RE: [qmailtoaster] Re: Webmail SSL

2010-06-06 Thread Eric Broch
/ example2.com/webmail redirects to https://www.example2.com/webmail/ And so on... Eric -Original Message- From: Maxwell Smart [mailto:c...@yother.com] Sent: Saturday, June 05, 2010 9:35 AM To: qmailtoaster-list@qmailtoaster.com Subject: RE: [qmailtoaster] Re: Webmail SSL OK, when I meant

Re: [qmailtoaster] Re: Webmail SSL

2010-06-06 Thread Maxwell Smart
to https://www.example2.com/webmail/ And so on... Eric -Original Message- From: Maxwell Smart [mailto:c...@yother.com] Sent: Saturday, June 05, 2010 9:35 AM To: qmailtoaster-list@qmailtoaster.com Subject: RE: [qmailtoaster] Re: Webmail SSL OK, when I meant TLD I meant example.com

RE: [qmailtoaster] Re: Webmail SSL

2010-06-06 Thread Eric Broch
CJ, Can one use an IP certificate for a 'name' based virtual domain? Eric -Original Message- From: Maxwell Smart [mailto:c...@yother.com] Sent: Sunday, June 06, 2010 2:41 PM To: qmailtoaster-list@qmailtoaster.com Subject: Re: [qmailtoaster] Re: Webmail SSL OK, that makes sense

RE: [qmailtoaster] Re: Webmail SSL

2010-06-06 Thread Eric Broch
Eric S., Yes! I didn't think it was possible. Has anyone gotten NSI to work? Eric B. -Original Message- From: Eric Shubert [mailto:e...@shubes.net] Sent: Sunday, June 06, 2010 8:07 PM To: qmailtoaster-list@qmailtoaster.com Subject: [qmailtoaster] Re: Webmail SSL Right. This is what

Re: [qmailtoaster] Re: Webmail SSL

2010-06-06 Thread Scott Hughes
On 6/6/10 10:00 PM, Eric Shubert wrote: Scott Hughes wrote: Gottcha. Where can one look at this? I can't seem to find it via Google. o.O On 6/6/10 9:06 PM, Eric Shubert wrote: Right. This is what CJ's trying to overcome by using NSI, which is a relatively recent enhancement to the TLS

RE: [qmailtoaster] Re: Webmail SSL

2010-06-05 Thread Eric Broch
: Maxwell Smart [mailto:c...@yother.com] Sent: Friday, June 04, 2010 4:43 PM To: qmailtoaster-list@qmailtoaster.com Subject: Re: [qmailtoaster] Re: Webmail SSL @Eric Broch So are all of your current secure sites subdomains? ie https://www.example.com/example or TLD https://www.example.com

RE: [qmailtoaster] Re: Webmail SSL

2010-06-05 Thread Maxwell Smart
my clients were simply adding an exception when going into webmail for a particular sub-domain. Eric B. -Original Message- From: Maxwell Smart [mailto:c...@yother.com] Sent: Friday, June 04, 2010 4:43 PM To: qmailtoaster-list@qmailtoaster.com Subject: Re: [qmailtoaster] Re: Webmail SSL

Re: [qmailtoaster] Re: Webmail SSL

2010-06-04 Thread Scott Hughes
To: qmailtoaster-list@qmailtoaster.com Subject: Re: [qmailtoaster] Re: Webmail SSL Eric, Have you been successful in securing more than one site? CJ Quoting Eric Brochebr...@whitehorsetc.com: Maxwell Smart wrote: I realize that it's a bit of a hack and I don't like it, but I cannot get it to work

RE: [qmailtoaster] Re: Webmail SSL

2010-06-04 Thread Maxwell Smart
Subject: Re: [qmailtoaster] Re: Webmail SSL Eric, Have you been successful in securing more than one site? CJ Quoting Eric Broch ebr...@whitehorsetc.com: Maxwell Smart wrote: I realize that it's a bit of a hack and I don't like it, but I cannot get it to work correctly otherwise. I just tried your

