Is there anyway to protect or prevent other domains from being discovered from our server ?
I'm talking about those sites that can do a 'whois' lookup on your server and can find out all the other domains that are listed with the server. How do we protect & prevent that info from being leaked ?
I use Codero for hosting & ViaVerio for domain registration info.
I'm looking for a way to limit:
-memory usage (mb/user)
-cpu usage
-processes (amount and no same process multiply)
-connections (amount of connections (to specific host))
-bandwidth (kbps/user and even owerall for regular users)
-disk usage
-available commands
For every other users than me/root.
I've tried to set up an old laptop with Ubuntu server - need to use it as a web server for a group of students on a local network only. I managed to get it working fine for just one user publishing webpages etc to a folder called VAR/WWW I could FTP files into the folder and access them again via FTP or a browser. I then decided to create some subaccounts (one for each student) I did this by typnig the following commands:
Sudo usermod -g www-data student1
Sudo chown -R www-data:www-data /var/www/student1
Sudo chmod -R 775 /var/www/student1
(In this example student1 is intended to be a subfolder of www and act like a sub-domain with write authority- at least that was my intention) Problem I then get is that if I use Filezilla to access each account I cannot see where to publish the files - wherevever I place them they are not accessible from the browser. Do any of you experts out there know the answer to my problems please.
who manage Postfix servers, what do you recommend is the best way to refuse all incoming and outgoing mail to specific domains? I want a blacklist of domains such as:
- AOL
- Yahoo
- MSN
- Hotmail
- Gmail
Is there a proper way I can tell Postfix to please deny sending and receiving SMTP traffic to and from those specific domains I specify? I see no need in my corp. mail server has to communicate in any way to those. I allow access to all those accounts via port 80/443 so they can just login to the web and send non business related junk this way.
I am looking for a code for setting virtual alias for all domains and addresses. The scenario is that when I send an email from anywhere to my server, it will send to only one address but not send to the orginal recipient.
This is my code: I think the problem may be from the regular expression (.*) for any domains/email addresses
/etc/postfix/main.cf:
virtual_alias_domains = (.*) <-----
virtual_alias_maps = hash:/etc/postfix/virtual
/etc/postfix/virtual
(.*) admin@myserver.com <----
how would i move from domain1.com to domain2.com whilst making it so people can still use the old domain if they wanted to?
View 3 Replies View RelatedI am still in Linux Diapers. I setup a CENTOS SELINUX box on an internal network. So the only way I know to access it's served pages is by navigating to 10.1.1.40 from a computer within the network. The issue is that I need to create sub-domains for this server but have no Idea how to go about doing that.
Is there a way of creating an alias for the dev server so I can type something like "washington" into the web browser of a computer on the internal network instead of 10.1.1.40? Can I use a fake FQDN that on this server and get served its web pages or do I need to register a FQDN?
Background: I am creating a series of websites using Drupal and am trying to implement the multisites functionality (all the sites are run from a single code base). To do this they suggest setting up each site on a sub-domain during development. We have not yet purchase the FQDN's for the sites so I have no FQDN to setup.
I'll post an scenario and hopefully you can help me understand the concept and put me in the right track and do what I intend, if possible. Let's say I have a dedicated server with 2 static IPs each with an associated domain, let's call them www.site1.com and www.site2.com. Now, apache is running on it, I'd like to redirect anyone coming from site1.com to /home/site1/public_html and anyone coming from site2.com to /home/site2/public_html.In short, apache serving 2 entire roots depending on the accessed IP/domain. Whether the sites root are in the same parent folder, such as /home/site/site1_public_html and /home/site/site2_public_html or like above doesn't really matter, as long as it works.Additionally, do something similar with Postfix, so that I can have it running imap/smtp for foobar@site1.com and foobar@site2.com on the same server.At this moment, both apache and postfix are working, and we host only www.site1.com with the respective foobar@site1.com. But I'm not sure how to proceed or even if it's possible to achieve the above solution.
