-----Original Message----- I suggest a distro call SME server available a http://contribs.org. We have a few of them working in small offices and homes and they are very reliable and quite feature full with an easy configuration browser interface. ClarkConnect is another that is reputed to fair well in that market
Enjoy From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: Monday, June 13, 2005 8:14 PM To: [email protected] Subject: clug-talk Digest, Vol 8, Issue 23 Send clug-talk mailing list submissions to [email protected] To subscribe or unsubscribe via the World Wide Web, visit http://clug.ca/mailman/listinfo/clug-talk_clug.ca or, via email, send a message with subject or body 'help' to [EMAIL PROTECTED] You can reach the person managing the list at [EMAIL PROTECTED] When replying, please edit your Subject line so it is more specific than "Re: Contents of clug-talk digest..." Today's Topics: 1. Advice - Installfest (CAMERON NIKITIUK) 2. Mail Problems (Shawn) 3. Re: Advice - Installfest (Shawn) 4. will go back to Libranet 3.0 ([EMAIL PROTECTED]) 5. Re: Mail Problems (Gustin Johnson) 6. Re: Mail Problems (Shawn) 7. Re: Mail Problems (Michael Gale) 8. Re: Mail Problems (Shawn) 9. Re: Mail Problems (Michael Gale) ---------------------------------------------------------------------- Message: 1 Date: Mon, 13 Jun 2005 14:19:54 -0600 From: CAMERON NIKITIUK <[EMAIL PROTECTED]> Subject: [clug-talk] Advice - Installfest To: [email protected] Message-ID: <[EMAIL PROTECTED]> Content-Type: text/plain; charset=us-ascii Hey All, I will be at the installfest on Saturday with at least one computer...maybe two. One is for a project at work and the other for home. Here is my question. I have an old 200Mhz system with a few GB hard drive. I think it only has 64 MB ram on it. I was thinking of making it into some sort of combo server box hosting things like web server, firewall, IDS machine, etc. Basically for screwing aorund on and testing things out. I haven't been able to find anymore ram for it so I think at this point my options with it are minimal. I may have a nother machine of the same caliber but with more ram that I could use as well. Can anyone suggest a good distro for what I want to do? I was thinking of something like Slackware or Debian or a variant of those. I have been using Red Hat derivatives at work and Suse at home so would like to expand my knowledge a bit. I don't need KDE or gnome on this machine but would be nice. I have heard excellent things about Xfce including the latest version having a kiosk mode. I was also thinking of Linspire, Ubuntu or Xandros but I don't think I could shoehorn them into eith of these boxes. On another note...I have been e-mailing someone that I met off of another mailing list who needed a distribution. I told her a few things about Linux and such and she seems interested. I mentioned the iFest this wknd and she said she (and her kids) may try and attend. I will have an Ubuntu disk for her to try out on one of her 4 computers. Thanks in advance for any help or such you can offer. Cameron Any suggestions would be helpful. ------------------------------ Message: 2 Date: Mon, 13 Jun 2005 14:28:12 -0600 From: Shawn <[EMAIL PROTECTED]> Subject: [clug-talk] Mail Problems To: CLUG General <[email protected]> Message-ID: <[EMAIL PROTECTED]> Content-Type: text/plain; charset="us-ascii" Hi gang. I've been "away" for a while due to a problem with my email server. I've been able to receive mail, but could not send. I don't have this resolved yet, but at least have a work around for now. I'm looking for assistance on this though if anyone is up to it.... The problems started when I did an upgrade of my system (emerge world on my gentoo server). In the process it updated netqmail to r15 (from r13), and courier imap to 4.0.1. Apparently both of these made changes to how smtp authentication was done. My mail system is setup to handle virtual domains/users with qmail, courier-imap, and vpopmail, and ssl to encrypt the authentication process. This was fully operational before this upgrade. I'm using Kmail on my workstation as my mail client. When I try to send mail, I get the following error message from KMail: Your SMTP server claims to support TLS, but negotiation was unsuccessful. If I disable TLS and try just plain