Virtual Serving Setup ********************* This setup only considers partial virtual serving of mail serving, ftp, and http, to give the illusion that each domain is served off its own box. This does not address the subject of virtual serving of users on hosts etc. In the configuration provided below, we could have gotten away with one IP address for mail and http, but not for ftp. This configuration also deals with port forwarding through a masqerading firewall. This setup requires Linux 2.2.x or greater kernels compiled with ip-aliasing. Look at "http://jon.novatek.co.nz/config/gateway" for a guide on on how to compile a kernel for a masquerading firewall and how to set it up. Other sources are also available: "http://www.ecst.csuchico.edu/~dranch/LINUX/TrinityOS.wri" and "http://dcfonline.sfu.ca/ying/linux/index.html" Another requirement is a Redhat distribution > 6.0. This makes extensive use of Redhat's /etc/sysconfig structure for installing. Not to say that this can be translated to other distributions. I am only familiar with Redhat distro's. To obtain some further background on how henry is configured, look at "http://jon.novatek.co.nz/config/henry". This document prevails with all inconsistencies between the two documents. Topology ++++++++ After a number of false starts in achieving this configuration, I discovered that it is a good idea to plan things out before embarking. Internet Side: -------------- 192.168.0.0 Virtual Host 1. (local-net) Name: www.novatek.co.nz First IP Address. | IP: 192.168.0.200 Names: ns1, mail, | +-----------+ Ethernet eth0:0 ftp, www | eth0 | | Domain: novatek.co.nz |------+ Henry | Virtual Host 2. IP 1: 24.113.94.87 | | | Name: ftp.novatek.co.nz Mask: 255.255.254.0 | +-----------+ IP: 192.168.0.201 Ethernet eth0 | Name: henry Ethernet eth0:1 NS1: 24.2.10.33 | Domain: novatek.co.nz NS2: 24.2.10.34 | IP: 192.168.0.3 Virtual Host 3. | Mask: 255.255.255.0 Name: www.cmex.org Second IP Address | Ethernet eth0 IP: 192.168.0.202 Names: mail, ftp, www | Gateway: 192.168.0.254 Ethernet eth0:2 Domain: cmex.org | IP 2: 24.113.98.164 | Virtual Host 4. Mask: 255.255.254.0 | Name: ftp.cmex.org Etehrnet eth0:0 (alias) | IP: 192.168.0.203 NS1: 24.2.10.33 | Ethernet eth0:3 NS2: 24.2.10.34 | +-----------+ | | | +-----------+ |------+ aaaaa | eth0 | | eth1 | | | ------+ Gateway +-------+ +-----------+ | | | . . . . . . . . +-----------+ | Local Side: | +-----------+ ----------- | | | Name: gateway |------+ zzzzz | Domain: novatek.co.nz | | | IP: 192.168.0.254 | +-----------+ Mask: 255.255.255.0 | Ethernet eth1 | Gateway: 24.113.94.1 | The IP addresses and names are specific to my network, you will need to use the numbers and names specific to your network. Static IP addresses