File: internetapp.en.xml

package info (click to toggle)
debian-reference 2.24
links: PTS
area: main
in suites: lenny
size: 20,088 kB
ctags: 35
sloc: xml: 70,510; sh: 616; makefile: 352; perl: 221; sed: 3
file content (2943 lines) | stat: -rw-r--r-- 120,926 bytes
parent folder | download | duplicates (2)
<?xml version='1.0'?>
<!-- -*- DocBook -*- -->
<!DOCTYPE book PUBLIC "-//OASIS//DTD DocBook XML V4.2//EN"
    "/usr/share/sgml/docbook/dtd/xml/4.2/docbookx.dtd" [
 <!ENTITY % sgml.features "IGNORE">
 <!ENTITY % xml.features  "INCLUDE">
 <!ENTITY % dbcent PUBLIC
      "-//OASIS//ENTITIES DocBook Character Entities V4.2//EN"
      "/usr/share/sgml/docbook/dtd/xml/4.2/dbcentx.mod"> %dbcent;
 <!ENTITY % commondata     SYSTEM "../common.ent"      > %commondata;
 <!ENTITY % popcon         SYSTEM "../popcon.ent"      > %popcon;
 <!ENTITY % pkgsize        SYSTEM "../pkgsize.ent"     > %pkgsize;
 <!ENTITY % urlsdata       SYSTEM "../urls.ent"        > %urlsdata;
]>
<chapter id="networkapplications">
    <title>Network applications</title>
    <para/>
    <section id="webbrowsers">
      <title>Web browsers</title>
      <para>There are many <ulink url="&webbrowser;">web browser</ulink> packages to access remote contents with <ulink url="&hypertexttransferprotocol;">Hypertext Transfer Protocol</ulink> (HTTP). </para>
      <table id="listofwebbrowsers">
        
        <title> List of web browsers. </title><tgroup x-pkgname=" 1 " x-popcon=" 2 " x-pkgsize=" 3 " cols="4">
          <colspec colname="xxx1"/>
          <colspec colname="xxx2"/>
          <colspec colname="xxx3"/>
          <colspec colname="xxx4"/>
          <thead><row>
              <entry>
                <para>
                  <emphasis role="strong">package</emphasis>
                </para>
              </entry>
              <entry>
                <para>
                  <emphasis role="strong">popcon</emphasis>
                </para>
              </entry>
              <entry>
                <para>
                  <emphasis role="strong">size</emphasis>
                </para>
              </entry>
              <entry>
                <para>
                  <emphasis role="strong">description</emphasis>
                </para>
              </entry>
            </row></thead><tbody><row>
              <entry>
                <para>
                  <code>iceweasel</code>
                </para>
              </entry>
              <entry><para>&pop-iceweasel;</para></entry>
              <entry><para>&size-iceweasel;</para></entry>
              <entry>
                <para> Web browser (X) (unbranded Firefox) </para>
              </entry>
            </row><row>
              <entry>
                <para>
                  <code>iceape-browser</code>
                </para>
              </entry>
              <entry><para>&pop-iceapebrowser;</para></entry>
              <entry><para>&size-iceapebrowser;</para></entry>
              <entry>
                <para> Web browser (X) (unbranded Mozilla browser) </para>
              </entry>
            </row><row>
              <entry>
                <para>
                  <code>epiphany-browser</code>
                </para>
              </entry>
              <entry><para>&pop-epiphanybrowser;</para></entry>
              <entry><para>&size-epiphanybrowser;</para></entry>
              <entry>
                <para> Web browser (X) (Gnome HIG compliant browser) </para>
              </entry>
            </row><row>
              <entry>
                <para>
                  <code>galeon</code>
                </para>
              </entry>
              <entry><para>&pop-galeon;</para></entry>
              <entry><para>&size-galeon;</para></entry>
              <entry>
                <para> Web browser (X) (Gnome browser) </para>
              </entry>
            </row><row>
              <entry>
                <para>
                  <code>konqueror</code>
                </para>
              </entry>
              <entry><para>&pop-konqueror;</para></entry>
              <entry><para>&size-konqueror;</para></entry>
              <entry>
                <para> Web browser (X) (KDE browser) </para>
              </entry>
            </row><row>
              <entry>
                <para>
                  <code>w3m</code>
                </para>
              </entry>
              <entry><para>&pop-wdm;</para></entry>
              <entry><para>&size-wdm;</para></entry>
              <entry>
                <para> Web browser (text) </para>
              </entry>
            </row><row>
              <entry>
                <para>
                  <code>lynx</code>
                </para>
              </entry>
              <entry><para>&pop-lynx;</para></entry>
              <entry><para>&size-lynx;</para></entry>
              <entry>
                <para> , , </para>
              </entry>
            </row><row>
              <entry>
                <para>
                  <code>elinks</code>
                </para>
              </entry>
              <entry><para>&pop-elinks;</para></entry>
              <entry><para>&size-elinks;</para></entry>
              <entry>
                <para> , , </para>
              </entry>
            </row><row>
              <entry>
                <para>
                  <code>links</code>
                </para>
              </entry>
              <entry><para>&pop-links;</para></entry>
              <entry><para>&size-links;</para></entry>
              <entry>
                <para> , , </para>
              </entry>
            </row><row>
              <entry>
                <para>
                  <code>links2</code>
                </para>
              </entry>
              <entry><para>&pop-linksc;</para></entry>
              <entry><para>&size-linksc;</para></entry>
              <entry>
                <para> , , </para>
              </entry>
            </row></tbody>
        </tgroup>
      </table>
      <para/>
      <section id="browserconfiguration">
        <title>Browser configuration</title>
        <para>You may be able to use following special URL strings for some browsers to confirm their settings. </para>
        <itemizedlist>
          <listitem>
            <para>"<code>about:</code>" </para>
          </listitem>
          <listitem>
            <para>"<code>about:config</code>" </para>
          </listitem>
          <listitem>
            <para>"<code>about:plugins</code>" </para>
          </listitem>
        </itemizedlist>
        <para>Debian offers many free browser plugin packages in the main component which can handle not only <ulink url="&javasoftwareplatform;">Java (software platform)</ulink> and <ulink url="&flash;">Flash</ulink> but also <ulink url="&mpeg;">MPEG</ulink>, <ulink url="&mpegc;">MPEG2</ulink>, <ulink url="&mpege;">MPEG4</ulink>, <ulink url="&divx;">DivX</ulink>, <ulink url="&windowsmediavideowmv;">Windows Media Video (.wmv)</ulink>, <ulink url="&quicktimemov;">QuickTime (.mov)</ulink>, <ulink url="&mpdmpd;">MP3 (.mp3)</ulink>, <ulink url="&oggvorbis;">Ogg/Vorbis</ulink> files, DVDs, VCDs, etc.  Debian also offers helper programs to install non-free browser plugin packages as contrib or non-free components. </para>
        <table id="listofbrowserpluginpackages">
          
          <title> List of browser plugin packages. </title><tgroup x-pkgname=" 1 " x-popcon=" 2 " x-pkgsize=" 3 " cols="5">
            <colspec colname="xxx1"/>
            <colspec colname="xxx2"/>
            <colspec colname="xxx3"/>
            <colspec colname="xxx4"/>
            <colspec colname="xxx5"/>
            <thead><row>
                <entry>
                  <para>
                    <emphasis role="strong">package</emphasis>
                  </para>
                </entry>
                <entry>
                  <para>
                    <emphasis role="strong">popcon</emphasis>
                  </para>
                </entry>
                <entry>
                  <para>
                    <emphasis role="strong">size</emphasis>
                  </para>
                </entry>
                <entry>
                  <para>
                    <emphasis role="strong">component</emphasis>
                  </para>
                </entry>
                <entry>
                  <para>
                    <emphasis role="strong">description</emphasis>
                  </para>
                </entry>
