RE: mail server setup questions

2007-09-08 Thread Ted Mittelstaedt


 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED] Behalf Of DAve
 Sent: Thursday, September 06, 2007 10:29 AM
 To: freebsd-questions@freebsd.org
 Subject: Re: mail server setup questions
 
 
 Don't wonder if qmail has flaws, go to CERT.org and search first for 
 Sendmail, then Postfix, then Exim, then qmail. To say Anyone who even 
 thinks that a piece of software that it 6 years old has no flaws had 
 best re-think this., is simply FUD.
 

He said no flaws, cert.org and friends only track security flaws, not
other kinds of flaws.  And cert.org and friends are only as good as
the reports submitted to them.

I would offer the suggestion that if every mail admin out there using
qmail was not a mail expert, that it is unlikely that security flaws
would be noticed or reported.

In the last analysis, the absense of a particular piece of software from
a security notification list is NOT proof that the software has no
security flaws.  You cannot prove a negative in this case.

Ted

PS  I routinely use 6 year old software myself.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: mail server setup questions

2007-09-07 Thread Andrey Shuvikov
Thanks a lot for all your suggestions! I will probably still start
from exim but at least I know now that the choice is not that
critical, especially for a small home server.

Thanks again,
Andrey
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: mail server setup questions - OT answer

2007-09-07 Thread Bill Vermillion
On Thu, Sep 06, 2007 at 20:40 , [EMAIL PROTECTED] exclaimed Las Cucarachas 
entran, Pero no pueden salir, and then rambled on saying with:
 
 Date: Thu, 06 Sep 2007 13:28:59 -0400
 From: DAve [EMAIL PROTECTED]
 Subject: Re: mail server setup questions
 To: freebsd-questions@freebsd.org

 Bill Vermillion wrote:

[much deleted to make just one OT comment - wjv]

Dave said:
 We use Sendmail on our gateways for it's excellent milter support and 
 versatile configuration. It has more knobs than a recording studio.

Before I became self-employed in the computer arena I was a
recording engineer.  The Sphere Eclipse C [that I had a lot of
input on the layout] had over 3000 knobs/switches on it's 
12-foot width. [weight just under 2000 pounds]

And the front panel alignment adjustments on my Studer A-800
24-track totalled about 800.  The vast majority were used only for
initial setups.  Of course will all the options under Sendmail
I suspect that you could get close to that number.

Bill

-- 
Bill Vermillion - bv @ wjv . com
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


RE: mail server setup questions

2007-09-07 Thread Ted Mittelstaedt


 -Original Message-
 From: Jim Stapleton [mailto:[EMAIL PROTECTED]
 Sent: Wednesday, September 05, 2007 2:04 PM
 To: Ted Mittelstaedt
 Cc: Nikola Lecic; Russell E. Meek; freebsd-questions@freebsd.org
 Subject: Re: mail server setup questions
 
 
  I would submit you think you do.  For example, are you planning on
  putting a webmail interface on the server?  A lot of people do.  Well
  if you do and you put a scrap of CGI on there that has a hole in it
  a spammer can come along and cause that to relay mail from incoming
  http right into your mail queue.  He doesen't need root access to
  do this.
 
 I have never stated interest in putting web mail up in my to-do list,
 and in fact, have explicitly stated at least once, I've no intention
 of doing that. To be blunt, I don't trust it. I only use it for things
 on which I don't care about the security (ex. reading mailing lists).
 I care about the security of my server.
 

The usual procedure if you want to make webmail secure is to field the
webmail server on a separate box.  (that is what we do)  Just about all
webmail interfaces I've tried use IMAP or POP3 to communicate with the
mailserver, in fact, very few can read the mailboxes directly.

There are other reasons you might want to run a webinterface on the
mailserver, however.

Ted
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


RE: mail server setup questions

2007-09-07 Thread Ted Mittelstaedt


 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED] Behalf Of Eric Crist
 Sent: Wednesday, September 05, 2007 1:21 PM
 To: Andrey Shuvikov
 Cc: freebsd-questions@freebsd.org
 Subject: Re: mail server setup questions
 
 
 On Sep 5, 2007, at 2:05 PMSep 5, 2007, Andrey Shuvikov wrote:
 
  Hi,
 
  I'm trying to set up a home mailserver with imap/web access. But I was
  going to use exim. Several people mentioned postfix here, but nobody
  named exim. Is it a matter of personal preference or is exim not
  suitable for this task?
 
 Andrey,
 
 I can't speak of exim or qmail, but I had used sendmail for nearly 10  
 years before switching to postfix.  I switched was for support of  
 virtual mail boxes, and better support for IMAP.

Just a quick nit to pick here - delivering to virtual mailboxes is
the job of the local delivery agent, not Sendmail.  Many people have
written scripts that deliver mail to mySQL databases, etc. to support
virtual mailboxes, that work with Sendmail just fine.

The IMAP server also has nothing whatsoever to do with sendmail, or
any mail transfer agent for that matter.  By definition, it's a 
completely separate server.

Ted
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


RE: mail server setup questions

2007-09-06 Thread Ted Mittelstaedt


 -Original Message-
 From: Nikola Lecic [mailto:[EMAIL PROTECTED]
 Sent: Wednesday, September 05, 2007 8:20 AM
 To: Ted Mittelstaedt
 Cc: Russell E. Meek; Jim Stapleton; freebsd-questions@freebsd.org
 Subject: Re: mail server setup questions
 
 
 On Wed, 5 Sep 2007 01:22:12 -0700
 Ted Mittelstaedt [EMAIL PROTECTED] wrote:
 
  Your reaction is facinating considering the location implied by
  your e-mail reply address.  I can perhaps understand your adversion
  to the use of metaphors in language - God know the Serbian
  propagandists warped the metaphor beyond the breaking point in your
  history and perhaps now, there is a horror of them there that will
  take generations to dissipate.
 
 Congratulations.
 

Thanks!  Much appreciated!

Ted

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


RE: mail server setup questions

2007-09-06 Thread Ted Mittelstaedt


 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED] Behalf Of Nikola Lecic
 Sent: Wednesday, September 05, 2007 11:13 AM
 To: Jerry McAllister
 Cc: Eray Aslan; freebsd-questions@freebsd.org; Ted Mittelstaedt
 Subject: Re: mail server setup questions
 

 I'm very disappointed that more official people on this list didn't say
 something like Ted, please respect our users from all countries,
 including those two countries you have mentioned 

Perhaps the silence might give you pause to consider?

Very likely no one else considers themselves offended.

Very likely that is because it was obvious to everyone else
that no offense was ever intended.

Very likely because everyone else also assumed that the idea
of permitting non-nuclear states to buy nuclear warheads was
universally regarded as a bad idea, and thus grasped the
mailserver comparison instantly.

Very likely because nobody understands what the problem
is in the first place.  That would include me, by the way.

Ted

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


RE: mail server setup questions

2007-09-06 Thread Ted Mittelstaedt


 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED] Behalf Of Eric
 Sent: Wednesday, September 05, 2007 12:12 PM
 To: Andrey Shuvikov
 Cc: freebsd-questions@freebsd.org
 Subject: Re: mail server setup questions
 
 
 Andrey Shuvikov wrote:
  Hi,
  
  I'm trying to set up a home mailserver with imap/web access. But I was
  going to use exim. Several people mentioned postfix here, but nobody
  named exim. Is it a matter of personal preference or is exim not
  suitable for this task?
  
 
 Exim is a capable mailer as is postfix. I think its mostly a matter of 
 preference but I havent delved into Exim too much. Personally I run 
 Postfix and Dovecot for my mail server setup. Roundcube does a nice job 
 in providing a front end on the web for Dovecot.
 

Roundcube has an interesting Macalike interface (Mac users love it) but
it has it's problems.  For one thing it doesen't display properly on
many web browsers.  Unfortunately, with webmail interfaces, you have
to pick the problems you want to deal with, none of them are without
warts.

