Difference between revisions of "Information Systems:Mail Server"
| Line 22: | Line 22: | ||
* Port: 4001 |
* Port: 4001 |
||
* Implicit deny on root "/" directory |
* Implicit deny on root "/" directory |
||
| − | * Specified <code><Directory |
+ | * Specified <code><Directory "C:\FTP Root\Atlas"></code> for directory browsing of folder where the images are located. |
| − | * Specified <code> |
+ | * Specified <code>Alias /atlasimages "C:/FTP Root/Atlas"</code> so that URLs can refer to /atlasimages instead of actual folder path (security measure). |
| + | * Specified <code>Require 172.30.16.0/21</code> to allow only intranet access to <Directory /FTP Root/Atlas">. |
||
Despite no port-forwarding for TCP 4001 on the UTM, an explicit rule to deny access to that port for the public address of the mail server may be considered. |
Despite no port-forwarding for TCP 4001 on the UTM, an explicit rule to deny access to that port for the public address of the mail server may be considered. |
||
Revision as of 16:26, 24 February 2016
Overview
The mail server serves the following purposes, click to read more about the software behind the service:
- Mail server - MDaemon Mail Server
- FTP server - Serv-U FTP Server
- HTTP server - Apache
Server Virtualization
The mail server is slated to be virtualized in 2016. Notes pertaining to the mail server VM configuration should be maintained here.
Apache
Overview
Apache is installed on Mail server as a content/image server for Infonet. Signature capture files from Atlas are sent along with the waybill file via FTP to the mail server, and the Carrier Shipments program on Infonet displays these images files (bmp). Instead of implementing an automated process to transfer and keep the image files on another server, it was decided to make the files available to Infonet (Websmart Apache server) by installing a Apache on mail.
Installation details
The Apache installation was downloaded from ApacheHaus and the entire folder/installation is contained in C:\www. Since there are no web pages or content to be served, but rather just directory browsing "C:\FTP Root\Atlas", the file folder structure is left at its default. Thus all of Apache can be found in "C:\www\Apache24\".
Configuration
Below are critical details regarding this Apache installation, all of which are set in "C:\www\Apache24\httpd.conf".
- Listen only on 172.30.25.3
- Port: 4001
- Implicit deny on root "/" directory
- Specified
<Directory "C:\FTP Root\Atlas">for directory browsing of folder where the images are located. - Specified
Alias /atlasimages "C:/FTP Root/Atlas"so that URLs can refer to /atlasimages instead of actual folder path (security measure). - Specified
Require 172.30.16.0/21to allow only intranet access to <Directory /FTP Root/Atlas">.
Despite no port-forwarding for TCP 4001 on the UTM, an explicit rule to deny access to that port for the public address of the mail server may be considered.