              </row></thead><tbody><row>
                <entry>
                  <para>
                    <code>icedtea-gcjwebplugin</code>
                  </para>
                </entry>
                <entry><para>&pop-icedteagcjwebplugin;</para></entry>
                <entry><para>&size-icedteagcjwebplugin;</para></entry>
                <entry>
                  <para> main </para>
                </entry>
                <entry>
                  <para> Java plugin using Hotspot JIT </para>
                </entry>
              </row><row>
                <entry>
                  <para>
                    <code>java-gcj-compat-plugin</code>
                  </para>
                </entry>
                <entry><para>&pop-javagcjcompatplugin;</para></entry>
                <entry><para>&size-javagcjcompatplugin;</para></entry>
                <entry>
                  <para> main </para>
                </entry>
                <entry>
                  <para> Java plugin using the gij runtime </para>
                </entry>
              </row><row>
                <entry>
                  <para>
                    <code>sun-java5-plugin</code>
                  </para>
                </entry>
                <entry><para>&pop-sunjavafplugin;</para></entry>
                <entry><para>&size-sunjavafplugin;</para></entry>
                <entry>
                  <para> non-free </para>
                </entry>
                <entry>
                  <para> Java plugin for Sun's Java SE 5.0 (i386 only) </para>
                </entry>
              </row><row>
                <entry>
                  <para>
                    <code>sun-java6-plugin</code>
                  </para>
                </entry>
                <entry><para>&pop-sunjavagplugin;</para></entry>
                <entry><para>&size-sunjavagplugin;</para></entry>
                <entry>
                  <para> non-free </para>
                </entry>
                <entry>
                  <para> Java plugin for Sun's Java SE 6 (i386 only) </para>
                </entry>
              </row><row>
                <entry>
                  <para>
                    <code>swfdec-mozilla</code>
                  </para>
                </entry>
                <entry><para>&pop-swfdecmozilla;</para></entry>
                <entry><para>&size-swfdecmozilla;</para></entry>
                <entry>
                  <para> main </para>
                </entry>
                <entry>
                  <para> Flash plugin based on libswfdec </para>
                </entry>
              </row><row>
                <entry>
                  <para>
                    <code>mozilla-plugin-gnash</code>
                  </para>
                </entry>
                <entry><para>&pop-mozillaplugingnash;</para></entry>
                <entry><para>&size-mozillaplugingnash;</para></entry>
                <entry>
                  <para> main </para>
                </entry>
                <entry>
                  <para> Flash plugin based on Gnash </para>
                </entry>
              </row><row>
                <entry>
                  <para>
                    <code>flashplugin-nonfree</code>
                  </para>
                </entry>
                <entry><para>&pop-flashpluginnonfree;</para></entry>
                <entry><para>&size-flashpluginnonfree;</para></entry>
                <entry>
                  <para> contrib </para>
                </entry>
                <entry>
                  <para> Flash plugin helper to install Adobe Flash Player (i386, amd64 only) </para>
                </entry>
              </row><row>
                <entry>
                  <para>
                    <code>mozilla-bonobo</code>
                  </para>
                </entry>
                <entry><para>&pop-mozillabonobo;</para></entry>
                <entry><para>&size-mozillabonobo;</para></entry>
                <entry>
                  <para> main </para>
                </entry>
                <entry>
                  <para> Mozilla plugin support for Gnome Bonobo components </para>
                </entry>
              </row><row>
                <entry>
                  <para>
                    <code>mozilla-plugin-vlc</code>
                  </para>
                </entry>
                <entry><para>&pop-mozillapluginvlc;</para></entry>
                <entry><para>&size-mozillapluginvlc;</para></entry>
                <entry>
                  <para> main </para>
                </entry>
                <entry>
                  <para> Multimedia plugin based on <ulink url="&vlcmediaplayer;">VLC media player</ulink> </para>
                </entry>
              </row><row>
                <entry>
                  <para>
                    <code>totem-mozilla</code>
                  </para>
                </entry>
                <entry><para>&pop-totemmozilla;</para></entry>
                <entry><para>&size-totemmozilla;</para></entry>
                <entry>
                  <para> main </para>
                </entry>
                <entry>
                  <para> Multimedia plugin based on <ulink url="&gnomestotemmediaplayer;">Gnome's Totem media player</ulink> </para>
                </entry>
              </row><row>
                <entry>
                  <para>
                    <code>gecko-mediaplayer</code>
                  </para>
                </entry>
                <entry><para>&pop-geckomediaplayer;</para></entry>
                <entry><para>&size-geckomediaplayer;</para></entry>
                <entry>
                  <para> main </para>
                </entry>
                <entry>
                  <para> Multimedia plugin based on (GNOME) <ulink url="&mplayer;">MPlayer</ulink> </para>
                </entry>
              </row><row>
                <entry>
                  <para>
                    <code>nspluginwrapper</code>
                  </para>
                </entry>
                <entry><para>&pop-nspluginwrapper;</para></entry>
                <entry><para>&size-nspluginwrapper;</para></entry>
                <entry>
                  <para> contrib </para>
                </entry>
                <entry>
                  <para> A wrapper to run i386 Netscape plugins on amd64 architecture </para>
                </entry>
              </row></tbody>
          </tgroup>
        </table>
        <para/>
        <para/>
        <para/>
        <para/>
        <para/>
        <para/>
        <para/>
        <tip><para> Although use of above Debian packages are much easier, browser plugins can be still manually enabled by installing "*.so" into plugin directories (e.g., <code>/usr/lib/iceweasel/plugins/</code>) and restarting browsers.   </para></tip>
        <para>Some web sites refuse to be connected based on the user-agent string of your browser.  You can work around this situation by <ulink url="&spoofingtheuseragentstring;">spoofing the user-agent string</ulink>.  For exaple, you can do this by adding: </para>
        <screen>user_pref{"general.useragent.override","Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"};
</screen>
        <para>into user configuration files such as <code>~/.gnome2/epiphany/mozilla/epiphany/user.js</code> or <code>~/.mozilla/firefox/*.default/user.js</code>. Alternatively, you can add and reset this variable by typing "<code>about:config</code>" into URL and right clicking its display contents.  </para>
        <caution><para> Spoofed user-agent string may cause <ulink url="&badsideeffectswithjava;">bad side effects with Java</ulink>. </para></caution>
        <para/>
        <para/>
        <para/>
        <para/>
        <para/>
        <para/>
        <para/>
        <para/>
      </section>
    </section>
    <section id="themailsystem">
      <title>The mail system</title>
      <caution><para> If you are to set up the mail server to exchange mail directly with the Internet, you should be better than reading this elementary document. </para></caution>
      <para/>
      <section id="modernmailservicebasics">
        <title>Modern mail service basics</title>
        <para>In order to contain spam (unwanted and unsolicited e-mail) problems, many ISPs which provide consumer grade Internet connection are implementing counter measures: </para>
        <itemizedlist>
          <listitem>
