From owner-freebsd-isp Fri May 26 7:58:50 2000 Delivered-To: freebsd-isp@freebsd.org Received: from winconx.com (ns1.winconx.net [208.60.80.2]) by hub.freebsd.org (Postfix) with SMTP id 47C2437B6AE for ; Fri, 26 May 2000 07:58:42 -0700 (PDT) (envelope-from travis@winconx.com) Received: (qmail 88649 invoked from network); 26 May 2000 15:03:14 -0000 Received: from dhcp01.winconx.net (HELO travis) (208.60.80.32) by ns1.winconx.net with SMTP; 26 May 2000 15:03:14 -0000 Message-ID: <04b601bfc722$dc577d80$20503cd0@travis> From: "Travis Leuthauser" To: , References: <250500146.75583@207.206.68.135> Subject: Re: Need advice on software for ISP startup using FreeBDS 4.0 Date: Fri, 26 May 2000 09:58:32 -0500 Organization: DDS Group of Companies MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 5.00.2919.6600 X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2919.6600 Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org ----- Original Message ----- From: To: Cc: <"[so@server?????????????? Sent: Thursday, May 25, 2000 11:00 PM Subject: Re: Need advice on software for ISP startup using FreeBDS 4.0 > 2.On the statement No PAP or CHAP Authentication. There was > This discussion subject has spawned new questions in my mind. > What is the sequence of events in the login process from an > windows dial in user? User connects to NAS, NAS passes off authentication information to radius server, server returns valid/invalid login. If valid login, returns IP address and so forth to NAS for user, or instructs NAS to assign IP. > > Is windows looking for a PAP login behind the scenes? > Windows does use PAP to authenticate. > Who is the master login id/password holder, FBSD or radius or > what? My recommendation would be to set up cistron radius on your freebsd mail server something like this. DEFAULT Auth-Type=System, Simultaneous-Use=1 (System means /etc/master.passwd, Sim-Use means only one concurrent connection per username) Service-Type=Framed-User, (Set up as framed-user ie. PPP MPP) Framed-Protocol=PPP, Framed-IP-Netmask=255.255.255.255, Framed-Routing=None, Framed-MTU=1500, Framed-Compression=Van-Jacobson-TCP-IP, Idle-Timeout=1200, Session-Timeout=28800 I went through several different radius servers before I found Cistron. I works excellently. Especially the simultaneous-use feature. It carries across most NAS servers. Whereas several other radius servers you have to use vendor specific commands. > costs $890 per month versus $600 per month. Besides ISDN is > dead with DSL on the horizon. Let some other ISP handle the Just personal opinion, but I tend to disagree that ISDN is dead, at least down here in Louisiana. A large number of businesses are sticking with ISDN because it's tested and stable. I think that's the case pretty much anywhere that has lenient pricing on ISDN circuits like we do. The circuits here aren't metered. It's a flat rate regardless of usage. > 5. Apache13 form the FBSD ports collection. From the > responses it looks like no body is using the ports > collection as they are out of date. Apache 1.3.12 seems to > be the version to use as it's stable. A post did say that, > This will be changing to only 3 base Apache servers > (apache13,apache13+ipv6, and apache13-ssl). Additional > functionality would then be added by installing an apache > module port (mod_ssl, mod_fp, mod_php[34],etc) although 2.0 > is in its 3rd alpha stage. > > Well I am lost again. What functionally does ipv6, ssl, fp, > php provide? Are these functions something your ISP > supports? Essentially, the three base apache servers will be just good old web serving apache. Apache with support for the new ipv6 implementations, and apache with ssl (high encryption support). I'm not sure of the specs of ipv6, I'm sure someone else here will enlighten us all. You will need ssl if you are planning on having customers sign up on line. I certainly wouldn't submit my cc # anywhere that doesn't have a secure site. The fp (frontpage extensions) make it easy for your users to develop web pages with frontpage, using the cute little hover buttons and counter, and then publish it to your server. php, if I am correct is a database querying tool. Not too certain on that, but again, I'm sure someone will enlighten. > > > 6. On the question, Do I have to use quota to limit disk > space for web page subscribers. Since the only access to > the FBSD disk space in my case will come from the > personal/home web page builders and people who want a > private FTP site. It seems Quote is the simplest solution. > I don't want to host business web pages of any sort. If I > do I have to collect and report taxes on this activity. > That is just too much red tape for the money. I would recommend using quotas on your users, that limits the amount of junk they can store on your server. If you don't, I promise you will have at least one user with a ton of stuff in their directory. You can also use quotas to limit the size of their email stored on the server. > > 7. Your responses were real informing on the subject of > email software. As I now understand it POP3 sends the email > to the client and deletes the email from the server, > whereby IMAP does the sending and them keeps the email on > the server for some set period. The FBSD sendmail comes > with SMTP and POP3 which is provided by the popper daemon. > I want access to the mail system to have login > Authentication. > > How does sendmail handle this with radius controlling the dial > in world? > > I see in the MS Windows OS all the email application need > the POP and SMTP DNS name or IP address. How do I make this > happen in FBSD sendmail? As far as email goes, this is just my personal opinion, but I'd stay as far away from sendmail as possible. I haven't had many good experiences with it. We run qmail on all of our mail servers. There are a few reasons for that. Security wise, I don't think qmail can be beat. qmail allows you to store your user's mail in their home directory which has a few advantages. One set of quotas controls web storage, ftp storage, and mail. Meaning it's up to your user to decide if they wanna use the space you give them for mail, web, or file storage. No one gets cheated that way, if they don't want a web page, then they can keep even more mail on the server. If they fill up their storage space with web pages, they get no email. Regardless of which mail server you decide to run, it will default to using your master.passwd file. Hope that helps some. Travis Leuthauser Network Administrator DDS Group To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message