pop3 server,
Hello, which packaged with debian pop3d would you people recommend? which one do you use? apt-cache search pop3d on potato shows only gnu-pop3d and cyrus-pop3, cyrus ain't best choice - it's non-free, and as cyrus's manual says - it's designed for closed hosts, hosting only as e-mail server without users or other services. gnu-pop3d has been removed from debian due to it's instability. there is also cucipop, which somehow shows up only in woody, solid-pop3d which has virtuals support which I need, and there is ipopd which I think proved to be unsecure. as for now choice would be between solid and cuci, there is also problem of securing link - how to use ssl with pop3 daemons? and of course how would one host virtual e-mail domains (one IP, one UID) using those daemons - my current solution would be using PAM with radius or ldap. any helpfull hints? thanks, Eyck
Adding new network service - how?
Greetings, All: Please forgive me if this is documented somewhere -- a pointer to the documentation would be greatly appreciated! I've got a custom (just wrote it) standalone TCP/IP server daemon that listens on a high port and works fine servicing connections from localhost. However, when I try to connect (via telnet) from any other machine on the network, I get "connection refused". I tried editing /etc/hosts.allow so it contains the single line ALL:ALL and then /etc/init.d/netbase restart, to no avail. (Reverted back to what it used to be right after -- it's an internet-connected machine.) I know it has to be an easy, probably obvious, operation to get this port opened up, I just cannot find it. Any help anyone can provide would be appreciated. -- Art Sackett
Re: Adding new network service - how?
Art, How does the server get fired off? inetd? Stand alone? hosts.allow is used by tcpd, only if use tcpd explicitly to start the server. Can you connect via telnet locally? -- Ghane At 01:06 PM 6/26/2000 -0600, Art Sackett wrote: Greetings, All: Please forgive me if this is documented somewhere -- a pointer to the documentation would be greatly appreciated! I've got a custom (just wrote it) standalone TCP/IP server daemon that listens on a high port and works fine servicing connections from localhost. However, when I try to connect (via telnet) from any other machine on the network, I get "connection refused". I tried editing /etc/hosts.allow so it contains the single line ALL:ALL and then /etc/init.d/netbase restart, to no avail. (Reverted back to what it used to be right after -- it's an internet-connected machine.) I know it has to be an easy, probably obvious, operation to get this port opened up, I just cannot find it. Any help anyone can provide would be appreciated. -- Art Sackett -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: Adding new network service - how?
On Tue, Jun 27, 2000 at 06:26:27PM +0800, Sanjeev Gupta wrote: > Art, > > How does the server get fired off? inetd? Stand alone? hosts.allow is > used by tcpd, only if use tcpd explicitly to start the server. It's a standalone. It would be started by a script in /etc/init.d/something if I could get past this little challenge. > Can you connect via telnet locally? Yep. I can telnet from localhost and it works just fine. Trying from another host on the network, the server doesn't even see the connection. It's now 4:30AM here in Colorado, and this thing is keeping me awake... I know it's asking for trouble to keep pounding on it, but staring at the ceiling wasn't doing me any good, anyway. Need more coffee... 8^| -- Art Sackett
Re: Adding new network service - how?
