OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: Single user postfix+IMAP+webmail+auth setup??

From: /dev/rob0 (rob0gmx.co.uk)
Date: Sun Jun 11 2006 - 07:54:20 CDT


On Saturday 2006-June-10 16:09, M. Fioretti wrote:
> > You could fix the virtual(8) problem, or scrap it all and use
> > local(8) delivery.
>
> Sorry, I don't understand what you mean by "virtual (8) problem"

Virtual mailbox domains are delivered by $virtual_transport, which is
by default Postfix's daemon called "virtual". The "(8)" refers to
section 8 of the Unix manual, for system daemons. Other sections of
interest in Postfix are 1, user commands; and 5, file formats.

A shorthand way to distinguish between virtual mailbox domains and
virtual alias domains is by the manual section. Postfix provides two
manual pages called "virtual", one in section 5 and the other in
section 8.

Another shorthand you will see on this list is the "$" character.
Similar to sh(1) syntax, in Postfix terminology this denotes a setting
in main.cf. All such settings can be found with anchors in the HTML
version of the postconf(5) manual page, for example:
    http://www.postfix.org/postconf.5.html#virtual_transport

In general you should refer to your local documentation, however. Don't
bother www.postfix.org. If anything has changed, you must pay close
attention to the notes about versions. Whereas, in your local copy, you
know that your Postfix can do anything described therein.

> > > Also, how do I authorize my home linux MUA and that only to
> > > _send_ email via postfix running on my VPS?
> >
> > $mynetworks (put your home IP in there) or SMTP AUTH. What I did:
>
> I _had_ thought about placing my home IP in there, but I am not sure
> it remains stable (= I have an ADSL connection, but contracts here
> don't force ISPs to maintain a reserved IP for private users for all
> the time)

There are numerous (non-Postfix) ways to work around such a problem. A
Postfix way to do it might be to use TLS certificate authentication.
I've not done that yet, myself. I don't think many MUA's support it.

> > People see HOWTOs featuring ISP-style email service, and that
> > appeals to them, when in fact good old fashioned local(8) delivery
> > to Unix accounts would suit their needs better.
>
> Well, using virtual mailbox domains is recommended, or so it seems to
> me, right in www.postfix.org/VIRTUAL_README.html... of course, if
> that's not the best solution, I'll be happy to change

Recommended, where appropriate. Local delivery is also recommended,
where appropriate. :)

> > > Do I REALLY need to set up an enterprise-level databases,
> > > certificate systems,
> >
> > You already know the answer.
>
> No (of course). Otherwise I wouldn't have asked...

Sorry, that came across to me as a "don't-you-agree-with-me" pseudo
question, and I was indicating that I agree. You do not have to make
this very complicated at this stage. I started out with simple local
delivery on my home server some years back, and then when I started
deploying commercial servers I learned a lot more.
--
    Offlist mail to this address is discarded unless
    "/dev/rob0" or "not-spam" is in Subject: header