            <para>The smarthost service for their customers to send message uses the message submission port (587) specified in <ulink url="&rfceeaj;">rfc4409</ulink> with the password (SMTP AUTH service) specified in <ulink url="&rfcejfe;">rfc4954</ulink>. </para>
          </listitem>
          <listitem>
            <para>The <ulink url="&smtp;">SMTP</ulink> port (25) connection from their internal network hosts (except ISP's own outgoing mail server) to the Internet are blocked. </para>
          </listitem>
          <listitem>
            <para>The <ulink url="&smtp;">SMTP</ulink> port (25) connection to the ISP's incoming mail server from some suspicious external network hosts are blocked.  (The connection from hosts on the dynamic IP address range used by the dial-up and other consumer grade Internet connections are the first ones to be blocked.) </para>
          </listitem>
        </itemizedlist>
        <para>When configuring your mail system or resolving mail delivery problems, you must consider these new limitations. </para>
        <para>In light of these hostile Internet situation and limitations, some independent Internet mail ISPs such as Yahoo.com and Gmail.com offer the secure mail service which can be connected from anywhere on the Internet using <ulink url="&transportlayerseesocketslayerssl;">Transport Layer Security (TLS) and its predecessor, Secure Sockets Layer (SSL)</ulink> : </para>
        <itemizedlist>
          <listitem><para>The smarthost service for their customers to send message uses the SMTP/SSL port (465) or the message submission port (587) with the password (SMTP AUTH service). </para></listitem>
          <listitem>
            <para>The incoming mail is accessible at the TLS/POP3 port (995) with <ulink url="&popd;">POP3</ulink>. </para>
          </listitem>
        </itemizedlist>
        <caution><para> It is not realistic to run SMTP server on consumer grade network to send mail directly to the remote host reliably.  They are very likely to be rejected.  You must use some smarthost services offered by your connection ISP or independent mail ISPs.  For the simplicity, I will assume that the smarthost is located at "<code>smtp.hostname.dom</code>", requires SMTP AUTH, and uses the message submission port 587 in the following text. </para></caution>
        <para/>
      </section>
      <section id="basicmailsoftwarechoice">
        <title>Basic mail software choice</title>
        <table id="listofpopularmaiemforworkstation">
          
          <title> List of popular mail system for workstation. </title><tgroup x-pkgname=" 1 " x-popcon=" 2 " x-pkgsize=" 3 " cols="4">
            <colspec colname="xxx1"/>
            <colspec colname="xxx2"/>
            <colspec colname="xxx3"/>
            <colspec colname="xxx4"/>
            <thead><row>
                <entry>
                  <para>
                    <emphasis role="strong">package</emphasis>
                  </para>
                </entry>
                <entry>
                  <para>
                    <emphasis role="strong">popcon</emphasis>
                  </para>
                </entry>
                <entry>
                  <para>
                    <emphasis role="strong">size</emphasis>
                  </para>
                </entry>
                <entry>
                  <para>
                    <emphasis role="strong">function</emphasis>
                  </para>
                </entry>
              </row></thead><tbody><row>
                <entry>
                  <para>
                    <code>exim4-daemon-light</code>
                  </para>
                </entry>
                <entry><para>&pop-eximedaemonlight;</para></entry>
                <entry><para>&size-eximedaemonlight;</para></entry>
                <entry>
                  <para> Exim4 mail transport agent (MTA: Debian etch default) </para>
                </entry>
              </row><row>
                <entry>
                  <para>
                    <code>exim4-base</code>
                  </para>
                </entry>
                <entry><para>&pop-eximebase;</para></entry>
                <entry><para>&size-eximebase;</para></entry>
                <entry>
                  <para> Exim4 documentation (text) and common files </para>
                </entry>
              </row><row>
                <entry>
                  <para>
                    <code>exim4-doc-html</code>
                  </para>
                </entry>
                <entry><para>&pop-eximedochtml;</para></entry>
                <entry><para>&size-eximedochtml;</para></entry>
                <entry>
                  <para> Exim4 documentation (html) </para>
                </entry>
              </row><row>
                <entry>
                  <para>
                    <code>exim4-doc-info</code>
                  </para>
                </entry>
                <entry><para>&pop-eximedocinfo;</para></entry>
                <entry><para>&size-eximedocinfo;</para></entry>
                <entry>
                  <para> Exim4 documentation (info) </para>
                </entry>
              </row><row>
                <entry>
                  <para>
                    <code>postfix</code>
                  </para>
                </entry>
                <entry><para>&pop-postfix;</para></entry>
                <entry><para>&size-postfix;</para></entry>
                <entry>
                  <para> Postfix mail transport agent (MTA: alternative) </para>
                </entry>
              </row><row>
                <entry>
                  <para>
                    <code>postfix-doc</code>
                  </para>
                </entry>
                <entry><para>&pop-postfixdoc;</para></entry>
                <entry><para>&size-postfixdoc;</para></entry>
                <entry>
                  <para> Postfix documentation (html+text) </para>
                </entry>
              </row><row>
                <entry>
                  <para>
                    <code>sasl2-bin</code>
                  </para>
                </entry>
                <entry><para>&pop-saslcbin;</para></entry>
                <entry><para>&size-saslcbin;</para></entry>
                <entry>
                  <para> Cyrus SASL API implementation (supplement postfix for SMTP-AUTH) </para>
                </entry>
              </row><row>
                <entry>
                  <para>
                    <code>cyrus-sasl2-doc</code>
                  </para>
                </entry>
                <entry><para>&pop-cyrussaslcdoc;</para></entry>
                <entry><para>&size-cyrussaslcdoc;</para></entry>
                <entry>
                  <para> Cyrus SASL - documentation </para>
                </entry>
              </row><row>
                <entry>
                  <para>
                    <code>fetchmail</code>
                  </para>
                </entry>
                <entry><para>&pop-fetchmail;</para></entry>
                <entry><para>&size-fetchmail;</para></entry>
                <entry>
                  <para> Remote mail retrieval and forwarding utility </para>
                </entry>
              </row><row>
                <entry>
                  <para>
                    <code>procmail</code>
                  </para>
                </entry>
                <entry><para>&pop-procmail;</para></entry>
                <entry><para>&size-procmail;</para></entry>
                <entry>
                  <para> Mail filter utility </para>
                </entry>
              </row><row>
                <entry>
                  <para>
                    <code>mutt</code>
                  </para>
                </entry>
                <entry><para>&pop-mutt;</para></entry>
                <entry><para>&size-mutt;</para></entry>
                <entry>
                  <para> Mail user agent (MUA) to read/write the mail usually used with <code>vim</code> </para>
                </entry>
              </row></tbody>
          </tgroup>
        </table>
        <para>The choice between <code>exim4-*</code> and <code>postfix</code> packages is really up to you.   </para>
        <para>Although the popcon vote count of exim4 looks several times popular than that of postfix, this does not mean postfix is not popular with Debian developers.  The Debian server system uses both exim4 and postfix.  The <ulink url="&mailheaderanalysis;">mail header analysis</ulink> of mailing list postings from prominent Debian developers also indicate both of these MTAs are as popular. </para>