On Mon, 26 Jun 2000, Art Sackett wrote: > Greetings, All: > > Please forgive me if this is documented somewhere -- a pointer to the > documentation would be greatly appreciated! > > I've got a custom (just wrote it) standalone TCP/IP server daemon that > listens > on a high port and works fine servicing connections from localhost. However, > when I try to connect (via telnet) from any other machine on the network, I > get "connection refused". I tried editing /etc/hosts.allow so it contains the > single line ALL:ALL and then /etc/init.d/netbase restart, to no avail. > (Reverted back to what it used to be right after -- it's an > internet-connected > machine.) > NOTE: I have absolutely no idea what I'm talking about. This works for me. YMMV. Are you binding to a specific IP address (eg, 127.0.0.1), or just 0.0.0.0? If you bind to a specific IP, only packets coming in on that interface will actually appear. I've written a small daemon which handles multiple requests by forking; I do something like this: listen = serve(port); while( 1 ) { request = getrequest(listen); pid = fork(); if( pid == -1 ) exit_error("fork"); if( pid ) close(request); else { // Handle connection, reading and writing from/to request. // Exit when done. exit(0); } } The getrequest function uses memset to clear the contents of the sockaddr_in structure, thus initializing the address to 0.0.0.0 (and setting the rest to sane values). Ah, what the hell, I'll just list the whole function :P int serve(unsigned short int port) { int client; struct sockaddr_in client_addr; int opt, val; client = socket(AF_INET, SOCK_STREAM, IPPROTO_TCP); if(client == -1) { exiterr("socket create"); } opt = 1; val = setsockopt(client, SOL_SOCKET, SO_REUSEADDR, &opt, sizeof(opt)); if( val == -1 ) { exiterr("setsockopt reuseaddr"); } #ifdef SO_REUSEPORT /* not def in Linux yet */ val = setsockopt(client, SOL_SOCKET, SO_REUSEPORT, &opt, sizeof(opt)); if( val == -1 ) exiterr("setsockopt reuseport"); } #endif memset(&client_addr, 0, sizeof(client_addr)); client_addr.sin_family = AF_INET; client_addr.sin_port = htons(port); if(bind(client, (struct sockaddr *)&client_addr, sizeof(client_addr))) { exiterr("socket create"); } listen(client, 0); return(client); } Immensely useful to me was the netcat source (almost as useful as the netcat binary). Netcat does everything, so it's a good program to use for hints. Hopefully what I've included is useful, you can do whatever you'd like with the code; it's not exactly a trade secret. Questions, comments, flames, sister's phone numbers welcome. -chet ([EMAIL PROTECTED]) > I know it has to be an easy, probably obvious, operation to get this port > opened up, I just cannot find it. Any help anyone can provide would be > appreciated. > > -- > Art Sackett > > > -- > To UNSUBSCRIBE, email to [EMAIL PROTECTED] > with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED] > >
Wierd kern logs
Any suggestions as to what might be causing this? It's a debian 1.3 system (I know, I know). Jun 24 14:04:33 cs2 kernel: RPC: rpc_doio sending evil packet: Jun 24 14:04:33 cs2 kernel: a1c8d23e 0100 0100 Jun 24 14:04:33 cs2 kernel: RPC: rpc_send sending evil packet: Jun 24 14:04:33 cs2 kernel: a1c8d23e 0100 0100 Jun 24 14:04:35 cs2 kernel: RPC: rpc_send sending evil packet: Jun 24 14:04:35 cs2 kernel: a1c8d23e 0100 0100 Jun 24 14:04:38 cs2 kernel: RPC: rpc_send sending evil packet: Jun 24 14:04:38 cs2 kernel: a1c8d23e 0100 0100 Jun 24 14:04:43 cs2 kernel: RPC: rpc_doio sending evil packet: Jun 24 14:04:43 cs2 kernel: a1c8d23e 0100 0100 Jun 24 14:04:43 cs2 kernel: RPC: rpc_send sending evil packet: Jun 24 14:04:43 cs2 kernel: a1c8d23e 0100 0100 Pete -- Peter J. Templin, Jr., CCNA Systems and Networks Administrator JD-WEB Computer Sales and Service 429 Market St. [EMAIL PROTECTED] Lewisburg, PA 17837 (570)523-6800
Re: pop3 server,
On Mon, 26 Jun 2000, Dariush Pietrzak wrote: > gnu-pop3d has been removed from debian due to it's instability. Where can I find more information about gnu-pop3d being removed from Debian? > and of course how would one host virtual e-mail domains (one IP, one UID) I use gnu-pop3d with a bunch of patches I made that hopefully get rid of the instability problems and add capability for virtual domains. But I haven't built a Debian package of my patched gnu-pop3d. For more information about my setup visit: http://www.reedmedia.net/projects/virtualmail/ I plan on soon writing a pop3d from scratch using the virtual domain ideas that I currently use. (If anyone is interested in testing it for me, please let me know. Thanks.) Jeremy C. Reed BSD software, documentation, resources, news... http://bsd.reedmedia.net
Re: Adding new network service - how?
