Ubuntu & Postfix

[Kristian Rink]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


Oscar;



Oscar Veloz schrieb:
> Ok, my network is protected against such as far as I know.  What you're
> saying is that before attempting to set up a production postfix machine,
> that I should be at the point where I don't need to ask questions?  Your
> logic is silly, really.  


Not to be too rude and/or offensive, in a certain way I have to agree
with what Mike wrote, even though maybe it's not what you want to read.
I also replied to your questions earlier, and I think I gave you a few
hints. However, there is one thing I want / have to outline, being
myself an administrator of a bunch of e-mail systems to pass through
several tens of thousands of mails each day: Setting an e-mail relay up
in a right way is a tedious and difficult task (and one which actually
gave me a whole bunch of sleepless nights while learning to do things
right), as there are dozens of ways how to get into trouble, not just
talking about spam and viruses, and not just talking about an MTA like
postfix which is (compared to sendmail or possibly exim) easy to
configure and provides a reasonable amount of security.

The point just is, no matter whether talking about SMTP (which _really_
can be a pain in the a**) or HTTP or FTP or any other service made
publicly available: Before setting up a server which is open to "the
world", you _want_ to be at least halfway comfortable with handling the
server software that implements that very service. It is not just about
spam or viruses. It's not even about security. I remember a situation
earlier in my life when I got caught somewhere in the middle of my first
postfix/amavis/cyrus setup and spent most of a day trying to figure out
why mail is not delivered locally - those situations happening in a
testbed environment are just annoying because they keep one from
proceeding smoothly. Encountering those situations in a "productive
environment" can end up in consequences way more severe - just imagine
customers losing bunches of money because one of the services you
provided is not available just because of a misconfiguration you failed
to track down in an acceptably short time. To do so, however, you need
to have solid _basic_ knowledge about a few things, you should to be
able at least to tell

(a) whether a server is up and running at all,
(b) why a server daemon died in case it is not running,
(c) how to possibly restart a service and see if it actually restarted,
(d) what a few basic error messages mean and how to deal with them.


It's not that you should not ask questions in case you don't know
something - actually, compared to other mailing lists or newsgroups,
this one is pretty helpful and friendly in most situations. But just
imagine a situation in which you won't have time to ask someone on a
mailing list and wait for a reply (which can take hours or days,
depending on your  problem).

So, bottom line, about the e-mail thing: Get yourself VMWare Server or
something like that, set up a local testbed system, play around with it
a little, gain some experience in handling it. You can keep you out of a
lot of annoying situations this way... :)


Cheers & good luck,
Kris



- --
Kristian Rink *  http://zimmer428.net * jab: kawazu at jabber.ccc.de
icq: 48874445 *  fon: ++49 176 2447 2771
"Wenn einer allein träumt, ist es nur ein Traum. Wenn viele gemeinsam
träumen, ist das der Anfang einer neuen Wirklichkeit." (Hundertwasser)

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2.2 (GNU/Linux)

iD8DBQFFBwzfcxBAPOA1m6wRAlTSAJ9ELGmtNc+AWugpITMDI2TGoxb9MQCdG2+I
HZ4o2CWoUQFX9saknNSkzGU=
=q/cx
-----END PGP SIGNATURE-----