        <para>The <code>exim4-*</code> are known to have very small memory consumption and very flexible for its configuration.  The <code>postfix</code> is known to be compact, fast, simple, and secure.  Both come with ample documentation and are as good in quality and license.   </para>
        <para/>
      </section>
      <section id="themailconfiguragyforworkstation">
        <title>The mail configuration strategy for workstation</title>
        <para>The most simple mail configuration is that the mail is sent to the ISP's smarthost and received from ISP's POP3 server by the MUA itself. This type of configuration is popular with full featured GUI based mail user agent (MUA) such as <code>icedove</code>, <code>evolution</code>, etc.. If you need to filter mail by their types, you use MUA's filtering function. For this case, the local mail transport agent (MTA) need to do local delivery only. </para>
        <para>The alternative mail configuration is that the mail is sent via local MTA to the ISP's smarthost and received from ISP's POP3 by <code>fetchmail</code>(1) to the local mailbox.  If you need to filter mail by their types, you use <code>procmail</code>(1) to filter mail into separate mailboxes.  This type of configuration is popular with simple console based MUA such as <code>mutt</code>, <code>gnus</code>, etc., although this is possible with any MUAs. For this case, the local MTA need to do both smarthost delivery and local delivery. </para>
        <para/>
        <section id="theconfigurationofexime">
          <title>The configuration of exim4</title>
          <para>For Internet via smarthost, you (re)configure <code>exim4-*</code> packages as follows: </para>
          <para/>
          <screen>$ sudo /etc/init.d/exim4 stop
$ sudo dpkg-reconfigure exim4-conf
</screen>
          <itemizedlist>
            <listitem><para>Chose "mail sent by smarthost; received via SMTP or fetchmail". </para></listitem>
            <listitem><para>Set "IP address or host name of the outgoing smarthost:" to "smtp.hostname.dom:587". </para></listitem>
          </itemizedlist>
          <para/>
          <screen>$ sudo vim /etc/exim4/passwd.client
</screen>
          <itemizedlist>
            <listitem><para>Create password entries for the smarthost. </para></listitem>
          </itemizedlist>
          <para/>
          <screen>$ cat /etc/exim4/passwd.client
^smtp.*\.hostname\.dom:username@hostname.dom:password
$ sudo /etc/init.d/exim4 start
</screen>
          <para>The host name in <code>/etc/exim4/passwd.client</code> should not be the alias.  You check the real host name with: </para>
          <screen>$ host smtp.hostname.dom
smtp.hostname.dom is an alias for smtp99.hostname.dom.
smtp99.hostname.dom has address 123.234.123.89
</screen>
          <para>I use regex in <code>/etc/exim4/passwd.client</code> to work around the alias issue so even if the ISP moves host pointed by the alias, SMTP AUTH will likely be working. </para>
          <tip><para> Local customization file <code>/etc/exim4/exim4.conf.localmacros</code> may be created to set MACROs.  For example, Yahoo's mail service is said to require "<code>MAIN_TLS_ENABLE = true</code>" and "<code>AUTH_CLIENT_ALLOW_NOTLS_PASSWORDS=yes</code>" in it. </para></tip>
          <note><para> Please read the official guide at: <code>/usr/share/doc/exim4-base/README.Debian.gz</code> and <code>update-exim4.conf</code>(8). </para></note>
          <caution><para> You should execute <code>update-exim4.conf</code>(8) after updating exim4 configuration files in <code>/etc/exim4</code>.  </para></caution>
          <para/>
        </section>
        <section id="theconfigurationfpostfixwithsasl">
          <title>The configuration of postfix with SASL</title>
          <para>For Internet via smarthost, you should first read <ulink url="&postfixdocumentation;">postfix documentation</ulink> and key manual pages: </para>
          <table id="listofimportantpstfixmanualpages">
            
            <title> List of important postfix manual pages </title><tgroup x-pkgname=" " x-popcon="" x-pkgsize="" cols="2">
              <colspec colname="xxx1"/>
              <colspec colname="xxx2"/>
              <thead><row>
                  <entry>
                    <para>
                      <emphasis role="strong">command</emphasis>
                    </para>
                  </entry>
                  <entry>
                    <para>
                      <emphasis role="strong">function</emphasis>
                    </para>
                  </entry>
                </row></thead><tbody><row>
                  <entry>
                    <para><code>postfix</code>(1) </para>
                  </entry>
                  <entry>
                    <para>   Postfix control program </para>
                  </entry>
                </row><row>
                  <entry>
                    <para><code>postconf</code>(1) </para>
                  </entry>
                  <entry>
                    <para>  Postfix configuration utility </para>
                  </entry>
                </row><row>
                  <entry>
                    <para><code>postconf</code>(5) </para>
                  </entry>
                  <entry>
                    <para>  Postfix configuration parameters </para>
                  </entry>
                </row><row>
                  <entry>
                    <para><code>postmap</code>(1) </para>
                  </entry>
                  <entry>
                    <para>  Postfix lookup table maintenance </para>
                  </entry>
                </row><row>
                  <entry>
                    <para><code>postalias</code>(1) </para>
                  </entry>
                  <entry>
                    <para>  Postfix alias database maintenance </para>
                  </entry>
                </row></tbody>
            </tgroup>
          </table>
          <para>You (re)configure <code>postfix</code> and <code>sasl2-bin</code> packages as follows: </para>
          <screen>$ sudo /etc/init.d/postfix stop
$ sudo dpkg-reconfigure postfix
</screen>
          <itemizedlist>
            <listitem><para>Chose "Internet with smarthost" </para></listitem>
            <listitem>
              <para>Set "SMTP relay host (blank for none):" to "<code>[smtp.hostname.dom]:587</code>" </para>
            </listitem>
          </itemizedlist>
          <para/>
          <screen>$ sudo postconf -e 'smtp_sender_dependent_authentication = yes'
$ sudo postconf -e 'smtp_sasl_auth_enable = yes'
$ sudo postconf -e 'smtp_sasl_password_maps = hash:/etc/postfix/sasl_passwd'
$ sudo postconf -e 'smtp_sasl_type = cyrus'
$ sudo vim /etc/postfix/sasl_passwd
</screen>
          <itemizedlist>
            <listitem><para>Create password entries for the smarthost. </para></listitem>
          </itemizedlist>
          <para/>
          <screen>$ cat /etc/postfix/sasl_passwd
[smtp.hostname.dom]:587     username:password
$ sudo postmap hush:/etc/postfix/sasl_passwd
$ sudo /etc/init.d/postfix start
</screen>
          <para>Here the use of <code>[ ]</code> in the dpkg-reconfigure dialogue and <code>/etc/postfix/sasl_passwd</code> ensures not to check MX record but directly use exact hostname specified.  Read more for "Enabling SASL authentication in the Postfix SMTP client" in <code>usr/share/doc/postfix/html/SASL_README.html</code>. </para>
          <para/>
        </section>
        <section id="themailaddressconfiguration">
          <title>The mail address configuration</title>
          <para>There are a few <ulink url="&mailaddressconfieryanduseragents;">mail address configuration files for mail transport, delivery and user agents</ulink>. </para>
          <table id="listofmailaddresnfigurationfiles">
            
            <title> List of mail address related configuration files. </title><tgroup x-pkgname=" " x-popcon=" " x-pkgsize="" cols="3">
              <colspec colname="xxx1"/>
              <colspec colname="xxx2"/>
              <colspec colname="xxx3"/>
              <thead><row>
                  <entry>
                    <para>
                      <emphasis role="strong">file</emphasis>
                    </para>
                  </entry>
                  <entry>
                    <para>
                      <emphasis role="strong">function</emphasis>
                    </para>