On Tue, Jun 27, 2000 at 10:51:58AM -0400, Chester Hosey wrote: > Are you binding to a specific IP address (eg, 127.0.0.1), or just 0.0.0.0? > If you bind to a specific IP, only packets coming in on that interface > will actually appear. I've tried binding to the machine's internet IP address and to 0.0.0.0, with the same results. The server is just not ever seeing the connection unless it comes from 127.0.0.1 -- the machine's own internet IP address won't even connect. I've confirmed that it's not my server's allow/deny rules at fault, by printing to STDERR on every connection before anything else happens. When it doesn't work, it's not making any noise at all, and all I see is iplogger making notes in /etc/syslog. Back to hair-tearing and swearing... -- Art Sackett
Re: Adding new network service - how?
Greetings, All: I don't know what I did, thanks no doubt to a low caffeine level, but my problem's changed enough to get me some clues. Now, when I bind to the internet IP address, I can get connections from the world but not from 127.0.0.1. Ugh. It's enough for now... Thanks to all who took the time to try to pull my head out! -- Art Sackett
Re: pop3 server,
I'ld recommend Cucipop due to it's security record. That's what I use. Just don't look at the source code. :) At 10:03 PM 6/26/00 +0200, Dariush Pietrzak wrote: >Hello, >which packaged with debian pop3d would you people recommend? > which one do you use? +---+ |-=I T ' S P R I N C I P L E T H A T C O U N T S=- | |=- -=ALAN KEYES FOR PRESIDENT=- -=| | Balanced Budgets Personal Freedoms Morality Lower Tax | |=-- http://www.Keyes2000.com. --=| ++ 0100
Re: pop3 server,
On Mon, Jun 26, 2000 at 10:03:05PM +0200, Dariush Pietrzak wrote: > Hello, > which packaged with debian pop3d would you people recommend? > which one do you use? qmail with pop3d and friends seems to be pretty solid in my short experience with them. I've not got hundreds of users, but it's said to be up to the task of 200,000 messages per day or so. It configures pretty easily once you get your head out of sendmail mode ;-) One thing to watch out for is that one of the .debs is flaky, doesn't set the execute bits on some things, so compilation bails with a fatal. I don't recall which it is, now, but the fix is easy: chmod u+x /tmp/ I'm running it with ucspi-tcp and rblsmtpd, and it hasn't given me any problems. There are patches and whatnot floating around to set it up for relay-after-POP-authentication, but I haven't tried those since we're a small shop and all outbound mail comes from the local net. -- Art Sackett
Re: pop3 server,
At 09:49 AM 6/27/2000 -0700, Jeremy C. Reed wrote: I use gnu-pop3d with a bunch of patches I made that hopefully get rid of the instability problems and add capability for virtual domains. But I haven't built a Debian package of my patched gnu-pop3d. For more information about my setup visit: http://www.reedmedia.net/projects/virtualmail/ I am using Mr Reed's patches, and they work well for me, albeit I have just one virtual domain hosted. The patches applied cleanly, and built well. Thanks. I plan on soon writing a pop3d from scratch using the virtual domain ideas that I currently use. (If anyone is interested in testing it for me, please let me know. Thanks.) Sure. My client for the vhost is inhouse, sort of, and I can swap stuff in and out. Interruptions in being able to receive mail are OK, as long as no mail gets lost. Debian 2.1, will update to potato when stable, tell me if you need an account. -- Ghane
pop3 server,
Hello, which packaged with debian pop3d would you people recommend? which one do you use? apt-cache search pop3d on potato shows only gnu-pop3d and cyrus-pop3, cyrus ain't best choice - it's non-free, and as cyrus's manual says - it's designed for closed hosts, hosting only as e-mail server without users or other services. gnu-pop3d has been removed from debian due to it's instability. there is also cucipop, which somehow shows up only in woody, solid-pop3d which has virtuals support which I need, and there is ipopd which I think proved to be unsecure. as for now choice would be between solid and cuci, there is also problem of securing link - how to use ssl with pop3 daemons? and of course how would one host virtual e-mail domains (one IP, one UID) using those daemons - my current solution would be using PAM with radius or ldap. any helpfull hints? thanks, Eyck -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Adding new network service - how?
