[aclug-L] Re: MTAs & maildir vs mbox (was Re: Virtual POP3 and IMAP server)

["Ryan Hunt" <rhunt@xxxxxxxxxxx>]

http://freshmeat.net/projects/qmailtheeasyway/

I dont know how well this works but You might give it a try...

Weather or not someone forgot about a security bug dosent cut it in my
book.. qmail has been arround for a long time to and even has a reward out
for any security issues found with it.. no one has claimed reward.. Yea I
agree the setup is kind of hokey but
we have 92 virtural domains hosting in qmail and proably a 500-1000 users
and havent problems

> Things I need my MTA to support:
> * Virtual hosting (like, duh) and virtualusertable support
vpopmail @ www.inter7.com works great for virtural hosting, we use mySQL
support with this and its very fast

> * Message size limits, preferably based on the sender's IP address (i.e.
>   someone sending a mail from 192.168.x.x has a 1mb size limit, while
>   someone sending from a 209.134.x.x address has a 10mb size limit)
Perhaps
>   this could be implimened using procmail or similar, rather than the MTA
>   itself?
You are on ur own with this one.. im assuiming this is for outgoing email so
im shure
there would be some way to script it..

> * Filtering abilities (something that can quite easily be handed off to
>   procmail or another similar program)
Qmail has a lot of commercial anti-virus support and great filtering
abilities

> * SSL support
I am pretty shure I saw something like this for qmail but I havent looked
into it because I just have a ssh tunnel to my pop server
do some reasearch and im shure you will find something..

> * Ability to allow relaying from specific hosts *OR* after
authenticating--I
>   want the user to have the ability to relay through my mail server IF
they
>   authenticate first (does this require SSL?)
Qmail can authenticate relaying through vpopmail by requireing the user to
pop the email server
before sending and then caching that pop'd ip for a set ammount of time (eg,
pop the email every hour)
You can also specify specific blocks of IP's to allow relaying from, eg only
people on 192.168.254.0/24 can relay.. but sendmail has the same option...

I will be the first to admit Qmail is a bit daunting and a pain in the rear
end to setup but I took the chance, gave it a shot, finaly got it to work
and now I
completly love it and will always remain loyal.. Now that I have been using
Qmail for a few years I cant see why anyone would use anything else..

-Ryan




----- Original Message -----
From: "Jonathan Hall" <jonhall@xxxxxxxxxxxx>
To: <discussion@xxxxxxxxx>
Sent: Friday, October 19, 2001 10:31 AM
Subject: [aclug-L] Re: MTAs & maildir vs mbox (was Re: Virtual POP3 and IMAP
server)


>
> I really like sendmail... I really hate qmail.
>
> But that's just a matter of persional preference.
>
> I had considered a few other MTAs, but decided to stick with sendmail b/c
> it's been around so long, and thus is quite secure (contrary to the
popular
> belief that the old "gaping" security holes still exist--any program
that's
> been around as long as sendmail is going to have security holes... most
> people forget that they don't exist any more :P)
>
> I did try to configure qmail once before, and despised it.
>
> However, I do need an MTA who's abilities (and not ease/enjoyment of
> configuration) match my needs.
>
> What can other people who like or dislike qmail (or other MTAs) add to
this
> discussion?
>
> Things I need my MTA to support:
> * Virtual hosting (like, duh) and virtualusertable support
> * Message size limits, preferably based on the sender's IP address (i.e.
>   someone sending a mail from 192.168.x.x has a 1mb size limit, while
>   someone sending from a 209.134.x.x address has a 10mb size limit)
Perhaps
>   this could be implimened using procmail or similar, rather than the MTA
>   itself?
> * Filtering abilities (something that can quite easily be handed off to
>   procmail or another similar program)
> * SSL support
> * Ability to allow relaying from specific hosts *OR* after
authenticating--I
>   want the user to have the ability to relay through my mail server IF
they
>   authenticate first (does this require SSL?)
>
> Another question I have is maildir vs. mbox?  I'd discussed this with some
> others, and came to the conclusion that mbox would be more efficient for
me
> since 99% of my users will dowload their mail w/ POP3, then delete it.
mbox
> uses far fewer inodes... and sequential messsage access should be much
> faster for mbox over maildir... right?
>
> Right now I have ~200 users... but want to be as scalable as possible.
>
> I'm also not opposed to encouraging my customers to swich to IMAP if there
> is a good reason to.  I suspect POP3 is considered better in most
instances
> b/c overall bandiwdth usage is less, and b/c it doesn't continually use
disk
> real estate on the server.  Is my thinking sound?
>
>
>
> On Fri, Oct 19, 2001 at 08:14:16AM -0500, Ryan Hunt wrote:
> >
> > > * Must work with sendmail (Unless you can somehow amazingly convince
me
> > that
> > >   some other MTA is better for my application)
> >
> > Ive used QMail for years and I believe its far superior to Sendmail in
every
> > conseivable way, its secure, fast, stable. When compared to sendmail's
> > bloated, insecure, slow and semi-stable history its no supprise like
XOOM,
> > Yahoo, Lycos and other high volume email servers have been using qmail
for
> > years..
> >
> > It is a bit daunting the first time you set it up and it will require
alot
> > of work but once you have it all setup you can do it over and over again
if
> > needed...
> >
> > Qmail > Sendmail
> >
> > -Ryan
> >
> > -- This is the discussion@xxxxxxxxx list.  To unsubscribe,
> > visit http://tmp2.complete.org/cgi-bin/listargate-aclug.cgi
>
> --
> --
> - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
>   Jonathan Hall  *  jonhall@xxxxxxxxxxxx  *  PGP public key available
>  Systems Admin, Future Internet Services; Goessel, KS * (620) 367-2487
>          http://www.futureks.net/  *  PGP Key ID: FE 00 FD 51
>                   -=  Running Debian GNU/Linux  =-
> - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
> -- This is the discussion@xxxxxxxxx list.  To unsubscribe,
> visit http://tmp2.complete.org/cgi-bin/listargate-aclug.cgi
>

-- This is the discussion@xxxxxxxxx list.  To unsubscribe,
visit http://tmp2.complete.org/cgi-bin/listargate-aclug.cgi