you get from your upstream ISP. Domain names are reserved. Have a look at: http://www.uninett.no/navn/domreg.html or http://www.internic.net/alpha.html as a starting point before deciding where to get your domain names. Step 1: Ensure the kernels are built correctly. ************************************************ Ensure the following options are set in Henry. This is a 2.2.14 kernel. If you are going to rebuild the kernel, there is no harm in getting the most recent kernel source and header rpms from ftp://rawhide.redhat.com/pub/rawhide/i386/RedHat/RPMS/ and building from scratch. First the Gateway box. After configuring for the build (I use make menuconfig), scan the /usr/src/linux/.config file and ensure the following: (this is an incomplete list. CONFIG_EXPERIMENTAL=y CONFIG_MODULES=y # CONFIG_MODVERSIONS is not set CONFIG_KMOD=y CONFIG_NET=y CONFIG_PACKET=y CONFIG_NETLINK=y CONFIG_RTNETLINK=y CONFIG_NETLINK_DEV=y CONFIG_FIREWALL=y # CONFIG_FILTER is not set #optional CONFIG_UNIX=y CONFIG_INET=y CONFIG_IP_MULTICAST=y CONFIG_IP_ADVANCED_ROUTER=y # to get CONFIG_IP_ROUTE_VERBOSE below CONFIG_RTNETLINK=y CONFIG_NETLINK=y # CONFIG_IP_MULTIPLE_TABLES is not set #optional # CONFIG_IP_ROUTE_MULTIPATH is not set #optional # CONFIG_IP_ROUTE_TOS is not set #optional CONFIG_IP_ROUTE_VERBOSE=y # CONFIG_IP_ROUTE_LARGE_TABLES is not set #optional # CONFIG_IP_PNP is not set #optional CONFIG_IP_FIREWALL=y CONFIG_IP_FIREWALL_NETLINK=y CONFIG_NETLINK_DEV=y CONFIG_IP_TRANSPARENT_PROXY=y CONFIG_IP_MASQUERADE=y CONFIG_IP_MASQUERADE_ICMP=y CONFIG_IP_MASQUERADE_MOD=y CONFIG_IP_MASQUERADE_IPAUTOFW=y CONFIG_IP_MASQUERADE_IPPORTFW=y CONFIG_IP_MASQUERADE_MFW=y # CONFIG_IP_MASQUERADE_VS is not set # this is load balancing CONFIG_IP_ROUTER=y # CONFIG_NET_IPIP is not set #optional # CONFIG_NET_IPGRE is not set #optional # CONFIG_IP_MROUTE is not set /#optional CONFIG_IP_ALIAS=y # CONFIG_ARPD is not set #optional CONFIG_SYN_COOKIES=y # CONFIG_INET_RARP is not set #optional CONFIG_SKB_LARGE=y # CONFIG_IPV6 is not set #the rest optional # CONFIG_IPX is not set # CONFIG_ATALK is not set # CONFIG_X25 is not set # CONFIG_LAPB is not set # CONFIG_BRIDGE is not set # CONFIG_LLC is not set # CONFIG_ECONET is not set # CONFIG_WAN_ROUTER is not set # CONFIG_NET_FASTROUTE is not set # CONFIG_NET_HW_FLOWCONTROL is not set # CONFIG_CPU_IS_SLOW is not set # CONFIG_MAGIC_SYSRQ is not set Note, I prefer to compile in the drivers for the hardware of the system rather than modules. This is what I have done for the ethernet cards. Build the kernel. "make dep clean bzImage modules modules_install" Second, the Kernel for the local server box. CONFIG_EXPERIMENTAL=y CONFIG_MODULES=y # CONFIG_MODVERSIONS is not set CONFIG_KMOD=y CONFIG_NET=y