Greetings, All: Please forgive me if this is documented somewhere -- a pointer to the documentation would be greatly appreciated! I've got a custom (just wrote it) standalone TCP/IP server daemon that listens on a high port and works fine servicing connections from localhost. However, when I try to connect (via telnet) from any other machine on the network, I get "connection refused". I tried editing /etc/hosts.allow so it contains the single line ALL:ALL and then /etc/init.d/netbase restart, to no avail. (Reverted back to what it used to be right after -- it's an internet-connected machine.) I know it has to be an easy, probably obvious, operation to get this port opened up, I just cannot find it. Any help anyone can provide would be appreciated. -- Art Sackett -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: Adding new network service - how?
Art, How does the server get fired off? inetd? Stand alone? hosts.allow is used by tcpd, only if use tcpd explicitly to start the server. Can you connect via telnet locally? -- Ghane At 01:06 PM 6/26/2000 -0600, Art Sackett wrote: >Greetings, All: > >Please forgive me if this is documented somewhere -- a pointer to the >documentation would be greatly appreciated! > >I've got a custom (just wrote it) standalone TCP/IP server daemon that >listens >on a high port and works fine servicing connections from localhost. However, >when I try to connect (via telnet) from any other machine on the network, I >get "connection refused". I tried editing /etc/hosts.allow so it contains the >single line ALL:ALL and then /etc/init.d/netbase restart, to no avail. >(Reverted back to what it used to be right after -- it's an >internet-connected >machine.) > >I know it has to be an easy, probably obvious, operation to get this port >opened up, I just cannot find it. Any help anyone can provide would be >appreciated. > >-- > Art Sackett > > >-- >To UNSUBSCRIBE, email to [EMAIL PROTECTED] >with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED] -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: Adding new network service - how?
On Tue, Jun 27, 2000 at 06:26:27PM +0800, Sanjeev Gupta wrote: > Art, > > How does the server get fired off? inetd? Stand alone? hosts.allow is > used by tcpd, only if use tcpd explicitly to start the server. It's a standalone. It would be started by a script in /etc/init.d/something if I could get past this little challenge. > Can you connect via telnet locally? Yep. I can telnet from localhost and it works just fine. Trying from another host on the network, the server doesn't even see the connection. It's now 4:30AM here in Colorado, and this thing is keeping me awake... I know it's asking for trouble to keep pounding on it, but staring at the ceiling wasn't doing me any good, anyway. Need more coffee... 8^| -- Art Sackett -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: Adding new network service - how?