Ted
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: mail server setup questions

2007-09-06 Thread Chad Perrin
On Thu, Sep 06, 2007 at 11:37:11AM +1000, Norberto Meijome wrote:
 On Wed, 5 Sep 2007 16:52:56 -0400
 Bob Johnson [EMAIL PROTECTED] wrote:
 
  In case I haven't made myself clear, I despise Qmail with a passion. I
  suppose it is suitable for people who like puzzles (as in What
  patches do I need to make this do something useful? or What
  third-party tool do I need to make sense out of these awful log
  files?) and who don't mind inflicting lots of unnecessary secondary
  spam on the rest of the world.  Yes, I know there are _supposed_ to be
  patches that fix that problem, but (a) the one I've seen in action
  doesn't work very well, and (b) you shouldn't need to apply
  third-party patches to your mail server to make it do what it is
  supposed to do in the first place.
 
 I second all these points. I think it's probably better to use sendmail than
 qmail. Sendmail at least supports most (all?) SMTP / antispam related 
 features,
 it is well documented , and configurable to the extreme (with the caveat that
 its configuration may be a bit daunting to the un-initiated :D).
 
 I just realised that qmail appears over and over in Linux distros, or at least
 on linux servers i've had to suffer... not sure the relationship there (in
 design / philosophy...)... and I am really NOT wanting to start a flame war.
 Just a thought that crossed my mind as I was reading this thread.

I haven't seen enough production FreeBSD systems set up by others to have
any impressions about whether Linux admins are more likely to use Qmail
than FreeBSD admins.  I do get the impression, however, that the Linux
admins who choose Qmail tend to do so for much the same reason that MS
Windows admins choose Exchange: they think it's easier, that setting it
up is just a plug-and-play, point-and-click sort of exercise.  The fact
that it's sending and receiving emails within a couple hours (starting
from a clean box) seems to be the sum total of their metric for ease of
setup, and all the hassle and annoyance that follows doesn't even enter
into it.

Just as MS Exchange basically requires its own admin, but nobody cares
for purposes of judging how easy it is as long as the thing is
minimally running within a couple hours, Qmail is an invitation for
disaster -- but nobody cares as long as they can judge it by its security
and stability statistics in a default (if essentially useless)
configuration, and as long as they can configure it via some kind of
point-and-click web interface.  That's my experience, anyway.

If Qmail is more common among Linux admins, I tend to guess Webmin
probably is as well.

-- 
CCD CopyWrite Chad Perrin [ http://ccd.apotheon.org ]
McCloctnick the Lucid: The first rule of magic is simple. Don't waste your
time waving your hands and hopping when a rock or a club will do.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: mail server setup questions

2007-09-06 Thread Chad Perrin
On Thu, Sep 06, 2007 at 05:23:13AM -0700, Ted Mittelstaedt wrote:
  -Original Message-
  From: [EMAIL PROTECTED]
  [mailto:[EMAIL PROTECTED] Behalf Of Nikola Lecic
  Sent: Wednesday, September 05, 2007 11:13 AM
  To: Jerry McAllister
  Cc: Eray Aslan; freebsd-questions@freebsd.org; Ted Mittelstaedt
  Subject: Re: mail server setup questions
  
 
  I'm very disappointed that more official people on this list didn't say
  something like Ted, please respect our users from all countries,
  including those two countries you have mentioned 
 
 Perhaps the silence might give you pause to consider?
 
 Very likely no one else considers themselves offended.
 
 Very likely that is because it was obvious to everyone else
 that no offense was ever intended.
 
 Very likely because everyone else also assumed that the idea
 of permitting non-nuclear states to buy nuclear warheads was
 universally regarded as a bad idea, and thus grasped the
 mailserver comparison instantly.
 
 Very likely because nobody understands what the problem
 is in the first place.  That would include me, by the way.

. . . or maybe it's because this line of discussion looks ridiculous from
both sides.  Seriously.

-- 
CCD CopyWrite Chad Perrin [ http://ccd.apotheon.org ]
W. Somerset Maugham: The ability to quote is a serviceable substitute for
wit.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: mail server setup questions

2007-09-06 Thread Bob Johnson
On 9/5/07, Chad Perrin [EMAIL PROTECTED] wrote:
 On Thu, Sep 06, 2007 at 11:37:11AM +1000, Norberto Meijome wrote:
  On Wed, 5 Sep 2007 16:52:56 -0400
  Bob Johnson [EMAIL PROTECTED] wrote:
 
   In case I haven't made myself clear, I despise Qmail with a passion.
[...]
 
  I just realised that qmail appears over and over in Linux distros, or at
 least
  on linux servers i've had to suffer... not sure the relationship there (in
  design / philosophy...)... and I am really NOT wanting to start a flame
 war.
  Just a thought that crossed my mind as I was reading this thread.

About five or seven years ago when sendmail was having a lot of
security problems and people were looking for alternatives, qmail was
reasonably well established and was widely recommended. So a lot of
people switched to it (including the place where I now work),
including several Linux distros. We were never very happy with it
here, and I suspect that the reason it has such a following in the
Linux world is either that they have never used an alternative (same
reason Windows has so many fans), or to abandon it and move to
something else would cause a sort of cognitive dissonance that
prevents it from happening.


 I haven't seen enough production FreeBSD systems set up by others to have
 any impressions about whether Linux admins are more likely to use Qmail
 than FreeBSD admins.  I do get the impression, however, that the Linux
 admins who choose Qmail tend to do so for much the same reason that MS
 Windows admins choose Exchange: they think it's easier, that setting it
 up is just a plug-and-play, point-and-click sort of exercise.  The fact
 that it's sending and receiving emails within a couple hours (starting
 from a clean box) seems to be the sum total of their metric for ease of
 setup, and all the hassle and annoyance that follows doesn't even enter
 into it.

For those people I recommend Courier.  It was designed to be a drop-in
replacement for Qmail, but without most of the flaws. The
configuration files, for instance, are mostly the same. The biggest
problem I've had when configuring Courier is that it tends to be
overly determined to enforce RFC compliance and thus will not be
friendly toward a lot of mail from various MS products. Find the
configuration flag that turns off that behavior or users will complain
about the results. The author makes a reasonable case for the default
behavior (to do otherwise forces Courier to be non-compliant itself),
but in the real world you have to be able to accept mail from MS
products.

I have used Courier at my previous job (about 200 users) and at home
and I have no significant complaints. If you just need a basic server
that will handle your personal email without requiring you to learn
what amounts to a new programming language (as with Exim and a few
others), it's a good choice. The full distribution includes a POP/IMAP
server and a webmail system. Just be sure not to skip the README file,
and follow the instructions for testing your installation
step-by-step. I have NOT tried to set up intensive anti-spam measures
on Courier, so I don't know what problems may be in store there, but
I'm sure there is info at http://www.courier-mta.org

I'm not really as evangelistic for Courier as I sound. As long as you
stay away from Qmail you will probably be happy with whatever you use.
I do recommend that you use something that supports Maildir style
mailboxes, though.

- Bob
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: mail server setup questions

2007-09-06 Thread Bill Vermillion
In the last exciting episode of the
[EMAIL PROTECTED] saga on Thu, Sep 06, 2007 at
06:27 , [EMAIL PROTECTED] as heard to say:

 Date: Thu, 6 Sep 2007 11:37:11 +1000
 From: Norberto Meijome [EMAIL PROTECTED]
 Subject: Re: mail server setup questions
 To: Bob Johnson [EMAIL PROTECTED]
 Cc: Andrey Shuvikov [EMAIL PROTECTED], freebsd-questions@freebsd.org

 On Wed, 5 Sep 2007 16:52:56 -0400
 Bob Johnson [EMAIL PROTECTED] wrote:

  In case I haven't made myself clear, I despise Qmail with a
  passion. I suppose it is suitable for people who like puzzles
  (as in What patches do I need to make this do something
  useful? or What third-party tool do I need to make sense
  out of these awful log files?) and who don't mind inflicting
  lots of unnecessary secondary spam on the rest of the world.
  Yes, I know there are _supposed_ to be patches that fix that
  problem, but (a) the one I've seen in action doesn't work very
  well, and (b) you shouldn't need to apply third-party patches
  to your mail server to make it do what it is supposed to do in
  the first place.

