Re: Mailserver HDD organization

2002-01-17 Thread Alberto Gonzalez Iniesta
On Sun, Nov 25, 2001 at 11:04:45PM +0100, [EMAIL PROTECTED] wrote: please use qmail, its really the securest MTA you can get. please use postfix, since it's as secure as qmail and has a better license -- Alberto Gonzalez Iniesta | They that give up essential liberty [EMAIL PROTECTED]

Re: Mailserver HDD organization

2002-01-17 Thread Giacomo Mulas
On Thu, 17 Jan 2002, Alberto Gonzalez Iniesta wrote: On Sun, Nov 25, 2001 at 11:04:45PM +0100, [EMAIL PROTECTED] wrote: please use qmail, its really the securest MTA you can get. please use postfix, since it's as secure as qmail and has a better license please, use whatever good MTA

Re: Mailserver HDD organization

2002-01-17 Thread Samu
On Thu, Jan 17, 2002 at 12:22:07PM +0100, Alberto Gonzalez Iniesta wrote: On Sun, Nov 25, 2001 at 11:04:45PM +0100, [EMAIL PROTECTED] wrote: please use qmail, its really the securest MTA you can get. please use postfix, since it's as secure as qmail and has a better license we could

Re: Mailserver HDD organization

2002-01-17 Thread Gerrit Kilian
Hi there On the subject of MTA's, is there no groupware like Lotus Domino or exchance server available on Debian? Personaly I feel all Linux MTA's are very good. Is it not just a matter of personal choice? Kind Regards Gerrit -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of

Re: Mailserver HDD organization

2002-01-17 Thread vdongen
I don't think the choice of MTA is relevant to the HDD organisation. I use both Postfix and Qmail and they both work fine. The only thing you have to realize is when you use Qmail with maildir, you really need a large /home partition. Greetz, Ivo

Re: Mailserver HDD organization

2002-01-17 Thread Dave Kline
Though I have supported Sendmail in Big-Iron environments, I am now using the Default Debian Exim to serve mail. I have been happy with Exim and it has served me reliably. Yet I don't often hear its name used as an alternative to Sendmail. Usually I hear Postfix or Qmail. Though I have

Re: Mailserver HDD organization

2002-01-17 Thread eim
mmh, conclusions... ...I think I'm going to use exim. exim runs fine with Mailman for the lists, has spam filtering... and is avaiable as binary and completly free under Debian Potato 2.2r5. Anyway I'll consider qmail for future upgrades. Thanks for all replays, have a nice day... -Ivo On

Re: Mailserver HDD organization

2002-01-17 Thread Alvin Oga
hi ivo for partitions... - i prefer smallest/reasonable / partitions ( 64M or 128M etc ) - getting into single user mode is extremely important - /var/spool/{mail,mqueue} in a mail server should be its own huge partitions ??? - /home doesnt

Re: Mailserver HDD organization

2002-01-17 Thread J C Lawrence
On 17 Jan 2002 07:06:37 +0100 eim [EMAIL PROTECTED] wrote: I was thinking about a partition for /, one for boot, one for /var/spool/mail and some other important system parts. MTAs are inherently disk IO bound. As such, if possible devote a spindle to /var/spool/mail and do what you can to

Re: Mailserver HDD organization

2002-01-17 Thread J C Lawrence
On Thu, 17 Jan 2002 09:23:02 -0500 Dave Kline [EMAIL PROTECTED] wrote: I know, I know, use what you feel comfortable with, but how comfortable are you guys with Exim? -A. Dave Very. I like, and use both Exim and Postfix in deployed production systems. -- J C Lawrence

Set UID=0

2002-01-17 Thread Pat Moffitt
Some of the recent upgrades have the executables set UID=0 where they were not in the past. This includes (but may not be limited to) the following: at smbmnt smbmount smbumount Do these really need to be set UID=0? Is this a security concern? Thanks, Pat Moffitt MIS Administrator Western

Re: Mailserver HDD organization

2002-01-17 Thread Federico Grau
On Sun, Nov 25, 2001 at 11:04:45PM +0100, [EMAIL PROTECTED] wrote: - Original Message - From: eim [EMAIL PROTECTED] To: Debian-Security List [EMAIL PROTECTED] Sent: Thursday, January 17, 2002 7:06 AM Subject: Mailserver HDD organization Hallo to everyone on the Debian Sec.