On Mon, 26 Jun 2000, Art Sackett wrote: > Greetings, All: > > Please forgive me if this is documented somewhere -- a pointer to the > documentation would be greatly appreciated! > > I've got a custom (just wrote it) standalone TCP/IP server daemon that listens > on a high port and works fine servicing connections from localhost. However, > when I try to connect (via telnet) from any other machine on the network, I > get "connection refused". I tried editing /etc/hosts.allow so it contains the > single line ALL:ALL and then /etc/init.d/netbase restart, to no avail. > (Reverted back to what it used to be right after -- it's an internet-connected > machine.) > NOTE: I have absolutely no idea what I'm talking about. This works for me. YMMV. Are you binding to a specific IP address (eg, 127.0.0.1), or just 0.0.0.0? If you bind to a specific IP, only packets coming in on that interface will actually appear. I've written a small daemon which handles multiple requests by forking; I do something like this: listen = serve(port); while( 1 ) { request = getrequest(listen); pid = fork(); if( pid == -1 ) exit_error("fork"); if( pid ) close(request); else { // Handle connection, reading and writing from/to request. // Exit when done. exit(0); } } The getrequest function uses memset to clear the contents of the sockaddr_in structure, thus initializing the address to 0.0.0.0 (and setting the rest to sane values). Ah, what the hell, I'll just list the whole function :P int serve(unsigned short int port) { int client; struct sockaddr_in client_addr; int opt, val; client = socket(AF_INET, SOCK_STREAM, IPPROTO_TCP); if(client == -1) { exiterr("socket create"); } opt = 1; val = setsockopt(client, SOL_SOCKET, SO_REUSEADDR, &opt, sizeof(opt)); if( val == -1 ) { exiterr("setsockopt reuseaddr"); } #ifdef SO_REUSEPORT /* not def in Linux yet */ val = setsockopt(client, SOL_SOCKET, SO_REUSEPORT, &opt, sizeof(opt)); if( val == -1 ) exiterr("setsockopt reuseport"); } #endif memset(&client_addr, 0, sizeof(client_addr)); client_addr.sin_family = AF_INET; client_addr.sin_port = htons(port); if(bind(client, (struct sockaddr *)&client_addr, sizeof(client_addr))) { exiterr("socket create"); } listen(client, 0); return(client); } Immensely useful to me was the netcat source (almost as useful as the netcat binary). Netcat does everything, so it's a good program to use for hints. Hopefully what I've included is useful, you can do whatever you'd like with the code; it's not exactly a trade secret. Questions, comments, flames, sister's phone numbers welcome. -chet ([EMAIL PROTECTED]) > I know it has to be an easy, probably obvious, operation to get this port > opened up, I just cannot find it. Any help anyone can provide would be > appreciated. > > -- > Art Sackett > > > -- > To UNSUBSCRIBE, email to [EMAIL PROTECTED] > with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED] > > -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Wierd kern logs
Any suggestions as to what might be causing this? It's a debian 1.3 system (I know, I know). Jun 24 14:04:33 cs2 kernel: RPC: rpc_doio sending evil packet: Jun 24 14:04:33 cs2 kernel: a1c8d23e 0100 0100 Jun 24 14:04:33 cs2 kernel: RPC: rpc_send sending evil packet: Jun 24 14:04:33 cs2 kernel: a1c8d23e 0100 0100 Jun 24 14:04:35 cs2 kernel: RPC: rpc_send sending evil packet: Jun 24 14:04:35 cs2 kernel: a1c8d23e 0100 0100 Jun 24 14:04:38 cs2 kernel: RPC: rpc_send sending evil packet: Jun 24 14:04:38 cs2 kernel: a1c8d23e 0100 0100 Jun 24 14:04:43 cs2 kernel: RPC: rpc_doio sending evil packet: Jun 24 14:04:43 cs2 kernel: a1c8d23e 0100 0100 Jun 24 14:04:43 cs2 kernel: RPC: rpc_send sending evil packet: Jun 24 14:04:43 cs2 kernel: a1c8d23e 0100 0100 Pete -- Peter J. Templin, Jr., CCNA Systems and Networks Administrator JD-WEB Computer Sales and Service 429 Market St. [EMAIL PROTECTED] Lewisburg, PA 17837 (570)523-6800 -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: pop3 server,
On Mon, 26 Jun 2000, Dariush Pietrzak wrote: > gnu-pop3d has been removed from debian due to it's instability. Where can I find more information about gnu-pop3d being removed from Debian? > and of course how would one host virtual e-mail domains (one IP, one UID) I use gnu-pop3d with a bunch of patches I made that hopefully get rid of the instability problems and add capability for virtual domains. But I haven't built a Debian package of my patched gnu-pop3d. For more information about my setup visit: http://www.reedmedia.net/projects/virtualmail/ I plan on soon writing a pop3d from scratch using the virtual domain ideas that I currently use. (If anyone is interested in testing it for me, please let me know. Thanks.) Jeremy C. Reed BSD software, documentation, resources, news... http://bsd.reedmedia.net -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: Adding new network service - how?