 I second all these points. I think it's probably better to use
 sendmail than qmail. Sendmail at least supports most (all?)
 SMTP / antispam related features, it is well documented ,
 and configurable to the extreme (with the caveat that its
 configuration may be a bit daunting to the un-initiated :D).

 I just realised that qmail appears over and over in Linux
 distros, or at least on linux servers i've had to suffer... not
 sure the relationship there (in design / philosophy...)... and I
 am really NOT wanting to start a flame war. Just a thought that
 crossed my mind as I was reading this thread.

 Best,
 B

I've been using sendmail for years, once it got stable, and I moved
from Smail.  This was on a SysV.3 from Esix.

However one day I decided to see what all the hoopla over qmail
was about.  So I went into the ports and ran make.

Much to my suprise, qmail installed 6 separate accounts in the
pasword file.  This was just with a make and NOT make install.

That at the very least is very rude behaviour.  And another problem
with qmail from what I've read is that if you send mail to
several people on the same server, instead of doing what all
other MTA's do - and send ONE mail with all addresses, qmail
will generate a separate email for each user - putting un-needed
loads on your server and the recipients machine.

And the last time the qmail tar file that you get when you run
make has been changed was March 4, 2001.  Anyone who even thinks
that a piece of software that it 6 years old has no flaws had best
re-think this.  The last patches were in 2003.

ISTR that I heard DJB speak at a Usenix conference many years ago
and I was less than impressed with his I'm better than any of
you attitude.

Many seem to share that feeling - so consider me prejudiced.

Bill


-- 
Bill Vermillion - bv @ wjv . com
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: mail server setup questions

2007-09-06 Thread DAve

Bill Vermillion wrote:

In the last exciting episode of the
[EMAIL PROTECTED] saga on Thu, Sep 06, 2007 at
06:27 , [EMAIL PROTECTED] as heard to say:


Date: Thu, 6 Sep 2007 11:37:11 +1000
From: Norberto Meijome [EMAIL PROTECTED]
Subject: Re: mail server setup questions
To: Bob Johnson [EMAIL PROTECTED]
Cc: Andrey Shuvikov [EMAIL PROTECTED], freebsd-questions@freebsd.org



On Wed, 5 Sep 2007 16:52:56 -0400
Bob Johnson [EMAIL PROTECTED] wrote:



In case I haven't made myself clear, I despise Qmail with a
passion. I suppose it is suitable for people who like puzzles
(as in What patches do I need to make this do something
useful? or What third-party tool do I need to make sense
out of these awful log files?) and who don't mind inflicting
lots of unnecessary secondary spam on the rest of the world.
Yes, I know there are _supposed_ to be patches that fix that
problem, but (a) the one I've seen in action doesn't work very
well, and (b) you shouldn't need to apply third-party patches
to your mail server to make it do what it is supposed to do in
the first place.



I second all these points. I think it's probably better to use
sendmail than qmail. Sendmail at least supports most (all?)
SMTP / antispam related features, it is well documented ,
and configurable to the extreme (with the caveat that its
configuration may be a bit daunting to the un-initiated :D).

I just realised that qmail appears over and over in Linux
distros, or at least on linux servers i've had to suffer... not
sure the relationship there (in design / philosophy...)... and I
am really NOT wanting to start a flame war. Just a thought that
crossed my mind as I was reading this thread.



Best,
B


I've been using sendmail for years, once it got stable, and I moved
from Smail.  This was on a SysV.3 from Esix.

However one day I decided to see what all the hoopla over qmail
was about.  So I went into the ports and ran make.

Much to my suprise, qmail installed 6 separate accounts in the
pasword file.  This was just with a make and NOT make install.

That at the very least is very rude behaviour. And another problem
with qmail from what I've read is that if you send mail to
several people on the same server, instead of doing what all
other MTA's do - and send ONE mail with all addresses, qmail
will generate a separate email for each user - putting un-needed
loads on your server and the recipients machine.

And the last time the qmail tar file that you get when you run
make has been changed was March 4, 2001.  Anyone who even thinks
that a piece of software that it 6 years old has no flaws had best
re-think this.  The last patches were in 2003.


Don't wonder if qmail has flaws, go to CERT.org and search first for 
Sendmail, then Postfix, then Exim, then qmail. To say Anyone who even 
thinks that a piece of software that it 6 years old has no flaws had 
best re-think this., is simply FUD.




ISTR that I heard DJB speak at a Usenix conference many years ago
and I was less than impressed with his I'm better than any of
you attitude.

Many seem to share that feeling - so consider me prejudiced.


We have run qmail for several years on FreeBSD quite well with few 
problems, none of which where related to the software, it's design, it's 
configuration, always it was Clam or SpamAssassin binding things up. It 
is stable, fast, secure, and provides abilities other MTAs do not. It is 
our first choice for a toaster or a mail list server.


We use Sendmail on our gateways for it's excellent milter support and 
versatile configuration. It has more knobs than a recording studio.


If we had a client with just a few domains and the need for their own 
MTA, we would install Postfix for it's ease of use. It's rock solid and 
easy to remember when you come back to it six months later.


If your only tool is a hammer, every problem looks like a nail

DAve


--
Three years now I've asked Google why they don't have a
logo change for Memorial Day. Why do they choose to do logos
for other non-international holidays, but nothing for
Veterans?

Maybe they forgot who made that choice possible.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


RE: mail server setup questions

2007-09-05 Thread Ted Mittelstaedt


 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED] Behalf Of Russell E. Meek
 Sent: Tuesday, September 04, 2007 5:20 PM
 To: Jim Stapleton
 Cc: freebsd-questions@freebsd.org
 Subject: Re: mail server setup questions
 
 
 Quoting Jim Stapleton [EMAIL PROTECTED]:
 
  I need a mail server to take incoming mail, and provide a pop3 (or
  better yet, SSLed POP3) connection. I've tried akpop3d and qmail, but
  have had less than brilliant success getting them functional. Could
  you all suggest to me what you use and a good web site for configuring
  it as it would be done in FreeBSD?
 
  Please cc me, as I have the list subscribed in digest mode.
 
  Thanks,
  -Jim Stapleton
  ___
  freebsd-questions@freebsd.org mailing list
  http://lists.freebsd.org/mailman/listinfo/freebsd-questions
  To unsubscribe, send any mail to 
 [EMAIL PROTECTED]
 
 
 http://www.tnpi.biz/internet/mail/toaster/
 
 Perfection - and qmail based also.
 

No, this isn't perfection.

Jim (and Russell) let me point out one thing about solutions like
this.

Something like this is designed for people who don't know
how to build a mailserver, to download some files, pull the
trigger, and Blammo - instant mailserver.  In short, a big
black box that works as a mailserver.

The problem is, however, that the only guy that really and truly
knows how everthing works in that black box is the guy that
wrote the black box - the author of toaster, himself.

You, being the clueless admin who pulled the trigger, are not
going to be instantly converted into a knowledgeable mail server
admin by pulling the trigger.  You are just going to be a
clueless admin who now has a big powerful black box that can
go kill people, just as easily as explode in his face.

Kind of like the country of Iraq buying a nuclear device - 
they don't know what they have, don't know how to build it,
and are not qualified at all to use it.

If something in that black box goes kablooie - which sooner
or later it will, since all mail systems have problems - you
are going to be screwed over.

If you have a small home mailserver with a couple of friends
on it, a system like Toaster can be a real help - IF you install
it, then spend months picking it apart, to learn how to not
be a clueless admin.  However if you install it then spend
the next 3 months watching reruns of Lost, then assume you
now know all there is to know about a mailserver, you are then
a stupid fool.