CONFIG_PACKET=y CONFIG_NETLINK=y CONFIG_RTNETLINK=y CONFIG_NETLINK_DEV=y # CONFIG_FIREWALL is not set # CONFIG_FILTER is not set CONFIG_UNIX=y CONFIG_INET=y CONFIG_IP_MULTICAST=y # CONFIG_IP_ADVANCED_ROUTER is not set # CONFIG_IP_PNP is not set # CONFIG_IP_ROUTER is not set # CONFIG_NET_IPIP is not set # CONFIG_NET_IPGRE is not set # CONFIG_IP_MROUTE is not set CONFIG_IP_ALIAS=y # a must. # CONFIG_ARPD is not set CONFIG_SYN_COOKIES=y CONFIG_INET_RARP=y CONFIG_SKB_LARGE=y # CONFIG_IPV6 is not set # CONFIG_IPX is not set # CONFIG_ATALK is not set # CONFIG_X25 is not set # CONFIG_LAPB is not set # CONFIG_BRIDGE is not set # CONFIG_LLC is not set # CONFIG_ECONET is not set # CONFIG_WAN_ROUTER is not set # CONFIG_NET_FASTROUTE is not set # CONFIG_NET_HW_FLOWCONTROL is not set # CONFIG_CPU_IS_SLOW is not set And build this kernel too. Step 2: Configuring LILO. First for gateway: Include the following stanza in /etc/lilo.conf: >>>>>>>>>>>>>>>>>>>>>part of gateway:/etc/lilo.conf image=/boot/bzImage append="ether=12,0x240,eth0 ether=11,0x300,eth1" label=l root=/dev/hda3 read-only <<<<<<<<<<<<<<<<<<<<>>>>>>>>>>>>>>>>>>>/etc/HOSTNAME gateway.novatek.co.nz <<<<<<<<<<<<<<<<<<<>>>>>>>>>>>>>>>>>>/etc/hosts 127.0.0.1 localhost.localdomain localhost <<<<<<<<<<<<<<<<<<>>>>>>>>>>>>>>>>>>/etc/networks loopback 127.0.0.0 local-net 192.168.0.0 extern-net 24.113.94.0 <<<<<<<<<<<<<<<<<<>>>>>>>>>>>>>>>>>>/etc/host.conf # I'm not sure if this is still required!! order hosts,bind multi on <<<<<<<<<<<<<<<<<>>>>>>>>>>>>>>>>>/etc/resolv.conf domain novatek.co.nz nameserver 192.168.0.3 <<<<<<<<<<<<<<<<<>>>>>>>>>>>>>>>>>>>/etc/nsswitch.conf ......................... hosts: files nisplus nis dns ........................ <<<<<<<<<<<<<<<<<<<>>>>>>>>>>>>>>>>>>>/etc/sysconfig/network NETWORKING=yes FORWARD_IPV4=true HOSTNAME=`cat /etc/HOSTNAME` GATEWAY=24.113.94.1 GATEWAYDEV=eth0 #NISDOMAIN= <<<<<<<<<<<<<<<<<<<>>>>>>>>>>>>>>>>>>>/etc/sysconfig/network/scripts/ifcfg-eth0 DEVICE=eth0 BOOTPROTO=static IPADDR=24.113.94.87 NETMASK=255.255.254.0 ONBOOT=yes NETWORK=24.113.94.0 BROADCAST=24.113.95.255 USERCTL=no <<<<<<<<<<<<<<<<<<<>>>>>>>>>>>>>>>>>>>/etc/sysconfig/network/scripts/ifcfg-eth1 DEVICE=eth1 BOOTPROTO=static IPADDR=192.168.0.254 NETMASK=255.255.255.0 ONBOOT=yes NETWORK=192.168.0.0 BROADCAST=192.168.0.255 USERCTL=no <<<<<<<<<<<<<<<<<<<>>>>>>>>>>>>>>>>>>/etc/sysconfig/network-scripts/ipcfg-eth0-range0 IPADDR_START=24.113.98.164 IPADDR_END=24.113.98.164 CLONENUM_START=0 <<<<<<<<<<<<<<<<<<>>>>>>>>>>>>>>>>>>>/etc/HOSTNAME henry.novatek.co.nz <<<<<<<<<<<<<<<<<<<>>>>>>>>>>>>>>>>>>/etc/hosts 127.0.0.1 localhost.localdomain localhost <<<<<<<<<<<<<<<<<<>>>>>>>>>>>>>>>>>>/etc/networks loopback 127.0.0.0 local-net 192.168.0.0 <<<<<<<<<<<<<<<<<<>>>>>>>>>>>>>>>>>>/etc/host.conf # I'm not sure if this is still required!! order hosts,bind multi on <<<<<<<<<<<<<<<<<>>>>>>>>>>>>>>>>>/etc/resolv.conf domain novatek.co.nz search gateway.novatek.co.nz novatek.co.nz com nameserver 1270.0.1 <<<<<<<<<<<<<<<<<>>>>>>>>>>>>>>>>>>>/etc/nsswitch.conf ......................... hosts: files nisplus nis dns ........................ <<<<<<<<<<<<<<<<<<<>>>>>>>>>>>>>>>>>>>/etc/sysconfig/network NETWORKING=yes FORWARD_IPV4=false HOSTNAME=`cat /etc/HOSTNAME` GATEWAY=192.168.0.254 GATEWAYDEV=eth0 #NISDOMAIN= <<<<<<<<<<<<<<<<<<<>>>>>>>>>>>>>>>>>>>/etc/sysconfig/network/scripts/ifcfg-eth0 DEVICE=eth0 BOOTPROTO=static IPADDR=192.168.0.3 NETMASK=255.255.255.0 NEWORK=192.168.0.0 BROADCAST=192.168.0.255 ONBOOT=yes USRCTL=no <<<<<<<<<<<<<<<<<<<>>>>>>>>>>>>>>>>>>/etc/sysconfig/network-scripts/ipcfg-eth0-range0 IPADDR_START=192.168.0.200 IPADDR_END=192.168.0.203 CLONENUM_START=0 <<<<<<<<<<<<<<<<<<>>>>>>>>>>>>>>>>>>>>>>/etc/rc.d/rc.firewall ........................ /usr/sbin/ipmasqadm portfw -a -P tcp -L 24.113.94.87 80 -R 192.168.0.200 80 /usr/sbin/ipmasqadm portfw -a -P tcp -L 24.113.98.164 80 -R 192.168.0.202 80 /usr/sbin/ipmasqadm portfw -a -P tcp -L 24.113.94.87 21 -R 192.168.0.201 21 /usr/sbin/ipmasqadm portfw -a -P tcp -L 24.113.98.164 21 -R 192.168.0.203 21 ........................ <<<<<<<<<<<<<<<<<<<<<<>>>>>>>>>>>>>>>>/etc/named.conf # /etc/named.conf options { // Root directory for master (db) files. directory "/var/named"; // If a lookup is not in our cache, query these nameservers // (usually our ISP's) our ISP's nameservers before attempting // to resolve. forward first; forwarders { 24.2.10.33; 24.2.10.34; }; // only accept DNS requests on port 53 and valid IP addresses listen-on port 53 { 127.0.0.1; // localhost 192.168.0.254; // internal network interface 24.113.94.87; // external network interface 24.113.98.164; // aliased external netowrk }; // may be required if this name server is behind a firewall // query-source address * port 53; }; // The next two zones are the minimum required for a caching nameserver. zone "." { type hint; file "db.root"; }; zone "0.0.127.in-addr.arpa" { type master; notify no; file "db.127.0.0"; }; // Master (primary) serving zones zone "novatek.co.nz" { type master; notify yes; allow-transfer { 205.166.226.38; // ns1.granitecanyon.com 140.200.128.13; // ns1.waikato.ac.nz 24.113.94.87; 24.113.98.164; 127.0.0.1; 192.168.0/24; }; file "primary/db.novatek.co.nz"; }; zone "cmex.org" { type master; notify yes; allow-transfer { 205.166.226.38; // ns1.granitecanyon.com 24.113.94.87; 24.113.98.164; 127.0.0.1; 192.168.0/24; }; file "primary/db.cmex.org"; }; zone "87.94.113.24.in-addr.arpa" { type master; notify yes; allow-transfer { 205.166.226.38; // ns1.granitecanyon.com 140.200.128.13; // ns1.waikato.ac.nz 24.113.94.87; 24.113.98.164; 127.0.0.1; 192.168.0/24; }; file "primary/db.24.113.94.87"; }; zone "164.98.113.24.in-addr.arpa" { type master; notify yes; allow-transfer { 205.166.226.38; // ns1.granitecanyon.com 24.113.94.87; 24.113.98.164; 127.0.0.1; 192.168.0/24; }; file "primary/db.24.113.98.164"; }; <<<<<<<<<<<<<<<<<<<<<<<>>>>>>>>>>>>>>>>>>>>>>/var/named/primary/db.novatek.co.nz $TTL 1D @ IN SOA gateway.novatek.co.nz. hostmaster.novatek.co.nz. ( 2000022601 ; serial 8H ; refresh 2H ; retry 1W ; expire 1D) ; Min TLL IN NS ns1 IN NS ns1.granitecanyon.com. IN NS ns1.waikato.ac.nz. IN RP jon.novatek.co.nz. hostmaster.novatek.co.nz. IN TXT "Jonathan Marks - Fax (707) 221-3689" IN MX 10 mail gateway IN A 24.113.94.87 IN MX 10 mail ; specific mutlihomed i/f's mail IN A 24.113.94.87 ns1 IN A 24.113.94.87 ftp IN A 24.113.94.87 www IN A 24.113.94.87 novatek.co.nz. IN A 24.113.94.87 ; Aliases jon IN CNAME www vanessa IN CNAME www steven IN CNAME www cara IN CNAME www <<<<<<<<<<<<<<<<<<<<<>>>>>>>>>>>>>>>>>>>>>/var/named/primary/db.cmex.org $TTL 1D @ IN SOA gateway.novatek.co.nz. hostmaster.novatek.co.nz. ( 2000022701 ; serial 8H ; refresh 2H ; retry 1W ; expire 1D) ; Min TLL IN NS ns1.novatek.co.nz. IN NS ns1.granitecanyon.com. IN RP jon.novatek.co.nz. hostmaster.novatek.co.nz. IN TXT "Jonathan Marks - Fax (707) 221-3689" IN MX 10 mail.novatek.co.nz mail IN A 24.113.94.87 ftp IN A 24.113.98.164 www IN A 24.113.98.164 cmex.org. IN A 24.113.98.164 <<<<<<<<<<<<<<<<<<<<<<>>>>>>>>>>>>>>>>>>>>>>/var/named/primary/db.24.113.94.87 $TTL 1D @ IN SOA gateway.novatek.co.nz. hostmaster.novatek.co.nz. ( 1999072302 ; serial 8H ; refresh 2H ; retry 1W ; expire 1D) ; Min TLL IN NS ns1.novatek.co.nz. IN NS ns1.granitecanyon.com. IN NS ns1.waikato.ac.nz. IN RP jon.novatek.co.nz hostmaster.novatek.co.nz IN TXT "Jonathan Marks - Fax (707) 221-3689" 87.94.113.24.in-addr.arpa. IN PTR gateway.novatek.co.nz. <<<<<<<<<<<<<<<<<<<<<<<<>>>>>>>>>>>>>>>>>>>>>>>>/var/named/primary/db.24.113.98.164 $TTL 1D @ IN SOA gateway.novatek.co.nz. hostmaster.novatek.co.nz. ( 1999072302 ; serial 8H ; refresh 2H ; retry 1W ; expire 1D) ; Min TLL IN NS ns1.novatek.co.nz. IN NS ns1.granitecanyon.com. IN RP jon.novatek.co.nz hostmaster.novatek.co.nz IN TXT "Jonathan Marks - Fax (707) 221-3689" 164.98.113.24.in-addr.arpa. IN PTR cmex.com. <<<<<<<<<<<<<<<<<<<<<<>>>>>>>>>>>>>>>>>>>>/etc/named.conf options { // Root directory for master (db) files. directory "/var/named"; // If a lookup is not in our cache, query these nameservers // (usually our ISP's) our ISP's nameservers before attempting // to resolve. forward first; forwarders { 192.168.0.254; // 24.113.94.87; }; listen-on