OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Michael Ju. Tokarev (mjttls.msk.ru)
Date: Mon Jan 08 2001 - 20:44:11 CST

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    Ho Ming Shun wrote:
    >
    > Hi,
    >
    > I have two webservers running in seperate chroot jails, and
    > postfix master daemon running on the root filesystem.
    >
    > The problem is now that the programmers have reminded me that they
    > need to be able to deliver mail from within their CGI scripts. Their
    > scripts have always use the sendmail -t method, wether on Sendmail or
    > QMail. And it is not feasible to go through the scripts again.

    Interestingly - how they did it with sendmail and qmail? There should
    be some configs for them in chroot at least, so that really looks like
    separate "instance" of them in there...

    >
    > My question is, what is the best way to pass mail from inside the
    > chroot jail to postfix so that it can be delivered? Is it better to
    > set up another send-only postfix inside the jail?

    You can use mini_sendmail program for that (it is mentioned several
    times on this list recently) -- it is tiny sendmail-semi-compatible
    program that accepts mail on command line/stdin and passes it to
    localhost:smtp.

    Alternatively, you can use postfix's sendmail on linux-2.4 with glued
    together /var/spool/postfix/postdrop directories -- see thread subjected
    "Multiple maildrops ?" last week.

    > BTW, is there any docs on the "internal" protocols that postfix uses
    > (ie the options I see on daemons when is do a ps aux) other than the
    > source?

    Source code is documented -- there is a man page for each routine and
    what's it does inside each source file, and a shell script to extract
    that page in mantools/ subdir. BTW, for your question -- you have
    no good choice to talk to main postfix instance from your chroot jail
    even if you know protocols... It's far better/simpler to use standard
    protocols for that.

    >
    > Thanks in advance.
    >
    > -- Ho Ming Shun

    Regards,
     Michael.

    P.S. Please wrap lines in your messages...