Or, if your an admin with a big string of mailservers already
under your belt who is looking for interesting code bits he can
steal to incorporate into his own mailservers, then Toaster
is also of value.

But if your just a guy looking for a quick gun to shoot a
problem so he can go on to the next thing, then your just
going to screw yourself with something like Toaster.  You would
be much better advised to build the mailserver from scratch.
Sure, your mailserver won't have all the pretty graphs and
admin interfaces that something like Toaster has.  But, you will
know how it works and the day you get a phone call and 400
users now can't get mail, you will know how to fix it.

Ted
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: mail server setup questions

2007-09-05 Thread Nikola Lecic
On Tue, 4 Sep 2007 23:21:47 -0700
Ted Mittelstaedt [EMAIL PROTECTED] wrote:

[...] 
 Kind of like the country of Iraq buying a nuclear device - 
 they don't know what they have, don't know how to build it,
 and are not qualified at all to use it.
[...]

Please save us from these words of wisdom. Your opinions about them
and about competence and collective knowledge of world states are
off-topic here. Such arrogancy and ignorance are very miserable.

Nikola Lečić
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: mail server setup questions

2007-09-05 Thread Norberto Meijome
On Tue, 4 Sep 2007 18:03:20 -0400
Jim Stapleton [EMAIL PROTECTED] wrote:

 I need a mail server to take incoming mail, and provide a pop3 (or
 better yet, SSLed POP3) connection.

Jim,
- incoming email + delivery : postfix . Really well documented. Haven't found a 
feature not implemented. As secure as you configure it (unlike qmail which 
implements a lot of security by axing features, so u need to add dubious 
hacks...)

- dovecot : POP + IMAP, works quite well with ssl too

- webmail : i use roundcube, but there are plenty of options. All u need is 
something that talks IMAP to your imap server

- amavis-new as glue for Spam assassin / other spam tagging system  + clamav.

B


_
{Beto|Norberto|Numard} Meijome

Sysadmins can't be sued for malpractice, but surgeons don't have to
deal with patients who install new versions of their own innards.

I speak for myself, not my employer. Contents may be hot. Slippery when wet. 
Reading disclaimers makes you go blind. Writing them is worse. You have been 
Warned.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


RE: mail server setup questions

2007-09-05 Thread Ted Mittelstaedt


 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED] Behalf Of Nikola Lecic
 Sent: Tuesday, September 04, 2007 11:41 PM
 To: Ted Mittelstaedt
 Cc: Russell E. Meek; Jim Stapleton; freebsd-questions@freebsd.org
 Subject: Re: mail server setup questions
 
 
 On Tue, 4 Sep 2007 23:21:47 -0700
 Ted Mittelstaedt [EMAIL PROTECTED] wrote:
 
 [...] 
  Kind of like the country of Iraq buying a nuclear device - 
  they don't know what they have, don't know how to build it,
  and are not qualified at all to use it.
 [...]
 
 Please save us from these words of wisdom. Your opinions about them
 and about competence and collective knowledge of world states are
 off-topic here. Such arrogancy and ignorance are very miserable.
 

Your reaction is facinating considering the location implied by
your e-mail reply address.  I can perhaps understand your adversion
to the use of metaphors in language - God know the Serbian propagandists
warped the metaphor beyond the breaking point in your history and
perhaps now, there is a horror of them there that will take generations to
dissipate.

In any case, please rest assured I was not talking about nuclear
weapons or Iraq, merely incompetent admins running mailservers
that were beyond their capabilities.  It was merely a metaphor.  I
would encourage you to get beyond your instinctual knee-jerk
reaction against the metaphor, as it is widely used language device
in virtually all languages and cultures in use by mankind today.

No serious person would ever argue for the proposition that a
non-nuclear country be allowed to purchase nuclear weapons, much
less use them.  As, no serious person should ever argue for
clueless admins to run mailservers that they know nothing about.

Never forget when you or anyone sets up a mailserver on the
Internet you are putting a server online that can be used to
cause a tremendous amount of damage to other mailservers on the
Internet.  It is a responsibility that should never be taken
lightly.  Far too many Windoze admins do this already.  We
as FreeBSD users do not need to emulate such disgusting behavior.

Jim posted here asking for help, using words and language that
gives serious doubt that he is competent to run a mailserver
of any kind.  It would be irresponsible in the extreme to tell
him to run pell-mell into fielding a system that is way beyond
his capabilities.  His goal should be to gain competence as
well as a mailserver, lest he cause serious problems on the
Internet.  We do NOT need one more misconfigured server on the
Internet that is a spam or virus source.  The best way for him
to do this - and be a responsible network admin - is to start
small, with individual pieces, and learn each subsystem.  The
worst way would be to drop a canned package in that he doesen't
understand.

It is to the list's credit that the vast majority of responses
to Jim were to direct him to the individual packages - NOT to
a toaster approach that would likely teach him nothing.

Hopefully next time you will stick to addressing the topic of the
responses and not get hung up on attacking an alliteration or
some other language device that someone might use.


Ted

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: mail server setup questions

2007-09-05 Thread Eray Aslan
On 05.09.2007 11:22, Ted Mittelstaedt wrote:
[...]
 Your reaction is facinating considering the location implied by
 your e-mail reply address.  I can perhaps understand your adversion
 to the use of metaphors in language - God know the Serbian propagandists
 warped the metaphor beyond the breaking point in your history and
 perhaps now, there is a horror of them there that will take generations to
 dissipate.

This is clearly off topic on a technical list.

[...]
 Hopefully next time you will stick to addressing the topic 

Good advice.  I am sure you could have written your response without
mentioning nuclear weapons, Iraq et al.

-- 
Eray

 of the
 responses and not get hung up on attacking an alliteration or
 some other language device that someone might use.
 
 
 Ted
 
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to [EMAIL PROTECTED]

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: mail server setup questions

2007-09-05 Thread Predrag Punosevac

On 05.09.2007 11:22, Ted Mittelstaedt wrote:
[...]
 

Your reaction is facinating considering the location implied by
your e-mail reply address.  I can perhaps understand your adversion
to the use of metaphors in language - God know the Serbian propagandists
warped the metaphor beyond the breaking point in your history and
perhaps now, there is a horror of them there that will take 
generations to

dissipate.



  
I thought were discussing the configuration of the mail server not your 
hatred toward us Serbs, Iraqis and God knows whom else. But then on the 
second thought maybe you are trying to teach us how to configure the 
spam filter. So how high should we set it? Only Serbs from Serbia can 
not send emails or even we Serbs who live in U. S? Are you coding  now 
MailScanner-antiSerb version or MailScanner-antiIraqi version?





[...]
 

Hopefully next time you will stick to addressing the topic.


We Serbs are certainly hopping for that!

Sincerely,
Predrag Punosevac
 Arizona
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: mail server setup questions

2007-09-05 Thread Jim Stapleton
Please, I didn't intend this to be a flame war - though thinking back,
I guess I should have expected strong views on this. This is not the
place for such agressiveness.


The rest of this is for everyone
Thank all of you for your suggestions, I'll look at them. This is a
mail server for me and maybe a few friends. I plan on running incoming
SMTP, maybe at some point outgoing (requiring authentication/SSL,
definetly no relay), no relay, no webmail, POP, if possible only under
SSL. I think there's enough here for me to do my research and get what
I need. Thank you,

-Jim Stapleton


On 9/5/07, Ted Mittelstaedt [EMAIL PROTECTED] wrote:


  -Original Message-
  From: [EMAIL PROTECTED]
  [mailto:[EMAIL PROTECTED] Behalf Of Nikola Lecic
  Sent: Tuesday, September 04, 2007 11:41 PM
  To: Ted Mittelstaedt
  Cc: Russell E. Meek; Jim Stapleton; freebsd-questions@freebsd.org
  Subject: Re: mail server setup questions
 
 
  On Tue, 4 Sep 2007 23:21:47 -0700
  Ted Mittelstaedt [EMAIL PROTECTED] wrote:
 
  [...]
   Kind of like the country of Iraq buying a nuclear device -
   they don't know what they have, don't know how to build it,
   and are not qualified at all to use it.
  [...]
 