authentication, I receive a message indicating "Your SMTP server does not support PLAIN." So, the problem seems to be in the authentication end of things, and not with the mail server per se. But, I've exhausted my knowledge on this topic (and what I could find on Google as well - though I might have the wrong search terms). Any tips are muchly appreciated. I can post any of the config files if needed. In the meantime, I set up a basic postfix server on a different box that can handle my outgoing mail until I get this resolved.... Shawn ------------------------------ Message: 3 Date: Mon, 13 Jun 2005 14:37:38 -0600 From: Shawn <[EMAIL PROTECTED]> Subject: Re: [clug-talk] Advice - Installfest To: CLUG General <[email protected]> Message-ID: <[EMAIL PROTECTED]> Content-Type: text/plain; charset="iso-8859-1" With those specs, a graphical interface will be slow. You'll be better off if you can avoid a gui. On that note, any distro that can do a minimal install (i.e. core linux install, using command line interface) will do the trick for you. I have Suse 9.2 running like this on a client's site for the sole purpose of running Apache as a web gateway service. This is also how I have my own Gentoo server's configured (no gui that is). So it comes down to what you feel comfortable with. If this is simply for playing/learning, then pick a distro you don't have a lot of experience with and try that out. If this is for production use, then stick with a distro you have experience with. With regards to your contact, she is more than welcome to attend. The more the merrier! :) For myself, I'll have two boxes at the installfest - one to get Suse 9.3 installed on it (this is CLUG's computer), and my laptop where I'll be installing Gentoo in a dual boot environment. Shawn On Monday 13 June 2005 14:19, CAMERON NIKITIUK wrote: > Here is my question. I have an old 200Mhz system with a few GB hard drive. > I think it only has 64 MB ram on it. I was thinking of making it into > some sort of combo server box hosting things like web server, firewall, IDS > machine, etc. Basically for screwing aorund on and testing things out. I > haven't been able to find anymore ram for it so I think at this point my > options with it are minimal. I may have a nother machine of the same > caliber but with more ram that I could use as well. > > Can anyone suggest a good distro for what I want to do? I was thinking of > something like Slackware or Debian or a variant of those. I have been > using Red Hat derivatives at work and Suse at home so would like to expand > my knowledge a bit. I don't need KDE or gnome on this machine but would be > nice. I have heard excellent things about Xfce including the latest > version having a kiosk mode. I was also thinking of Linspire, Ubuntu or > Xandros but I don't think I could shoehorn them into eith of these boxes. > > On another note...I have been e-mailing someone that I met off of another > mailing list who needed a distribution. I told her a few things about > Linux and such and she seems interested. I mentioned the iFest this wknd > and she said she (and her kids) may try and attend. I will have an Ubuntu > disk for her to try out on one of her 4 computers. > > Thanks in advance for any help or such you can offer. > > Cameron > > Any suggestions would be helpful. ------------------------------ Message: 4 Date: Mon, 13 Jun 2005 14:46:51 -0700 From: [EMAIL PROTECTED] Subject: [clug-talk] will go back to Libranet 3.0 To: [email protected] Message-ID: <[EMAIL PROTECTED]> Content-Type: text/plain; charset=ISO-8859-1 Hello All, I installed SimplyMEPIS-3.3.1 successfully on my hard drive. I had some trouble configuring Kmail, but that is not the reason I am going back to Libranet 3.0. When I installed Mepis the Libranet installation was clobbered, which would have been all right if I could have booted into windows 95. But at least libranet detected windows 95 on drive c. Also the only mail client available in Mepis was Kmail. I had a choice of both Kmail and Mozilla Thunderbird in Libranet. I am sure glad that I did not ask for my money back for Libranet. I would like to have access to a few more applications like Thunderbird. I do not have time to reinstall Libranet 3.0 tonight or tomorrow before 18:00. So I am using Mozilla firefox and web