View 1 Replies View RelatedIs it possible to add/join my Linux Suse 11.3 server with 2 domains ? I know I can do that with Windows PC, but I never try that with my Linux box. FYI, my Linux server is already joined with a domain, now I want to join my box with another domain and I don't want to take it off the current joined domain.
View 1 Replies View RelatedI have several web servers running apache on my LAN. Each internal server hosts a number of domains.I would like to make these available to the internet and make sure they all get to use port 80 and 443.My idea was to put Apache on the firewall and have all http(s) traffic from the Internet to my firewall be redirected by Apache to the different internal apache servers. This, in theory, would allow me to keep the standard http(s) port.
Can this be done? I was thinking of mod_rewrite and mod_redirect but in all honesty, I'm a little at a loss on where to start.Can someone point me to relevant documentation or give me the basic idea on how to start?
I'm running bind9 on Debian 6. I have a primary domain, 44kg.net, fully configured and working dynamically (the server also runs DHCPd and updates the DNS records properly).
[Code]....
To access my externally-facing website, which has a blog and a forum which are keyed to the external domain, I set up the domains in bind so they would resolve to the server's internal IP. This worked great for a few months, then inexplicably ceased working. I didn't touch anything, but it coincided with our router dropping its VLANs. I've moved the server to a different location and it's still not working properly. Whenever I try to lookup the external domains, I get SERVFAILs. This is annoying because the internal domain is fully working and I copied the basic settings.
[Code]....
I have a postfix mail server up and running. I've added more than one domains to recive mail by adding them to the :/etc/postfix/virtual and poiting to a UNIX user account. That works fine. But when users send out mails (From squirrelmail) all users send from the same domain. How do I add a $myorgin to a virtual domain?
View 1 Replies View RelatedI am setting up a Postfix MTA that will be only sending mail for 10 different domains. We have other servers that will be receiving the mail for the domains so I only need to set up for sending on Postfix.
What my issue is I am trying to configure Postfix so that when it sends mail the header shows what domain the mail came from and not the domain the Postfix server is set to. For example....
[URL]
When I send mail from domain2.com I want it to show in the header it was sent from domain2.com and not from domain1.com. What do I need to set in postfix so that this happens? Right now no matter what domain the mail is from the header always shows the server domain and I can't have that.
I am running a spam filter on debian lenny 5.1 with postfix, amavis-new, spamassassin, and clamav. It works pretty well but I would like to finish tweaking it to minimize the mail getting quarantined. It really isn't quarantining anything that isn't spam, except for an occasional list mailer. However, the quarantine is huge, and takes a while to go through. I noticed that much of the spam is coming from foreign country tld's like .cz is there anyway to have postfix run a check on the header and if the email, or smtp origination is from a server from a foreign tld have it just rejected. I can whitelist anything if need be in the future but as of now we don't do any business overseas and don't need to worry about blocking legit email.
I think this should be possible, however, I am unsure of the syntax for the file, where to put it and if wildcards are possible in domain blocking like
Code:
*.cz REJECT
We have a application hosted in our server and it uses send mail for sending and receiving mails.mails can able to reach certain ids but it cant reach some ids. this is the log entry.
Jan 6 00:52:18 p2234270 sendmail[11009]: p046hWi5011897: to=<dinesh@heatstream.com>, ctladdr=<apache@p2234270.pubip.serverbeach.com> (48/48), delay=2+00:08:46, xdelay=00:00:01, mailer=esmtp,
pri=4530999, relay=smtp17.msoutlookonline.net. [64.78.22.100], dsn=4.1.8, stat=Deferred: 450 4.1.8
[code]....
I am using squid 3.1.12 as a proxy cache. All the requests initially land on a Apache server which acts as a reverse proxy server, the Apache redirects some URLs based on the context to Squid server. This Squid server based on the URL needs to forward the request to the specific tomcat server where the application is deployed. I am able to configure just for one application but how do I configure multiple tomcat servers(each tomcat having different application deployed on it). Squid needs to redirect based on the URL.In Squid.conf I made the following changes
[URL]
cache_peer abc.dev2.xxx.com parent 8080 0 no-query originserver refresh_pattern -i /ABC144020%1440 override-expire override-lastmod reload-into-ims ignore-reload
#cache_peer def.dev2.xxx.com parent 8080 0 no-query originserver
[code]....