  Please save us from these words of wisdom. Your opinions about them
  and about competence and collective knowledge of world states are
  off-topic here. Such arrogancy and ignorance are very miserable.
 

 Your reaction is facinating considering the location implied by
 your e-mail reply address.  I can perhaps understand your adversion
 to the use of metaphors in language - God know the Serbian propagandists
 warped the metaphor beyond the breaking point in your history and
 perhaps now, there is a horror of them there that will take generations to
 dissipate.

 In any case, please rest assured I was not talking about nuclear
 weapons or Iraq, merely incompetent admins running mailservers
 that were beyond their capabilities.  It was merely a metaphor.  I
 would encourage you to get beyond your instinctual knee-jerk
 reaction against the metaphor, as it is widely used language device
 in virtually all languages and cultures in use by mankind today.

 No serious person would ever argue for the proposition that a
 non-nuclear country be allowed to purchase nuclear weapons, much
 less use them.  As, no serious person should ever argue for
 clueless admins to run mailservers that they know nothing about.

 Never forget when you or anyone sets up a mailserver on the
 Internet you are putting a server online that can be used to
 cause a tremendous amount of damage to other mailservers on the
 Internet.  It is a responsibility that should never be taken
 lightly.  Far too many Windoze admins do this already.  We
 as FreeBSD users do not need to emulate such disgusting behavior.

 Jim posted here asking for help, using words and language that
 gives serious doubt that he is competent to run a mailserver
 of any kind.  It would be irresponsible in the extreme to tell
 him to run pell-mell into fielding a system that is way beyond
 his capabilities.  His goal should be to gain competence as
 well as a mailserver, lest he cause serious problems on the
 Internet.  We do NOT need one more misconfigured server on the
 Internet that is a spam or virus source.  The best way for him
 to do this - and be a responsible network admin - is to start
 small, with individual pieces, and learn each subsystem.  The
 worst way would be to drop a canned package in that he doesen't
 understand.

 It is to the list's credit that the vast majority of responses
 to Jim were to direct him to the individual packages - NOT to
 a toaster approach that would likely teach him nothing.

 Hopefully next time you will stick to addressing the topic of the
 responses and not get hung up on attacking an alliteration or
 some other language device that someone might use.


 Ted


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: mail server setup questions

2007-09-05 Thread Jim Stapleton
 Jim posted here asking for help, using words and language that
 gives serious doubt that he is competent to run a mailserver
 of any kind.

Knowledgeable and competant are two different things. If I were not
competant, I would not bother attempting to get that knowledge that I
lack.

I don't  know the nitty gritty details about exactly what and how mail
servers are encrypted.
I don't know all the nitty gritty details about how everything talks
and intercommunicates.
I do know that that any time a password goes over the internet (not
just LAN) it needs to be encrypted as securly as possible.
I do know that mail (and other) servers should live in jails.
I do know not to run an open relay (take email from any server to
deliver to any server, without authentication, and plan to achieve
this by only allowing incoming mail).
I do know that there is no such thing as too much paranoia when
setting up a server.
I know to find out and learn what I don't know, rather than to just
stumble along blindly.

There, that about covers everything that I do/don't know.

-Jim Stapleton
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: mail server setup questions

2007-09-05 Thread Predrag Punosevac

Predrag Punosevac wrote:



On 05.09.2007 11:22, Ted Mittelstaedt wrote:
[...]
 

Your reaction is facinating considering the location implied by
your e-mail reply address.  I can perhaps understand your adversion
to the use of metaphors in language - God know the Serbian 
propagandists

warped the metaphor beyond the breaking point in your history and
perhaps now, there is a horror of them there that will take 
generations to

dissipate.



  
I thought were discussing the configuration of the mail server not 
your hatred toward us Serbs, Iraqis and God knows whom else. But then 
on the second thought maybe you are trying to teach us how to 
configure the spam filter. So who high should we set it. Only Serbs 
from Serbia can not send emails or even we Serbs who live in U. S? Are 
you coding  now MailScanner-antiSerb version or MailScanner-antiIraqi 
version?





[...]
 

Hopefully next time you will stick to addressing the topic.


We Serbs are certainly hopping for that!

Sincerely,
Predrag Punosevac
  Arizona



___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: mail server setup questions

2007-09-05 Thread Mel
On Wednesday 05 September 2007 12:34:45 Jim Stapleton wrote:

 Thank all of you for your suggestions, I'll look at them. This is a
 mail server for me and maybe a few friends. I plan on running incoming
 SMTP, maybe at some point outgoing (requiring authentication/SSL,
 definetly no relay), no relay, no webmail, POP, if possible only under
 SSL. I think there's enough here for me to do my research and get what
 I need. Thank you,

Don't rule out good old mail/qpopper just yet.

Also, be aware that whichever solution you choose, there are scanners out 
there that won't hesitate to query port 110 with an account guesser, which 
can spawn many daemons depending on how fast your pop server handles it.

You may wanna limit access to port 110 to you and your friends if that's 
possible or look into a pop server that can limit ammount of requests/second 
it accepts from host.
-- 
Mel

People using reply to all on lists, must think I need 2 copies.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: mail server setup questions

2007-09-05 Thread Chad Perrin
On Wed, Sep 05, 2007 at 03:14:37AM -0700, Predrag Punosevac wrote:
   
 I thought were discussing the configuration of the mail server not 
 your hatred toward us Serbs, Iraqis and God knows whom else. But then 
 on the second thought maybe you are trying to teach us how to 
 configure the spam filter. So who high should we set it. Only Serbs 
 from Serbia can not send emails or even we Serbs who live in U. S? Are 
 you coding  now MailScanner-antiSerb version or MailScanner-antiIraqi 
 version?

This discussion has gotten thoroughly bizarre rather quickly.

-- 
CCD CopyWrite Chad Perrin [ http://ccd.apotheon.org ]
Larry Wall: A script is what you give the actors.  A program is what you
give the audience.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: mail server setup questions

2007-09-05 Thread Nikola Lecic
On Wed, 5 Sep 2007 01:22:12 -0700
Ted Mittelstaedt [EMAIL PROTECTED] wrote:

 Your reaction is facinating considering the location implied by
 your e-mail reply address.  I can perhaps understand your adversion
 to the use of metaphors in language - God know the Serbian
 propagandists warped the metaphor beyond the breaking point in your
 history and perhaps now, there is a horror of them there that will
 take generations to dissipate.

Congratulations.

This is an international project and not your parochial meeting where
you can discuss the knowledge gleaned from TV end enjoy such
fascinating vocabulary and deductions related to someone's TLD.

Please learn how to behave appropriately before you post.

(A friendly advice: _please_ take some literature lessons in order to
learn what is metaphor.)

Nikola Lečić, Belgrade, Serbia
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: mail server setup questions

2007-09-05 Thread Zbigniew Szalbot
Hi,

2007/9/5, Nikola Lecic [EMAIL PROTECTED]:
 On Wed, 5 Sep 2007 01:22:12 -0700
 Ted Mittelstaedt [EMAIL PROTECTED] wrote:

  Your reaction is facinating considering the location implied by
  your e-mail reply address.  I can perhaps understand your adversion
  to the use of metaphors in language - God know the Serbian
  propagandists warped the metaphor beyond the breaking point in your
  history and perhaps now, there is a horror of them there that will
  take generations to dissipate.

 Congratulations.

 This is an international project and not your parochial meeting where
 you can discuss the knowledge gleaned from TV end enjoy such
 fascinating vocabulary and deductions related to someone's TLD.