mail to do my email and firefox for browsing. I am sending this message with Mozilla firefox in Mepis through web mail. One thing about SimplyMEPIS is that it is an easier install. But I am going back to Libranet 3.0 on Tuesday. And I had a lot of fun trying out a new distribution. So all is not lost. I am going to a meeting tonight and will be away from home tomorrow until supper time. Regards, Michael Walters ------------------------------ Message: 5 Date: Mon, 13 Jun 2005 16:57:52 -0600 From: Gustin Johnson <[EMAIL PROTECTED]> Subject: Re: [clug-talk] Mail Problems To: CLUG General <[email protected]> Message-ID: <[EMAIL PROTECTED]> Content-Type: text/plain; charset="us-ascii" On Mon, 2005-06-13 at 14:28 -0600, Shawn wrote: > Hi gang. I've been "away" for a while due to a problem with my email server. > I've been able to receive mail, but could not send. I don't have this > resolved yet, but at least have a work around for now. I'm looking for > assistance on this though if anyone is up to it.... > > The problems started when I did an upgrade of my system (emerge world on my > gentoo server). In the process it updated netqmail to r15 (from r13), and > courier imap to 4.0.1. Apparently both of these made changes to how smtp > authentication was done. My mail system is setup to handle virtual > domains/users with qmail, courier-imap, and vpopmail, and ssl to encrypt the > authentication process. This was fully operational before this upgrade. I'm > using Kmail on my workstation as my mail client. > > When I try to send mail, I get the following error message from KMail: > > Your SMTP server claims to support TLS, but negotiation was unsuccessful. > This is an encryption problem which happens before authentication. > If I disable TLS and try just plain authentication, I receive a message > indicating "Your SMTP server does not support PLAIN." > This is an authentication problem. The error seems to indicate that SMTP is not configured for PLAIN text authentication. If you are using username and password auth for your smtp server then you need to enable PLAIN (ie plain text) in your mail server (MTA). This should not be a security problem as long as TLS is working, which encrypts the plain text username and password. How were you authenticating SMTP before? Did users have local accounts (eg /etc/passwd) or did you backend into SQL or LDAP? I can try to have a look at your configs but I run exim (MTA) with cyrus (POP, POPS, IMAP, IMAPS) so I can not make any promises :) You can send me the configs offlist. I currently use exim and cyrus to do what it sounds like you are doing. You don't by any chance have a copy of your configs from before the upgrade do you? If you do a diff between them it might hold the key. If you can receive email then courier is likely working and you need to focus on qmail which handles the SMTP stuff. Cheers, > So, the problem seems to be in the authentication end of things, and not with > the mail server per se. But, I've exhausted my knowledge on this topic (and > what I could find on Google as well - though I might have the wrong search > terms). > > Any tips are muchly appreciated. I can post any of the config files if > needed. In the meantime, I set up a basic postfix server on a different box > that can handle my outgoing mail until I get this resolved.... > > Shawn -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 189 bytes Desc: This is a digitally signed message part Url : /pipermail/clug-talk_clug.ca/attachments/20050613/2627c740/attachment-00 01.bin ------------------------------ Message: 6 Date: Mon, 13 Jun 2005 19:30:48 -0600 From: Shawn <[EMAIL PROTECTED]> Subject: Re: [clug-talk] Mail Problems To: CLUG General <[email protected]> Message-ID: <[EMAIL PROTECTED]> Content-Type: text/plain; charset="iso-8859-1" On Monday 13 June 2005 16:57, Gustin Johnson wrote: > > When I try to send mail, I get the following error message from KMail: > > > > Your SMTP server claims to support TLS, but negotiation was unsuccessful. > > This is an encryption problem which happens before authentication. > > > If I disable TLS and try just plain authentication, I receive a message > > indicating "Your SMTP server does not support PLAIN." > > This is an authentication problem. The error seems to indicate that > SMTP is