RE: [qmailtoaster] Re: Webmail SSL

2010-06-04 Thread Eric Broch
@qmailtoaster.com Subject: RE: [qmailtoaster] Re: Webmail SSL Eric, Sounds like the exact same configuration as mine. SNI is Server Name Includes and it allows multiple secure connections with a single IP. I am having trouble getting mine to work. Do you use multiple certificates? One for each top

Re: [qmailtoaster] Re: Webmail SSL

2010-06-04 Thread Maxwell Smart
, June 04, 2010 9:12 AM To: qmailtoaster-list@qmailtoaster.com Subject: RE: [qmailtoaster] Re: Webmail SSL Eric, Sounds like the exact same configuration as mine. SNI is Server Name Includes and it allows multiple secure connections with a single IP. I am having trouble getting mine to work

Re: [qmailtoaster] Re: Webmail SSL

2010-06-04 Thread Maxwell Smart
, 2010 6:05 PM To: qmailtoaster-list@qmailtoaster.com Subject: Re: [qmailtoaster] Re: Webmail SSL Eric, Have you been successful in securing more than one site? CJ Quoting Eric Broch ebr...@whitehorsetc.com: Maxwell Smart wrote: I realize that it's a bit of a hack and I

Re: [qmailtoaster] Re: Webmail SSL

2010-06-04 Thread George Varagas
: Friday, June 04, 2010 9:12 AM To: qmailtoaster-list@qmailtoaster.com Subject: RE: [qmailtoaster] Re: Webmail SSL Eric, Sounds like the exact same configuration as mine. SNI is Server Name Includes and it allows multiple secure connections with a single IP. I am having trouble getting mine

Re: [qmailtoaster] Re: Webmail SSL

2010-06-04 Thread George Varagas
AM To: qmailtoaster-list@qmailtoaster.com Subject: RE: [qmailtoaster] Re: Webmail SSL Eric, Sounds like the exact same configuration as mine. SNI is Server Name Includes and it allows multiple secure connections with a single IP. I am having trouble getting mine to work. Do you use

Re: [qmailtoaster] Re: Webmail SSL

2010-06-04 Thread Scott Hughes
past, try to find a way to implement it and was glad to see the tutorial posted here for it. Eric -Original Message- From: Maxwell Smart [mailto:c...@yother.com] Sent: Friday, June 04, 2010 9:12 AM To:qmailtoaster-list@qmailtoaster.com Subject: RE: [qmailtoaster] Re: Webmail SSL Eric

Re: [qmailtoaster] Re: Webmail SSL

2010-06-04 Thread George Varagas
- From: Maxwell Smart [mailto:c...@yother.com] Sent: Friday, June 04, 2010 9:12 AM To: qmailtoaster-list@qmailtoaster.com Subject: RE: [qmailtoaster] Re: Webmail SSL Eric, Sounds like the exact same configuration as mine. SNI is Server Name Includes and it allows multiple secure

Re: [qmailtoaster] Re: Webmail SSL

2010-06-03 Thread sysadmin
- Original Message - From: Maxwell Smart c...@yother.com To: qmailtoaster-list@qmailtoaster.com Sent: Wednesday, June 02, 2010 3:59 PM Subject: Re: [qmailtoaster] Re: Webmail SSL Post your httpd.conf file or mail it off list. On 06/02/2010 02:38 PM, sysadmin wrote: Sorry for the delay, been

Re: [qmailtoaster] Re: Webmail SSL

2010-06-03 Thread Maxwell Smart
: Maxwell Smart c...@yother.com To: qmailtoaster-list@qmailtoaster.com Sent: Wednesday, June 02, 2010 3:59 PM Subject: Re: [qmailtoaster] Re: Webmail SSL Post your httpd.conf file or mail it off list. On 06/02/2010 02:38 PM, sysadmin wrote: Sorry for the delay, been away from the office: I can

Re: [qmailtoaster] Re: Webmail SSL

2010-06-03 Thread Maxwell Smart
That's exactly where I am having problems and that's the only way I can get it to work. If I have the welcome.conf enabled it goes to the apache welcome page instead of redirecting and the log file says failed, reason: SSL connection required. If I disable the welcome.conf and include

