amuck-landowner

Falling off the Grid

shawn_ky

Member
See...  My trust with ZPanel left after the founder/owner stated that he wasn't interested in security (and he expressed that by stating (I don't recall the exact words) "What do you expect from a free software that we donate our time to?").  Now I read over everything the security analyst you're speaking of wrote and from my understanding initially when he asked diplomatically his concerns were basically brushed off as in "I know better and you're wrong" and then immediately "It's a free software, what do you expect".  When he pursued it more aggressively that's when the development team (from my perspective) took his concerns more seriously (now the hacking just happened when another individual saw the opportunity).  


Maybe they fixed that initial problem, but I still can't trust ZPanel at all.  It's not the software but the people I have an issue with (and kind of why I don't have any interests to recommend the software).  No offense to you @shawn_ky, just wanted to share my opinions of ZPanel.  I do hope they don't have this self-entitled thought of themselves.  I mean it's as bad as curtisg showing his code and stating "it's just a small piece anyways, what do you care?  It's free work anyways!" when criticism about it's security is made.  


Of course, I am also a guy who writes pretty crappy code (can't write secure code to save my life) and should not be allowed near a compiler, so take what I say with a grain of salt.  
No offense at all... I've only used it a short time and at this point nothing mission critical. If I move forward it would have to be with CPanel + whatever solution for VPS. :) I think, and just my opinion, that language barrier comes into play a lot there... I see a lot of abrasiveness at times but believe it more culture or translation that anything. I'm not a coder either... Not secure at least. So in the same boat.


As far as OwnCloud, latest version seems A LOT more stable.
 

KuJoe

Well-Known Member
Verified Provider
Just setup the mailserver on my Synology NAS and it was the most painless process I've ever experienced. It uses Roundcube for the web client, but I setup IMAPS and SMTPS on my Android phone so I don't think I'll need the web client much (but it's nice to use on my home PC). Only issue I am having is when I am connected to WIFI I need to use the IP for my NAS, off WIFI the FQDN works fine. Weird.

Additionally, I am disappointed to see SpamAssassin in there instead of ASSP. :(
 
Last edited by a moderator:

Tux

DigitialOcean? lel
I've been falling off the grid for a while. I started by using DuckDuckGo.

Now, I'm diversifying the proprietary services I've been using. I've gone from using Gmail to my own mail server setup on my RamNode VPS. I also have a OwnCloud instance on it that I'm migrating over to my Backupsy VPS.

Next up: Installing CyanogenMod on my Nexus 7 (to remove vestigial traces of Google apps on the thing) and getting OwnCloud+Firefox for Android+Firefox Sync working.
 

Francisco

Company Lube
Verified Provider
Where's that 'Fuck You' button >_>

Thanks for all the suggestions folks... even if only a handful were the actual panels I was asking about :p  I suppose I'll just stick with the ol' manual setup for now.
It's called the "Thank you" button on these forms sir.

You're confusing VPSB with CC's ticketing system again.

:3

Francisco
 

happel

New Member
Only issue I am having is when I am connected to WIFI I need to use the IP for my NAS, off WIFI the FQDN works fine. Weird.
This is a limitation of many home routers, I forgot the specifics but sometimes there's an option in your router settings which you need to enable.

edit: http://serverfault.com/questions/26845/unable-to-connect-on-natted-server-from-a-host-computer-on-the-same-lan-using-pu/26851#26851


But it works fine out of the box with my openwrt router, but I recall I needed to activate some 'triangle-blahblah'-option when I was using the router of my ISP.
 
Last edited by a moderator:

peppr

New Member
Am surprised no one mentioned Zarafa ( http://www.zarafa.com/ )

Its opensource and a drop in exchange replacement ( with outlook support ! ) and comes with collaboration ( active sync support) . the community a.k.a free version doesnt support HA, and outlook support is limited to 3 users. 

demo here : https://demo.zarafa.com/webapp/

Am using it for some community projects and for our internal mail server at office ( mail cannot be routed outside the local network and such.. ) and it works perfectly and is adapted by most people without any hiccups. 
 

KuJoe

Well-Known Member
Verified Provider
This is a limitation of many home routers, I forgot the specifics but sometimes there's an option in your router settings which you need to enable.


edit: http://serverfault.com/questions/26845/unable-to-connect-on-natted-server-from-a-host-computer-on-the-same-lan-using-pu/26851#26851


But it works fine out of the box with my openwrt router, but I recall I needed to activate some 'triangle-blahblah'-option when I was using the router of my ISP.
I tried some iptables suggestions from DD-WRT's forum but no dice. It looks like I'll be moving my NAS to a data center anyways since port 25 is blocked by Comcast. :(
 

stim

New Member
Some good suggestions above that I should explore.

