OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: email hosting & admin with apache chroot

From: Adriaan (adriaan312hccnet.nl)
Date: Tue Dec 21 2004 - 19:02:50 CST


On Wed, 22 Dec 2004, Josh wrote:

> Hello
>
> For a few years now I have been running doing virtual web and email
> hosting using qmail + vpopmail for a few domains on an openbsd box, and
> I let users/postmasters of domains maintain their email accounts and
> settings with a web based admin tool called qmailadmin, which is a cgi
> program that modifiys qmail/vpopmails files directly... and so it can
> not run with apache chrooted.

A link from "/var/qmail" to "/var/www" probably can solve that

Quoting from http://www.lifewithqmail.org/lwq.html#build

2.5.3. Create directories

[snip]

Note: If you want some or all of the qmail files to reside elsewhere than
/var, this can be accomplished by creating symbolic links under /var/qmail
pointing to the other locations.

For example, the qmail configuration files can be stored in /etc/qmail by
doing:

    mkdir /etc/qmail
    ln -s /etc/qmail /var/qmail/control

--- end quote

>
> I plan on building up a new box to replace the existing one (which is
> running an old version of openbsd/packages), I want to try and sort out
> a lot of email related stuff while I am at it, And one of the main goals
> is to get some sort of web based email admin program working in the
> apache chroot, even if it means moving away from qmail/vpopmail.
>
> I have googled around a wee bit, and so far what I can come up with is
> using postfix, and having it work with an sql database.. which would
> then let me use an email admin setup which can run with apache chrooted.
> So, Has anyone out there got any suggestions on setting up a clean and
> secure virtual email admin system inside an apache chroot?
>
> What about databases? I get the distinct impression that Postgresql is
> tidier and more proper than mysql.. is this the case, and if so, is
> there much work in converting mysql based php setups into pgsql based
> ones?
>
>

==Adriaan==