                  </entry>
                  <entry>
                    <para>
                      <emphasis role="strong">application</emphasis>
                    </para>
                  </entry>
                </row></thead><tbody><row>
                  <entry>
                    <para>
                      <code>/etc/mailname</code>
                    </para>
                  </entry>
                  <entry>
                    <para> default host name for (outgoing) mail </para>
                  </entry>
                  <entry>
                    <para> Debian specific, <code>mailname</code>(5) </para>
                  </entry>
                </row><row>
                  <entry>
                    <para>
                      <code>/etc/email-addresses</code>
                    </para>
                  </entry>
                  <entry>
                    <para> host name spoofing for outgoing mail </para>
                  </entry>
                  <entry>
                    <para><code>exim</code>(8) specific, <code>exim4-config_files</code>(5) </para>
                  </entry>
                </row><row>
                  <entry>
                    <para>
                      <code>/etc/postfix/generic</code>
                    </para>
                  </entry>
                  <entry>
                    <para> host name spoofing for outgoing mail </para>
                  </entry>
                  <entry>
                    <para><code>postfix</code>(1) specific, activated after <code>postmap</code>(1) command execution. </para>
                  </entry>
                </row><row>
                  <entry>
                    <para>
                      <code>/etc/aliases</code>
                    </para>
                  </entry>
                  <entry>
                    <para> account name alias for incoming mail </para>
                  </entry>
                  <entry>
                    <para> general, activated after <code>newaliases</code>(1) command execution. </para>
                  </entry>
                </row></tbody>
            </tgroup>
          </table>
          <para>The <emphasis role="strong">mailname</emphasis> in the <code>/etc/mailname</code> file is usually a fully qualified domain name (FQDN) that resolves to one of the host's IP addresses.  The mobile workstation which does not have a hostname with resolvable IP address, set this <emphasis role="strong">mailname</emphasis> to the value of "<code>hostname -f</code>". (This is safe choice and works for both <code>exim4-*</code> and <code>postfix</code>.) </para>
          <tip><para> The contents of <code>/etc/mailname</code> is used by many non-MTA programs for their default behavior. For <code>mutt</code>, set "<code>hostname</code>" and "<code>from</code>" variables in <code>~/muttrc</code> file to override the <emphasis role="strong">mailname</emphasis> value.  For <code>devscripts</code> package programs such as <code>bts</code> and <code>dch</code>, export environment variables "<code>DEBFULLNAME</code>" and "<code>DEBEMAIL</code>" to override it. </para></tip>
          <para>When setting the <emphasis role="strong">mailname</emphasis> to "<code>hostname -f</code>", the spoofing of the source mail address via MTA can be realized by: </para>
          <itemizedlist>
            <listitem>
              <para><code>/etc/email-addresses</code> file for <code>exim4</code>(8) as explained in the <code>exim4-config_files</code>(5), and </para>
            </listitem>
            <listitem>
              <para><code>/etc/postfix/generic</code> file for <code>postfix</code>(1) as explained in the <code>generic</code>(5). </para>
            </listitem>
          </itemizedlist>
          <para>For <code>postfix</code>, the following extra steps are needed: </para>
          <screen># postmap hash:/etc/postfix/generic
# postconf -e 'smtp_generic_maps = hash:/etc/postfix/generic'
# postfix reload
</screen>
          <para>You check filters using: </para>
          <itemizedlist>
            <listitem>
              <para><code>exim</code>(8) with <code>-brw, -bf, -bF, -bV, ...</code> options. </para>
            </listitem>
            <listitem>
              <para><code>postmap</code>(1) with <code>-q</code> option. </para>
            </listitem>
          </itemizedlist>
          <tip><para> Exim comes with several utility programs such as <code>exiqgrep</code>(8) and <code>exipick</code>(8).  See "<code>dpkg -L exim4-base|grep man8/</code>" for available commands. </para></tip>
          <para/>
        </section>
      </section>
      <section id="tipsformanagingthemail">
        <title>Tips for managing the mail</title>
        <para/>
        <section id="basicmtaoperations">
          <title>Basic MTA operations</title>
          <para>There are several basic MTA operations.  Some may be performed via <code>sendmail</code>(1) compatibility interface. </para>
          <table id="listofbasicmtaoperation">
            
            <title> List of basic MTA operation. </title><tgroup x-pkgname=" " x-popcon=" " x-pkgsize="" cols="3">
              <colspec colname="xxx1"/>
              <colspec colname="xxx2"/>
              <colspec colname="xxx3"/>
              <thead><row>
                  <entry>
                    <para>
                      <emphasis role="strong">exim command</emphasis>
                    </para>
                  </entry>
                  <entry>
                    <para>
                      <emphasis role="strong">postfix command</emphasis>
                    </para>
                  </entry>
                  <entry>
                    <para>
                      <emphasis role="strong">description</emphasis>
                    </para>
                  </entry>
                </row></thead><tbody><row>
                  <entry>
                    <para>
                      <code>sendmail</code>
                    </para>
                  </entry>
                  <entry>
                    <para>
                      <code>sendmail</code>
                    </para>
                  </entry>
                  <entry>
                    <para> Read mail from standard input and arrange for delivery. (<code>-bm</code>) </para>
                  </entry>
                </row><row>
                  <entry>
                    <para>
                      <code>mailq</code>
                    </para>
                  </entry>
                  <entry>
                    <para>
                      <code>mailq</code>
                    </para>
                  </entry>
                  <entry>
                    <para> List the mail queue with status and queue ID. (<code>-bp</code>) </para>
                  </entry>
                </row><row>
                  <entry>
                    <para>
                      <code>newaliases</code>
                    </para>
                  </entry>
                  <entry>
                    <para>
                      <code>newaliases</code>
                    </para>
                  </entry>
                  <entry>
                    <para> Initialize alias database. (<code>-I</code>) </para>
                  </entry>
                </row><row>
                  <entry>
                    <para>
                      <code>exim4 -q</code>
                    </para>
                  </entry>
                  <entry>
                    <para>
                      <code>postqueue -f</code>
                    </para>
                  </entry>
                  <entry>
                    <para> flush waiting mail (<code>-q</code>)</para>
                  </entry>
                </row><row>
                  <entry>
                    <para>
                      <code>exim4 -qf</code>
                    </para>
                  </entry>
                  <entry>
                    <para>
                      <code>postsuper -r ALL deferred; postqueue -f</code>
                    </para>
                  </entry>
                  <entry>
                    <para> flush all mail </para>
                  </entry>
                </row><row>
                  <entry>
                    <para>
                      <code>exim4 -qff</code>
                    </para>
                  </entry>
                  <entry>
                    <para>
                      <code>postsuper -r ALL; postqueue -f</code>