Here Squid is deployed on my host [URL], Apache redirects any URLS with the context 'ABC' or 'DEF' to squid. Squid needs to redirect it to the individual hosts thats [URL] or [URL] based on the URL. I have commented the entry for DEF in my squid.conf as it was not working. But it does work for any URLs with ABC as the context.
I work for a college with many departments. I'd like to just deploy one LDAP/krb5 server (plus slave replicas) to authenticate all users in all departmentsIs it possible to do this?The proposed DNs for the departments matches what is done for NIS now.If anyone has any pointers or URLs that describe how to properly do this.
View 1 Replies View RelatedI am going to try and replace our crappy Windows/imail server with a new ubuntu 10.04 LTS based machine. It will end up with about 400 domains on it with around 3000 users total. 96% of the domains have very light use. 4% of the domains have heavy use but do not send any bulk mail.
Can someone here recommend a mail server software package that would be easy to administrate and easy to backup/replicate? All we need is POP with webmail. We do not need IMAP or want any group/collaborative functions.
What do you usually use for anti-spam on a linux mail server? We want to keep it all open source if possible.
For hardware we are looking at an HP DL360 G5 with dual Xeons, 4G of ram, and the P400 controller with 6 SAS 15k drives. Do you think a server like this will be able to handle the mail on linux? Volume is around 400k messages a day inbound with about 10% being legit/90% being spam. The server will be dedicated to mail hosting and will not host websites.
I'd like to build a server to run CentOS5 to host domains & run Boonex's Dolphin 7. I can't afford the hardware at present, but do have a spare laptop to test with. My two questions:
1) Is is possible to create a build on my laptop, with CentOS, PHP, Dolphin 7, DNS etc, and then create an image to transfer to the future hardware server when constructed? If not, are there alternatives e.g. to copy settings, and then paste then onto the new CentOS install? Anything else I should consider for doing this future move?
2) I presume it's not possible to transfer from 32bit (now) to 64 bit (possibly later) CentOS5?
I have fetch mail in my root directory like this:
set no bouncemail
set postmaster postmaster@dot.com.gh
set logfile /var/log/fetchmail
poll pop.teledataict.com
protocol pop3
localdomains dot.com.gh
archive dot.com.gh
no dns
envelope X-Envelope-To:
qvirtual dot.com.gh
user "maildot3@teledataict.com" there
pass "mail"
is *
here forcecr
nokeep
flush
dropdelivered
fetchall
This works perfectly as I want. But right now, what I want is, I want fetchmail to download mails for more than one or several accounts in different domains and different pop servers. How can I improve this rc file to accomplish my task?
I have configured postfix to send/receive mail from/to for two domains we manage. [URL] and [URL] Most of the cases there is no issue sending out or receiving emails. However, a few users of domainY.com complained that their senders were not able to sent them email. after much investigation, we started thinking that the mailserver failed to send us email may the failing on doing a SMTP Banner issue.
Is there anyone who knows how to deal with this SMTP banner issue with multiple domain. We want different SMTP banner when doing EHLO on different server.
530 mail.domainX.com ESMTP MailEnable Service, Version: 1.981-- denied access at 11/16/10 10:51:21
530 mail.domainY.com ESMTP MailEnable Service, Version: 1.981-- denied access at 11/16/10 10:51:21
i have configured postfix to deliver mail from an internal mail server to external domains... however i keep getting this errors
Code:
un 10 23:23:59 smtpserver postfix/local[28831]: 7800CF0058: to=<root@smtpserver.domain>, orig_to=<postmaster>, relay=local, delay=0, status=sent (delivered to mailbox)
Jun 10 23:23:59 smtpserver postfix/qmgr[5989]: 7800CF0058: removed
Jun 10 23:25:19 smtpserver postfix/smtpd[28824]: connect from unknown[192.168.5.22]
[code]....