I wonder if all thread participants can relax a bit? I have always
been impressed how friendly this list is. Have been watching this
thread and cannot understand how it came that such a flame war broke
out. Please cool down and stop sending rubbish to everyone's inbox.
Continue off list if you really have to.

Warm regards,

Zbigniew Szalbot
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


RE: mail server setup questions

2007-09-05 Thread Ted Mittelstaedt


 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED] Behalf Of Predrag
 Punosevac
 Sent: Wednesday, September 05, 2007 3:24 AM
 To: [EMAIL PROTECTED]
 Subject: Re: mail server setup questions
 
 
  On 05.09.2007 11:22, Ted Mittelstaedt wrote:
  [...]
   
  Your reaction is facinating considering the location implied by
  your e-mail reply address.  I can perhaps understand your adversion
  to the use of metaphors in language - God know the Serbian 
 propagandists
  warped the metaphor beyond the breaking point in your history and
  perhaps now, there is a horror of them there that will take 
  generations to
  dissipate.
  
 

 I thought were discussing the configuration of the mail server not your 
 hatred toward us Serbs, Iraqis and God knows whom else.

Amazing you find hatred where none exists.  Perhaps your only reflecting
your own biases?

Ted
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


RE: mail server setup questions

2007-09-05 Thread Ted Mittelstaedt


 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED] Behalf Of Eray Aslan
 Sent: Wednesday, September 05, 2007 2:05 AM
 To: freebsd-questions@freebsd.org
 Subject: Re: mail server setup questions
 

 Good advice.  I am sure you could have written your response without
 mentioning nuclear weapons, Iraq et al.
 

Sure - and I'm sure you could write an instruction manual that
nobody would want to read, either, unless as a sleep aid.

Metaphors are a legitimate literary device.  If your unfamiliar with
them I would suggest you review what is known as classic literature

Ted

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: mail server setup questions

2007-09-05 Thread Nikola Lecic
On Wed, 5 Sep 2007 17:44:15 +0200
Zbigniew Szalbot [EMAIL PROTECTED] wrote:

 Hi,
 
 2007/9/5, Nikola Lecic [EMAIL PROTECTED]:
  On Wed, 5 Sep 2007 01:22:12 -0700
  Ted Mittelstaedt [EMAIL PROTECTED] wrote:
 
   Your reaction is facinating considering the location implied by
   your e-mail reply address.  I can perhaps understand your
   adversion to the use of metaphors in language - God know the
   Serbian propagandists warped the metaphor beyond the breaking
   point in your history and perhaps now, there is a horror of them
   there that will take generations to dissipate.
 
  Congratulations.
 
  This is an international project and not your parochial meeting
  where you can discuss the knowledge gleaned from TV end enjoy such
  fascinating vocabulary and deductions related to someone's TLD.
 
 I wonder if all thread participants can relax a bit? I have always
 been impressed how friendly this list is. Have been watching this
 thread and cannot understand how it came that such a flame war broke
 out.
[...]
 Please cool down and stop sending rubbish to everyone's inbox.

Zbigniew, please don't teach me lessons in politeness. Ted posted two
very offensive mails and everyone has a right to publicly reply to
publicly posted offence. If that's problem for you, then ignore this
thread. Be careful when using word rubbish.

Nikola Lečić
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


RE: mail server setup questions

2007-09-05 Thread Ted Mittelstaedt


 -Original Message-
 From: Jim Stapleton [mailto:[EMAIL PROTECTED]
 Sent: Wednesday, September 05, 2007 3:55 AM
 To: Ted Mittelstaedt
 Cc: Nikola Lecic; Russell E. Meek; freebsd-questions@freebsd.org
 Subject: Re: mail server setup questions
 
 
  Jim posted here asking for help, using words and language that
  gives serious doubt that he is competent to run a mailserver
  of any kind.
 
 Knowledgeable and competant are two different things. If I were not
 competant, I would not bother attempting to get that knowledge that I
 lack.
 

Of course.  The fact you posted at all indicates your aware that
competence is learned and that you want to become competent.  A far
more admirable attitude than the people that assume that everyone is
completely competent at everything and calling someone incompetent
is the same as calling them a baby-killer.

 I don't  know the nitty gritty details about exactly what and how mail
 servers are encrypted.
 I don't know all the nitty gritty details about how everything talks
 and intercommunicates.
 I do know that that any time a password goes over the internet (not
 just LAN) it needs to be encrypted as securly as possible.

Only if there is a possiblity that the communication channel can be
tapped.  The phrase going over the Internet is so broad as to be
completely meaningless.  You can mean just about everything from
completely unencrypted wireless to an untappable OC3 between
providers.

Most password cracking takes place on the client - all the encryption
in the world won't protect you from clueless users who click on
URLs in e-mails they get.

 I do know that mail (and other) servers should live in jails.

They can if you want.  However I have never done so and never had
a mailserver rooted.  Of course, I have kept stuff reasonably
up to date - that is the other part of the issue.

In any case running in a jail does not really address the biggest
problems with mailservers - their hijacking by spammers and other
criminals.  By definition a mailserver transfers mail.  Putting
it's programs in a jail does not make it cease to transfer mail.
If such mail transfer happens between the people you want it to
happen between, then great.  But if you misconfigure the stuff you
have jailed, the mailserver will happily transfer mail between
the people you don't want it transferring mail from and everyone
else.

 I do know not to run an open relay (take email from any server to
 deliver to any server, without authentication, and plan to achieve
 this by only allowing incoming mail).

I would submit you think you do.  For example, are you planning on
putting a webmail interface on the server?  A lot of people do.  Well
if you do and you put a scrap of CGI on there that has a hole in it
a spammer can come along and cause that to relay mail from incoming
http right into your mail queue.  He doesen't need root access to
do this.

 I do know that there is no such thing as too much paranoia when
 setting up a server.

Then you know 90% of what you need to know.

Ted
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: mail server setup questions

2007-09-05 Thread Zbigniew Szalbot
Hello,

 Zbigniew, please don't teach me lessons in politeness. Ted posted two
 very offensive mails and everyone has a right to publicly reply to
 publicly posted offence. If that's problem for you, then ignore this
 thread. Be careful when using word rubbish.

My apologies. I shoudn't have used the word rubbish. But please take
into account that:

1. I am interested in the subject of mail server setup so I generally
follow such threads
2. For the whole day I have been opening emails where you exchange
opinions that have nothing to do with mail server setup.
3. I have no intention of teaching anyone lessons in politness. If
this has been your impression, I need to apologize again.


Regards,

Zbigniew Szalbot
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: mail server setup questions

2007-09-05 Thread N.J. Thomas
* Jim Stapleton [EMAIL PROTECTED] [2007-09-04 18:03:20 -0400]:
 I need a mail server to take incoming mail, and provide a pop3 (or
 better yet, SSLed POP3) connection.

I would second the recommendation for Postfix -- and Dovecot for POP.

 Could you all suggest to me what you use and a good web site for
 configuring it as it would be done in FreeBSD?

The Postfix documentation is very thorough and complete, and that is all
you should need. Their website has some links to various HOWTOs:

http://www.postfix.org/docs.html

Thomas

-- 
N.J. Thomas
[EMAIL PROTECTED]
Etiamsi occiderit me, in ipso sperabo
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: mail server setup questions

2007-09-05 Thread Jerry McAllister
On Wed, Sep 05, 2007 at 08:51:18AM -0700, Ted Mittelstaedt wrote:

 
 
  -Original Message-
  From: [EMAIL PROTECTED]
  [mailto:[EMAIL PROTECTED] Behalf Of Eray Aslan
  Sent: Wednesday, September 05, 2007 2:05 AM
  To: freebsd-questions@freebsd.org
  Subject: Re: mail server setup questions
  
 
  Good advice.  I am sure you could have written your response without
  mentioning nuclear weapons, Iraq et al.
  