not configured for PLAIN text authentication. If you are using > username and password auth for your smtp server then you need to enable > PLAIN (ie plain text) in your mail server (MTA). This should not be a > security problem as long as TLS is working, which encrypts the plain > text username and password. > > How were you authenticating SMTP before? Did users have local accounts > (eg /etc/passwd) or did you backend into SQL or LDAP? Thanks Gustin. I would prefer to keep the encryption in place, so guess I should be focusing on the encryption problem. My configuration matches the one suggested on this guide: http://www.gentoo.org/doc/en/qmail-howto.xml - up to, but not including setting up Horde. I decided to try some different webmail clients and settled on E-Groupware. But the problem is occuring before this... I'm wondering if maybe openssl got updated on me without me noticing, or courierauth. If it helps, I re-did the steps indicated in the link above a couple of times, and checked all the settings, but that still didn't help out. Um... I'm not sure which config files are pertinent for encryption/authentication. I'll take a look at what I have and send you the pertinent files off list. Let me know if there's any particular file you'd like to see. Shawn ------------------------------ Message: 7 Date: Mon, 13 Jun 2005 19:40:34 -0600 From: Michael Gale <[EMAIL PROTECTED]> Subject: Re: [clug-talk] Mail Problems To: CLUG General <[email protected]> Message-ID: <[EMAIL PROTECTED]> Content-Type: text/plain; format=flowed; charset=ISO-8859-1 Hello, What do the log files say ? Have you tried enabling debugging ? Michael Shawn wrote: > On Monday 13 June 2005 16:57, Gustin Johnson wrote: > >>>When I try to send mail, I get the following error message from KMail: >>> >>>Your SMTP server claims to support TLS, but negotiation was unsuccessful. >> >>This is an encryption problem which happens before authentication. >> >> >>>If I disable TLS and try just plain authentication, I receive a message >>>indicating "Your SMTP server does not support PLAIN." >> >>This is an authentication problem. The error seems to indicate that >>SMTP is not configured for PLAIN text authentication. If you are using >>username and password auth for your smtp server then you need to enable >>PLAIN (ie plain text) in your mail server (MTA). This should not be a >>security problem as long as TLS is working, which encrypts the plain >>text username and password. >> >>How were you authenticating SMTP before? Did users have local accounts >>(eg /etc/passwd) or did you backend into SQL or LDAP? > > > Thanks Gustin. > > I would prefer to keep the encryption in place, so guess I should be focusing > on the encryption problem. > > My configuration matches the one suggested on this guide: > http://www.gentoo.org/doc/en/qmail-howto.xml > - up to, but not including setting up Horde. I decided to try some different > webmail clients and settled on E-Groupware. But the problem is occuring > before this... > > I'm wondering if maybe openssl got updated on me without me noticing, or > courierauth. If it helps, I re-did the steps indicated in the link above a > couple of times, and checked all the settings, but that still didn't help > out. > > Um... I'm not sure which config files are pertinent for > encryption/authentication. I'll take a look at what I have and send you the > pertinent files off list. Let me know if there's any particular file you'd > like to see. > > Shawn > > _______________________________________________ > clug-talk mailing list > [email protected] > http://clug.ca/mailman/listinfo/clug-talk_clug.ca > Mailing List Guidelines (http://clug.ca/ml_guidelines.php) > **Please remove these lines when replying ------------------------------ Message: 8 Date: Mon, 13 Jun 2005 20:05:28 -0600 From: Shawn <[EMAIL PROTECTED]> Subject: Re: [clug-talk] Mail Problems To: CLUG General <[email protected]> Message-ID: <[EMAIL PROTECTED]> Content-Type: text/plain; charset="iso-8859-1" On Monday 13 June 2005 19:40, Michael Gale wrote: > Hello, > > What do the log files say ? Have you tried enabling debugging ? > The only helpful log entries I can find are in /var/log/qmail/qmail-smtp/current (using meta-log): @4000000042ae3abc23105374 tcpserver: status: 1/20 @4000000042ae3abc23193cb4 