View previous topic :: View next topic |
Author |
Message |
tomss n00b
Joined: 12 Jul 2003 Posts: 1
|
Posted: Sat Jul 12, 2003 10:14 pm Post subject: mailserver n00b question |
|
|
im after a mailserver which can basically be set in the MX record of my domain and collect emails for a number of users.
I heard postfix would be good for this, and ive looked through a number of tutorials, is it virtual domains i need to setup or just bog standard setup like in the desktop guide? Just that way no users seem to be setup etc so not sure how it works
thanks
tom |
|
Back to top |
|
|
rts007 n00b
Joined: 12 Jul 2003 Posts: 3
|
Posted: Sat Jul 12, 2003 10:23 pm Post subject: |
|
|
tom |
|
Back to top |
|
|
puggy Bodhisattva
Joined: 28 Feb 2003 Posts: 1992 Location: Oxford, UK
|
Posted: Sat Jul 12, 2003 10:45 pm Post subject: |
|
|
I only currently host 1 domain but I followed the virtual domain guide and it works really well. The only thing that annoys me is the mysql database storing the passwords in plaintext.
Puggy _________________ Where there's open source , there's a way. |
|
Back to top |
|
|
ben Apprentice
Joined: 10 Jun 2002 Posts: 285 Location: Switzerland
|
Posted: Sun Jul 13, 2003 10:45 am Post subject: |
|
|
Well for one domain and many user you don't need virtual hosting.
For users you can have them local (every user with an email addresse is a real local user in your computer) in this case they may be given more than email, like shell account, ftp access and so on quite easily.
Their password is then stored encrypted in /etc/passwd~, and I would care that they do not check their email with simple pop or imap, I would like them to use secure pop (ssl) or secure imap (ssl) as well as sftp or scp. Meaning the greater security threat is not that their password are stored uncrypted (they are crypted) but that they use their password over un unencrypted network.
Now if you must handle a lot of users, or you want to do it that way, you can go with ldap for user storage. In this case, users are kind of virtual. Even if their password is compromised, they won't have access to a shell.
Hope this help
Ben |
|
Back to top |
|
|
|