 
 Sure - and I'm sure you could write an instruction manual that
 nobody would want to read, either, unless as a sleep aid.
 
 Metaphors are a legitimate literary device.  If your unfamiliar with
 them I would suggest you review what is known as classic literature

Come on folks.  You'll never get anywhere in a flame war with Ted.
He changes the ground under you any time it is convenient.

Much better to teach him to spell you're, distinguish 
between your and you're and use them correctly.   
Now that would be helpful.

jerry  
 
 Ted
 
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to [EMAIL PROTECTED]
 
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: mail server setup questions

2007-09-05 Thread Nikola Lecic
On Wed, 5 Sep 2007 12:28:51 -0400
Jerry McAllister [EMAIL PROTECTED] wrote:

 Come on folks.  You'll never get anywhere in a flame war with Ted.
 He changes the ground under you any time it is convenient.

Jerry, I appreciate your good will, but he doesn't change ground. And
this is not a flame war but a reaction to the rude and arrogant posts.
His (obviously well-known) character cannot be an excuse to speak
whatever he wishes.

I'm very disappointed that more official people on this list didn't say
something like Ted, please respect our users from all countries,
including those two countries you have mentioned (as they did couple
of times in the near past).

Nikola Lečić
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: mail server setup questions

2007-09-05 Thread Andrey Shuvikov
Hi,

I'm trying to set up a home mailserver with imap/web access. But I was
going to use exim. Several people mentioned postfix here, but nobody
named exim. Is it a matter of personal preference or is exim not
suitable for this task?

Thanks,
Andrey
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


[Fwd: Re: mail server setup questions]

2007-09-05 Thread Predrag Punosevac


---BeginMessage---

Andrey Shuvikov wrote:

Hi,

I'm trying to set up a home mailserver with imap/web access. But I was
going to use exim. Several people mentioned postfix here, but nobody
named exim. Is it a matter of personal preference or is exim not
suitable for this task?

Thanks,
Andrey
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]
  
We have a exim at the University of Arizona and works really well (but I 
am just a user not a sysadmin).
I had the same question since I have use sendmail as my home server but 
I am really curious what more

knowledgeable people have to say on this topic.
Regards
Predrag

P. S. I apologize for my previous mail that was of topic but I was truly 
offended.


---End Message---
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: mail server setup questions

2007-09-05 Thread Predrag Punosevac

Andrey Shuvikov wrote:

Hi,

I'm trying to set up a home mailserver with imap/web access. But I was
going to use exim. Several people mentioned postfix here, but nobody
named exim. Is it a matter of personal preference or is exim not
suitable for this task?

Thanks,
Andrey
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to 
[EMAIL PROTECTED]
  
We have a exim at the University of Arizona and works really well (but I 
am just a user not a sysadmin).
I had the same question since I have used sendmail as my home mail 
server but I am really curious what more knowledgeable people have to 
say on this topic.

Regards
Predrag

P. S. I apologize to everyone for my previous mail on this thread that 
was of topic but I was truly offended.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: mail server setup questions

2007-09-05 Thread Jerry McAllister
On Wed, Sep 05, 2007 at 12:21:56PM -0700, Predrag Punosevac wrote:

 Andrey Shuvikov wrote:
 Hi,
 
 I'm trying to set up a home mailserver with imap/web access. But I was
 going to use exim. Several people mentioned postfix here, but nobody
 named exim. Is it a matter of personal preference or is exim not
 suitable for this task?
 
 Thanks,
 Andrey
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to 
 [EMAIL PROTECTED]
   
 We have a exim at the University of Arizona and works really well (but I 
 am just a user not a sysadmin).
 I had the same question since I have used sendmail as my home mail 
 server but I am really curious what more knowledgeable people have to 
 say on this topic.

There is no real problem with sendmail.   Maybe there was years ago,
but it works fine.   Some of the configuration can be rather arcane,
but mostly people just get their favorite and want to defend it.

jerry

 Regards
 Predrag
 
 P. S. I apologize to everyone for my previous mail on this thread that 
 was of topic but I was truly offended.
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to [EMAIL PROTECTED]
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: mail server setup questions

2007-09-05 Thread Eric

Andrey Shuvikov wrote:

Hi,

I'm trying to set up a home mailserver with imap/web access. But I was
going to use exim. Several people mentioned postfix here, but nobody
named exim. Is it a matter of personal preference or is exim not
suitable for this task?



Exim is a capable mailer as is postfix. I think its mostly a matter of 
preference but I havent delved into Exim too much. Personally I run 
Postfix and Dovecot for my mail server setup. Roundcube does a nice job 
in providing a front end on the web for Dovecot.


Eric
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: mail server setup questions

2007-09-05 Thread Eric Crist

On Sep 5, 2007, at 2:05 PMSep 5, 2007, Andrey Shuvikov wrote:


Hi,

I'm trying to set up a home mailserver with imap/web access. But I was
going to use exim. Several people mentioned postfix here, but nobody
named exim. Is it a matter of personal preference or is exim not
suitable for this task?


Andrey,

I can't speak of exim or qmail, but I had used sendmail for nearly 10  
years before switching to postfix.  I switched was for support of  
virtual mail boxes, and better support for IMAP.  Regardless of the  
software you choose, it's to your benefit to figure out what you want  
to do in the long run, and choose the software that is best going to  
allow you to achieve those goals.


HTH
-
Eric F Crist
Secure Computing Networks


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: mail server setup questions

2007-09-05 Thread Bob Johnson
On 9/5/07, Andrey Shuvikov [EMAIL PROTECTED] wrote:
 Hi,

 I'm trying to set up a home mailserver with imap/web access. But I was
 going to use exim. Several people mentioned postfix here, but nobody
 named exim. Is it a matter of personal preference or is exim not
 suitable for this task?


It's most definitely a matter of personal preference. I lean toward
Exim or Courier. Exim is highly customizable, but the price you pay
for that is a steep learning curve when you start looking at
customization. Courier isn't as flexible, but can do anything most
people are likely to want from a mail server by just setting the
appropriate configuration values. And if you just must have more
complexity, you can use procmail to do local delivery for Courier.

FWIW I use Courier at home and Exim at work. We replaced Qmail (yech!)
with Exim at work in part because we needed its customizability.  The
only real reason for me to switch to Exim at home would be to reduce
the number of tools I'm dealing with. Courier has the advantage of
having everything (smtp, pop, imap, and webmail servers) all
distributed as one package, other than the host web server for the
webmail component.

Whatever you do, please don't use Qmail. I don't want any more
blowback spam than I already get.

In case I haven't made myself clear, I despise Qmail with a passion. I
suppose it is suitable for people who like puzzles (as in What
patches do I need to make this do something useful? or What
third-party tool do I need to make sense out of these awful log
files?) and who don't mind inflicting lots of unnecessary secondary
spam on the rest of the world.  Yes, I know there are _supposed_ to be
patches that fix that problem, but (a) the one I've seen in action
doesn't work very well, and (b) you shouldn't need to apply
third-party patches to your mail server to make it do what it is
supposed to do in the first place.

- Bob
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: mail server setup questions

2007-09-05 Thread Jim Stapleton
 I would submit you think you do.  For example, are you planning on
 putting a webmail interface on the server?  A lot of people do.  Well
 if you do and you put a scrap of CGI on there that has a hole in it
 a spammer can come along and cause that to relay mail from incoming
 http right into your mail queue.  He doesen't need root access to
 do this.

I have never stated interest in putting web mail up in my to-do list,
and in fact, have explicitly stated at least once, I've no intention
of doing that. To be blunt, I don't trust it. I only use it for things
on which I don't care about the security (ex. reading mailing lists).
I care about the security of my server.

-Jim Stapleton
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: mail server setup questions

2007-09-05 Thread Zbigniew Szalbot
Hello

2007/9/5, Andrey Shuvikov [EMAIL PROTECTED]:
 Hi,

 I'm trying to set up a home mailserver with imap/web access. But I was
 going to use exim. Several people mentioned postfix here, but nobody
 named exim. Is it a matter of personal preference or is exim not
 suitable for this task?

