From owner-freebsd-isp Sun May 5 5:21:38 2002 Delivered-To: freebsd-isp@freebsd.org Received: from cobra.acceleratedweb.net (cobra-gw.acceleratedweb.net [207.99.79.37]) by hub.freebsd.org (Postfix) with SMTP id 20D5237B404 for ; Sun, 5 May 2002 05:21:35 -0700 (PDT) Received: (qmail 68566 invoked by uid 106); 5 May 2002 12:20:30 -0000 Received: from 24-90-121-13.nyc.rr.com (HELO station1) (24.90.121.13) by cobra.acceleratedweb.net with SMTP; 5 May 2002 12:20:30 -0000 From: "Simon" To: "freebsd-isp@FreeBSD.ORG" Date: Sun, 05 May 2002 08:29:12 -0400 Reply-To: "Simon" X-Mailer: PMMail 2000 Professional (2.10.2010) For Windows 2000 (5.0.2195;2) MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Subject: Apache Stops Responding Message-Id: <20020505122135.20D5237B404@hub.freebsd.org> Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org Hi, Has anyone started experiencing apache freezing up after upgrading to 4.5-R? and was able to fix the problem? I can't seem to figure it out. I'm running version 1.3.22. It was rock-solid with all releases prior to 4.5 I'm going to upgrade to 1.3.24, but don't see any fixes in it that might fix the problem. Thanks, Simon To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Sun May 5 10:45:18 2002 Delivered-To: freebsd-isp@freebsd.org Received: from net2.dinoex.sub.org (net2.dinoex.de [212.184.201.182]) by hub.freebsd.org (Postfix) with ESMTP id 0765937B406 for ; Sun, 5 May 2002 10:45:13 -0700 (PDT) Received: from net2.dinoex.sub.org (dinoex@net2.dinoex.sub.org [127.0.0.1]) by net2.dinoex.sub.org (8.12.3/8.12.3) with ESMTP id g45Hj7BU006712 for ; Sun, 5 May 2002 19:45:09 +0200 (CEST) (envelope-from dirk.meyer@dinoex.sub.org) X-MDaemon-Deliver-To: Received: from gate.dinoex.sub.org (dinoex@localhost) by net2.dinoex.sub.org (8.12.3/8.12.3/Submit) with BSMTP id g45Hj5qP006689 for ; Sun, 5 May 2002 19:45:05 +0200 (CEST) (envelope-from dirk.meyer@dinoex.sub.org) To: freebsd-isp@FreeBSD.ORG Message-ID: From: dirk.meyer@dinoex.sub.org (Dirk Meyer) Organization: privat Subject: Re: sendmail monitor and vacation Date: Sun, 05 May 2002 19:43:31 +0200 X-Mailer: Dinoex 1.77 References: <3CD3DB4A.6020206@veidit.net> X-Gateway: ZCONNECT gate.dinoex.sub.org [UNIX/Connect 0.93] X-Accept-Language: de,en X-PGP-Fingerprint: 44 16 EC 0A D3 3A 4F 28 8A 8A 47 93 F1 CF 2F 12 X-Noad: Please don't send me ad's by mail. I'm bored by this type of mail. X-Copyright: (C) Copyright 2001 by Dirk Meyer -- All rights reserved. X-Note: sending SPAM is a violation of both german and US law and will at least trigger a complaint at your provider's postmaster. X-PGP-Key-Avail: mailto:pgp-public-keys@keys.de.pgp.net Subject:GET 0x331CDA5D X-No-Archive: yes X-ZC-VIA: 20020505000000S+2@dinoex.sub.org Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org John Angelmo wrote: > I wonder if there are any good sendmail mrtg scripts that you guys/girls > would recomend, I'm looking for something where I can say the amount of > messages sent per hour/day/week/month/year in the ports: ports/mail/sma > And what kind of scripts for autoreply on vacation would you recoment, > there are two problems. The users are windows users and can't handle a > shell and vi ;) so a webinterface (or similar) is needed, and in some > way handle so it dosn't reply to specific adresses (mailinglists) I wrote a small tool in delphi, which creates a forward.ini in the user home directory ( using samba ). I plan swich to a webinterface with "smb_auth" soon. a vacation tool is included in the sendmail port, but I trust it not for accounts that have extensive mailing lists. Some mailing-list are just to braind-dead. kind regards Dirk - Dirk Meyer, Im Grund 4, 34317 Habichtswald, Germany - [dirk.meyer@dinoex.sub.org],[dirk.meyer@guug.de],[dinoex@FreeBSD.org] To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Mon May 6 7:42:16 2002 Delivered-To: freebsd-isp@freebsd.org Received: from tomts23-srv.bellnexxia.net (tomts23.bellnexxia.net [209.226.175.185]) by hub.freebsd.org (Postfix) with ESMTP id B0E9E37B401 for ; Mon, 6 May 2002 07:42:12 -0700 (PDT) Received: from cerberus.motorcity.on.ca ([65.95.178.161]) by tomts23-srv.bellnexxia.net (InterMail vM.5.01.04.05 201-253-122-122-105-20011231) with ESMTP id <20020506140728.FHLT24167.tomts23-srv.bellnexxia.net@cerberus.motorcity.on.ca> for ; Mon, 6 May 2002 10:07:28 -0400 Received: from ddd ([192.168.254.32]) by cerberus.motorcity.on.ca (8.12.2/8.12.2) with SMTP id g46E9h3U010455 for ; Mon, 6 May 2002 10:09:44 -0400 (EDT) (envelope-from george@durham.net) Reply-To: From: "George Ramos" To: Subject: Virus protection Date: Sun, 5 May 2002 20:41:14 -0400 Message-ID: <002601c1f496$bb0938a0$20fea8c0@ddd> MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook CWS, Build 9.0.2416 (9.0.2910.0) Importance: Normal X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4522.1200 Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org Well, we had a few choices and we went with amavis. The problem is that it only seems to work system wide which is not what we wanted because of two reasons: A- We don't wnat to put that kind of load on the server (scanning EVERY piece of mail B- We intend to charge a small fee to those subscribers who want it so whatever we end up with, we must have the ability on switching it on/off on a per user basis. We also had on the list DRWEB, Inflex and ...... Any suggestions? George Durham Net To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Mon May 6 8:26:17 2002 Delivered-To: freebsd-isp@freebsd.org Received: from kira.epconline.net (kira.epconline.net [207.206.185.2]) by hub.freebsd.org (Postfix) with ESMTP id 2CA1037B400 for ; Mon, 6 May 2002 08:26:10 -0700 (PDT) Received: from isp4 (betterguard.epconline.net [207.206.185.193]) by kira.epconline.net (8.11.4/8.11.4) with SMTP id g46FQ2510508 for ; Mon, 6 May 2002 10:26:02 -0500 (CDT) Reply-To: From: "Chuck Rock" To: Subject: RE: Virus protection Date: Mon, 6 May 2002 10:26:01 -0500 Message-ID: MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook IMO, Build 9.0.2416 (9.0.2911.0) Importance: Normal In-Reply-To: <002601c1f496$bb0938a0$20fea8c0@ddd> X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4910.0300 Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org Why not just add this to the list of why you should be our customer and not some other ISP's? We do it and call it the cost of doing business. Sometimes "nickle and diming" the customer only makes things worse. I have a small ISP, and it's easy for me to say those things, I know some people on the list run large ISP's and really need to cut costs, and charge extra for ever little service. I can tell you from our experience that people that have moved their service away have usually come back because we don't charge extra for E-mail virus scanning. Chuck Rock Internet Services Manager EPC, Inc. http://www.epcusa.com -----Original Message----- From: owner-freebsd-isp@FreeBSD.ORG [mailto:owner-freebsd-isp@FreeBSD.ORG]On Behalf Of George Ramos Sent: Sunday, May 05, 2002 7:41 PM To: freebsd-isp@FreeBSD.ORG Subject: Virus protection Well, we had a few choices and we went with amavis. The problem is that it only seems to work system wide which is not what we wanted because of two reasons: A- We don't wnat to put that kind of load on the server (scanning EVERY piece of mail B- We intend to charge a small fee to those subscribers who want it so whatever we end up with, we must have the ability on switching it on/off on a per user basis. We also had on the list DRWEB, Inflex and ...... Any suggestions? George Durham Net To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Mon May 6 8:36:10 2002 Delivered-To: freebsd-isp@freebsd.org Received: from linux.lnk.lt (linux.lnk.lt [195.12.175.45]) by hub.freebsd.org (Postfix) with SMTP id 9CDF437B403 for ; Mon, 