[Anonymous]

As you know, with stunnel, you can use both port 143 and 993 for IMAP communication. After a LOT of tweaking with the config file, I finally managed to get stunnel to work correctly.

Here was my problem: I followed all the instructions on AFP for tunnel 4, I would run the program, and it acted as if everything was OK, no error, nothing.

Symptoms: I did the check they recommended (I forget what it was now) to check the port, and it passed, meaning that stunnel was good. Such is not that case: that is a bad too for diagnosing this setup.

What I did: I went into my stunnel config file and removed the # from the debugging lines. I reran the program and got this error towards the end:

2003.05.04 18:00:23 LOG3[512:2684358124]: Error binding imaps to 0.0.0.0:993
2003.05.04 18:00:23 LOG3[512:2684358124]: bind: Address already in use (48)

Obviously the 0.0.0.0 was not a good thing. Keep in mind, this may have been happening due to a bad setup somewhere else. Regardless, i resolved the problem by going into the config file and making the following changes:

[imaps]
accept  = xxxxx.com:993
connect = xxxxxx.com:143

So essentially, just add you mail servers fully qualified domain name before the port. It will do a DNS lookup and will use your IP address for that domain.

So, I just reran stunnel, and bingo, secure tunneling is all good.

Hope this helps anyone who is having issues. Just as a side note: I tried apple’s weird way of securing connections with the keychain certs, and it just crapped out on me without ever starting to work. Oh well. Stunnel is working great and is totally secure now.

[Anonymous]

sdevore wrote:

Is it possible to use a ssh tunnel between two computers to activate rendezous?

I don’t think so, you need to tunnel the ethernet packets (i.e., packets on a different OSI-level than the level SSH works on). However, I think it is possible to tunnel ethernet packets, but I don’t yet know how, I am looking into it…

[Anonymous]

you can CNAME xserver to ns1 and then CNAME a bunch of other things to xserver. Or you could set up another A record, but that is considered bad form.

[Anonymous]

For all Sonicwall users out there – make sure you have the latest firmware. VaporSec has been much more friendy with our SonicWall since the firmware upgrade.

[Anonymous]

but i have a little problem to finally select a volume on

Is the ‘server’ an OSxServer ? or an OsX client ?

In both case you have to log in via ssh at least one time in the terminal.

1) If server is a client OsX
make sure : fileshring and ssh are checked in the sharing pref pane. You also have to have an account on the machine you want to connect to.
In that case, you may be able to only view the Shared folder and other user’s public folder, and your home directory. ”
This would be the default setting if I could say.” If you want to ‘custom’ this a bit, then I recommend you to use SHAREPOINT (a pref pane or a single app).
you will be then able to create whatever you want to share or access.

2) if server is an OsXserver
check settings of the user (you) on the server. Set permission on folders or disks you want to connect to. [as you would do if using Sharepoint on a Client ]
Check remote connection in file sharing.
then you have to launch (if not already done) file sharing.

I do have a server and had to go in the firewall settings in serversetting app, then (because I deny everything I’ve added a rule for port 548, 22 and 10548).
I have a User that logs in my server via vapor from his home. (both broadband connection). very cool.
Since I discovered Vapor, I do not use anymore RBrowser to connect to others OSX machines via ssh.

[Anonymous]

I’ll have to check on the version number, but have a look at <http://spamassassin.org/doc/Mail_SpamAssassin_Conf.html>–maybe I’m misreading it, but it looks like it’s learning by default. (A “naive-Bayesian-style” filter…?)

Thanks,
Bill

[Anonymous]

I swapped the origin IP… since we are connected to a rather large Intranet…. Don’t want to tempt people to break in. 🙂

It appears my problem was most of our servers are pointed to our WAN router at 172.18.143.1. I was only able to ping the two desktops I have set with the gateway address of the VPN router at 172.18.143.2.

I do not have access to the WAN router… so I assume there is no work around other than changing the gateway of the servers I wish to access.

[Anonymous]

Heh, did that too. 🙂

[Anonymous]

Sorry, was at home when I posted my reply. I’ve included the script below. Any feedback on why only works for some users would be greatly appreciated.

cheers,

Kent.
—————————————————————————————————–
#!bin/sh

#Get all users in our NetInfo Database
userList=`niutil -list / /users | cut -d” ” -f2`

#loop through each user
flag=
for userName in ${userList}
do

# Check to see if “mail” entry already exists
exists=`niutil -read / /users/$userName | grep “mail: $userName”`
result=`expr “$exists” : ‘.*’`

if (expr $result = 0)
then
# only create if doesn’t already exist
niutil -createprop / /users/$userName mail ${userName}@mmc.school.nz
echo “created $exists – $result”
fi
done

exit 0

[Anonymous]

Thanks for the update, and I apologize if it sounded like I was implying the source was being held secret or something like that, I simiply meant that it wasn’t up for public download.

I appreciate the work you’ve done VERY MUCH, and look forward to the enhanced version when it’s ready.

[Anonymous]

The Xserve RAID would do it, but a SAN solution will not suffice. The reason we need two copies of the data is in case there is a fire in one of our buildings, it would cost too much to buy two Xserve RAIDs. Thanks for the advice though, the website was spot on!

[Anonymous]

For those who are interested, I’ve managed to write a .sh script which loops through each user in my NetInfo database and…

1) Checks if a “Mail” tag already exists.
2) if not, attempts to add one.

This is working, however I needed to run it several times. Seems to have an error when attempting to add the tag “access denied”.
If I run again, some users with the error are updated okay.
I’ve managed to get to about 95% of my 1000+ users done.
If I manually add the user, no problems. just in the script.

still, I’ll live. better than on 5%

cheers,

Kent.

[Anonymous]

I guess I don’t know what I missed. I have UW IMAP and Postfix installed and happy. I can telnet to them, the log files are finally happy. I just don’t understand how to have users that have been given permission in the Workgroup Manager have permission to send/retreve emails. I can not find any information on any websites and the article here gets you to the point where it is set up but never goes any further on explaining how to permit users to use it.

mkjellman describes my situation exactly. Mail.app repeatedly asks for the correct password and sometimes when I cancel gives me a user not found error, but usually give no further info. I have tried it with multiple users and passwords – nothing seems to authenticate. Any additional info would be appreciated.

Ric
Ric@zarac.com

[Anonymous]

For what it’s worth, I’ve gotten IPSec here running between my MacOS X machine and a Linux FreeS/WAN gateway I set up using x509 certificates. Everything I have here right now is command-line driven, I’m just pondering wrapping it into a GUI somehow.

I’d be happy to help integrate it with VaporSec, but the source isn’t available.

I’d be happy to help if I can, but this post is already quite old and maybe solutions have been found.

[Anonymous]

MacTroll wrote:

Great!
I’m glad that you got it to work.
Thanks,
Joel

Thanks to you, it’s really an excellent software.

Congratulations !

[Author]

Posts