Re: [qmailtoaster] Re: Webmail SSL

2010-06-03 Thread Maxwell Smart
It doesn't work with the variable either. Quoting Maxwell Smart c...@yother.com: That's exactly where I am having problems and that's the only way I can get it to work. If I have the welcome.conf enabled it goes to the apache welcome page instead of redirecting and the log file says

Re: [qmailtoaster] Re: Webmail SSL

2010-06-03 Thread Maxwell Smart
I realize that it's a bit of a hack and I don't like it, but I cannot get it to work correctly otherwise. I just tried your config and it didn't work either. You are using the webmail suffix where I am not. I am trying to get mail.myserver.com to work using SNI. I should be able to have

Re: [qmailtoaster] Re: Webmail SSL

2010-06-03 Thread sysadmin
/httpd/conf/qcontrol.conf - Original Message - From: Maxwell Smart c...@yother.com To: qmailtoaster-list@qmailtoaster.com Sent: Wednesday, June 02, 2010 3:59 PM Subject: Re: [qmailtoaster] Re: Webmail SSL Post your httpd.conf file or mail it off list. On 06/02/2010 02:38 PM, sysadmin

Re: [qmailtoaster] Re: Webmail SSL

2010-06-03 Thread Maxwell Smart
Yes, I am using Virtual hosts. I'll need to play with it more and I'll report back. My re direct issue is actually caused by the certificate it expects to see at http://mail.myserver.com re directing to https://mail.myserver.com If I go to http://mail.myserver.com/webmail it works

Re: [qmailtoaster] Re: Webmail SSL

2010-06-02 Thread sysadmin
- Original Message - *From:* Scott Hughes mailto:sonicscott9...@gmail.com *To:* qmailtoaster-list@qmailtoaster.com mailto:qmailtoaster-list@qmailtoaster.com *Sent:* Friday, May 28, 2010 10:18 PM *Subject:* Re: [qmailtoaster] Re: Webmail SSL CJ, Yes, those two

Re: [qmailtoaster] Re: Webmail SSL

2010-06-02 Thread Maxwell Smart
@qmailtoaster.com *Sent:* Friday, May 28, 2010 10:18 PM *Subject:* Re: [qmailtoaster] Re: Webmail SSL CJ, Yes, those two directives are doing what I need them to do. Thanks! Scott On May 28, 2010, at 11:12 PM, Maxwell Smart c...@yother.com mailto:c...@yother.com wrote

Re: [qmailtoaster] Re: Webmail SSL

2010-05-30 Thread sysadmin
*To:* qmailtoaster-list@qmailtoaster.com mailto:qmailtoaster-list@qmailtoaster.com *Sent:* Friday, May 28, 2010 10:18 PM *Subject:* Re: [qmailtoaster] Re: Webmail SSL CJ, Yes, those two directives are doing what I need them to do. Thanks! Scott On May 28, 2010

Re: [qmailtoaster] Re: Webmail SSL

2010-05-28 Thread Maxwell Smart
I have set up the Rewrite as suggested, but it does not redirect from http to https is only says forbidden. I can create a 403 redirect, but would rather set it up as a simple redirect. How is this done? While this will work for one domain or if the user knows that the master domain is the one

Re: [qmailtoaster] Re: Webmail SSL

2010-05-28 Thread Maxwell Smart
On 05/28/2010 09:52 AM, Eric Shubert wrote: Maxwell Smart wrote: I have set up the Rewrite as suggested, but it does not redirect from http to https is only says forbidden. I can create a 403 redirect, but would rather set it up as a simple redirect. How is this done? Hmmm. I have one

Re: [qmailtoaster] Re: Webmail SSL

2010-05-28 Thread Scott Hughes
CJ / Eric, How does one set up a redirect so that people automatically go to the secure area? My SSL setup is working, but only if I go directly there (https://mail.SERVERNAME.net). If I just do 'mail.SERVERNAME.net, it goes to the non-secure page. My setup is as follows: I have a symlink

