> > Keep in mind ports under 1024 need "root" access, and I'd change the
*.sh
> > files in the $JAMES_HOME/bin to "chmod u+x *.sh".

> This aspect of James' operation is what holds me back in recommending
> its use as a front-facing MTA.

This comes up from time to time regarding Tomcat.  As Pier recently noted,
there are any number of workarounds, including:

  $ iptables -t nat -A PREROUTING -p tcp --dport smtp -j REDIRECT --to-ports
10025
  $ iptables -t nat -A PREROUTING -p tcp --dport pop3 -j REDIRECT --to-ports
10026
  $ iptables -t nat -A PREROUTING -p tcp --dport nntp -j REDIRECT --to-ports
10027

> Does either Phoenix or J2SE provide setuid functionality that allows a
> process to drop privilege once it has acquired required resources?

If you can't do it on every OS from Windows CE to MVS, don't expect it in
J2SE.  There are third party libraries such as
http://www.xenonsoft.demon.co.uk/products/javaunix/, which you could use
within James to add more UNIX specific behavior.  However, there are
complications that might not be obvious.  For example, the UIDTest.java
program demonstrates problems with setuid on linux depending upon which JVM
and threading library, because UIDs are per-thread with LinuxThreads.

        --- Noel


---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to