Post your httpd.conf file or mail it off list.
On 06/02/2010 02:38 PM, sysadmin wrote:
> Sorry for the delay, been away from the office:
> I can confirm there are NO VirtualHost definitions in apache
> mod_rewrite is enable in the http.conf file
>
> So , what I have read and did, is create a .htaccess file in the default
> /var/www/html folder
> it contains :
> RewriteEngine On RewriteCond %{SERVER_PORT} 80 RewriteRule ^(.*)$
> https://mydominname.com/webmail/$1 [R,L]it does not work, i did try
> others
> but cannot remember which
>
> ----- Original Message ----- From: "Eric Shubert" <[email protected]>
> To: <[email protected]>
> Sent: Friday, May 28, 2010 11:27 PM
> Subject: [qmailtoaster] Re: Webmail SSL
>
>
>> Are you using VirtualHost definitions in apache? If so, see
>> http://httpd.apache.org/docs/2.2/mod/mod_rewrite.html#vhosts
>>
>> Will you post the mod_rewrite commands you were using that failed to do
>> what you wanted? I might be able to see whatever the problem is.
>>
>> --
>> -Eric 'shubes'
>>
>>
>> madmac wrote:
>>> I could not get any redirects to work on my qmail server:
>>> So I forced ssl, by that I mean I modified the http.conf to listen
>>> on 80,
>>> and 443
>>> Made a defailt index.html for http, saying " nothing here: you must
>>> go to
>>> https://servername.com/webmail
>>> Then sent a server wide email to the fact.
>>> I will be later forcing pop3s and imapds, but need baby stems for the
>>> users
>>> As there is only One admin ( me ) I always go to
>>> https://servername.com/qcontrol , just force of habit.
>>> For those that rememeber some of my previous emails, I created a new VM
>>> Image unsing Centos 5.4 ISO, I made it ( Hopefully ) ultra secure.
>>> Link to it from Jake`s site ,http://iso.qmailtoaster.com/
>>> or if the link is still down, download direct from my server
>>> http://techyguru.com
>>> If there is a working solution to get the correct redirect working, I
>>> will add it to the VM Image and re-upload.
>>> Thanks All
>>> madmac
>>> ----- Original Message -----
>>> *From:* Scott Hughes <mailto:[email protected]>
>>> *To:* [email protected]
>>> <mailto:[email protected]>
>>> *Sent:* Friday, May 28, 2010 10:18 PM
>>> *Subject:* Re: [qmailtoaster] Re: Webmail SSL
>>>
>>> CJ,
>>>
>>> Yes, those two directives are doing what I need them to do. Thanks!
>>>
>>> Scott
>>>
>>>
>>> On May 28, 2010, at 11:12 PM, Maxwell Smart <[email protected]
>>> <mailto:[email protected]>> wrote:
>>>
>>>> Scott,
>>>>
>>>> It sounds like you handle multiple domains, but only in a mail
>>>> environment. In my case I have used the QMTISO as a base to my
>>>> webservers. It has been an excellent base.
>>>> You can put those in the httpd.conf file or as Eric suggested in a
>>>> .conf file in your conf.d folder.
>>>> /Also, I can still get to the webmail by using the standard
>>>> 'www.SERVERNAME.net/webmail
>>>> <http://www.SERVERNAME.net/webmail>'. In
>>>> this case, it does go to the SSL page via the SSLREQUIRESSL and
>>>> the 403 https://mail.SERVERNAME.net/ directives.
>>>> /
>>>> My personal preference would be to remove these aliases once you
>>>> get the https sorted. Is it doing what you want (expect) now?
>>>>
>>>> @Eric. I'll check out that link and see if it applies to my
>>>> situation.
>>>>
>>>> CJ
>>>>
>>>>
>>>> On 05/28/2010 07:02 PM, Scott Hughes wrote:
>>>>> CJ,
>>>>>
>>>>> I don't use virtual hosts on this server. While this QMT server
>>>>> does handle several domains, I have everyone pointed to the main
>>>>> domain name to access their mail (webmail and mail clients). In
>>>>> addition to keeping all the settings the same, I can get away
>>>>> with only needing one SSL certificate instead of one for each
>>>>> domain.
>>>>>
>>>>> Where in httpd.conf would be the best place to put these
>>>>> directives with the setup I have?
>>>>>
>>>>> Scott
>>>>>
>>>>>
>>>>> On 5/28/10 8:51 PM, Maxwell Smart wrote:
>>>>>> When you include SSLRequireSSL and it's not an SSL connection it
>>>>>> will give an error 403, using the ErrorDocument 403
>>>>>> https://mail.servername.net include it will then redirect the
>>>>>> page to the https page.
>>>>>>
>>>>>> On 05/28/2010 06:26 PM, Scott Hughes wrote:
>>>>>>> CJ,
>>>>>>>
>>>>>>> I'm not getting any 403 errors. Would this still apply? I'm
>>>>>>> just looking to make it so that when one of my users goes to
>>>>>>> "mail.SERVERNAME.net <http://mail.SERVERNAME.net>' they get the
>>>>>>> SSL pages.