                    </para>
                  </entry>
                  <entry>
                    <para> flush even frozen mail </para>
                  </entry>
                </row><row>
                  <entry>
                    <para>
                      <code>exim4 -Mg queue_id</code>
                    </para>
                  </entry>
                  <entry>
                    <para>
                      <code>postsuper -h queue_id</code>
                    </para>
                  </entry>
                  <entry>
                    <para> freeze one message by its queue ID </para>
                  </entry>
                </row><row>
                  <entry>
                    <para>
                      <code>exim4 -Mrm queue_id</code>
                    </para>
                  </entry>
                  <entry>
                    <para>
                      <code>postsuper -d queue_id</code>
                    </para>
                  </entry>
                  <entry>
                    <para> remove one message by its queue ID </para>
                  </entry>
                </row><row>
                  <entry>
                    <para> --- </para>
                  </entry>
                  <entry>
                    <para>
                      <code>postsuper -d ALL</code>
                    </para>
                  </entry>
                  <entry>
                    <para> remove all messages </para>
                  </entry>
                </row></tbody>
            </tgroup>
          </table>
          <para>For the script in <code>/etc/ppp/ip-up.d/*</code>, "flush all mail" may be good idea. </para>
          <para/>
        </section>
        <section id="basicmuamutt">
          <title>Basic MUA  -- Mutt</title>
          <para>Use <code>mutt</code> as the mail user agent (MUA) in combination with <code>vim</code>. Customize with <code>~/.muttrc</code>; for example: </para>
          <para/>
          <screen># use visual mode and "gq" to reformat quotes
set editor="vim -c 'set tw=72 et ft=mail'"
#
# header weeding taken from the manual (Sven's Draconian header weeding)
#
ignore *
unignore from: date subject to cc
unignore user-agent x-mailer
hdr_order from subject to cc date user-agent x-mailer
set hostname=spoof.example.org
set from="First Last &lt;username@example.org&gt;"
....
</screen>
          <para>Add the following to <code>/etc/mailcap</code> or <code>$HOME/.mailcap</code> to display HTML mail and MS Word attachments inline: </para>
          <para/>
          <screen>text/html; lynx -force_html %s; needsterminal;
application/msword; /usr/bin/antiword '%s'; copiousoutput; description="Microsoft Word Text"; nametemplate=%s.doc
</screen>
          <para/>
        </section>
        <section id="redelivermboxcontents">
          <title>Redeliver mbox contents</title>
          <para>You need to manually deliver mails to the sorted mailboxes in your home directory from <code>/var/mail/&lt;username&gt;</code> if your home directory became full and <code>procmail</code> failed.  After making disk space in the home directory, run: </para>
          <screen># /etc/init.d/${MAILDAEMON} stop
# formail -s procmail &lt;/var/mail/&lt;username&gt;
# /etc/init.d/${MAILDAEMON} start
</screen>
          <para/>
        </section>
      </section>
      <section id="choicesofsoftwareforthemail">
        <title>Choices of software for the mail</title>
        <para>For mail system programs, there are many alternatives developed with different priority.  Here is the overview. </para>
        <para/>
        <section id="mta">
          <title>MTA</title>
          <table id="listofmta">
            
            <title> List of MTA. </title><tgroup x-pkgname=" 1 " x-popcon=" 2 " x-pkgsize=" 3 " cols="4">
              <colspec colname="xxx1"/>
              <colspec colname="xxx2"/>
              <colspec colname="xxx3"/>
              <colspec colname="xxx4"/>
              <thead><row>
                  <entry>
                    <para>
                      <emphasis role="strong">package</emphasis>
                    </para>
                  </entry>
                  <entry>
                    <para>
                      <emphasis role="strong">popcon</emphasis>
                    </para>
                  </entry>
                  <entry>
                    <para>
                      <emphasis role="strong">size</emphasis>
                    </para>
                  </entry>
                  <entry>
                    <para>
                      <emphasis role="strong">capability</emphasis>
                    </para>
                  </entry>
                </row></thead><tbody><row>
                  <entry>
                    <para>
                      <code>exim4-daemon-light</code>
                    </para>
                  </entry>
                  <entry><para>&pop-eximedaemonlight;</para></entry>
                  <entry><para>&size-eximedaemonlight;</para></entry>
                  <entry>
                    <para> full </para>
                  </entry>
                </row><row>
                  <entry>
                    <para>
                      <code>postfix</code>
                    </para>
                  </entry>
                  <entry><para>&pop-postfix;</para></entry>
                  <entry><para>&size-postfix;</para></entry>
                  <entry>
                    <para> full (security) </para>
                  </entry>
                </row><row>
                  <entry>
                    <para>
                      <code>exim4-daemon-heavy</code>
                    </para>
                  </entry>
                  <entry><para>&pop-eximedaemonheavy;</para></entry>
                  <entry><para>&size-eximedaemonheavy;</para></entry>
                  <entry>
                    <para> full (flexible) </para>
                  </entry>
                </row><row>
                  <entry>
                    <para>
                      <code>sendmail-bin</code>
                    </para>
                  </entry>
                  <entry><para>&pop-sendmailbin;</para></entry>
                  <entry><para>&size-sendmailbin;</para></entry>
                  <entry>
                    <para> full (only if you are already familiar) </para>
                  </entry>
                </row><row>
                  <entry>
                    <para>
                      <code>nullmailer</code>
                    </para>
                  </entry>
                  <entry><para>&pop-nullmailer;</para></entry>
                  <entry><para>&size-nullmailer;</para></entry>
                  <entry>
                    <para> strip down, no local mail </para>
                  </entry>
                </row><row>
                  <entry>
                    <para>
                      <code>ssmtp</code>
                    </para>
                  </entry>
                  <entry><para>&pop-ssmtp;</para></entry>
                  <entry><para>&size-ssmtp;</para></entry>
                  <entry>
                    <para> strip down, no local mail </para>
                  </entry>
                </row><row>
                  <entry>
                    <para>
                      <code>nbsmtp</code>
                    </para>
                  </entry>
                  <entry><para>&pop-nbsmtp;</para></entry>
                  <entry><para>&size-nbsmtp;</para></entry>
                  <entry>
                    <para> ? </para>
                  </entry>
                </row><row>
                  <entry>
                    <para>
                      <code>courier-mta</code>
                    </para>
                  </entry>
                  <entry><para>&pop-couriermta;</para></entry>
                  <entry><para>&size-couriermta;</para></entry>
                  <entry>
                    <para> very full (web interface etc.)</para>
                  </entry>
                </row><row>
                  <entry>
                    <para>
                      <code>xmail</code>
                    </para>
                  </entry>
                  <entry><para>&pop-xmail;</para></entry>
                  <entry><para>&size-xmail;</para></entry>
                  <entry>
                    <para> light </para>
                  </entry>
                </row><row>
                  <entry>