I'm running a server with two sites which both need to be able to send emails. Currently I have Postfix set up to send email via Google Apps. This works fine, but Google's servers ignore the From: address I specify and substitute the one I logged in with. Is there a way to make Postfix log into Google Apps with a different username based on what site the email is coming from? The server does not recieve any mail itself; Google recieves it and we have it set to forward it to the appropriate person's real email address. I'm only worried about sending mail.
(Postfix is not a requirement here, so if there's another mailer that can do this better, I'm open to ideas. However, sending email directly from the server isn't an option as it's a residential IP address and blocked by most of the big email providers.)
I have a network (192.168.x.x) that I want to keep closed and private for the most part. I need however to get access to some files generated on the machines in this private network. So I first tried putting two cards in a machine running centos 5.2 and connecting one to the private newtork and the other to the public network. This worked somewhat but I was not able to see this bridging machine in the private network because I could not run 2 samba instances on this machine ( I need one for the public network). So I setup xen on a machine with the 2 NIC's and assigned one card to the host dom and the other to the guest dom which was connected to the private network.
This worked ok, but the only issue was the shared disk space. I couldn't use nfs because each machine operates in a different subnet and I don't know how to export a nfs drive across domains. So I created a logical volume on a disk and mounted this in both domains. This works some times,. but at other times I copy files from the private machine to the shared volume but i can't see them from the other domain. Also sometimes the guest domain which houses the private network server hangs during boot up saying that the logical volume has been assigned and cannot be mounted.
1) Is what I'm doing using logical volumes across domains legal (best practise, etc)
2) Is there another way for me to achieve what I want (sharing a disk partition across domains).
I am currently running a apache/postfix email service on my server. I am using aliases for two addresses for example:
trscookie@serverone.com
trscookie@secondserver.com
so the emails no matter which domain receives the email trscookie always will receive the email.
However I am unable to work out how to 'reverse' this process, for example.
If i was to go to secondserver.com/webmail I would like the emails to get sent from trscookie@secondserver.com however they are currently all coming from serverone.com. Is it possible to configure this so that it is sent from the correct domain?
Here is my main.cf:
queue_directory = /var/spool/postfix
command_directory = /usr/sbin
daemon_directory = /usr/libexec/postfix
mail_owner = postfix
[Code].....
I recently purchased a GoDaddy domain with the intent of hosting a website myself at home on a box First of all, I don't have a static IP, so I set up dyndns with my router. Do I want to just have GoDaddy forward traffic to my dyndns account? Or do I manually change the nameservers? To what? Also, this seems to work for http(s) traffic only. What happens if I want to use ssh/ftp/smtp? And do I need to configure anything on my end aside from installing/configuring the appropriate server binaries? Is there a way to update GoDaddy when my ip changes?
View 4 Replies View RelatedIm moving all my websites on a dedicated box. I had a cpanel hosting account, and now moving to a terminal and ssh system.I need some advice on choosing my mail setup. I need POP, SMTP, with multiple domains, as host for a few clients.I would like the most simple version.The server will only send +- 100 mails / day.I currently running Ubuntu Linux 10.04.
View 1 Replies View RelatedI have recently setup an Ubuntu 10.04 Minimal x64 Server. I plan on setting it up as a mail server. I need a secure server, that has spam prevention on it. Im setting up around 50 domains and would like a web based control panel. What is the most secure mail server, that i can setup for multiple domains?
View 2 Replies View RelatedI was looking for a way to protect my samba server for limiting access to certain domains.Can I use the parameterhosts allow = example.comor something like that or is there another way to do the job for domains
View 4 Replies View RelatedI try to fix bugs on my web server. The remote web server allows redirects to arbitrary domains. Description : The remote web server is configured to redirect users using a HTTP 302, 303 or 307 response. However, the server can redirect to a domain that includes components included in the original request. A remote attacker could exploit this by crafting a URL which appears to resolve to the remote server, but redirects to a malicious location.
View 1 Replies View Related