>>>>>>>
>>>>>>> Thanks,
>>>>>>>
>>>>>>> Scott
>>>>>>>
>>>>>>>
>>>>>>> On 5/28/10 6:50 PM, Maxwell Smart wrote:
>>>>>>>> Add these two lines to the virtual server.
>>>>>>>>
>>>>>>>> SSLRequireSSL
>>>>>>>> ErrorDocument 403 https://mail.servername.net
>>>>>>>>
>>>>>>>> There is a way to do a simple redirect, but I haven't played
>>>>>>>> with it and can't seem to get it to work as desired. I am
>>>>>>>> told it has to do with timeout. You set the META to timeout
>>>>>>>> and redirect to the SSL site. It can be seamless too. I
>>>>>>>> know the above works and I am sure there is not much to be
>>>>>>>> gained using the latter configuration.
>>>>>>>>
>>>>>>>>
>>>>>>>> On 05/28/2010 04:27 PM, Scott Hughes wrote:
>>>>>>>>> CJ / Eric,
>>>>>>>>>
>>>>>>>>> How does one set up a redirect so that people automatically
>>>>>>>>> go to the secure area? My SSL setup is working, but only if I
>>>>>>>>> go directly there (https://mail.SERVERNAME.net). If I just
>>>>>>>>> do 'mail.SERVERNAME.net, it goes to the non-secure page.
>>>>>>>>>
>>>>>>>>> My setup is as follows:
>>>>>>>>>
>>>>>>>>> I have a symlink in my /var/www/html directory called
>>>>>>>>> 'webmail' (the symlink points to the Squirrelmail directory).
>>>>>>>>> In my http.conf file, in the document_root section, I have it
>>>>>>>>> setup to go to /var/www/html/webmail.
>>>>>>>>>
>>>>>>>>> I do this so that my users can type in mail.SERVERNAME.net
>>>>>>>>> <http://mail.SERVERNAME.net> and get to webmail.
>>>>>>>>>
>>>>>>>>> Is there a more proper way to do this and still give them the
>>>>>>>>> ease of access?
>>>>>>>>>
>>>>>>>>> Thanks,
>>>>>>>>>
>>>>>>>>> Scott
>>>>>>>>>
>>>>>>>>>
>>>>>>>>> On 5/28/10 10:49 AM, Maxwell Smart wrote:
>>>>>>>>>> I have set up the Rewrite as suggested, but it does not
>>>>>>>>>> redirect from
>>>>>>>>>> http to https is only says forbidden. I can create a 403
>>>>>>>>>> redirect, but
>>>>>>>>>> would rather set it up as a simple redirect. How is this
>>>>>>>>>> done?
>>>>>>>>>>
>>>>>>>>>> While this will work for one domain or if the user knows
>>>>>>>>>> that
>>>>>>>>>> the master
>>>>>>>>>> domain is the one he is receiving the certificate for. Has
>>>>>>>>>> anyone set
>>>>>>>>>> it up either using ssl or gnutls to have each virtual domain
>>>>>>>>>> using it's
>>>>>>>>>> on certificate? I use the QMT ISO as a webserver and would
>>>>>>>>>> like to be
>>>>>>>>>> able to offer certs for individual clients thus being
>>>>>>>>>> able to
>>>>>>>>>> correctly
>>>>>>>>>> authenticate either their https://www.myserver.com or
>>>>>>>>>> https://mail.myserver.com correctly.
>>>>>>>>>>
>>>>>>>>>> CJ
>>>>>>>>>>
>>>>>>>>>> On 05/27/2010 11:28 AM, Eric Shubert wrote:
>>>>>>>>>>
>>>>>>>>>>> Scott Hughes wrote:
>>>>>>>>>>>
>>>>>>>>>>>> Does anyone happen to know if there is a wiki entry for
>>>>>>>>>>>> securing
>>>>>>>>>>>> SquirrelMail using SSL? I'm looking but I'm not
>>>>>>>>>>>> finding it.
>>>>>>>>>>>>
>>>>>>>>>>>> Thanks,
>>>>>>>>>>>>
>>>>>>>>>>>> Scott
>>>>>>>>>>>>
>>>>>>>>>>>>
>>>>>>>>>>> http://wiki.qmailtoaster.com/index.php/Certificate briefly
>>>>>>>>>>> mentions
>>>>>>>>>>> that you can use the cert for apache. That page could
>>>>>>>>>>> really
>>>>>>>>>>> use some
>>>>>>>>>>> rework.
>>>>>>>>>>>
>>>>>>>>>>> Note, the mod-ssl package must be installed for apache.