tcpserver: pid 18968 from 192.168.0.20 @4000000042ae3abc2333313c tcpserver: ok 18968 :::ffff:192.168.0.5:25 :::ffff:192.168.0.20::33216 4000000042ae3abc23c952d4 18968 > 220 srv.open2space.com ESMTP 4000000042ae3abc23e60294 18968 < EHLO [192.168.0.20] 4000000042ae3abc23e90034 18968 > 250-srv.open2space.com 4000000042ae3abc23e913bc 18968 > 250-STARTTLS 4000000042ae3abc23e9fa34 18968 > 250-AUTH LOGIN CRAM-MD5 PLAIN 4000000042ae3abc23ea0dbc 18968 > 250-AUTH=LOGIN CRAM-MD5 PLAIN 4000000042ae3abc23ea1d5c 18968 > 250-SIZE 0 4000000042ae3abc23ea2cfc 18968 > 250-PIPELINING 4000000042ae3abc23ea38b4 18968 > 250 8BITMIME 4000000042ae3abc2411c5b4 18968 < STARTTLS 4000000042ae3abc243b2f44 18968 > 220 ready for tls @4000000042ae3abc24b08e24 18968 < WSB�:�o�s5�Q�h�)��o�]2�oJ �V�, @4000000042ae3abc24b0b14c 18968 < 98532/fedcba` + @4000000042ae3abc24d0a4fc tcpserver: end 18968 status 256 @4000000042ae3abc24d0bc6c tcpserver: status: 0/20 @4000000042ae3abc24d1cddc 18968 > [EOF] This is after enabling the recordio option so I could see the full smtp conversation. Notice the third last line - exit with status 256. The only tip I've been able to find on this indicates that the process could not complete properly..... Shawn ------------------------------ Message: 9 Date: Mon, 13 Jun 2005 21:18:25 -0600 From: Michael Gale <[EMAIL PROTECTED]> Subject: Re: [clug-talk] Mail Problems To: CLUG General <[email protected]> Message-ID: <[EMAIL PROTECTED]> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Hello, I took a quick look at the url you provided earlier, have you tried checking the cert ? Also when you did the update are you sure you had set "USE="maildir ssl imap mysql" ? Michael Shawn wrote: > On Monday 13 June 2005 19:40, Michael Gale wrote: > >>Hello, >> >> What do the log files say ? Have you tried enabling debugging ? >> > > > The only helpful log entries I can find are > in /var/log/qmail/qmail-smtp/current (using meta-log): > > @4000000042ae3abc23105374 tcpserver: status: 1/20 > @4000000042ae3abc23193cb4 tcpserver: pid 18968 from 192.168.0.20 > @4000000042ae3abc2333313c tcpserver: ok > 18968 :::ffff:192.168.0.5:25 :::ffff:192.168.0.20::33216 > 4000000042ae3abc23c952d4 18968 > 220 srv.open2space.com ESMTP > 4000000042ae3abc23e60294 18968 < EHLO [192.168.0.20] > 4000000042ae3abc23e90034 18968 > 250-srv.open2space.com > 4000000042ae3abc23e913bc 18968 > 250-STARTTLS > 4000000042ae3abc23e9fa34 18968 > 250-AUTH LOGIN CRAM-MD5 PLAIN > 4000000042ae3abc23ea0dbc 18968 > 250-AUTH=LOGIN CRAM-MD5 PLAIN > 4000000042ae3abc23ea1d5c 18968 > 250-SIZE 0 > 4000000042ae3abc23ea2cfc 18968 > 250-PIPELINING > 4000000042ae3abc23ea38b4 18968 > 250 8BITMIME > 4000000042ae3abc2411c5b4 18968 < STARTTLS > 4000000042ae3abc243b2f44 18968 > 220 ready for tls > @4000000042ae3abc24b08e24 18968 < WSB�:�o�s5�Q�h�)��o�]2�oJ �V�, > @4000000042ae3abc24b0b14c 18968 < 98532/fedcba` + > @4000000042ae3abc24d0a4fc tcpserver: end 18968 status 256 > @4000000042ae3abc24d0bc6c tcpserver: status: 0/20 > @4000000042ae3abc24d1cddc 18968 > [EOF] > > This is after enabling the recordio option so I could see the full smtp > conversation. Notice the third last line - exit with status 256. The only > tip I've been able to find on this indicates that the process could not > complete properly..... > > Shawn > > _______________________________________________ > clug-talk mailing list > [email protected] > http://clug.ca/mailman/listinfo/clug-talk_clug.ca > Mailing List Guidelines (http://clug.ca/ml_guidelines.php) > **Please remove these lines when replying ------------------------------ _______________________________________________ clug-talk mailing list [email protected] http://clug.ca/mailman/listinfo/clug-talk_clug.ca End of clug-talk Digest, Vol 8, Issue 23 **************************************** -- No virus found in this incoming message. Checked by AVG Anti-Virus. Version: 7.0.323 / Virus Database: 267.6.9 - Release Date: 6/11/2005 -- No virus found in this outgoing message. Checked by AVG Anti-Virus. Version: 7.0.323 / Virus Database: 267.7.2 - Release Date: 6/14/2005 _______________________________________________ clug-talk mailing list [email protected] http://clug.ca/mailman/listinfo/clug-talk_clug.ca Mailing List Guidelines (http://clug.ca/ml_guidelines.php) **Please remove these lines when replying