It is more than suitable. Both postfix and exim are comparable and
powerful MTAs. I personally use Exim but that's because I started with
it. It is very customizable.

For those who begin their adventure with exim, maybe even vexim is
better because you get everything virtualised (virtual users, domains,
etc.) and you define your emails, quotas, etc. via browser.
http://silverwraith.com/vexim/

Regards,

Zbigniew Szalbot
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: mail server setup questions

2007-09-05 Thread Chad Perrin
On Wed, Sep 05, 2007 at 04:52:56PM -0400, Bob Johnson wrote:

   
 On 9/5/07, Andrey Shuvikov [EMAIL PROTECTED] wrote: 
   
  
  Hi, 
  
 
  
  
 
  I'm trying to set up a home mailserver with imap/web access. But I was  
  
 
  going to use exim. Several people mentioned postfix here, but nobody
  
 
  named exim. Is it a matter of personal preference or is exim not
  
 
  suitable for this task? 
  
 


   
Exim is as suited for the task as Postfix and Sendmail.  All three are in   

   
roughly the same class of mail transfer agent, and are roughly  

   
interchangeable in terms of functionality.  

   


   
Sendmail is very old-school Unix in its design philosophy, from what I've   

   
seen.  Postfix is pretty easy to wrap your head around and is pretty

   
light on resources when well-configured.  Exim -- well, I suspect it has

   
some excellent qualities to recommend it, but my personal experience is 

   
that it's a severe pain in my fourth point of contact to configure.  Exim   

   
is the default MTA for Debian, and while I was using Debian I ended up  

   
swapping out Exim for Postfix on every install after I finally got tired

   
of dealing with Exim's configuration complexities and caveats.  Your

   
mileage may vary.   

   


   


   
   
   
  
 Whatever you do, please don't use Qmail. I don't want any more
   
  
 blowback spam than I already get. 
   
  


   
I'm not a huge fan of Qmail, either.  I not only try to avoid it myself,

   
but wish others would do so as well.



Re: mail server setup questions

2007-09-05 Thread Heiko Wundram (Beenic)
Am Mittwoch 05 September 2007 21:14:17 schrieb Predrag Punosevac:
 We have a exim at the University of Arizona and works really well (but I
 am just a user not a sysadmin).

Me, personally, I can only swear by Postfix.

I've set up numerous Postfix mail servers over the last two years, and I've 
never had trouble with them as to this date. Postfix is robust (I've never 
had an error condition that _lost_ mails, so far), (actually) pretty easy to 
configure in comparison to sendmail and (IMHO) exim, simply because the 
documentation is extensive and the directives are clear and concise for the 
main configuration (that's for the main.cf; master.cf, which dispatches the 
different parts that make up Postfix, is a different topic, but you needn't 
touch that under most circumstances), and it's easily extensible my its 
extensive use of the generic feature of maps for any lookups required for 
configuration options (a map can basically come from anything, such as 
get*ent, flat db files, relational databases, a socket protocol, and some 
other things which you'd possibly not even dreamed about).

By using the Postfix mail filter APIs (completely different to milter, but 
milter is also possible AFAIK in Postfix 2.3+), I've hacked together a small 
Anti-Harvester plugin in an afternoon for the three big servers I 
administered, and there's tons of software out there that plugs in with 
Postfix to do things like greylisting, spam control, mail traffic accounting 
and rate limiting, and the like. The architecture of Postfix I'm talking 
about is called the policy framework.

Thirdly, I don't recall a major security vulverability in Postfix for quite 
some time now (longer than from what I know of sendmail, anyway, but this 
might be my biased vision), and generally, you can expect Postfix to come 
preconfigured safe, unless you explicitly open it up (which isn't easy to 
do).

On the other hand: besides trying sendmail some years back (I still have the 
O'Reilly sendmail book somewhere on my shelf), I've never tried a different 
mailer in a production environment yet, so the value of my answer may vary. I 
know most of my peers who deploy Debian in server environment swear by exim 
(I should guess because it comes preinstalled and is the default for them), 
but again, I recall the horror I faced when I had a look at the exim 
configuration of my uni when I had to change mail routing (because their exim 
mailserver got blacklisted, and had to route through one of the servers 
administered by me to be able to get out mails at all; that was a happy 
moment in my student admin career :-)).

Anyway, have a look at Postfix, I can pretty much guarantee you that it'll 
suck you in!

-- 
Heiko Wundram
Product  Application Development
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: mail server setup questions

2007-09-05 Thread Norberto Meijome
On Wed, 5 Sep 2007 16:52:56 -0400
Bob Johnson [EMAIL PROTECTED] wrote:

 In case I haven't made myself clear, I despise Qmail with a passion. I
 suppose it is suitable for people who like puzzles (as in What
 patches do I need to make this do something useful? or What
 third-party tool do I need to make sense out of these awful log
 files?) and who don't mind inflicting lots of unnecessary secondary
 spam on the rest of the world.  Yes, I know there are _supposed_ to be
 patches that fix that problem, but (a) the one I've seen in action
 doesn't work very well, and (b) you shouldn't need to apply
 third-party patches to your mail server to make it do what it is
 supposed to do in the first place.

I second all these points. I think it's probably better to use sendmail than
qmail. Sendmail at least supports most (all?) SMTP / antispam related features,
it is well documented , and configurable to the extreme (with the caveat that
its configuration may be a bit daunting to the un-initiated :D).

I just realised that qmail appears over and over in Linux distros, or at least
on linux servers i've had to suffer... not sure the relationship there (in
design / philosophy...)... and I am really NOT wanting to start a flame war.
Just a thought that crossed my mind as I was reading this thread.

Best,
B
_
{Beto|Norberto|Numard} Meijome

It is not the strongest of the species that survive, nor the most intelligent,
but the one most responsive to change. Charles Darwin.

I speak for myself, not my employer. Contents may be hot. Slippery when wet.
Reading disclaimers makes you go blind. Writing them is worse. You have been
Warned.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


mail server setup questions

2007-09-04 Thread Jim Stapleton
I need a mail server to take incoming mail, and provide a pop3 (or
better yet, SSLed POP3) connection. I've tried akpop3d and qmail, but
have had less than brilliant success getting them functional. Could
you all suggest to me what you use and a good web site for configuring
it as it would be done in FreeBSD?

Please cc me, as I have the list subscribed in digest mode.

Thanks,
-Jim Stapleton
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: mail server setup questions

2007-09-04 Thread Eric Crist

On Sep 4, 2007, at 5:03 PMSep 4, 2007, Jim Stapleton wrote:


I need a mail server to take incoming mail, and provide a pop3 (or
better yet, SSLed POP3) connection. I've tried akpop3d and qmail, but
have had less than brilliant success getting them functional. Could
you all suggest to me what you use and a good web site for configuring
it as it would be done in FreeBSD?

Please cc me, as I have the list subscribed in digest mode.

Thanks,
-Jim Stapleton



It may be more than you're looking for, but check out  
www.purplehat.org and look for their postfix/dovecot how-to.  It's  
very detailed and works great!


-
Eric F Crist
Secure Computing Networks


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: mail server setup questions

2007-09-04 Thread Russell E. Meek

Quoting Jim Stapleton [EMAIL PROTECTED]:


I need a mail server to take incoming mail, and provide a pop3 (or
better yet, SSLed POP3) connection. I've tried akpop3d and qmail, but
have had less than brilliant success getting them functional. Could
you all suggest to me what you use and a good web site for configuring
it as it would be done in FreeBSD?

Please cc me, as I have the list subscribed in digest mode.

Thanks,
-Jim Stapleton
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]



http://www.tnpi.biz/internet/mail/toaster/

Perfection - and qmail based also.

Have fun.

- Russell


This message was sent securely via meektech.com


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]