>>>>>>>>>>>
>>>>>>>>>>> Once you have a certificate installed for apache, the
>>>>>>>>>>> squirrelmail.conf file can be modified to look like this:
>>>>>>>>>>> <IfModule mod_alias.c>
>>>>>>>>>>> Alias /webmail /usr/share/squirrelmail
>>>>>>>>>>> </IfModule>
>>>>>>>>>>> RewriteEngine on
>>>>>>>>>>> RewriteCond %{SERVER_PORT} !^443$
>>>>>>>>>>> RewriteRule ^(.*/webmail.*)$ https://%{SERVER_NAME}$1 [L,R]
>>>>>>>>>>> <Directory /usr/share/squirrelmail>
>>>>>>>>>>> Options None
>>>>>>>>>>> Order allow,deny
>>>>>>>>>>> allow from all
>>>>>>>>>>> SSLRequireSSL
>>>>>>>>>>> </Directory>
>>>>>>>>>>>
>>>>>>>>>>> I see you've started a SM page on the wiki. Great.
>>>>>>>>>>> Thanks for your work on this.
>>>>>>>>>>>
>>>>>>>>>>>
>>>>>>>>>>
>>>>>>>>
>>>>>>>> -- Cecil Yother, Jr. "cj"
>>>>>>>> cj's
>>>>>>>> 2318 Clement Ave
>>>>>>>> Alameda, CA 94501
>>>>>>>>
>>>>>>>> tel 510.865.2787
>>>>>>>> http://yother.com
>>>>>>>>
>>>>>>>> ---------------------------------------------------------------------------------
>>>>>>>>
>>>>>>>> Qmailtoaster is sponsored by Vickers Consulting Group
>>>>>>>> (www.vickersconsulting.com <http://www.vickersconsulting.com>)
>>>>>>>> Vickers Consulting Group offers Qmailtoaster support and
>>>>>>>> installations. If you need professional help with your setup,
>>>>>>>> contact them today!
>>>>>>>>
>>>>>>>> ---------------------------------------------------------------------------------
>>>>>>>>
>>>>>>>> Please visit qmailtoaster.com <http://qmailtoaster.com> for
>>>>>>>> the latest news, updates, and packages. To unsubscribe,
>>>>>>>> e-mail: [email protected]
>>>>>>>> <mailto:[email protected]> For
>>>>>>>> additional commands, e-mail:
>>>>>>>> [email protected]
>>>>>>>> <mailto:[email protected]>
>>>>>>
>>>>>> -- Cecil Yother, Jr. "cj"
>>>>>> cj's
>>>>>> 2318 Clement Ave
>>>>>> Alameda, CA 94501
>>>>>>
>>>>>> tel 510.865.2787 | fax 510.864.7300
>>>>>> http://yother.com
>>>>
>>>> -- Cecil Yother, Jr. "cj"
>>>> cj's
>>>> 2318 Clement Ave
>>>> Alameda, CA 94501
>>>>
>>>> tel 510.865.2787
>>>> http://yother.com
>>>>
>>>> ---------------------------------------------------------------------------------
>>>>
>>>> Qmailtoaster is sponsored by Vickers Consulting Group
>>>> (www.vickersconsulting.com <http://www.vickersconsulting.com>)
>>>> Vickers Consulting Group offers Qmailtoaster support and
>>>> installations. If you need professional help with your setup,
>>>> contact them today!
>>>>
>>>> ---------------------------------------------------------------------------------
>>>>
>>>> Please visit qmailtoaster.com <http://qmailtoaster.com> for the
>>>> latest news, updates, and packages. To unsubscribe, e-mail:
>>>> [email protected]
>>>> <mailto:[email protected]> For
>>>> additional commands, e-mail:
>>>> [email protected]
>>>> <mailto:[email protected]>
>>
>>
>> ---------------------------------------------------------------------------------
>>
>> Qmailtoaster is sponsored by Vickers Consulting Group
>> (www.vickersconsulting.com)
>> Vickers Consulting Group offers Qmailtoaster support and
>> installations.
>> If you need professional help with your setup, contact them today!
>> ---------------------------------------------------------------------------------
>>
>> Please visit qmailtoaster.com for the latest news, updates, and
>> packages.
>> To unsubscribe, e-mail:
>> [email protected]
>> For additional commands, e-mail:
>> [email protected]
>>
>>
>>
>
>
> ---------------------------------------------------------------------------------
>
> Qmailtoaster is sponsored by Vickers Consulting Group
> (www.vickersconsulting.com)
> Vickers Consulting Group offers Qmailtoaster support and
> installations.
> If you need professional help with your setup, contact them today!
> ---------------------------------------------------------------------------------
>
> Please visit qmailtoaster.com for the latest news, updates, and
> packages.
> To unsubscribe, e-mail:
> [email protected]
> For additional commands, e-mail:
> [email protected]
>
>
--
Cecil Yother, Jr. "cj"
cj's
2318 Clement Ave
Alameda, CA 94501
tel 510.865.2787 | fax 510.864.7300
http://yother.com
---------------------------------------------------------------------------------
Qmailtoaster is sponsored by Vickers Consulting Group
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
If you need professional help with your setup, contact them today!
---------------------------------------------------------------------------------
Please visit qmailtoaster.com for the latest news, updates, and packages.
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
