From: Dustin Boontheekul (bsdusermath.okstate.edu)
Date: Thu Jan 27 2005 - 21:05:31 CST

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Gerald Davies wrote:

>Apologies if this sounds odd, but why run two? If one is already
>non-chrooted doesn't that defeat the purpose of having it?
>
>
Perfectly reasonable question.

1. Limited exposure. Ports 8080 and 8443 are supposed to be limited to
a few subnets as opposed to the whole world.
2. Permissions. Maybe Apache can do this and I just don't know how to
configure it, but the Apache daemon running for my normal webstuff runs
as a different user and group than the one serving Mailman. Mailman is
real picky about permissions and this helped a lot.
3. Separation. The other web stuff is up and running and doing it's own
thing. I was having to bring Mailman up on an already loaded server.
Lots of users 24/7--so having them separate helps me out in bringing up
and down services. Also, the Mailman setup can run without any modules
loaded. My other web setup runs with PHP.

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]