Re: Mailserver HDD organization

2002-01-17 Thread Emmanuel Lacour
On Thu, Jan 17, 2002 at 09:16:05AM -0800, J C Lawrence wrote: On 17 Jan 2002 07:06:37 +0100 eim [EMAIL PROTECTED] wrote: I was thinking about a partition for /, one for boot, one for /var/spool/mail and some other important system parts. MTAs are inherently disk IO bound. As such,

ping6

2002-01-17 Thread Répási Tibor
Hy! What is /bin/ping6 ??? Is it normal that /bin/ping and /bin/ping6 has setuid to root? regards, Tibor Repasi -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]

Re: ping6

2002-01-17 Thread Noah L. Meyerhans
On Thu, Jan 17, 2002 at 08:56:01PM +0100, Répási Tibor wrote: What is /bin/ping6 ??? Is it normal that /bin/ping and /bin/ping6 has setuid to root? Ping6 is the IPv6 version of ping. It is normal that they have setuid turned on. Othwerise, non-root users can not open the ICMP socket

Re: ping6

2002-01-17 Thread Dave Kline
Ping for IPv6. You should see other utilities that end with 6 as well. -A. Dave Répási Tibor wrote: Hy! What is /bin/ping6 ??? Is it normal that /bin/ping and /bin/ping6 has setuid to root? regards, Tibor Repasi -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a

allowing users to change passwords

2002-01-17 Thread martin f krafft
i need to provide a way for my users to change their password on my machines. however, most of them are too stupid for the console. so i played with poppassd, and it might end up being my option, but today i had another idea. so without having given it much though, i'll ask you: what would speak

Re: allowing users to change passwords

2002-01-17 Thread Wichert Akkerman
Previously martin f krafft wrote: what would speak against setting the user's login shell to /usr/bin/passwd? Nothing, works just fine. It might be a bit confusing for users though since they will have to enter their original password twice as well. Wichert. --

Re: allowing users to change passwords

2002-01-17 Thread Bryan Andersen
Wichert Akkerman wrote: Previously martin f krafft wrote: what would speak against setting the user's login shell to /usr/bin/passwd? Nothing, works just fine. It might be a bit confusing for users though since they will have to enter their original password twice as well. You may

Re: allowing users to change passwords

2002-01-17 Thread Steve Mickeler
Why bother having them go through the hassle of loading an applet which might not work ( not that Ive ever seen it not work ). If they are using mindterm, then they are already in a browser, which means you might as well just have them use a form via ssl to change their password via poppassd.

Re: allowing users to change passwords

2002-01-17 Thread martin f krafft
also sprach Steve Mickeler [EMAIL PROTECTED] [2002.01.18.0010 +0100]: If they are using mindterm, then they are already in a browser, which means you might as well just have them use a form via ssl to change their password via poppassd. yes, but did you see my recent posts on poppassd and its

Exim mail Problem

2002-01-17 Thread Daniel J. Rychlik
Dear Debian Guruz, My debian server is acting funny. I did some searching around and greped for anomolies in my log files. I have noticed that exim mail is showing a message frozen in the mainlog file. 2002-01-17 18:38:02 16L9VL -0001OX-00 Message is frozen End queue run: pid=17620 Im

Re: Mailserver HDD organization

2002-01-17 Thread Andrew Tait
I use exim to serve 4500+users, on a Pentium 133. Until a UPS failure recently, is had an uptime of 330+ days (dammit, I really wanted to get to 365!!) The only time exim broke down was when I stuffed up the configuration. Exim does everything that I want, RBL, anti-virus with the exiscan

Re: Exim mail Problem

2002-01-17 Thread Andrew Tait
Try running mailq, to get a list of messages currently in the queue. Try doing an "exigrep 16L9VL-0001OX-00 mainlog" to try and find out why the message is frozen. You will probably have to search back through your logs if its been there a while. And here is a little script I use a work to

Re: Help with Firewall section in the Debian Security Manual

2002-01-17 Thread Jor-el
On Wed, 16 Jan 2002, Javier Fernández-Sanguino Peña wrote: Both should point to other sites regarding general info (what a firewall is? what does netfilter do?) and not reproduce it (terrible waste of time and difficult to maintain up to date). Javier, Is it really wise to talk

Re: Mailserver HDD organization

2002-01-17 Thread Alberto Gonzalez Iniesta
On Sun, Nov 25, 2001 at 11:04:45PM +0100, [EMAIL PROTECTED] wrote: please use qmail, its really the securest MTA you can get. please use postfix, since it's as secure as qmail and has a better license -- Alberto Gonzalez Iniesta | They that give up essential liberty [EMAIL PROTECTED]

Re: Mailserver HDD organization

2002-01-17 Thread Giacomo Mulas
On Thu, 17 Jan 2002, Alberto Gonzalez Iniesta wrote: On Sun, Nov 25, 2001 at 11:04:45PM +0100, [EMAIL PROTECTED] wrote: please use qmail, its really the securest MTA you can get. please use postfix, since it's as secure as qmail and has a better license please, use whatever good MTA

Re: Mailserver HDD organization

2002-01-17 Thread Samu
On Thu, Jan 17, 2002 at 12:22:07PM +0100, Alberto Gonzalez Iniesta wrote: On Sun, Nov 25, 2001 at 11:04:45PM +0100, [EMAIL PROTECTED] wrote: please use qmail, its really the securest MTA you can get. please use postfix, since it's as secure as qmail and has a better license we could

