On Fri, Dec 21, 2001 at 11:01:08PM -0800, Matthew Walkup wrote:
  a small client base now, so I think it should be alright).  So I need a
  smtp/pop package that is light-weight, and doesnt have much overhead.
The

 Postfix is a great MTA (Mail Transfer Agent).  I don't know hich pop
 package would be best.

 Postfix supports having virtual hosts in an LDAP directory or a MySQL
 table.


  should be treated as seperate accounts.  AND the account logins should
 BOTH
  be just 'webmaster', and the pop server should be able to figure out
which
  user it is by the server-name they are using ie 'mail.client1.com' or

 That is not possible with only 1 IP addr.  Pop3 has no way of getting
 the client software to send the hostname that it thinks it's connecting
 to.  What you might be able to do is get your clients to set their
 username in the pop3 client software to their email addr.
 eg '[EMAIL PROTECTED]'.

 I have never tried to do that before.

  'mail.client2.com'.  I dont even want shell access for each user, so
 another
  method of authentication would be best anyways.  I have attempted to
find

 Set the users shell to /bin/false and if you want set ssh to only allow
 a certain list of usernames and same with PAM for telnet/local console.

 --
 Jeremy Lunn
 Melbourne, Australia
 http://www.jabber.org/ - the next generation of Instant Messaging.


 --
 To UNSUBSCRIBE, email to [EMAIL PROTECTED]
 with a subject of unsubscribe. Trouble? Contact
[EMAIL PROTECTED]






Re: Virtual Hosting for Email

2001-12-22 Thread Russell Coker
On Sat, 22 Dec 2001 11:07, Jeremy Lunn wrote:
  should be treated as seperate accounts.  AND the account logins should
  BOTH be just 'webmaster', and the pop server should be able to figure out
  which user it is by the server-name they are using ie 'mail.client1.com'
  or

 That is not possible with only 1 IP addr.  Pop3 has no way of getting
 the client software to send the hostname that it thinks it's connecting
 to.  What you might be able to do is get your clients to set their
 username in the pop3 client software to their email addr.
 eg '[EMAIL PROTECTED]'.

That is one way to do it, but requires that the POP server also know about 
domains (which can be painful).  My preferred method is to have the mail go 
to a different account name that fits into the normal Unix account name 
scheme.  Then use a choice of POP and IMAP servers without needing any 
special setup.

On Sat, 22 Dec 2001 11:21, Matthew Walkup wrote:
 Thanks for the replies Jeremy...

 Well thats what I was looking for, and I figured that about the POP3 (kind
 of a shame, isnt it :P).  I think ill go with using the full emails for
 their logins.  but i dont want to use the linux auth for pop/imap/mta.  Im
 expecting to have several hundred email addresses with only a few (10-20)
 for ssh.  Id rather not fill my passwd file with junk.  Is this possible?
 =) The other tech in my office managed to get exim/cyrus to read another
 file passwords (which i could probably replicate) but we still had to add
 the user to linux (just adduser --system --disabled-password userand
 authenticate with a htpasswd file).

Use LDAP to store the account info, this will also make it easier for you 
when you want to expand to multiple servers.

-- 
http://www.coker.com.au/bonnie++/ Bonnie++ hard drive benchmark
http://www.coker.com.au/postal/   Postal SMTP/POP benchmark
http://www.coker.com.au/projects.html Projects I am working on
http://www.coker.com.au/~russell/ My home page




RE: Virtual Hosting for Email

2001-12-22 Thread Matthew Walkup
Thanks everyone for the input, was very helpful...

That was my first post, and im very impressed ;)... Thanks guys for all the
tips.

-Matt




Re: Virtual Hosting for Email

2001-12-22 Thread Jeremy Lunn
On Sat, Dec 22, 2001 at 02:21:22AM -0800, Matthew Walkup wrote:
 their logins.  but i dont want to use the linux auth for pop/imap/mta.  Im
 expecting to have several hundred email addresses with only a few (10-20)
 for ssh.  Id rather not fill my passwd file with junk.  Is this possible? =)

If you get pop/imap daemons that support PAM then you can authenticate
by any means you want.

-- 
Jeremy Lunn
Melbourne, Australia
http://www.jabber.org/ - the next generation of Instant Messaging.