                    <para>
                      <code>masqmail</code>
                    </para>
                  </entry>
                  <entry><para>&pop-masqmail;</para></entry>
                  <entry><para>&size-masqmail;</para></entry>
                  <entry>
                    <para> light </para>
                  </entry>
                </row><row>
                  <entry>
                    <para>
                      <code>esmtp</code>
                    </para>
                  </entry>
                  <entry><para>&pop-esmtp;</para></entry>
                  <entry><para>&size-esmtp;</para></entry>
                  <entry>
                    <para> light </para>
                  </entry>
                </row><row>
                  <entry>
                    <para>
                      <code>esmtp-run</code>
                    </para>
                  </entry>
                  <entry><para>&pop-esmtprun;</para></entry>
                  <entry><para>&size-esmtprun;</para></entry>
                  <entry>
                    <para> light (sendmail compatibility extension to <code>esmtp</code>) </para>
                  </entry>
                </row><row>
                  <entry>
                    <para>
                      <code>msmtp</code>
                    </para>
                  </entry>
                  <entry><para>&pop-msmtp;</para></entry>
                  <entry><para>&size-msmtp;</para></entry>
                  <entry>
                    <para> light </para>
                  </entry>
                </row><row>
                  <entry>
                    <para>
                      <code>msmtp-mta</code>
                    </para>
                  </entry>
                  <entry><para>&pop-msmtpmta;</para></entry>
                  <entry><para>&size-msmtpmta;</para></entry>
                  <entry>
                    <para> light (sendmail compatibility extension to <code>msmtp</code>) </para>
                  </entry>
                </row></tbody>
            </tgroup>
          </table>
          <para/>
          <para/>
        </section>
        <section id="mua">
          <title>MUA</title>
          <para>If you subscribe to Debian related mailing list, it may be a good idea to use such MUA as <code>mutt</code> and <code>gnus</code> which are the de facto standard for the participant and known to behave as expected. </para>
          <table id="listofmua">
            
            <title> List of MUA. </title><tgroup x-pkgname=" 1 " x-popcon=" 2 " x-pkgsize=" 3 " cols="4">
              <colspec colname="xxx1"/>
              <colspec colname="xxx2"/>
              <colspec colname="xxx3"/>
              <colspec colname="xxx4"/>
              <thead><row>
                  <entry>
                    <para>
                      <emphasis role="strong">package</emphasis>
                    </para>
                  </entry>
                  <entry>
                    <para>
                      <emphasis role="strong">popcon</emphasis>
                    </para>
                  </entry>
                  <entry>
                    <para>
                      <emphasis role="strong">size</emphasis>
                    </para>
                  </entry>
                  <entry>
                    <para>
                      <emphasis role="strong">type</emphasis>
                    </para>
                  </entry>
                </row></thead><tbody><row>
                  <entry>
                    <para>
                      <code>iceweasel</code>
                    </para>
                  </entry>
                  <entry><para>&pop-iceweasel;</para></entry>
                  <entry><para>&size-iceweasel;</para></entry>
                  <entry>
                    <para> X GUI (unbranded Firefox) </para>
                  </entry>
                </row><row>
                  <entry>
                    <para>
                      <code>evolution</code>
                    </para>
                  </entry>
                  <entry><para>&pop-evolution;</para></entry>
                  <entry><para>&size-evolution;</para></entry>
                  <entry>
                    <para> X GUI (part of a groupware suite) </para>
                  </entry>
                </row><row>
                  <entry>
                    <para>
                      <code>icedove</code>
                    </para>
                  </entry>
                  <entry><para>&pop-icedove;</para></entry>
                  <entry><para>&size-icedove;</para></entry>
                  <entry>
                    <para> X GUI (unbranded Thunderbird) </para>
                  </entry>
                </row><row>
                  <entry>
                    <para>
                      <code>mutt</code>
                    </para>
                  </entry>
                  <entry><para>&pop-mutt;</para></entry>
                  <entry><para>&size-mutt;</para></entry>
                  <entry>
                    <para> character terminal probably with <code>vim</code></para>
                  </entry>
                </row><row>
                  <entry>
                    <para>
                      <code>gnus</code>
                    </para>
                  </entry>
                  <entry><para>&pop-gnus;</para></entry>
                  <entry><para>&size-gnus;</para></entry>
                  <entry>
                    <para> character terminal under <code>(x)emacs</code></para>
                  </entry>
                </row></tbody>
            </tgroup>
          </table>
          <para/>
        </section>
        <section id="theremotemailretndforwardutility">
          <title>The remote mail retrieval and forward utility</title>
          <table id="listofremotemailforwardutilities">
            
            <title> List of remote mail retrieval and forward utilities. </title><tgroup x-pkgname=" 1 " x-popcon=" 2 " x-pkgsize=" 3 " cols="4">
              <colspec colname="xxx1"/>
              <colspec colname="xxx2"/>
              <colspec colname="xxx3"/>
              <colspec colname="xxx4"/>
              <thead><row>
                  <entry>
                    <para>
                      <emphasis role="strong">package</emphasis>
                    </para>
                  </entry>
                  <entry>
                    <para>
                      <emphasis role="strong">popcon</emphasis>
                    </para>
                  </entry>
                  <entry>
                    <para>
                      <emphasis role="strong">size</emphasis>
                    </para>
                  </entry>
                  <entry>
                    <para>
                      <emphasis role="strong">capability</emphasis>
                    </para>
                  </entry>
                </row></thead><tbody><row>
                  <entry>
                    <para>
                      <code>fetchmail</code>
                    </para>
                  </entry>
                  <entry><para>&pop-fetchmail;</para></entry>
                  <entry><para>&size-fetchmail;</para></entry>
                  <entry>
                    <para> mail retriever (POP3, APOP, IMAP) (de facto) </para>
                  </entry>
                </row><row>
                  <entry>
                    <para>
                      <code>getmail4</code>
                    </para>
                  </entry>
                  <entry><para>&pop-getmaile;</para></entry>
                  <entry><para>&size-getmaile;</para></entry>
                  <entry>
                    <para> mail retriever (POP3, IMAP4, and SDPS) </para>
                  </entry>
                </row><row>
                  <entry>
                    <para>
                      <code>mailfilter</code>
                    </para>
                  </entry>
                  <entry><para>&pop-mailfilter;</para></entry>
                  <entry><para>&size-mailfilter;</para></entry>
                  <entry>
                    <para> mail retriever (POP3) with with regex filtering capability </para>
                  </entry>
                </row><row>
                  <entry>
                    <para>
                      <code>mpop</code>
                    </para>
                  </entry>
                  <entry><para>&pop-mpop;</para></entry>
                  <entry><para>&size-mpop;</para></entry>