Re: Mailserver HDD organization

2002-01-17 Thread Gerrit Kilian
Hi there On the subject of MTA's, is there no groupware like Lotus Domino or exchance server available on Debian? Personaly I feel all Linux MTA's are very good. Is it not just a matter of personal choice? Kind Regards Gerrit

Re: Mailserver HDD organization

2002-01-17 Thread Dave Kline
Though I have supported Sendmail in Big-Iron environments, I am now using the Default Debian Exim to serve mail. I have been happy with Exim and it has served me reliably. Yet I don't often hear its name used as an alternative to Sendmail. Usually I hear Postfix or Qmail. Though I have used

RE: Mailserver HDD organization

2002-01-17 Thread Ronny Adsetts
I know, I know, use what you feel comfortable with, but how comfortable are you guys with Exim? I use Exim here for a low throughput small office mail server, grabbing aliases from LDAP. I'm very happy with it - the documentation is extensive, and the configuration is a doddle. The Exim user

Re: Mailserver HDD organization

2002-01-17 Thread eim
mmh, conclusions... ...I think I'm going to use exim. exim runs fine with Mailman for the lists, has spam filtering... and is avaiable as binary and completly free under Debian Potato 2.2r5. Anyway I'll consider qmail for future upgrades. Thanks for all replays, have a nice day... -Ivo On

Re: Mailserver HDD organization

2002-01-17 Thread Alvin Oga
hi ivo for partitions... - i prefer smallest/reasonable / partitions ( 64M or 128M etc ) - getting into single user mode is extremely important - /var/spool/{mail,mqueue} in a mail server should be its own huge partitions ??? - /home doesnt mean

Re: Mailserver HDD organization

2002-01-17 Thread J C Lawrence
On 17 Jan 2002 07:06:37 +0100 eim [EMAIL PROTECTED] wrote: I was thinking about a partition for /, one for boot, one for /var/spool/mail and some other important system parts. MTAs are inherently disk IO bound. As such, if possible devote a spindle to /var/spool/mail and do what you can to

Re: Mailserver HDD organization

2002-01-17 Thread J C Lawrence
On Thu, 17 Jan 2002 09:23:02 -0500 Dave Kline [EMAIL PROTECTED] wrote: I know, I know, use what you feel comfortable with, but how comfortable are you guys with Exim? -A. Dave Very. I like, and use both Exim and Postfix in deployed production systems. -- J C Lawrence

Re: ping6

2002-01-17 Thread Dave Kline
Ping for IPv6. You should see other utilities that end with 6 as well. -A. Dave Répási Tibor wrote: Hy! What is /bin/ping6 ??? Is it normal that /bin/ping and /bin/ping6 has setuid to root? regards, Tibor Repasi

allowing users to change passwords

2002-01-17 Thread martin f krafft
i need to provide a way for my users to change their password on my machines. however, most of them are too stupid for the console. so i played with poppassd, and it might end up being my option, but today i had another idea. so without having given it much though, i'll ask you: what would speak

Re: allowing users to change passwords

2002-01-17 Thread Steve Mickeler
Why bother having them go through the hassle of loading an applet which might not work ( not that Ive ever seen it not work ). If they are using mindterm, then they are already in a browser, which means you might as well just have them use a form via ssl to change their password via poppassd.

Re: allowing users to change passwords

2002-01-17 Thread martin f krafft
also sprach Steve Mickeler [EMAIL PROTECTED] [2002.01.18.0010 +0100]: If they are using mindterm, then they are already in a browser, which means you might as well just have them use a form via ssl to change their password via poppassd. yes, but did you see my recent posts on poppassd and its

Exim mail Problem

2002-01-17 Thread Daniel J. Rychlik
Dear Debian Guruz, My debian server is acting funny. I did some searching around and greped for anomolies in my log files. I have noticed that exim mail is showing a message frozen in the mainlog file. 2002-01-17 18:38:02 16L9VL -0001OX-00 Message is frozen End queue run: pid=17620 Im

Re: Mailserver HDD organization

2002-01-17 Thread Andrew Tait
I use exim to serve 4500+users, on a Pentium 133. Until a UPS failure recently, is had an uptime of 330+ days (dammit, I really wanted to get to 365!!) The only time exim broke down was when I stuffed up the configuration. Exim does everything that I want, RBL, anti-virus with the exiscan

Re: Exim mail Problem

2002-01-17 Thread Andrew Tait
Try running mailq, to get a list of messages currently in the queue. Try doing an "exigrep 16L9VL-0001OX-00 mainlog" to try and find out why the message is frozen. You will probably have to search back through your logs if its been there a while. And here is a little script I use a work to

Re: Help with Firewall section in the Debian Security Manual

2002-01-17 Thread Jor-el
On Wed, 16 Jan 2002, Javier Fernández-Sanguino Peña wrote: Both should point to other sites regarding general info (what a firewall is? what does netfilter do?) and not reproduce it (terrible waste of time and difficult to maintain up to date). Javier, Is it really wise to