Yes, I finally figured out what you meant - a badly configured (maybe
open-relay) server is a threat to all. Since I have a few already operational
with about 300 users in total, I think (;>) I am innocent of that (but who
knows, there are always new ways to get rooted...)
Anyway, I have decided to follow Robo Kupka's Mandrake-specific advice.
http://www.web-cyradm.org/pipermail/web-cyradm/2004-May/017393.html
If it works for Mandrake using packages, it should work on Ubuntu with
.debs and
apt-get. (heh)
My first problem? Installing MySql! I get this (this is on a Dapper 6.06 beta,
so I know I am looking for trouble) :
E: /var/cache/apt/archives/mysql-server-4.1_4.1.15-1ubuntu5_i386.deb:
subprocess
pre-installation script returned error exit status 1
which makes no sense! I have 75G free, I have installed the fileutils package
(so df returns accurate free space) and I can't get a meaningful error
diagnosis..the only thing I can think of is that I have mounted /var/tmp and
/tmp as noexec and nodev for security, but it can't be that..since I can
install anything else I want (like the cyrus packages, libpam-mysql, etc..
/Larry
Quoting Jan Scholten <[EMAIL PROTECTED]>:
No i meant:
I noticed a lot of people getting root server and having minimal (if
ever) knowledge of Linux.
They ask questions like (found exactly that way in a forum i visit)
How can i execute a program as another user:
->sudo!
I don't understand you..
-> man sudo
can you please give me an answer or point me to a copy and paste howto!
So I'm a bit pissed (sorry) about people wanting to save a buck or
two having zero knowledge and
crying for an howto..;-) Because this are the people getting their
box owned, doing DDos or hacking
of other (possibly mine) server.
Have you tried to setup ubuntu in a VM and configured it according
(perhaps not exactly) as the
debian setup? I have not heared of many cyrus installations, as most
setups i know use courier - and
so maybe there is none..
On my other servers I have implemented the minimal anti-spam technique of
subscribing to RBL lists only - nothing else, not even SpamAssassin.
Of course
that means that we get a lot of spam....
/Larry Honig
Quoting Jan Scholten <[EMAIL PROTECTED]>:
if you don't know what you are doing you should probably not try to
setup a potential spamserver ;-)
This should be no offence, but you may be held liable for
misconfigurations - go buy an admin
instead ;-)
--
Recht: ein anderes Wort für Macht.
Mit freundlichen Grüßen
Jan Scholten
mailto:[EMAIL PROTECTED]
_______________________________________________
This mailing list is hosted and supported
by bit-heads GmbH | http://www.bit-heads.ch
_______________________________________________
Web-cyradm mailing list
[email protected]
http://www.web-cyradm.org/mailman/listinfo/web-cyradm
----------------------------------------------------------------
This message was sent from the [EMAIL PROTECTED] Servers.
_______________________________________________
This mailing list is hosted and supported
by bit-heads GmbH | http://www.bit-heads.ch
_______________________________________________
Web-cyradm mailing list
[email protected]
http://www.web-cyradm.org/mailman/listinfo/web-cyradm