port 53 { 127.0.0.1; // localhost 192.168.0.3; // physical ip address }; // may be required if this name server is behind a firewall // query-source address * port 53; }; // The next two zones are the minimum required for a caching nameserver. zone "." { type hint; file "db.root"; }; zone "0.0.127.in-addr.arpa" { type master; notify no; file "db.127.0.0"; }; zone "novatek.co.nz" { type master; notify no; allow-transfer { 24.113.94.87; 24.113.98.164; 127.0.0.1; 192.168.0/24; }; file "primary/db.novatek.co.nz"; }; zone "cmex.org" { type master; notify no; allow-transfer { 24.113.94.87; 24.113.98.164; 127.0.0.1; 192.168.0/24; }; file "primary/db.cmex.org"; }; zone "0.168.192.in-addr.arpa" { type master; notify no; allow-transfer { 24.113.94.87; 24.113.98.164; 127.0.0.1; 192.168.0/24; }; file "primary/db.192.168.0"; }; <<<<<<<<<<<<<<<<<<<<<<<<>>>>>>>>>>>>>>>>>>>>>>/var/named/primary/db.novatek.co.nz $TTL 1D @ IN SOA henry.novatek.co.nz. hostmaster.novatek.co.nz. ( 1999081904 ; serial 8H ; refresh 2H ; retry 1W ; expire 1D) ; Min TLL IN NS henry.novatek.co.nz. IN RP jon.novatek.co.nz. hostmaster.novatek.co.nz. IN TXT "Jonathan Marks - Fax (707) 221-3689" IN MX 10 mail localhost IN A 127.0.0.1 IN MX 10 mail hercules IN A 192.168.0.1 IN MX 10 mail homer IN A 192.168.0.2 IN MX 10 mail henry IN A 192.168.0.3 IN MX 10 mail hal-9000 IN A 192.168.0.4 IN MX 10 mail beatroot IN A 192.168.0.5 IN MX 10 mail hershel IN A 192.168.0.6 IN MX 10 mail gateway IN A 192.168.0.254 IN MX 10 mail mail IN A 192.168.0.254 ns1 IN A 192.168.0.254 ftp IN A 192.168.0.201 www IN A 192.168.0.200 novatek.co.nz. IN A 192.168.0.200 ; Aliases jon IN CNAME www vanessa IN CNAME www steven IN CNAME www cara IN CNAME www <<<<<<<<<<<<<<<<<<<<<>>>>>>>>>>>>>>>>>>>>>/var/named/primary/db.cmex.org $TTL 1D @ IN SOA henry.novatek.co.nz. hostmaster.novatek.co.nz. ( 2000022601 ; serial 8H ; refresh 2H ; retry 1W ; expire 1D) ; Min TLL IN NS henry.novatek.co.nz. IN RP jon.novatek.co.nz. hostmaster.novatek.co.nz. IN TXT "Jonathan Marks - Fax (707) 221-3689" IN MX 10 mail mail IN A 192.168.0.254 ftp IN A 192.168.0.203 www IN A 192.168.0.202 cmex.org. IN A 192.168.0.202 <<<<<<<<<<<<<<<<<<<<<<>>>>>>>>>>>>>>>>>>>>>>/var/named/primary/db.192.168.0 $TTL 1D @ IN SOA henry.novatek.co.nz. hostmaster.novatek.co.nz. ( 2000022601 ; serial 8H ; refresh 2H ; retry 1W ; expire 1D) ; Min TLL IN NS henry.novatek.co.nz. 1 IN PTR hercules.novatek.co.nz. 2 IN PTR homer.novatek.co.nz. 3 IN PTR henry.novatek.co.nz. 4 IN PTR hal-9000.novatek.co.nz. 5 IN PTR beatroot.novatek.co.nz. 6 IN PTR hershel.novatek.co.nz. 200 IN PTR www.novatek.co.nz. 201 IN PTR ftp.novatek.co.nz. 202 IN PTR www.cmex.org. 203 IN PTR ftp.cmex.org. <<<<<<<<<<<<<<<<<<<<<<<<>>>>>>>>>>>>>>>>>>>>/etc/httpd/conf/httpd.conf ### Section 2: 'Main' server configuration # Port 80 User nobody Group nobody #ServerAdmin webkeeper@novatek.co.nz #ServerName novatek.co.nz #DocumentRoot "/usr/local/www/" # # permits the use of /~ where user is a subdir off the # UserDir value. UserDir /usr/local/www Options FollowSymLinks AllowOverride None # UserDir /usr/local/www Options MultiViews Includes FollowSymLinks ExecCGI AllowOverride All Order allow,deny Allow from all Order deny,allow Deny from all # permit http access to the ftp directories. Options Includes Indexes FollowSymLinks AllowOverride All Order allow,deny Allow from all # UseCanonicalName On # # Disable the Server signature # ServerSignature Off ######Note what is done with vcommon for virtual hosting ErrorLog /var/log/httpd/error_log LogLevel warn LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\"" combined LogFormat "%h %l %u %t \"%r\" %>s %b" common LogFormat "%V %h %l %u %t \"%r\" %>s %b" vcommon LogFormat "%{Referer}i -> %U" referer LogFormat "%{User-agent}i" agent CustomLog /var/log/httpd/access_log vcommon #CustomLog /var/log/httpd/referer_log referer #CustomLog /var/log/httpd/agent_log agent #CustomLog /var/log/httpd/access_log combined ServerSignature Off NameVirtualHost 192.168.0.200:80 NameVirtualHost 192.168.0.201:80 NameVirtualHost 192.168.0.202:80 NameVirtualHost 192.168.0.203:80 NameVirtualHost 192.168.0.204:80 #NameVirtualHost 192.168.0.205:80 DocumentRoot "/usr/local/www/novatek" ServerName www.novatek.co.nz ServerAlias novatek.co.nz ServerPath "/usr/local/www/novatek" ServerAdmin webkeeper@novatek.co.nz ScriptAlias /cgi-bin/ /usr/local/www/novatek/cgi-bin # internal access on .201, externally forwarded on .202 DocumentRoot "/home/ftp/novatek" ServerName ftp.novatek.co.nz ServerPath "/home/ftp/novatek" ServerAdmin webkeeper@novatek.co.nz ScriptAlias /cgi-bin/ /usr/local/www/novatek/cgi-bin DocumentRoot "/usr/local/www/cmex" ServerName www.cmex.org ServerAlias cmex.org ServerPath "/usr/local/www/cmex" ServerAdmin webkeeper@cmex.org ScriptAlias /cgi-bin/ /usr/local/www/cmex/cgi-bin # internal access on .203, externally forwarded on .202 DocumentRoot "/home/ftp/cmex" ServerName ftp.cmex.org ServerPath "/home/ftp/cmex" ServerAdmin webkeeper@cmex.co.nz ScriptAlias /cgi-bin/ /usr/local/www/cmex/cgi-bin # Virtual servers for users DocumentRoot "/usr/local/www/jon" ServerName jon.novatek.co.nz ServerPath "/usr/local/www/jon" ServerAdmin jon@novatek.co.nz ScriptAlias /cgi-bin/ /usr/local/www/jon/cgi-bin DocumentRoot "/usr/local/www/vanessa" ServerName vanessa.novatek.co.nz ServerPath "/usr/local/www/vanessa" ServerAdmin vanessa@novatek.co.nz ScriptAlias /cgi-bin/ /usr/local/www/vanessa/cgi-bin DocumentRoot "/usr/local/www/steven" ServerName