Re: Postfix + MySQL + Courier-IMAP + SpamAssassin + ClamAV

2004-04-21 Thread Jesper Wallin
 Jesper Wallin wrote:

Hello again dear list..

I have a working mail system which uses MySQL to authenticate. I have a virtual mail
system and uses Courier-imapd to access my mails (with squirrelmail). I've been
 spending
this afternoon to find good docs/guides how to get Postfix to work with SpamAssassin
 and
ClamAV, all docs I've found are written for local mail directories which uses 
procmail
to get the mails (so the mail is being scanned by procmail and not Postfix itself) 
..

I have no experience at all of getting either SpamAssassin up and running and same 
goes
for ClamAV.. my goal is to get the postmaster send a mail like A message sent from
[EMAIL PROTECTED] contained a virus.. bla bla and to get SpamAssassin remove spam 
with the
 number
of false alarms as small as possible.. (yeah, it might be a dream, but that's how I
 want
it.).. I would be very happy of someone had any nice guide/howto/documentation on how
 to
make this work with Postfix using the MySQL authentication system as well as the
 virtual
maildirs..


Regards,
Jesper Wallin
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]



 Have a look at amavisd-new, it's an excellent 'glue' between mail-server
 and scanning programs (like spamassassin and clamav).
 Lot's of documents can be found on how to install this combo.

 Rob Evers
 ___
 [EMAIL PROTECTED] mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to [EMAIL PROTECTED]


Hello again..

Yeah, I got it all working now with both SpamAssasin and ClamAV.. Finally I've got rid
of half my spam and all the viruses.. ;) All thanks to this guide/howto:

http://mail.x-si.org/articles/av.html

Thanks!


Regards,
Jesper Wallin


___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Postfix + MySQL + Courier-IMAP + SpamAssassin + ClamAV

2004-04-20 Thread Jesper Wallin
Hello again dear list..

I have a working mail system which uses MySQL to authenticate. I have a virtual mail
system and uses Courier-imapd to access my mails (with squirrelmail). I've been 
spending
this afternoon to find good docs/guides how to get Postfix to work with SpamAssassin 
and
ClamAV, all docs I've found are written for local mail directories which uses procmail
to get the mails (so the mail is being scanned by procmail and not Postfix itself) ..

I have no experience at all of getting either SpamAssassin up and running and same goes
for ClamAV.. my goal is to get the postmaster send a mail like A message sent from
[EMAIL PROTECTED] contained a virus.. bla bla and to get SpamAssassin remove spam 
with the number
of false alarms as small as possible.. (yeah, it might be a dream, but that's how I 
want
it.).. I would be very happy of someone had any nice guide/howto/documentation on how 
to
make this work with Postfix using the MySQL authentication system as well as the 
virtual
maildirs..


Regards,
Jesper Wallin
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Can FreeBSD do what vmware can do?

2004-04-20 Thread Jesper Wallin
Heya..

If you have a machine with vmware installed.. the machine has one NIC connected to a
network which is using a DHCP server which only allow 1 ip per MAC. You start the box
and you get an IP.. then you install vmware, install another operating system on it
(doesn't really mather which) and set the network device in vmware to bridged and
start it.. then the virtual machine in vmware will get it's own IP even if the MAC
restricts 1 ip per MAC..

Therefore, it IS possible to change/spoof/hide/fake MAC and have a virtual NIC.. So my
question is, how can I do this without vmware and just virtual NIC on my system? My 
idea
is to have one box infront of all other boxes in my network but yet use all 5 ips my 
ISP
allow me to have. If I get this work, I can do stats, filter the whole network, log
traffic and so on instead if setting up 5 firewalls, 5 loggers, etc but yet have 5
differet IPs..


Regards,
Jesper Wallin
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: ftp server

2004-04-19 Thread Jesper Wallin
 Hello,
 I've got a 4.9 system and i'm out looking for an ftp server for it as i do
 not want to use the base server. I've heard good reviews of pure-ftpd, but
 i'm getting errors: can not find the ftp account and it won't authenticate.
 I've also tried proftpd, but although i find it capable i don't like
 it's slow response, even with identd lookups off.
 Features that i'm looking for, chroot anonymous users to a specific
 area, enable both anonymous and real users, virtual user and quota support,
 band width management, and optional secure communications. Most importantly
 i need it to work with ipfilter/ipnat. Using the base ftp server on a test
 box i can connect but i keep getting an error, can not build data
 connection, this is from a box external to the firewall.
 Thanks.
 Dave.

 ___
 [EMAIL PROTECTED] mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to [EMAIL PROTECTED]


Hello..

I would (and do) choose Pure-FTPd since it has a very nice history without alot of
security problems. Both proftpd and wu-ftpd has a quite bad security history and I
prefer to not use them at all because of that.

Pure-FTPd has support for SSL/TLS, FXP, has native-language support, chroot, allow
virtual users, MySQL, Bandwidth limitations, Works perfectly both with or without a
firewall, and so on, the list is long.. I've personally used it since the spring of 
1999
and I havn't heard of _any_ remote root exploit yet so I consider it the best ftp 
daemon
ever.


Regards,
Jesper Wallin
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Why is the chmod values in /home insecure by default?

2004-04-19 Thread Jesper Wallin
Hello..

I'm running FreeBSD 5.2.1-RELEASE-p5 and when I create new user accounts with 
adduser,
the home directories are world readable/executable.. Sure, it might be useful if I want
to publish a website in my public_html, but yet, it should be up to the user if he want
to have his homedir world-readable, but by default it should be set to chmod 700 or
chmod 750 if each user has their own group imho. However, I saw that adduser had a
config file (/etc/adduser.conf) but the there is no manual entry for adduser.conf and I
can't find any example for it.. How can I change the default permission for new
home-directories?


Regards,
Jesper Wallin
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Transparent proxy/nat server using DHCP.

2004-04-18 Thread Jesper Wallin
Heya..

My ISP allow me to have 5 dynamic ip addresses. Yet, it's locked to the MAC address (i
think) .. currently my network look like this:

[ Internet ][ 16-ports Unex Switch ][ my network ]

..and in the local network, I have 3 servers and my two workstations. My idea was to 
put
one server infront of all other computers, like:

[ Internet ][ FreeBSD ][ 16-ports Unex Switch ][ my networks ]

..and have the FreeBSD server holding all 5 ips from my ISP and then NAT/Forward it to
the rest of the network.. like a transparent firewall/logging server. Like having 3 of
the ips going to my 3 servers.. and have another IP for NAT:ing the two workstaions
which uses a local IP range.. or something.

My porblem is to get the FreeBSD server request 5 ips on the same NIC using the DHCP
protocol. Is it even possible?


Regards,
Jesper 'Z3l3zT' Wallin






___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]