On Tue, Jun 27, 2000 at 10:51:58AM -0400, Chester Hosey wrote: > Are you binding to a specific IP address (eg, 127.0.0.1), or just 0.0.0.0? > If you bind to a specific IP, only packets coming in on that interface > will actually appear. I've tried binding to the machine's internet IP address and to 0.0.0.0, with the same results. The server is just not ever seeing the connection unless it comes from 127.0.0.1 -- the machine's own internet IP address won't even connect. I've confirmed that it's not my server's allow/deny rules at fault, by printing to STDERR on every connection before anything else happens. When it doesn't work, it's not making any noise at all, and all I see is iplogger making notes in /etc/syslog. Back to hair-tearing and swearing... -- Art Sackett -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: Adding new network service - how?
Greetings, All: I don't know what I did, thanks no doubt to a low caffeine level, but my problem's changed enough to get me some clues. Now, when I bind to the internet IP address, I can get connections from the world but not from 127.0.0.1. Ugh. It's enough for now... Thanks to all who took the time to try to pull my head out! -- Art Sackett -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: pop3 server,
I'ld recommend Cucipop due to it's security record. That's what I use. Just don't look at the source code. :) At 10:03 PM 6/26/00 +0200, Dariush Pietrzak wrote: >Hello, >which packaged with debian pop3d would you people recommend? > which one do you use? +---+ |-=I T ' S P R I N C I P L E T H A T C O U N T S=- | |=- -=ALAN KEYES FOR PRESIDENT=- -=| | Balanced Budgets Personal Freedoms Morality Lower Tax | |=-- http://www.Keyes2000.com. --=| ++ 0100 -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: pop3 server,
On Mon, Jun 26, 2000 at 10:03:05PM +0200, Dariush Pietrzak wrote: > Hello, > which packaged with debian pop3d would you people recommend? > which one do you use? qmail with pop3d and friends seems to be pretty solid in my short experience with them. I've not got hundreds of users, but it's said to be up to the task of 200,000 messages per day or so. It configures pretty easily once you get your head out of sendmail mode ;-) One thing to watch out for is that one of the .debs is flaky, doesn't set the execute bits on some things, so compilation bails with a fatal. I don't recall which it is, now, but the fix is easy: chmod u+x /tmp/ I'm running it with ucspi-tcp and rblsmtpd, and it hasn't given me any problems. There are patches and whatnot floating around to set it up for relay-after-POP-authentication, but I haven't tried those since we're a small shop and all outbound mail comes from the local net. -- Art Sackett -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: pop3 server,
At 09:49 AM 6/27/2000 -0700, Jeremy C. Reed wrote: >I use gnu-pop3d with a bunch of patches I made that hopefully get rid of >the instability problems and add capability for virtual domains. But I >haven't built a Debian package of my patched gnu-pop3d. For more >information about my setup visit: >http://www.reedmedia.net/projects/virtualmail/ I am using Mr Reed's patches, and they work well for me, albeit I have just one virtual domain hosted. The patches applied cleanly, and built well. Thanks. >I plan on soon writing a pop3d from scratch using the virtual domain ideas >that I currently use. (If anyone is interested in testing it for me, >please let me know. Thanks.) Sure. My client for the vhost is inhouse, sort of, and I can swap stuff in and out. Interruptions in being able to receive mail are OK, as long as no mail gets lost. Debian 2.1, will update to potato when stable, tell me if you need an account. -- Ghane -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]