Organization: AccessNow! (http://www.accessnow.com)
I've been running Linux for about a year on my private lan, as a
machine to use for programming my clients' cgi's and webpages, before
putting them up on the web on other machines.
Now, I have the opportunity to put a new linux box up on the web. I
want to be able to offer my clients POP3 accounts, and their virtual
servers. I know how to do Apache. Not a prob. But POP3 on this
Linux... I am trying to figure this out. Also, I am worried about
security on this box. What do I do about that? I have heard that
there are patches for Linux and Apache. I am trying to locate these.
Any pointers would be appreciated.
Oh, also: SSL. I am searching the web right now about SSL. But it'd
be nice to have some real-world pointers on this setup endeavor I have
Thanks in advance (for real answers, not, "Go figure it out on your
"How do I work? I grope" - Albert Einstein
AccessNow!; Simple Solutions in Info Technology
From: a...@snowcrash.cymru.net (Alan Cox)
Subject: Re: Webservver
In article <33e63607.163451...@news.halcyon.com>,
>Now, I have the opportunity to put a new linux box up on the web. I
>want to be able to offer my clients POP3 accounts, and their virtual
>servers. I know how to do Apache. Not a prob. But POP3 on this
>Linux... I am trying to figure this out. Also, I am worried about
Assuming you are using a standard distribution then POP3 works "out of
the box" for everyone you put in the password file. If you don't want
to give them shell access to the box you can set their shell to a program
that just prints "No access" and exits. Put this shell in /etc/shells and
they still get ftp access.
>security on this box. What do I do about that? I have heard that
>there are patches for Linux and Apache. I am trying to locate these.
Like all vendors Linux vendors track bugs and release updates. Where depends
on the vendor. Red Hat for example keep updates on their web site along
with a list of notes. Thus we regularly grab the updates and apply them (one
command). If you are running an ISP you should keep up to date as people do
see ISP's as "target practice".
>Oh, also: SSL. I am searching the web right now about SSL. But it'd
>be nice to have some real-world pointers on this setup endeavor I have
If you are in the US you are screwed basically. The crazy US software patent
system prevents you from using the free SSL software like SSLeay, and free
ApacheSSL. You can however get commercial servers such as Stronghold and
Email: A...@cymru.net Phone: +44 1792 290194 "I think my washing machine
must read BOFH" - Telsa Gwynne
Cymru.Net 64K to 2Mbit lines, ISDN, Co hosting, and security work.
=======>>>>>>>>>>>64K UKP 4000/year 128K from UKP 4500/year<<<<<<<<<<<=======