Jump to content
  • Announcements

    • spinynorman

      Mandriva Official Documentation

      Official documentation for extant versions of Mandriva can be found at doc.mandriva.com.   Documentation for the latest release may take some time to appear there. You can install all the manuals from the main repository if you have Mandriva installed - files are prefixed mandriva-doc.
    • paul

      Forum software upgrade   10/29/17

      So you may have noticed the forum software has upgraded !!!
      A few things that have changed. We no longer have community blogs (was never really used) We no longer have a portal page.
      We can discuss this, and decide whether it is needed (It costs money) See this thread: Here
Ixthusdan

Web and mail server

Recommended Posts

If I wanted to set up one box for a mail/web server, should I use Apache/Postfix or would I be better to create virtual machines on the box for separate web and mail servers? What do you think?

Share this post


Link to post
Share on other sites

Separate virtual machines is a lot more admin overhead, but increases security (if done right).

 

Postfix is quite secure by itself and can even be run chrooted so isn't really a security concern.

 

Apache itself is quite secure too, but can be rendered insecure by flawed php scripts, so it depends how you use it.

 

Ultimately it comes down to security versus less admin overhead, only you can decide if your specific intended use needs the extra security or not.

Edited by tux99

Share this post


Link to post
Share on other sites

I have a client who wants to move his web site and mail in-house. I want to change the site to a better package. His current site is one of those drop-down-lists-and-change sort of thing which is not very appealing, IMHO. I can but a template for 30-60 dollars and edit the code to customize it. I am concerned about security, but am not certain I need to go virtual.

Share this post


Link to post
Share on other sites

I have a client who wants to move his web site and mail in-house.

 

If it's for a business and especially if the web site uses any of the popular CMS systems like Drupal, Yoomla, etc. then I would definitely use virtual machines or separate physical servers, since the risk that someone who hacks the web site also gains access to confidential business email is too high.

Share this post


Link to post
Share on other sites

Although it may require more attention, it does seem that using virtual machines would be better, just to separate the web from the mail. I already administrate 3 servers for this client; one more box with 2 virtual servers would not be that big a deal.

Share this post


Link to post
Share on other sites

I use Xen virtualisation and I have four virtual machines under here - Web Server, Mail Server, Proxy Server, Backup Server. I much prefer this, because if someone hacks my web server, then I can just kill the machine and reinstall a new one remotely. If it was installed as a normal server, I would have a problem meaning I would have to visit the site where the server is to reinstall a clean server.

 

So in reality, the virtual server will be less problematic in the event of an attack. Admin is the same, just that you have more servers to connect to but that is minimal.

Share this post


Link to post
Share on other sites

Ian, I really like the idea of administrating off-site as much as possible, and so do my clients. Obviously, a higher cost is incurred by them for on-site work. I am looking at the new Ubuntu server as a base for all of this. Any thoughts concerning the base system? (The only reason for choosing Ubuntu is no charge for updates, where as everyone else wants money for future updates. Ubuntu comes with the desired products, except I may need a better virtual set-up.)

Share this post


Link to post
Share on other sites

I always use CentOS (i.e. Redhat Enterprise Linux in all but the name) for servers, it's supported for a much longer time than the 2 years Ubuntu LTS releases are (unless you want to guarantee yourself an upgrade fee every two years ;) , but that wouldn't be my style).

Edited by tux99

Share this post


Link to post
Share on other sites

I'm with tux99. My virtualised server environment comprises base system of CentOS 5 x86_64, with four virtual servers. One of which is Red Hat Enterprise Linux with subscription, the remainder are CentOS 5. All virtualised servers are 32 bit versions. All running under Xen.

Share this post


Link to post
Share on other sites

I always use CentOS (i.e. Redhat Enterprise Linux in all but the name) for servers, it's supported for a much longer time than the 2 years Ubuntu LTS releases are (unless you want to guarantee yourself an upgrade fee every two years ;) , but that wouldn't be my style).

 

That is factually incorrect, the LTS releases are supported for 3 years for UbuntuDesktop and 5 years for UbuntuServer.

 

Source: http://wiki.ubuntu.com/LTS

Share this post


Link to post
Share on other sites

That is factually incorrect, the LTS releases are supported for 3 years for UbuntuDesktop and 5 years for UbuntuServer.

 

Source: http://wiki.ubuntu.com/LTS

 

Ok, didn't know that thanks for correcting me. I still wouldn't choose Ubuntu as a server (and not for a desktop either since on the desktop Mandriva is better), Redhat is the industry standard for Linux servers in a business environment and deservedly so, therefore CentOS (which is a free Redhat clone) is the best choice IMHO.

 

If it has to be a debian style distro then I would choose the original, i.e. Debian, rather than Ubuntu server.

Edited by tux99

Share this post


Link to post
Share on other sites

I thank you all for your opinions. I will have a look at CentOS; I actually did not realize it was RedHat. I actually am considering Debian as well for the base system.

Share this post


Link to post
Share on other sites

my 15 or so virtual server run debian using kvm.

 

I have two remainig vmare boxes destined for the trash heap this year

Share this post


Link to post
Share on other sites

Paul, ( and anyone) how many NICs do you use? The box I am building has 2. I am thinking that I would add a third NIC so that the server and both virtual servers would have their own networking link, and I would connect them directly to the router. Any benefit to this layout? Does it matter?

Share this post


Link to post
Share on other sites

1 interface with vlan'ing . .see below.

 

requires a vlan capable (Managed) switch for tagging and detagging etc

/etc/network/interfaces (snippet)

# The primary network interface
allow-hotplug eth0
iface eth0 inet static
address 202.37.129.18
netmask 255.255.255.0
network 202.37.129.0
broadcast 202.37.129.255
gateway 202.37.129.1
# dns-* options are implemented by the resolvconf package, if installed
dns-nameservers 202.37.129.2 131.203.126.178
dns-search interspeed.co.nz


auto virbr1022
iface virbr1022 inet manual
bridge_ports eth0.1022
bridge_stp off
bridge_maxwait 5



host:~# ip add | grep 1022
34: virbr1022: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UNKNOWN 
35: eth0.1022@eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP

 

 

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now

×