6 May 2002 08:35:52 -0700 (PDT) Received: (qmail 5726 invoked from network); 6 May 2002 17:35:47 +0200 Received: from unknown (HELO mantas) (195.12.175.42) by 0 with SMTP; 6 May 2002 17:35:47 +0200 Message-ID: <00de01c1f513$b1740900$2e01010a@mantas> Reply-To: "Mantas Smelevicius" From: "Mantas Smelevicius" To: , References: <002601c1f496$bb0938a0$20fea8c0@ddd> Subject: Re: Virus protection Date: Mon, 6 May 2002 17:35:47 +0200 Organization: FreeBSD.lt comunity MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2600.0000 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000 Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org postfix + panda Mantas Smelevicius Head of IT division LNK TV Lukiskiu 5, 3000 Vilnius Lithuania http://www.mantas.lt ICQ UIN 31072511 ----- Original Message ----- From: "George Ramos" To: Sent: Monday, May 06, 2002 2:41 AM Subject: Virus protection > Well, we had a few choices and we went with amavis. The problem is that it > only seems to work system wide which is not what we wanted because of two > reasons: > A- We don't wnat to put that kind of load on the server (scanning EVERY > piece of mail > B- We intend to charge a small fee to those subscribers who want it so > whatever we end up with, we must have the ability on switching it on/off on > a per user basis. > > We also had on the list DRWEB, Inflex and ...... > > Any suggestions? > > George > > Durham Net > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-isp" in the body of the message > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Mon May 6 8:45:31 2002 Delivered-To: freebsd-isp@freebsd.org Received: from misery.sdf.com (misery.sdf.com [207.200.153.226]) by hub.freebsd.org (Postfix) with ESMTP id 2CD3837B400 for ; Mon, 6 May 2002 08:45:24 -0700 (PDT) Received: from tom (helo=localhost) by misery.sdf.com with local-esmtp (Exim 2.12 #1) id 174jq8-0002OZ-00; Mon, 6 May 2002 07:51:48 -0700 Date: Mon, 6 May 2002 07:51:46 -0700 (PDT) From: Tom Samplonius To: Chuck Rock Cc: freebsd-isp@FreeBSD.ORG Subject: RE: Virus protection In-Reply-To: Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org On Mon, 6 May 2002, Chuck Rock wrote: > Why not just add this to the list of why you should be our customer and not > some other ISP's? > > We do it and call it the cost of doing business. Sometimes "nickle and > diming" the customer only makes things worse. ... You need to be cautious about AV scanning engine you use. Most have per user licensing fees (and if you haven't paid them, you are in violation of the license), which can add up a lot of money. I was quoted over $100,000 for Norton AV, plus a further a further $30,000/yr in support costs. Tom To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Mon May 6 8:58:11 2002 Delivered-To: freebsd-isp@freebsd.org Received: from db.nexgen.com (db.nexgen.com [209.208.217.13]) by hub.freebsd.org (Postfix) with SMTP id 379FD37B403 for ; Mon, 6 May 2002 08:58:09 -0700 (PDT) Received: (qmail 47149 invoked from network); 6 May 2002 14:58:33 -0000 Received: from localhost.nexgen.com (HELO alexus) (127.0.0.1) by localhost.nexgen.com with SMTP; 6 May 2002 14:58:33 -0000 Message-ID: <000d01c1f517$184802f0$0d00a8c0@alexus> From: "alexus" To: Subject: backup Date: Mon, 6 May 2002 12:00:08 -0400 MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2600.0000 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000 Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org Hello I need to perform a daily backup of some of directories, what would be a best way to approach this? I would probably need to restore some of it ... every now and then. Any suggestions are very welcome. thanks in advance alexus To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Mon May 6 14:51:40 2002 Delivered-To: freebsd-isp@freebsd.org Received: from post.xecu.net (post.xecu.net [216.127.136.211]) by hub.freebsd.org (Postfix) with ESMTP id ECFD437B403 for ; Mon, 6 May 2002 14:51:35 -0700 (PDT) Received: from thunder.xecu.net (thunder.xecu.net [216.127.136.208]) by post.xecu.net (Postfix) with ESMTP id 172454AEB; Mon, 6 May 2002 17:51:30 -0400 (EDT) Received: by thunder.xecu.net (Postfix, from userid 100) id 81EF8250FF; Mon, 6 May 2002 17:51:22 -0400 (EDT) Received: from localhost (localhost [127.0.0.1]) by thunder.xecu.net (Postfix) with ESMTP id 7895D250FD; Mon, 6 May 2002 17:51:22 -0400 (EDT) Date: Mon, 6 May 2002 17:51:22 -0400 (EDT) From: Andy Dills To: alexus Cc: freebsd-isp@FreeBSD.ORG Subject: Re: backup In-Reply-To: <000d01c1f517$184802f0$0d00a8c0@alexus> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org On Mon, 6 May 2002, alexus wrote: > Hello > > I need to perform a daily backup of some of directories, what would be a > best way to approach this? I would probably need to restore some of it ... > every now and then. Any suggestions are very welcome. > > thanks in advance http://rsync.samba.org Andy xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx Andy Dills 301-682-9972 Xecunet, LLC www.xecu.net xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx Dialup * Webhosting * E-Commerce * High-Speed Access To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Mon May 6 14:55:32 2002 Delivered-To: freebsd-isp@freebsd.org Received: from moat.teksupport.net.au (moat.teksupport.net.au [203.17.1.98]) by hub.freebsd.org (Postfix) with ESMTP id 1170837B40C for ; Mon, 6 May 2002 14:55:23 -0700 (PDT) Received: from rob.secombe.teksupport.net.au (rob.secombe.teksupport.net.au [192.168.1.2]) by moat.teksupport.net.au (8.11.0/8.11.0) with SMTP id g46LtKN74867 for ; Tue, 7 May 2002 07:55:21 +1000 (EST) (envelope-from robseco@teksupport.net.au) Message-Id: <3.0.5.32.20020507075517.03ae7560@mail.secombe> X-Sender: robseco@mail.secombe X-Mailer: QUALCOMM Windows Eudora Light Version 3.0.5 (32) Date: Tue, 07 May 2002 07:55:17 +1000 To: freebsd-isp@FreeBSD.ORG From: Rob Secombe Subject: RE: Virus protection In-Reply-To: References: Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org Hi all, I am in the process of trialing RAV with sendmail libmilter. Easy to install, auto-updates, and best of all, for ISP's, the licencing is based on the number of domains you want to protect and you can add them as you want. So you can sell the virus scanning as a "value add" that you can switch on or off. I have not run it under any considerable load as yet but so far it looks good. http://www.ravantivirus.com/ Cheers Rob. At 07:51 06/05/02 -0700, Tom Samplonius wrote: > >On Mon, 6 May 2002, Chuck Rock wrote: > >> Why not just add this to the list of why you should be our customer and not >> some other ISP's? >> >> We do it and call it the cost of doing business. Sometimes "nickle and >> diming" the customer only makes things worse. >... > > You need to be cautious about AV scanning engine you use. Most have per >user licensing fees (and if you haven't paid them, you are in violation of >the license), which can add up a lot of money. I was quoted over $100,000 >for Norton AV, plus a further a further $30,000/yr in support costs. > >Tom > > >To Unsubscribe: send mail to majordomo@FreeBSD.org >with "unsubscribe freebsd-isp" in the body of the message > > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Tue May 7 1:52:32 2002 Delivered-To: freebsd-isp@freebsd.org Received: from webmail.emre.de (webmail.emre.de [194.8.203.50]) by hub.freebsd.org (Postfix) with ESMTP id 50DE237B403 for ; Tue, 7 May 2002 01:52:26 -0700 (PDT) Received: (from www@localhost) by webmail.emre.de (8.11.6/8.11.6) id g478qOg09903 for freebsd-isp@freebsd.org; Tue, 7 May 2002 10:52:24 +0200 (CEST) (envelope-from info@emre.de) X-Authentication-Warning: webmail.emre.de: www set sender to info@emre.de using -f Received: from 194.8.193.125 ( [194.8.193.125]) as user emre@webmail.emre.de by webmail.emre.de with HTTP; Tue, 7 May 2002 10:52:24 +0200 Message-ID: <1020761544.3cd795c8097c8@webmail.emre.de> Date: Tue, 7 May 2002 10:52:24 +0200 From: Emre Bastuz To: freebsd-isp@freebsd.org Subject: Some thoughts on Antivirus + LDAP + Mailrouting MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 8bit User-Agent: Internet Messaging Program (IMP) 3.0 X-Originating-IP: 194.8.193.125 Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org Hi, I´ve just read the thread on virus scanning and come up with some ideas. What do you guys think of the following scenario for an LDAP based solution, that enables the customer to decide whether to check for virii or not and that should keep the machine load low on the main smtp server. Let´s say you have a mailrouter, this one´s visible to the outside world. The mailrouter is connected to an LDAP server which contains the info, whether the user has booked the virus scanning feature or not, and on which machine the actual mail account is located. Then there is the virus scanning server. Processing might be like this: 1. incoming mails go to the mailrouter 2. an ldap query is made, in case the user does not want virus protection the mail is delivered to the machine with the account 3. else the mail is forwarded to the machine running the antivirus software 4. after the check is done, another ldap query is made to determine where the mailbox is located 5. the mail is delivered Pros: - the AV software is one a single server and does only process mails for users who explicitly want and pay for this feature - ldap + mailrouting seems to be quite common in the isp world, so no new infrastructure/technology is needed - the feature of av scanning can easily be turned on/off on a per account basis Cons: ? Has any of you implemented such things ? Any objections ? Hints ? Thoughts ? Regards, Emre -- Emre Bastuz info@emre.de http://www.emre.de UIN: 561260 PGP Key ID: 0xAFAC77FD ------------------------------------------------- This mail sent through IMP: http://horde.org/imp/ To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Tue May 7 7:43:31 2002 Delivered-To: freebsd-isp@freebsd.org Received: from lily.ezo.net (lily.ezo.net [206.102.130.13]) by hub.freebsd.org (Postfix) with ESMTP id 5E45437B408 for ; Tue, 7 May 2002 07:43:26 -0700 (PDT) Received: from peony.ezo.net (peony.ezo.net [206.102.130.11]) by lily.ezo.net (8.11.6/8.11.6) with ESMTP id g47EgrZ57117; Tue, 7 May 2002 10:42:53 -0400 (EDT) (envelope-from jflowers@ezo.net) From: "Jim Flowers" To: Rob Secombe , freebsd-isp@FreeBSD.ORG Subject: RE: Virus protection Date: Tue, 7 May 2002 10:43:01 -0400 Message-Id: <20020507104301.M18371@ezo.net> In-Reply-To: <3.0.5.32.20020507075517.03ae7560@mail.secombe> References: <3.0.5.32.20020507075517.03ae7560@mail.secombe> X-Mailer: Open WebMail 1.60 20020130 X-OriginatingIP: 24.93.230.119 (jflowers) MIME-Version: 1.0 Content-Type: text/plain; charset=iso-8859-1 Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org I have been running RAV for a couple of weeks now from a sendmail milter along with drweb and spamassassin. Sendmail anti-relay and rbl traps using ordb and osirusoft preceed everything and a following relay runs inflex via sendmail before the users pick up mail via pop3/imap/webmail. There are several features about RAV that I like and so far it has done its share of the work with a minimum of false positives. I'll be interested in your observations. > Hi all, > > I am in the process of trialing RAV with sendmail libmilter. > Easy to install, auto-updates, and best of all, for ISP's, > the licencing is based on the number of domains you want to > protect and you can add them as you want. So you can sell the > virus scanning as a "value add" that you can switch on or off. > I have not run it under any considerable load as yet but so > far it looks good. > > http://www.ravantivirus.com/ > > Cheers > > Rob. > > > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-isp" in the body of the message -- Jim Flowers To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Tue May 7 9: 5: 2 2002 Delivered-To: freebsd-isp@freebsd.org Received: from customer.ecore.net (enterprise.ecore.net [212.223.70.1]) by hub.freebsd.org (Postfix) with SMTP id AB93337B409 for ; Tue, 7 May 2002 09:04:54 -0700 (PDT) Received: (qmail 7883 invoked from network); 7 May 2002 16:04:49 -0000 Received: from pd9e4a527.dip.t-dialin.net (HELO cheasy.de) (217.228.165.39) by cheasy.de with SMTP; 7 May 2002 16:04:49 -0000 Message-ID: <3CD7FB1D.5050801@cheasy.de> Date: Tue, 07 May 2002 18:04:45 +0200 From: Christoph Sold User-Agent: Mozilla/5.0 (Windows; U; Win 9x 4.90; en-US; rv:1.0rc1) Gecko/20020417 X-Accept-Language: en-us, en MIME-Version: 1.0 To: alexus Cc: freebsd-isp@FreeBSD.ORG Subject: Re: backup References: <000d01c1f517$184802f0$0d00a8c0@alexus> Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org alexus wrote: > Hello > > I need to perform a daily backup of some of directories, what would be a > best way to approach this? I would probably need to restore some of it ... > every now and then. Any suggestions are very welcome. For tape backups, amanda ( http://www.amanda.org/ ) is the way to go. For file histories, CVS, rsync, RCS, and others will do. All of them are in the ports or in the base system. HTH -Christoph Sold To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Tue May 7 11:18:42 2002 Delivered-To: freebsd-isp@freebsd.org Received: from stuff.webintl.com (stuff.webintl.com [209.248.144.10]) by hub.freebsd.org (Postfix) with ESMTP id 83E7437B400 for ; Tue, 7 May 2002 11:18:35 -0700 (PDT) Received: from [192.168.123.20] (adsl-66-136-237-161.dsl.ltrkar.swbell.net [66.136.237.161]) by stuff.webintl.com (8.9.3/8.9.3) with ESMTP id NAA09967 for ; Tue, 7 May 2002 13:18:33 -0500 Mime-Version: 1.0 X-Sender: freebsd@mail.webintl.com Message-Id: In-Reply-To: <20020507104301.M18371@ezo.net> References: <3.0.5.32.20020507075517.03ae7560@mail.secombe> <20020507104301.M18371@ezo.net> Date: Tue, 7 May 2002 13:18:30 -0500 To: freebsd-isp@freebsd.org From: Albert Everett Subject: RE: Virus protection Content-Type: text/plain; charset="us-ascii" ; format="flowed" Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org What's "inflex" in "a following relay runs inflex" below? I'm also evaluating RAV and will be interested to hear any comments. Albert >I have been running RAV for a couple of weeks now from a sendmail milter >along with drweb and spamassassin. Sendmail anti-relay and rbl traps using >ordb and osirusoft preceed everything and a following relay runs inflex via >sendmail before the users pick up mail via pop3/imap/webmail. There are >several features about RAV that I like and so far it has done its share of >the work with a minimum of false positives. I'll be interested in your >observations. > >> Hi all, >> >> I am in the process of trialing RAV with sendmail libmilter. >> Easy to install, auto-updates, and best of all, for ISP's, >> the licencing is based on the number of domains you want to >> protect and you can add them as you want. So you can sell the >> virus scanning as a "value add" that you can switch on or off. >> I have not run it under any considerable load as yet but so >> far it looks good. >> >> http://www.ravantivirus.com/ >> >> Cheers >> >> Rob. >> > >> > >> >> To Unsubscribe: send mail to majordomo@FreeBSD.org >> with "unsubscribe freebsd-isp" in the body of the message > > >-- >Jim Flowers > >To Unsubscribe: send mail to majordomo@FreeBSD.org >with "unsubscribe freebsd-isp" in the body of the message -- ----------------------------------------------------------------------- Albert Everett - Web International, Inc. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Tue May 7 17:24:50 2002 Delivered-To: freebsd-isp@freebsd.org Received: from smtpout.mac.com (smtpout.mac.com [204.179.120.88]) by hub.freebsd.org (Postfix) with ESMTP id 576DC37B401 for ; Tue, 7 May 2002 17:24:45 -0700 (PDT) Received: from smtp-relay03-en1.mac.com (smtp-relay03-en1 [10.13.10.222]) by smtpout.mac.com (8.12.1/8.10.2/1.0) with ESMTP id g480OjPZ013640 for ; Tue, 7 May 2002 17:24:45 -0700 (PDT) Received: from asmtp01.mac.com (asmtp01-qfe3 [10.13.10.65]) by smtp-relay03-en1.mac.com (8.12.1/8.12.1/1.0) with ESMTP id g480OdC7009428 for ; Tue, 7 May 2002 17:24:40 -0700 (PDT) Received: from localhost ([149.99.59.130]) by asmtp01.mac.com (Netscape Messaging Server 4.15 asmtp01 Jun 21 2001 23:53:48) with ESMTP id GVRNT300.8U6 for ; Tue, 7 May 2002 17:24:39 -0700 Date: Tue, 7 May 2002 17:24:37 -0700 Subject: IP aliasing... Content-Type: text/plain; charset=US-ASCII; format=flowed Mime-Version: 1.0 (Apple Message framework v481) From: Tom Wiebe To: isp@freebsd.org Content-Transfer-Encoding: 7bit In-Reply-To: <002601c1f496$bb0938a0$20fea8c0@ddd> Message-Id: X-Mailer: Apple Mail (2.481) Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org Hi all, Well, I've got my shiny new line installed and am starting to configure my servers. At the moment, I'll have multiple services running on some boxes, i.e. mail and web on the same box. I was thinking that it might be easier in the future if I ran these services on separate IP's, so that I can easily move them to dedicated boxes when required. My question is, is there any performance hit for IP aliasing as opposed to just running both services off of the same IP. I don't imagine that I'd see any performance improvement with this, but will I lose out. Would I see a remarkable improvement if I were to add multiple NIC's (something I'd prefer not to do right now, just to avoid the tangle of wires growing to unmanageable proportions, if nothing else). Is there strength to my logic, or am I being silly here? TIA Tom Wiebe To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Tue May 7 17:30: 1 2002 Delivered-To: freebsd-isp@freebsd.org Received: from apollo.pwhsnet.com (adsl-64-168-102-95.dsl.scrm01.pacbell.net [64.168.102.95]) by hub.freebsd.org (Postfix) with ESMTP id CBCFF37B401 for ; Tue, 7 May 2002 17:29:55 -0700 (PDT) Received: from zeus (patrick@zeus.pwhsnet.com [192.168.0.3]) by apollo.pwhsnet.com (8.12.2/8.11.6) with SMTP id g480bjwi075155; Tue, 7 May 2002 17:37:45 -0700 (PDT) (envelope-from patrick@pwhsnet.com) Message-ID: <01a901c1f627$0895d880$0300a8c0@zeus> From: "Patrick O. Fish" To: "Tom Wiebe" , References: Subject: Re: IP aliasing... Date: Tue, 7 May 2002 17:26:45 -0700 MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 5.50.4807.1700 X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4910.0300 Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org > Would I see a remarkable improvement if I were to add multiple NIC's > (something I'd prefer not to do right now, just to avoid the tangle of > wires growing to unmanageable proportions, if nothing else). ifconfig dc0(or whatever your ethernet card is) alias ----- Original Message ----- From: "Tom Wiebe" To: Sent: Tuesday, May 07, 2002 5:24 PM Subject: IP aliasing... > Hi all, > > Well, I've got my shiny new line installed and am starting to configure my > servers. At the moment, I'll have multiple services running on some boxes, > i.e. mail and web on the same box. > > I was thinking that it might be easier in the future if I ran these > services on separate IP's, so that I can easily move them to dedicated > boxes when required. > > My question is, is there any performance hit for IP aliasing as opposed to > just running both services off of the same IP. I don't imagine that I'd > see any performance improvement with this, but will I lose out. > > Would I see a remarkable improvement if I were to add multiple NIC's > (something I'd prefer not to do right now, just to avoid the tangle of > wires growing to unmanageable proportions, if nothing else). > > Is there strength to my logic, or am I being silly here? > > TIA > > Tom Wiebe > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-isp" in the body of the message > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Tue May 7 18:33:18 2002 Delivered-To: freebsd-isp@freebsd.org Received: from smtpout.mac.com (smtpout.mac.com [204.179.120.86]) by hub.freebsd.org (Postfix) with ESMTP id 9892637B40F for ; Tue, 7 May 2002 18:33:05 -0700 (PDT) Received: from smtp-relay04-en1.mac.com (smtp-relay04-en1 [10.13.10.223]) by smtpout.mac.com (8.12.1/8.10.2/1.0) with ESMTP id g481X5EM023803 for ; Tue, 7 May 2002 18:33:05 -0700 (PDT) Received: from asmtp02.mac.com (asmtp02-qfe3.mac.com [10.13.10.66]) by smtp-relay04-en1.mac.com (8.12.1/8.12.1/1.0) with ESMTP id g481Wx2J022477 for ; Tue, 7 May 2002 18:32:59 -0700 (PDT) Received: from localhost ([149.99.59.130]) by asmtp02.mac.com (Netscape Messaging Server 4.15 asmtp02 Jun 21 2001 23:53:48) with ESMTP id GVRQYZ00.AD4 for ; Tue, 7 May 2002 18:32:59 -0700 Date: Tue, 7 May 2002 18:32:57 -0700 Subject: Re: IP aliasing... Content-Type: text/plain; charset=US-ASCII; format=flowed Mime-Version: 1.0 (Apple Message framework v481) From: Tom Wiebe To: isp@freebsd.org Content-Transfer-Encoding: 7bit In-Reply-To: <01a901c1f627$0895d880$0300a8c0@zeus> Message-Id: <86DBF1E2-6223-11D6-94B7-0030658FC1FC@mac.com> X-Mailer: Apple Mail (2.481) Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org Sorry, perhaps I wasn't clear. I know how to accomplish this. I was inquiring as to the wisdom of this course of action. Will I sleep well at night, knowing I have configured things in a god-like fashion, or will I be the subject of so much snickering behind my back by those well steeped in the black art of unix administration. :-? Tom On Tuesday, May 7, 2002, at 05:26 PM, Patrick O. Fish wrote: > >> Would I see a remarkable improvement if I were to add multiple NIC's >> (something I'd prefer not to do right now, just to avoid the tangle of >> wires growing to unmanageable proportions, if nothing else). > > ifconfig dc0(or whatever your ethernet card is) alias To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Tue May 7 18:37:50 2002 Delivered-To: freebsd-isp@freebsd.org Received: from mailsrv.amplex.net (mailsrv.amplex.net [65.165.120.194]) by hub.freebsd.org (Postfix) with ESMTP id 12D1D37B405 for ; Tue, 7 May 2002 18:37:43 -0700 (PDT) Received: from mark2000 (65-165-120-241.amplex.net [65.165.120.241]) (authenticated (0 bits)) by mailsrv.amplex.net (8.11.6/8.11.6) with ESMTP id g481YUU92200 (using TLSv1/SSLv3 with cipher RC4-MD5 (128 bits) verified NO); Tue, 7 May 2002 21:34:30 -0400 (EDT) From: "Mark Radabaugh" To: "Tom Wiebe" , Subject: RE: IP aliasing... Date: Tue, 7 May 2002 21:37:37 -0400 Message-ID: MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook IMO, Build 9.0.2416 (9.0.2911.0) Importance: Normal X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000 In-Reply-To: Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org > I was thinking that it might be easier in the future if I ran these > services on separate IP's, so that I can easily move them to > dedicated > boxes when required. > > My question is, is there any performance hit for IP aliasing > as opposed to > just running both services off of the same IP. That's what DNS is for - so you can change IP addresses while using the same name. CNAME's are useful for that function as well. >I don't imagine that I'd > see any performance improvement with this, but will I lose out. No performance problem (at least nothing significant) if you want to do it this way. It won't hurt anything. > > Is there strength to my logic, or am I being silly here? > It's a good idea to keep things seperate at least by DNS name (even if they point to the same IP). It makes it much easier to move things around as needed. Your doing pretty much what we did when we started. The biggest mistakes we