Koozali.org: home of the SME Server

Securing SME Mail Server

Mike

Securing SME Mail Server
« on: May 09, 2003, 05:57:33 PM »
I have obtained all the latest rpms to do this upgrade from http://www.pagefault.org/
however once we get into it I have received the following errors:
First error was that "cvm>=0.16" was required?
Second that "e-smith-packetfilter>=1.12.0" was required?
I think that I have followed all the links possible from the above address and searching http://wiki.contribs.org/ only turns up links to older material or nothing at all?
So I am stuck and unless I can put in place the means to authenticate SMTP on this server I cannot place it on the Internet. Where can I find the rpms to fix these errors?

Bill Talcott

Re: Securing SME Mail Server
« Reply #1 on: May 09, 2003, 08:29:15 PM »
1. Did you follow the CVM link and get the RPM from http://untroubled.org/cvm/rh7/ ?

2. http://www.pagefault.org/code/e-smith.shtml#securemail
"Support for sme version 5.6

In the downloads section there are alternate files for e-smith-ssmtp, e-smith-pop3s and e-smith-imaps that are desgined for sme 5.6. You must use these for version 5.6 of sme. The release version of sme 5.6 includes an older version of e-smith packet filter than the final beta so you can safely use --nodeps with rpm to overcome this."

Mike

Re: Securing SME Mail Server
« Reply #2 on: May 11, 2003, 08:59:19 AM »
Ok have secured and installed the following rpms:
cvm-0.16-1.i386.rpm
e-smith-unix-0.0.3-4dc.noarch.rpm
e-smith-imaps-sme5.6-0.0.3-1dc.noarch.rpm
e-smith-pop3s-sme5.6-0.0.3-1dc.noarch.rpm
e-smith-ssmtp-sme5.6-0.0.3-1dc.noarch.rpm
e-smith-securemail-0.0.3-3dc.noarch.rpm
using rpm -qa they are listed as installed
using rpm -q cvm-0.16-1 returns cvm0.16-1 so I am assuming that this is now installed as well.
All the rpms had to be installed using --nodeps --force
Now the secure e-mail link page appears on the Web Manager, however any attempt to enable and save any of the options causes the page to go blank leaving only the menu then going back to the secure e-mail page indicates that nothing has been enabled.
On reboot cvm-unix comes up as DISABLED?
How is this enabled?? Am running the system as Server Only

Billy

Re: Securing SME Mail Server
« Reply #3 on: May 12, 2003, 07:17:27 PM »
I'm having the same problem :( !! cvm-unix comes up disabled on startup - I did however start it manually(/etc/rc.d/init.d/cvm-unix start) which seemed to work fine although I get the same problem. I have installed the 5.6 versions of the rpm's as I'm running SME 5.6.

any ideas??

Thanks in advance

Mike

Re: Securing SME Mail Server
« Reply #4 on: May 15, 2003, 06:26:47 PM »
Fixed!!
When I carefully went back through all the update information in the very small print after applying each RPM upgrade I found this command

/sbin/e-smith/signal-event post-upgrade

and the server did some very fast work plus the usual cryptic massages.
One reboot later and the email control panel appears to now do what it is supposed to do and when the secure mail settings are applied they stay there and everything that is supposed to be running now is!!

Lesson learnt .. look for the small print!

Mike

Re: Securing SME Mail Server
« Reply #5 on: May 15, 2003, 06:33:45 PM »
Fixed!!! No More SMTP Relay!!
When I went back through all the upgrade info I found this command line after each RPM on www.pagefault.org/code/e-smith.shtml

/sbin/e-smith/signal-event post-upgrade

One reboot later and all the applications that were supposed to start did and the email control panel does what it is supposed to do with the secure mail settings staying put!

Lesson learnt -- Look for the small print!