Re: [qmailtoaster] Re: Webmail SSL

2010-05-28 Thread DNK
You could just do some sort of redirect for that domain IE with PHP or even javascript (but replies on hte browser then). On 2010-05-28, at 4:27 PM, Scott Hughes wrote: CJ / Eric, How does one set up a redirect so that people automatically go to the secure area? My SSL setup is

Re: [qmailtoaster] Re: Webmail SSL

2010-05-28 Thread Maxwell Smart
Add these two lines to the virtual server. SSLRequireSSL ErrorDocument 403 https://mail.servername.net There is a way to do a simple redirect, but I haven't played with it and can't seem to get it to work as desired. I am told it has to do with timeout. You set the META to timeout and

Re: [qmailtoaster] Re: Webmail SSL

2010-05-28 Thread Scott Hughes
CJ, I'm not getting any 403 errors. Would this still apply? I'm just looking to make it so that when one of my users goes to mail.SERVERNAME.net' they get the SSL pages. Thanks, Scott On 5/28/10 6:50 PM, Maxwell Smart wrote: Add these two lines to the virtual server. SSLRequireSSL

Re: [qmailtoaster] Re: Webmail SSL

2010-05-28 Thread Maxwell Smart
When you include SSLRequireSSL and it's not an SSL connection it will give an error 403, using the ErrorDocument 403 https://mail.servername.net include it will then redirect the page to the https page. On 05/28/2010 06:26 PM, Scott Hughes wrote: CJ, I'm not getting any 403 errors. Would this

Re: [qmailtoaster] Re: Webmail SSL

2010-05-28 Thread Scott Hughes
Thanks Eric - It should be noted that I have my DNS MX record set to point simply to 'mail.SERVERNAME.net' for all of the domains instead of worrying about smtp.SERVERNAME.net, pop.SERVERNAME.net, imap.SERVERNAME.net, etc. So if a user types into their browser 'mail.SERVERNAME.net' they are

Re: [qmailtoaster] Re: Webmail SSL

2010-05-28 Thread Scott Hughes
CJ, I don't use virtual hosts on this server. While this QMT server does handle several domains, I have everyone pointed to the main domain name to access their mail (webmail and mail clients). In addition to keeping all the settings the same, I can get away with only needing one SSL

Re: [qmailtoaster] Re: Webmail SSL

2010-05-28 Thread Scott Hughes
I get to those by typing: www.SERVERNAME.net/admin-toaster (or /qcontrol or /qmailadmin). Those work just fine. It's the 'mail' on the front that is messing me up. Scott On 5/28/10 9:30 PM, Eric Shubert wrote: I'm not sure there is a best place. You might want create your own

Re: [qmailtoaster] Re: Webmail SSL

2010-05-28 Thread Scott Hughes
Also, I can still get to the webmail by using the standard 'www.SERVERNAME.net/webmail'. In this case, it does go to the SSL page via the SSLREQUIRESSL and the 403 https://mail.SERVERNAME.net/ directives. Scott On 5/28/10 9:30 PM, Eric Shubert wrote: I'm not sure there is a best place.

Re: [qmailtoaster] Re: Webmail SSL

2010-05-28 Thread Maxwell Smart
Scott, It sounds like you handle multiple domains, but only in a mail environment. In my case I have used the QMTISO as a base to my webservers. It has been an excellent base. You can put those in the httpd.conf file or as Eric suggested in a .conf file in your conf.d folder. Also, I can

Re: [qmailtoaster] Re: Webmail SSL

2010-05-28 Thread madmac
- Original Message - From: Scott Hughes To: qmailtoaster-list@qmailtoaster.com Sent: Friday, May 28, 2010 10:18 PM Subject: Re: [qmailtoaster] Re: Webmail SSL CJ, Yes, those two directives are doing what I need them to do. Thanks! Scott On May 28, 2010, at 11:12 PM

Re: [qmailtoaster] Re: Webmail SSL

2010-05-27 Thread Scott Hughes
Thanks for the reply Eric. I'm attempting to tighten down the server a bit. Every little bit helps these days! BTW, I don't recall starting any 'SM' page. Care to share the link? My age could be catching up with me! EEK! Scott On Thu, May 27, 2010 at 1:28 PM, Eric Shubert e...@shubes.net