steven.novatek.co.nz ServerPath "/usr/local/www/steven" ServerAdmin steven@novatek.co.nz ScriptAlias /cgi-bin/ /usr/local/www/steven/cgi-bin DocumentRoot "/usr/local/www/cara" ServerName cara.novatek.co.nz ServerPath "/usr/local/www/cara" ServerAdmin cara@novatek.co.nz ScriptAlias /cgi-bin/ /usr/local/www/cara/cgi-bin # # <<<<<<<<<<<<<<<<<<<<<<<<<>>>>>>>>>>>>>>>>>>>>>>>>>>>/etc/ftpservers # ftpservers #ftp.novatek.co.nz 192.168.0.201 /etc/ftp.novatek #ftp.cmex.org 192.168.0.203 /etc/ftp.cmex <<<<<<<<<<<<<<<<<<<<<<<<<<<>>>>>>>>>>>>>>>>>>>>>>/etc/ftp.novatek/ftpacess # ftp.novatek/ftpaccess class all real,guest,anonymous * email ftpkeeper@novatek.co.nz root /usr/local/ftp/novatek banner /etc/ftp.novatek/ftpbanner logfile /var/log/ftp.novatek upload /usr/local/ftp/novatek * no upload /usr/local/ftp/novatek /incoming yes ftp ftp 0666 passwd-check warn loginfails 5 greeting brief readme README* login readme README* cwd=* message /welcome.msg login message .message cwd=* limit all 20 Any /etc/msgs/ftptoomany compress yes all tar yes all chmod no guest,anonymous delete no guest,anonymous overwrite no guest,anonymous rename no guest,anonymous log commands real log transfers anonymous,real inbound,outbound <<<<<<<<<<<<<<<<>>>>>>>>>>>>>>>>>>>>>>>>/etc/ftp.novatek/ftpbanner Welcome to Novatek Electronics' FTP Site You are being hosted by %L. The local time in Vancouver, Canada is: %T There are %N of %M users logged on. Log in and have a look around. Enjoy :-) %E <<<<<<<<<<<<<<<<<<<<<<>>>>>>>>>>>>>>>>>>>>>>>>>>>/etc/logrotate.d/ftpd /var/log/ftp.novatek { nocompress } /var/log/ftp.cmex { nocompress } <<<<<<<<<<<<<<<<<<<<<<<<<<>>>>>>>>>>>>>>>>>>>>>>>>/etc/sendmail.mc include(`/usr/lib/sendmail-cf/m4/cf.m4') define(`confDEF_USER_ID',``8:12'') VERSIONID(`@(#)novatek.m4 8.10 (Novatek) July 25, 99') OSTYPE(`linux') undefine(`UUCP_RELAY') undefine(`BITNET_RELAY') define(`confAUTO_REBUILD') define(`confTO_CONNECT', `1m') define(`confTRY_NULL_MX_LIST',true) define(`confDONT_PROBE_INTERFACES',true) define(`PROCMAIL_MAILER_PATH',`/usr/bin/procmail') define(`confSMTP_LOGIN_MSG', `mail.$m spoken here; $b') define(`confPRIVACY_FLAGS', `goaway') FEATURE(`smrsh',`/usr/sbin/smrsh') FEATURE(`virtusertable',`hash -o /etc/mail/virtusertable') FEATURE(redirect) FEATURE(always_add_domain) FEATURE(use_cw_file) FEATURE(local_procmail) MAILER(procmail) MAILER(smtp) FEATURE(rbl) FEATURE(`access_db') FEATURE(`blacklist_recipients') <<<<<<<<<<<<<<<<<<<< /etc/sendmail.cf >>>>>>>>>>>>>>>>>>/etc/mail/relay-domains novatek.co.nz cmex.org <<<<<<<<<<<<<<<<<>>>>>>>>>>>>>>>>>/etc/mail/virtusertable abc@novatek.co.nz abc def@novatek.co.nz def #. . . . . . @novatek.co.nz jon abc@cmex.org abc # . . . . . @cmex.org jon <<<<<<<<<<<<<<<<<