made were hardcoding DNS for some customers and using machine names (rack0.amplex.net) instead of role names (pop3.amplex.net) for some things. > TIA > > Tom Wiebe Mark Radabaugh Amplex (419) 833-3635 To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Tue May 7 18:45:51 2002 Delivered-To: freebsd-isp@freebsd.org Received: from hades.gigguardian.com (vven-216.sjc.ca.bbnow.net [24.219.11.216]) by hub.freebsd.org (Postfix) with ESMTP id D5AE037B404 for ; Tue, 7 May 2002 18:45:40 -0700 (PDT) Received: from europa (europa.gigguardian.com [192.168.1.2]) by hades.gigguardian.com (8.11.6/8.11.6) with SMTP id g481jVa01056; Tue, 7 May 2002 18:45:31 -0700 (PDT) (envelope-from vhm3@hades.gigguardian.com) From: "Chip McClure" To: "Tom Wiebe" , Subject: RE: IP aliasing... Date: Tue, 7 May 2002 18:45:31 -0700 Message-ID: MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook IMO, Build 9.0.2416 (9.0.2910.0) Importance: Normal X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2314.1300 In-Reply-To: <86DBF1E2-6223-11D6-94B7-0030658FC1FC@mac.com> Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Sleep well. :) This is done quite commonly by those who practice the dark arts of administration. Chip - ----- Chip McClure Sr. Unix Administrator GigGuardian, Inc. http://www.gigguardian.com/ - ----- - -----Original Message----- From: owner-freebsd-isp@FreeBSD.ORG [mailto:owner-freebsd-isp@FreeBSD.ORG]On Behalf Of Tom Wiebe Sent: Tuesday, May 07, 2002 6:33 PM To: isp@FreeBSD.ORG Subject: Re: IP aliasing... Sorry, perhaps I wasn't clear. I know how to accomplish this. I was inquiring as to the wisdom of this course of action. Will I sleep well at night, knowing I have configured things in a god-like fashion, or will I be the subject of so much snickering behind my back by those well steeped in the black art of unix administration. :-? Tom On Tuesday, May 7, 2002, at 05:26 PM, Patrick O. Fish wrote: > >> Would I see a remarkable improvement if I were to add multiple >> NIC's (something I'd prefer not to do right now, just to avoid the >> tangle of wires growing to unmanageable proportions, if nothing >> else). > > ifconfig dc0(or whatever your ethernet card is) alias To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message -----BEGIN PGP SIGNATURE----- Version: PGP Personal Privacy 6.5.8 iQA/AwUBPNiCFJuKtP8CSC69EQKy8ACeKRkex+8ZIsr1wQhPEVNh0gBrjWcAoIFG cgo3ST4zdiZVis3Q0ITRlwSV =5AZT -----END PGP SIGNATURE----- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Tue May 7 22:30:32 2002 Delivered-To: freebsd-isp@freebsd.org Received: from mail.voljatel.si (mail.voljatel.si [217.72.64.15]) by hub.freebsd.org (Postfix) with ESMTP id 4F2FC37B40F for ; Tue, 7 May 2002 22:30:26 -0700 (PDT) Received: from pxna.hide.voljatel.si (pehta.voljatel.si [217.72.64.8]) by mail.voljatel.si (Postfix) with SMTP id 639AA53506 for ; Wed, 8 May 2002 07:30:24 +0200 (CEST) Date: Wed, 8 May 2002 07:33:47 +0200 From: Damir Horvat To: isp@freebsd.org Subject: Re: IP aliasing... Message-Id: <20020508073347.05d885eb.damir@voljatel.si> In-Reply-To: References: <86DBF1E2-6223-11D6-94B7-0030658FC1FC@mac.com> Organization: Voljatel telekomunikacije d.d. X-Mailer: Sylpheed version 0.7.2 (GTK+ 1.2.10; i386-portbld-freebsd4.4) X-Operating-System: home brewed unix Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org On Tue, 7 May 2002 18:45:31 -0700 "Chip McClure" wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > Sleep well. :) > > This is done quite commonly by those who practice the dark arts of > administration. But check the logs and interfaces for anomalies (ie. netstat -I (<- this is big i) ) anyway. damir -- ................................. Damir Horvat System administrator VOLJATEL telekomunikacije d.d. Smartinska 106 SI-1000 Ljubljana Slovenia . Tel. +386.(0)1.5875 832 Fax. +386.(0)1.5875 899 www.voljatel.si E-mail: damir.horvat@voljatel.si ................................. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Tue May 7 22:57:38 2002 Delivered-To: freebsd-isp@freebsd.org Received: from backup.dagupan.com (mailserver.dagupan.com [202.91.161.131]) by hub.freebsd.org (Postfix) with ESMTP id 4097B37B406 for ; Tue, 7 May 2002 22:57:35 -0700 (PDT) Received: by mailserver.dagupan.com with Internet Mail Service (5.5.2653.19) id ; Wed, 8 May 2002 13:57:49 +0800 Message-ID: <10F29E27A956D511B0940050DA8D86A985C1FD@mailserver.dagupan.com> From: francisv@dagupan.com To: freebsd-isp@FreeBSD.ORG Subject: Web hosting and jail Date: Wed, 8 May 2002 13:57:49 +0800 MIME-Version: 1.0 X-Mailer: Internet Mail Service (5.5.2653.19) Content-Type: text/plain Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org Hi, We are starting to offer web hosting solution using FreeBSD's jail facility. However, I discovered that some of our clients are installing proxy/cache services like Squid to use our bandwidth to their advantage. Now, I'm starting their jail processes with a nice value of 10 but how do you discourage them NOT to run proxy/cache services inside the jail environment besides telling them not to? BTW, is there a FreeBSD-specific list for web hosting solutions? Thanks in advance! --- francis a. vidal [bitstop network services] | http://www.bitstop.ph streaming media + web hosting | http://www.keystone.ph v(02)330-2871,(02)330-2872; f(02)330-2873 | http://www.kuro.ph To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Tue May 7 23:33:28 2002 Delivered-To: freebsd-isp@freebsd.org Received: from misery.sdf.com (misery.sdf.com [207.200.153.226]) by hub.freebsd.org (Postfix) with ESMTP id ACC8437B405 for ; Tue, 7 May 2002 23:33:23 -0700 (PDT) Received: from tom (helo=localhost) by misery.sdf.com with local-esmtp (Exim 2.12 #1) id 175KB4-0001nP-00; Tue, 7 May 2002 22:39:50 -0700 Date: Tue, 7 May 2002 22:39:48 -0700 (PDT) From: Tom Samplonius To: francisv@dagupan.com Cc: freebsd-isp@FreeBSD.ORG Subject: Re: Web hosting and jail In-Reply-To: <10F29E27A956D511B0940050DA8D86A985C1FD@mailserver.dagupan.com> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org 1. Use filters to make sure clients are just web hosting. 2. Monitor traffic to and from the jails IP, and use it for billing, so it won't matter what your clients do. Tom On Wed, 8 May 2002 francisv@dagupan.com wrote: > Hi, > > We are starting to offer web hosting solution using FreeBSD's jail facility. > However, I discovered that some of our clients are installing proxy/cache > services like Squid to use our bandwidth to their advantage. Now, I'm > starting their jail processes with a nice value of 10 but how do you > discourage them NOT to run proxy/cache services inside the jail environment > besides telling them not to? > > BTW, is there a FreeBSD-specific list for web hosting solutions? > > Thanks in advance! > > --- > francis a. vidal [bitstop network services] | http://www.bitstop.ph > streaming media + web hosting | http://www.keystone.ph > v(02)330-2871,(02)330-2872; f(02)330-2873 | http://www.kuro.ph > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-isp" in the body of the message > > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Tue May 7 23:44:21 2002 Delivered-To: freebsd-isp@freebsd.org Received: from mail.voljatel.si (mail.voljatel.si [217.72.64.15]) by hub.freebsd.org (Postfix) with ESMTP id 5F9C137B404 for ; Tue, 7 May 2002 23:44:17 -0700 (PDT) Received: from mainframe.hide.voljatel.si (x-si.org [217.72.76.200]) by mail.voljatel.si (Postfix) with SMTP id 61D7A53501; Wed, 8 May 2002 08:44:15 +0200 (CEST) Date: Wed, 8 May 2002 08:46:49 +0200 From: Jaka Erjavec Voljatel To: francisv@dagupan.com, freebsd-isp@freebsd.org Subject: Re: Web hosting and jail Message-Id: <20020508084649.09da9730.jaka.erjavec@voljatel.si> In-Reply-To: <10F29E27A956D511B0940050DA8D86A985C1FD@mailserver.dagupan.com> References: <10F29E27A956D511B0940050DA8D86A985C1FD@mailserver.dagupan.com> Reply-To: jaka.erjavec@voljatel.si Organization: Voljatel Telekomunikacije d.d. X-Mailer: Sylpheed version 0.7.2claws (GTK+ 1.2.10; i386-portbld-freebsd4.4) User-Agent: Hackaa bay Jaka (homemade.pl) X-Operating-System: Dos 6.22 16-bit Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org Hi! Try setting jail.socket_unixiproute_only sysctl value to 1. This will disable all the outbound connection from that jail. Regards, Jaka On Wed, 8 May 2002 13:57:49 +0800 francisv@dagupan.com wrote: > Hi, > > We are starting to offer web hosting solution using FreeBSD's jail facility. > However, I discovered that some of our clients are installing proxy/cache > services like Squid to use our bandwidth to their advantage. Now, I'm > starting their jail processes with a nice value of 10 but how do you > discourage them NOT to run proxy/cache services inside the jail environment > besides telling them not to? > > BTW, is there a FreeBSD-specific list for web hosting solutions? > > Thanks in advance! > > --- > francis a. vidal [bitstop network services] | http://www.bitstop.ph > streaming media + web hosting | http://www.keystone.ph > v(02)330-2871,(02)330-2872; f(02)330-2873 | http://www.kuro.ph > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-isp" in the body of the message To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Tue May 7 23:46:45 2002 Delivered-To: freebsd-isp@freebsd.org Received: from backup.dagupan.com (mailserver.dagupan.com [202.91.161.131]) by hub.freebsd.org (Postfix) with ESMTP id 118F837B404 for ; Tue, 7 May 2002 23:46:33 -0700 (PDT) Received: by mailserver.dagupan.com with Internet Mail Service (5.5.2653.19) id ; Wed, 8 May 2002 14:46:46 +0800 Message-ID: <10F29E27A956D511B0940050DA8D86A985C1FF@mailserver.dagupan.com> From: francisv@dagupan.com To: freebsd-isp@FreeBSD.ORG Subject: RE: Web hosting and jail Date: Wed, 8 May 2002 14:46:46 +0800 MIME-Version: 1.0 X-Mailer: Internet Mail Service (5.5.2653.19) Content-Type: text/plain Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org I can probably do suggestion no. 1 on the router. Can you suggest tools that will do no. 2? -----Original Message----- From: Tom Samplonius [mailto:tom@sdf.com] Sent: Wednesday, May 08, 2002 1:40 PM To: francisv@dagupan.com Cc: freebsd-isp@FreeBSD.ORG Subject: Re: Web hosting and jail 1. Use filters to make sure clients are just web hosting. 2. Monitor traffic to and from the jails IP, and use it for billing, so it won't matter what your clients do. Tom On Wed, 8 May 2002 francisv@dagupan.com wrote: > Hi, > > We are starting to offer web hosting solution using FreeBSD's jail facility. > However, I discovered that some of our clients are installing proxy/cache > services like Squid to use our bandwidth to their advantage. Now, I'm > starting their jail processes with a nice value of 10 but how do you > discourage them NOT to run proxy/cache services inside the jail environment > besides telling them not to? > > BTW, is there a FreeBSD-specific list for web hosting solutions? > > Thanks in advance! To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Wed May 8 0:14:56 2002 Delivered-To: freebsd-isp@freebsd.org Received: from tesla.foo.is (tesla.reverse-bias.org [217.151.166.96]) by hub.freebsd.org (Postfix) with ESMTP id A028637B40D for ; Wed, 8 May 2002 00:14:49 -0700 (PDT) Received: from there (eniac.foo.is [192.168.1.25]) by tesla.foo.is (Postfix) with SMTP id 701BE2744; Wed, 8 May 2002 07:14:43 +0000 (GMT) Content-Type: text/plain; charset="iso-8859-1" From: Baldur Gislason To: francisv@dagupan.com Subject: Re: Web hosting and jail Date: Wed, 8 May 2002 07:14:30 +0000 X-Mailer: KMail [version 1.3.2] References: <10F29E27A956D511B0940050DA8D86A985C1FF@mailserver.dagupan.com> In-Reply-To: <10F29E27A956D511B0940050DA8D86A985C1FF@mailserver.dagupan.com> Cc: freebsd-isp@freebsd.org MIME-Version: 1.0 Content-Transfer-Encoding: 8bit Message-Id: <20020508071443.701BE2744@tesla.foo.is> Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org ipfw is pretty good for 2 On Wednesday 08 May 2002 06:46, you wrote: > I can probably do suggestion no. 1 on the router. Can you suggest tools > that will do no. 2? > > -----Original Message----- > From: Tom Samplonius [mailto:tom@sdf.com] > Sent: Wednesday, May 08, 2002 1:40 PM > To: francisv@dagupan.com > Cc: freebsd-isp@FreeBSD.ORG > Subject: Re: Web hosting and jail > > 1. Use filters to make sure clients are just web hosting. > > 2. Monitor traffic to and from the jails IP, and use it for billing, so > it won't matter what your clients do. > > Tom > > On Wed, 8 May 2002 francisv@dagupan.com wrote: > > Hi, > > > > We are starting to offer web hosting solution using FreeBSD's jail > > facility. > > > However, I discovered that some of our clients are installing proxy/cache > > services like Squid to use our bandwidth to their advantage. Now, I'm > > starting their jail processes with a nice value of 10 but how do you > > discourage them NOT to run proxy/cache services inside the jail > > environment > > > besides telling them not to? > > > > BTW, is there a FreeBSD-specific list for web hosting solutions? > > > > Thanks in advance! > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-isp" in the body of the message To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Wed May 8 1:26:14 2002 Delivered-To: freebsd-isp@freebsd.org Received: from harrier.prod.itd.earthlink.net (harrier.mail.pas.earthlink.net [207.217.120.12]) by hub.freebsd.org (Postfix) with ESMTP id 4D2BC37B400 for ; Wed, 8 May 2002 01:26:12 -0700 (PDT) Received: from dhcp071-66-151-24.nt01-c3.cpe.charter-ne.com ([24.151.66.71] helo=laredo.retrovertigo.com) by harrier.prod.itd.earthlink.net with esmtp (Exim 3.33 #2) id 175Mly-0007RB-00 for freebsd-isp@FreeBSD.ORG; Wed, 08 May 2002 01:26:06 -0700 Content-Type: text/plain; charset="us-ascii" From: Dylan Carlson Reply-To: absinthe@pobox.com Organization: r e t r o v e r t i g o To: freebsd-isp@FreeBSD.ORG Subject: Monitoring Apache + Tomcat Date: Wed, 8 May 2002 04:27:27 -0400 X-Mailer: KMail [version 1.4] MIME-Version: 1.0 Content-Transfer-Encoding: 8bit Message-Id: <200205080427.27274.absinthe@pobox.com> Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org Hi, Wondering if anyone has an approach to monitoring Tomcat under Apache for exceptions. Ideally, I am looking for a way to watch Tomcat for any errors or exceptions that may occur, so that it will automatically halt apache in that case -- so that our load-balancer stops forwarding traffic to it. Looking for any recommendations for tools, etc. Thanks in advance, -- Dylan Carlson [absinthe@pobox.com] To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Wed May 8 4:24:40 2002 Delivered-To: freebsd-isp@freebsd.org Received: from lily.ezo.net (lily.ezo.net [206.102.130.13]) by hub.freebsd.org (Postfix) with ESMTP id C954437B400 for ; Wed, 8 May 2002 04:24:32 -0700 (PDT) Received: from peony.ezo.net (peony.ezo.net [206.102.130.11]) by lily.ezo.net (8.11.6/8.11.6) with ESMTP id g48BO2Z85790; Wed, 8 May 2002 07:24:02 -0400 (EDT) (envelope-from jflowers@ezo.net) From: "Jim Flowers" To: Albert Everett , freebsd-isp@FreeBSD.ORG Subject: RE: Virus protection Date: Wed, 8 May 2002 07:24:12 -0400 Message-Id: <20020508072412.M10627@ezo.net> In-Reply-To: References: <3.0.5.32.20020507075517.03ae7560@mail.secombe> <20020507104301.M18371@ezo.net> X-Mailer: Open WebMail 1.60 20020130 X-OriginatingIP: 24.93.230.119 (jflowers) MIME-Version: 1.0 Content-Type: text/plain; charset=iso-8859-1 Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org Inflex is another FreeBSD port (see the collection) that runs on a separate physical smtp server. It produces a custom sendmail.cf file that controls the filtering process. Mail reaches this server from the previous one by action of a user .forward file, an