Re: [cobalt-users] CGI-BIN? + SSH2 + WebMail, etc..

[Carrie Bartkowiak <ravencarrie@xxxxxxxx>]

On Thu, 19 Jul 2001 17:13:01 +0100, Sean Chester wrote:
>>I have three questions for the group...

All of which can be answered with a search through the archives.

>>1) Can anyone tell me if there is a directory on the Raq4 that I
>>can put
>>commonly used CGI scripts so that any site can use them by just
>>referencing the directory as such.  I really did not want to make a
>>cgi-bin for each site if I did not have to. I understand there may
>>be
>>some sort of config file I must edit to get this to work.

You can make one wherever you want, and put an entry for it in 
srm.conf. Do a search in the archives for "global cgi-bin" or 
"cgi-bin outside root directory".

>>ex:
>>http://host.domain.com/cgi-bin/formmail.cgi

Do NOT allow this script on your server. It is an ancient, extremely 
insecure script that turns your server into a spamhaus. Do a search 
through the archives for "formmail spam".

>>2) Anyone with suggestions/instructions on how to install SSH2 on a
>>Raq4.  Would there be any reason to install SSH instead?

Sure. Use the package located at http://pkg.nl.cobalt.com/.
No, there's no reason to use SSH (protocol 1) instead - unless you're 
not interested in security.  :)

>>3) Lastly...  anyone setup WebMail on a Raq4?  Suggestions?

Again, this is probably *the* most frequently asked question on the 
list. Search the archives for "webmail". I personally recommend Al 
The Pal - quick and easy to setup, three or four lines in the config 
file to change.

The link to the archives is at the bottom of every list mail, and 
should become your first friend and first resource before asking a 
question. Otherwise, you'll find that you'll get some pretty nasty 
responses from self-imposed list moderators who feel that everyone 
should obey the rules except them.  ;)

You're doing a good thing wanting to install SSH2. Turn off telnet 
after you do so. But don't turn around and blow your good streak by 
installing formmail - look into more secure PHP scripts instead 
(php.resourceindex.com) - or almost anything that isn't what, 8 years 
old now? (When was formmail released? It's been 6 or 8 years...)

And just a tip - I've found that no matter how much your clients 
whine that they want to be able to check their email with their 
browser, they only use it for about 2 weeks and then it sits 
gathering dust. It's too slow, basically; they can do the same thing 
much quicker with their email program.

Good luck...
-- 
Carrie Bartkowiak, ravencarrie@xxxxxxxx on 07/19/2001