In the past month I have moved my business from MS to Linux without any major headaches. I tried a lot of distributions, but the outright winner was Crunchbang Linux. It's a absolute joy.

I've mostly replaced Dropbox with BTSync. Though I still use dropbox for public sharing. I have installed owncloud and will be using that instead. BTSync is so incredibly useful. 

Evernote is next. Nevernote looks like a viable replacement, though I'm working on a DIY-replacement. Of course, without some of the nice features, but then I rarely use them. I just need a good clipper and a way to search my documents. 

Also intrigued by Bitmesssage. That looks like it has a lot of potential, but how long before it's made illicit?

I use Gmail for personal stuff - for work, my clients provide their own systems. I'm looking to move.

I have questions about mailservers: My main worry is downtime. How easy is it to set-up/sync several servers for the same IMAP service? 

And how much maintenance is really required? Can spam Assassin compete with Gmail's spam filter? 

Though I have a few VPS, I am looking at getting one of these and running the mailserver from home, mirrored if possible.
 

happel

New Member
I tried some iptables suggestions from DD-WRT's forum but no dice. It looks like I'll be moving my NAS to a data center anyways since port 25 is blocked by Comcast. :(
The webinterface of my openwrt router shows a zone_lan_prerouting thingy which contains a DNAT rule for each of the forwarded ports, rerouting them to their respective internal ipaddresses. But I can't find them in the terminal, iptables isn't really my thing, but most of the other stuff shows up and it specifically stated that that chain didn't exist. :|

Comcast is blocking incoming connections on port 25?? For outgoing you could relay the messages through a small vps on a different port.
 
Last edited by a moderator:

HalfEatenPie

The Irrational One
Retired Staff
Am surprised no one mentioned Zarafa ( http://www.zarafa.com/ )

Its opensource and a drop in exchange replacement ( with outlook support ! ) and comes with collaboration ( active sync support) . the community a.k.a free version doesnt support HA, and outlook support is limited to 3 users. 

demo here : https://demo.zarafa.com/webapp/

Am using it for some community projects and for our internal mail server at office ( mail cannot be routed outside the local network and such.. ) and it works perfectly and is adapted by most people without any hiccups. 
Whaaa.  I might actually test this one out.  Honestly all this talk about moving your services off of Google is fantastic.  Although anyone know a nice easy tool to move the individual e-mails as well over to your own solution? 
 
Last edited by a moderator:

perennate

New Member
Verified Provider
Last edited by a moderator:

Tux

DigitialOcean? lel
I tried some iptables suggestions from DD-WRT's forum but no dice. It looks like I'll be moving my NAS to a data center anyways since port 25 is blocked by Comcast. :(
My ISP doesn't block port 25. It's that ISP that rhymes with Harder.
 

KuJoe

Well-Known Member
Verified Provider
The webinterface of my openwrt router shows a zone_lan_prerouting thingy which contains a DNAT rule for each of the forwarded ports, rerouting them to their respective internal ipaddresses. But I can't find them in the terminal, iptables isn't really my thing, but most of the other stuff shows up and it specifically stated that that chain didn't exist. :|

Comcast is blocking incoming connections on port 25?? For outgoing you could relay the messages through a small vps on a different port.

I can bypass the incoming with port forwarding, the problem is they block the outgoing and if I used a small VPS for relaying, I might as well host a mailserver on it defeating the purpose of my project so my best bet is to throw the NAS in a cabinet and give it a dedicated IP and call it a day. I'll get a 2nd one for HA and ship it to Tampa and nerd out for a week or 2. :)
 

Aldryic C'boas

The Pony
Out of curiosity, I gave ISPConfig a try. A quick --purge later, I decided to just stick with a postfix/sasl/dovecot manual setup. Thanks for the suggestions though folks; I did see a few recommendations that look rather interesting for some unrelated project ideas.
 
  • Like
Reactions: bfj

jarland

The ocean is digital
Out of curiosity, I gave ISPConfig a try. A quick --purge later, I decided to just stick with a postfix/sasl/dovecot manual setup. Thanks for the suggestions though folks; I did see a few recommendations that look rather interesting for some unrelated project ideas.
I think it's the only solution that doesn't end up causing more grief than it's worth. Least overhead, less to secure after default setup, efficient and rarely fails.
 

Aldryic C'boas

The Pony
I think it's the only solution that doesn't end up causing more grief than it's worth. Least overhead, less to secure after default setup, efficient and rarely fails.
Pretty much. I've got everything running smoothly now.. perhaps this weekend I'll put up my deployment layout, and maybe do a couple guides for folks wanting to do the self-host thing as well (contacts/calendar/email/sync/'drive'/etc).
 

clarity

Active Member
@Aldryic that would be nice of you! I am looking for the exact same thing. I like ISPConfig 3, but there is just so much bloat. 
 
Top
amuck-landowner