alias, or a mailertable entry. Virtusertable entries don't work because they are evaluated before the milters are. > What's "inflex" in "a following relay runs inflex" below? > > I'm also evaluating RAV and will be interested to hear any > comments. > > Albert > > >I have been running RAV for a couple of weeks now from a sendmail milter > >along with drweb and spamassassin. Sendmail anti-relay and rbl traps using > >ordb and osirusoft preceed everything and a following relay runs inflex via > >sendmail before the users pick up mail via pop3/imap/webmail. There are > >several features about RAV that I like and so far it has done its share of > >the work with a minimum of false positives. I'll be interested in your > >observations. > > > >Jim Flowers > ----------------------------------------------------------------------- > Albert Everett - Web International, Inc. > -- Jim Flowers To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Wed May 8 9:31:25 2002 Delivered-To: freebsd-isp@freebsd.org Received: from misery.sdf.com (misery.sdf.com [207.200.153.226]) by hub.freebsd.org (Postfix) with ESMTP id CA9BF37B403 for ; Wed, 8 May 2002 09:31:18 -0700 (PDT) Received: from tom (helo=localhost) by misery.sdf.com with local-esmtp (Exim 2.12 #1) id 175TVh-0003iY-00; Wed, 8 May 2002 08:37:45 -0700 Date: Wed, 8 May 2002 08:37:43 -0700 (PDT) From: Tom Samplonius To: francisv@dagupan.com Cc: freebsd-isp@FreeBSD.ORG Subject: RE: Web hosting and jail In-Reply-To: <10F29E27A956D511B0940050DA8D86A985C1FF@mailserver.dagupan.com> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org You can do both with ipfw. You can create a "count" rule for each jail IP. Tom On Wed, 8 May 2002 francisv@dagupan.com wrote: > I can probably do suggestion no. 1 on the router. Can you suggest tools that > will do no. 2? > > -----Original Message----- > From: Tom Samplonius [mailto:tom@sdf.com] > Sent: Wednesday, May 08, 2002 1:40 PM > To: francisv@dagupan.com > Cc: freebsd-isp@FreeBSD.ORG > Subject: Re: Web hosting and jail > > 1. Use filters to make sure clients are just web hosting. > > 2. Monitor traffic to and from the jails IP, and use it for billing, so > it won't matter what your clients do. > > Tom > > On Wed, 8 May 2002 francisv@dagupan.com wrote: > > > Hi, > > > > We are starting to offer web hosting solution using FreeBSD's jail > facility. > > However, I discovered that some of our clients are installing proxy/cache > > services like Squid to use our bandwidth to their advantage. Now, I'm > > starting their jail processes with a nice value of 10 but how do you > > discourage them NOT to run proxy/cache services inside the jail > environment > > besides telling them not to? > > > > BTW, is there a FreeBSD-specific list for web hosting solutions? > > > > Thanks in advance! > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-isp" in the body of the message > > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Thu May 9 0:40:19 2002 Delivered-To: freebsd-isp@freebsd.org Received: from backup.dagupan.com (mailserver.dagupan.com [202.91.161.131]) by hub.freebsd.org (Postfix) with ESMTP id 0517537B406 for ; Thu, 9 May 2002 00:40:13 -0700 (PDT) Received: from pran (202.91.162.1 [202.91.162.1]) by backup.dagupan.com with SMTP (Microsoft Exchange Internet Mail Service Version 5.5.2653.13) id KG4XDF8Y; Thu, 9 May 2002 15:40:22 +0800 Message-ID: <008e01c1f72c$bfd05dd0$01a25bca@pran> From: "Francis Vidal" To: References: Subject: Re: Web hosting and jail Date: Thu, 9 May 2002 15:40:06 +0800 MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2600.0000 X-MIMEOLE: Produced By Microsoft MimeOLE V6.00.2600.0000 Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org Which means that I have to put them behind a firewall that will do this? ----- Original Message ----- From: "Tom Samplonius" To: Cc: Sent: Wednesday, May 08, 2002 11:37 PM Subject: RE: Web hosting and jail > > You can do both with ipfw. You can create a "count" rule for each jail > IP. > > Tom > > On Wed, 8 May 2002 francisv@dagupan.com wrote: > > > I can probably do suggestion no. 1 on the router. Can you suggest tools that > > will do no. 2? > > > > -----Original Message----- > > From: Tom Samplonius [mailto:tom@sdf.com] > > Sent: Wednesday, May 08, 2002 1:40 PM > > To: francisv@dagupan.com > > Cc: freebsd-isp@FreeBSD.ORG > > Subject: Re: Web hosting and jail > > > > 1. Use filters to make sure clients are just web hosting. > > > > 2. Monitor traffic to and from the jails IP, and use it for billing, so > > it won't matter what your clients do. > > > > Tom > > > > On Wed, 8 May 2002 francisv@dagupan.com wrote: > > > > > Hi, > > > > > > We are starting to offer web hosting solution using FreeBSD's jail > > facility. > > > However, I discovered that some of our clients are installing proxy/cache > > > services like Squid to use our bandwidth to their advantage. Now, I'm > > > starting their jail processes with a nice value of 10 but how do you > > > discourage them NOT to run proxy/cache services inside the jail > > environment > > > besides telling them not to? > > > > > > BTW, is there a FreeBSD-specific list for web hosting solutions? > > > > > > Thanks in advance! To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Thu May 9 4:35:11 2002 Delivered-To: freebsd-isp@freebsd.org Received: from host2.sicliq.net (host2.sicliq.net [209.239.34.1]) by hub.freebsd.org (Postfix) with ESMTP id D52C137B40F for ; Thu, 9 May 2002 04:35:08 -0700 (PDT) Received: from homeopatichiv.org (dup-148-221-119-87.prodigy.net.mx [148.221.119.87]) by host2.sicliq.net (8.10.2/8.10.2) with ESMTP id g49BYxa11605; Thu, 9 May 2002 07:34:59 -0400 Message-ID: <551521-22002549113251600@homeopatichiv.org> X-EM-Version: 6, 0, 0, 6 X-EM-Registration: #00F06206106618006920 X-Priority: 3 Reply-To: aportaciones@homeopatichiv.com To: "amigos" From: "Homeopatichiv" Subject: Seropositivos al VIH y Homeopatía/Seropositives to HIV and Homeopathy Date: Thu, 9 May 2002 06:32:51 -0500 MIME-Version: 1.0 Content-type: text/plain; charset="US-ASCII" Content-Transfer-Encoding: quoted-printable Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org Hola, te invitamos a conocer una nueva tesis sobre homeopat=EDa y VIH, te = vas a sorprender: Hi, we invite you to now a new thesis about homeopathic and VIH: http://www=2Ehomeopatichiv=2Eorg -----Este correo no volver=E1 a ser enviado----- -----This e-mail never will be sent you again----- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Thu May 9 8:54:58 2002 Delivered-To: freebsd-isp@freebsd.org Received: from misery.sdf.com (misery.sdf.com [207.200.153.226]) by hub.freebsd.org (Postfix) with ESMTP id F139C37B407 for ; Thu, 9 May 2002 08:54:47 -0700 (PDT) Received: from tom (helo=localhost) by misery.sdf.com with local-esmtp (Exim 2.12 #1) id 175pPp-00008N-00; Thu, 9 May 2002 08:01:09 -0700 Date: Thu, 9 May 2002 08:01:07 -0700 (PDT) From: Tom Samplonius To: Francis Vidal Cc: freebsd-isp@FreeBSD.ORG Subject: Re: Web hosting and jail In-Reply-To: <008e01c1f72c$bfd05dd0$01a25bca@pran> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org You can run ipfw on the same machine as your jails. Tom On Thu, 9 May 2002, Francis Vidal wrote: > Which means that I have to put them behind a firewall that will do this? > > ----- Original Message ----- > From: "Tom Samplonius" > To: > Cc: > Sent: Wednesday, May 08, 2002 11:37 PM > Subject: RE: Web hosting and jail > > > > > > You can do both with ipfw. You can create a "count" rule for each jail > > IP. > > > > Tom > > > > On Wed, 8 May 2002 francisv@dagupan.com wrote: > > > > > I can probably do suggestion no. 1 on the router. Can you suggest tools > that > > > will do no. 2? > > > > > > -----Original Message----- > > > From: Tom Samplonius [mailto:tom@sdf.com] > > > Sent: Wednesday, May 08, 2002 1:40 PM > > > To: francisv@dagupan.com > > > Cc: freebsd-isp@FreeBSD.ORG > > > Subject: Re: Web hosting and jail > > > > > > 1. Use filters to make sure clients are just web hosting. > > > > > > 2. Monitor traffic to and from the jails IP, and use it for billing, so > > > it won't matter what your clients do. > > > > > > Tom > > > > > > On Wed, 8 May 2002 francisv@dagupan.com wrote: > > > > > > > Hi, > > > > > > > > We are starting to offer web hosting solution using FreeBSD's jail > > > facility. > > > > However, I discovered that some of our clients are installing > proxy/cache > > > > services like Squid to use our bandwidth to their advantage. Now, I'm > > > > starting their jail processes with a nice value of 10 but how do you > > > > discourage them NOT to run proxy/cache services inside the jail > > > environment > > > > besides telling them not to? > > > > > > > > BTW, is there a FreeBSD-specific list for web hosting solutions? > > > > > > > > Thanks in advance! > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-isp" in the body of the message > > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Thu May 9 9:47:48 2002 Delivered-To: freebsd-isp@freebsd.org Received: from backup.dagupan.com (mailserver.dagupan.com [202.91.161.131]) by hub.freebsd.org (Postfix) with ESMTP id 7F55D37B40B for ; Thu, 9 May 2002 09:47:41 -0700 (PDT) Received: from pran (202.91.162.1 [202.91.162.1]) by backup.dagupan.com with SMTP (Microsoft Exchange Internet Mail Service Version 5.5.2653.13) id KG4XDHJG; Fri, 10 May 2002 00:47:48 +0800 Message-ID: <004901c1f779$3ab77690$01a25bca@pran> From: "Francis Vidal" To: References: Subject: Re: Web hosting and jail Date: Fri, 10 May 2002 00:47:34 +0800 MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2600.0000 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000 Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org I don't exactly get it. Can you please elaborate? Thanks. ----- Original Message ----- From: "Tom Samplonius" To: "Francis Vidal" Cc: Sent: Thursday, May 09, 2002 11:01 PM Subject: Re: Web hosting and jail > > You can run ipfw on the same machine as your jails. > > Tom > > On Thu, 9 May 2002, Francis Vidal wrote: > > > Which means that I have to put them behind a firewall that will do this? > > > > ----- Original Message ----- > > From: "Tom Samplonius" > > To: > > Cc: > > Sent: Wednesday, May 08, 2002 11:37 PM > > Subject: RE: Web hosting and jail > > > > > > > > > > You can do both with ipfw. You can create a "count" rule for each jail > > > IP. > > > > > > Tom > > > > > > On Wed, 8 May 2002 francisv@dagupan.com wrote: > > > > > > > I can probably do suggestion no. 1 on the router. Can you suggest tools > > that > > > > will do no. 2? > > > > > > > > -----Original Message----- > > > > From: Tom Samplonius [mailto:tom@sdf.com] > > > > Sent: Wednesday, May 08, 2002 1:40 PM > > > > To: francisv@dagupan.com > > > > Cc: freebsd-isp@FreeBSD.ORG > > > > Subject: Re: Web hosting and jail > > > > > > > > 1. Use filters to make sure clients are just web hosting. > > > > > > > > 2. Monitor traffic to and from the jails IP, and use it for billing, so > > > > it won't matter what your clients do. > > > > > > > > Tom > > > > > > > > On Wed, 8 May 2002 francisv@dagupan.com wrote: > > > > > > > > > Hi, > > > > > > > > > > We are starting to offer web hosting solution using FreeBSD's jail > > > > facility. > > > > > However, I discovered that some of our clients are installing > > proxy/cache > > > > > services like Squid to use our bandwidth to their advantage. Now, I'm > > > > > starting their jail processes with a nice value of 10 but how do you > > > > > discourage them NOT to run proxy/cache services inside the jail > > > > environment > > > > > besides telling them not to? > > > > > > > > > > BTW, is there a FreeBSD-specific list for web hosting solutions? > > > > > > > > > > Thanks in advance! > > > > > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > > with "unsubscribe freebsd-isp" in the body of the message > > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Thu May 9 12:47:18 2002 Delivered-To: freebsd-isp@freebsd.org Received: from ns1.cksoft.de (ns1.cksoft.de [62.111.66.1]) by hub.freebsd.org (Postfix) with ESMTP id 0E9CE37B400 for ; Thu, 9 May 2002 12:47:12 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by ns1.cksoft.de (Postfix) with ESMTP id 3D23A14FE7; Thu, 9 May 2002 21:47:04 +0200 (CEST) Received: by ns1.cksoft.de (Postfix, from userid 66) id E4B7B14FBA; Thu, 9 May 2002 21:47:02 +0200 (CEST) Received: by hirvi.cksoft.de (Postfix, from userid 1000) id 83A061B672; Thu, 9 May 2002 21:38:18 +0200 (CEST) Received: from localhost (localhost [127.0.0.1]) by hirvi.cksoft.de (Postfix) with ESMTP id 807AB18E88; Thu, 9 May 2002 21:38:18 +0200 (CEST) Date: Thu, 9 May 2002 21:38:18 +0200 (CEST) From: Christian Kratzer To: Francis Vidal Cc: Subject: Re: Web hosting and jail In-Reply-To: <004901c1f779$3ab77690$01a25bca@pran> Message-ID: X-Spammer-Kill-Ratio: 75% MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII X-Virus-Scanned: by AMaViS perl-11 Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org Hi, On Fri, 10 May 2002, Francis Vidal wrote: > I don't exactly get it. Can you please elaborate? Thanks. you use ipfw to setup firewall rules on the machine that runs the jails. With ipfw you filter traffic to/from the ip addresses of the jails. Greetings Christian -- CK Software GmbH Christian Kratzer, Schwarzwaldstr. 31, 71131 Jettingen Email: ck@cksoft.de Phone: +49 7452 889-135 Open Software Solutions, Network Security Fax: +49 7452 889-136 FreeBSD spoken here! To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Fri May 10 1:58:40 2002 Delivered-To: freebsd-isp@freebsd.org Received: from guest.cg.nu (guest.cg.nu [213.196.7.60]) by hub.freebsd.org (Postfix) with ESMTP id 91B9137B405 for ; Fri, 10 May 2002 01:58:35 -0700 (PDT) Received: (qmail 48427 invoked by uid 85); 10 May 2002 08:58:34 -0000 Received: from unknown (HELO wevers.org) (145.7.237.139) by guest.cg.nu with SMTP; 10 May 2002 08:58:33 -0000 Message-ID: <3CDB8BB8.2070308@wevers.org> Date: Fri, 10 May 2002 10:58:32 +0200 From: Henk Wevers User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:0.9.4) Gecko/20011128 Netscape6/6.2.1 X-Accept-Language: en-us MIME-Version: 1.0 To: francisv@dagupan.com Cc: freebsd-isp@FreeBSD.ORG Subject: Re: Web hosting and jail References: <10F29E27A956D511B0940050DA8D86A985C1FD@mailserver.dagupan.com> Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit X-Virus-Scanned: by AMaViS perl-11 Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org I use bandmin to monitor all the traffic from the jail's i run. This nice perl program works great with ipfw and ipf. Bandmin makes counting rules for you and gives the result in a nice html page. Bandmin is no longer mantained. You can find a copy on http://freebsd.cg.nu/bandmin/ This is version 0.90 the latest cvs version that was published. Henk francisv@dagupan.com wrote: > Hi, > > We are starting to offer web hosting solution using FreeBSD's jail facility. > However, I discovered that some of our clients are installing proxy/cache > services like Squid to use our bandwidth to their advantage. Now, I'm > starting their jail processes with a nice value of 10 but how do you > discourage them NOT to run proxy/cache services inside the jail environment > besides telling them not to? > > BTW, is there a FreeBSD-specific list for web hosting solutions? > > Thanks in advance! > > --- > francis a. vidal [bitstop network services] | http://www.bitstop.ph > streaming media + web hosting | http://www.keystone.ph > v(02)330-2871,(02)330-2872; f(02)330-2873 | http://www.kuro.ph > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-isp" in the body of the message > > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message