                  <entry>
                    <para> mail retriever (POP3) and MDA with filtering capability </para>
                  </entry>
                </row></tbody>
            </tgroup>
          </table>
          <para>The <code>fetchmail</code> is the current de facto standard for the remote mail retrieval utility. The SysV init script in <code>/etc/init.d/fetchmail</code> will start a <code>fetchmail</code> daemon running as the user <code>fetchmail</code> to fetch mail from multiple POP3 accounts on multiple ISPs, if the configuration file <code>/etc/fetchmailrc</code> is present in the system. If the configuration file is not present, nothing is started. </para>
          <note><para> If your email headers are contaminated by ^M due to your ISP's mailer, add "stripcr" to your options in  <code>$HOME/.fetchmailrc</code>: </para></note>
          <screen>options fetchall no keep stripcr
</screen>
          <para/>
        </section>
        <section id="mda">
          <title>MDA</title>
          <table id="listofmda">
            
            <title> List of MDA. </title><tgroup x-pkgname=" 1 " x-popcon=" 2 " x-pkgsize=" 3 " cols="4">
              <colspec colname="xxx1"/>
              <colspec colname="xxx2"/>
              <colspec colname="xxx3"/>
              <colspec colname="xxx4"/>
              <thead><row>
                  <entry>
                    <para>
                      <emphasis role="strong">package</emphasis>
                    </para>
                  </entry>
                  <entry>
                    <para>
                      <emphasis role="strong">popcon</emphasis>
                    </para>
                  </entry>
                  <entry>
                    <para>
                      <emphasis role="strong">size</emphasis>
                    </para>
                  </entry>
                  <entry>
                    <para>
                      <emphasis role="strong">description</emphasis>
                    </para>
                  </entry>
                </row></thead><tbody><row>
                  <entry>
                    <para>
                      <code>procmail</code>
                    </para>
                  </entry>
                  <entry><para>&pop-procmail;</para></entry>
                  <entry><para>&size-procmail;</para></entry>
                  <entry>
                    <para> MDA with filter (de facto) </para>
                  </entry>
                </row><row>
                  <entry>
                    <para>
                      <code>mailagent</code>
                    </para>
                  </entry>
                  <entry><para>&pop-mailagent;</para></entry>
                  <entry><para>&size-mailagent;</para></entry>
                  <entry>
                    <para> MDA with perl filter </para>
                  </entry>
                </row><row>
                  <entry>
                    <para>
                      <code>maildrop</code>
                    </para>
                  </entry>
                  <entry><para>&pop-maildrop;</para></entry>
                  <entry><para>&size-maildrop;</para></entry>
                  <entry>
                    <para> MDA with structured filtering language </para>
                  </entry>
                </row></tbody>
            </tgroup>
          </table>
          <para>The <code>procmail</code> is the current de facto standard for the mail filter utility. One needs to create <code>$HOME/.procmailrc</code> for each account that uses it.  For example: </para>
          <para/>
          <screen># All delivery to Qmail style Maildir.  i.e. followed by /
# No lock needed
MAILDIR=$HOME/Mail
DEFAULT=$MAILDIR/Inbox/
LOGFILE=$MAILDIR/Maillog

:0
* ^Resent-Sender.*debian-devel-request@lists.debian.org
debian-devel/

:0
Inbox/
</screen>
          <para/>
        </section>
        <section id="popdimapeserver">
          <title>POP3/IMAP4 server</title>
          <para>If you are to run a private server on LAN, you may consider to run <ulink url="&popd;">POP3</ulink> / <ulink url="&imape;">IMAP4</ulink> server for delivering mail to LAN clients. </para>
          <table id="listofpopdimapeservers">
            
            <title> List of POP3/IMAP4 servers. </title><tgroup x-pkgname=" 1 " x-popcon=" 2 " x-pkgsize=" 3 " cols="4">
              <colspec colname="xxx1"/>
              <colspec colname="xxx2"/>
              <colspec colname="xxx3"/>
              <colspec colname="xxx4"/>
              <thead><row>
                  <entry>
                    <para>
                      <emphasis role="strong">package</emphasis>
                    </para>
                  </entry>
                  <entry>
                    <para>
                      <emphasis role="strong">popcon</emphasis>
                    </para>
                  </entry>
                  <entry>
                    <para>
                      <emphasis role="strong">size</emphasis>
                    </para>
                  </entry>
                  <entry>
                    <para>
                      <emphasis role="strong">type</emphasis>
                    </para>
                  </entry>
                  <entry>
                    <para>
                      <emphasis role="strong">description</emphasis>
                    </para>
                  </entry>
                </row></thead><tbody><row>
                  <entry>
                    <para>
                      <code>qpopper</code>
                    </para>
                  </entry>
                  <entry><para>&pop-qpopper;</para></entry>
                  <entry><para>&size-qpopper;</para></entry>
                  <entry>
                    <para> POP3 </para>
                  </entry>
                  <entry>
                    <para> Qualcomm enhanced version </para>
                  </entry>
                </row><row>
                  <entry>
                    <para>
                      <code>courier-pop</code>
                    </para>
                  </entry>
                  <entry><para>&pop-courierpop;</para></entry>
                  <entry><para>&size-courierpop;</para></entry>
                  <entry>
                    <para> POP3 </para>
                  </entry>
                  <entry>
                    <para> support only the maildir format </para>
                  </entry>
                </row><row>
                  <entry>
                    <para>
                      <code>ipopd</code>
                    </para>
                  </entry>
                  <entry><para>&pop-ipopd;</para></entry>
                  <entry><para>&size-ipopd;</para></entry>
                  <entry>
                    <para> POP3 </para>
                  </entry>
                  <entry>
                    <para> formerly part of the University of Washington IMAP package </para>
                  </entry>
                </row><row>
                  <entry>
                    <para>
                      <code>cyrus-pop3d-2.2</code>
                    </para>
                  </entry>
                  <entry><para>&pop-cyruspopddcc;</para></entry>
                  <entry><para>&size-cyruspopddcc;</para></entry>
                  <entry>
                    <para> POP3 </para>
                  </entry>
                  <entry>
                    <para> part of the Cyrus IMAPd suite </para>
                  </entry>
                </row><row>
                  <entry>
                    <para>
                      <code>xmail</code>
                    </para>
                  </entry>
                  <entry><para>&pop-xmail;</para></entry>
                  <entry><para>&size-xmail;</para></entry>
                  <entry>
                    <para> POP3 </para>
                  </entry>
                  <entry>
                    <para> ESMTP/POP3 mail server </para>
                  </entry>
                </row><row>
                  <entry>
                    <para>
                      <code>courier-imap</code>
                    </para>
                  </entry>
                  <entry><para>&pop-courierimap;</para></entry>
                  <entry><para>&size-courierimap;</para></entry>
                  <entry>
                    <para> IMAP </para>
                  </entry>
                  <entry>
                    <para> This provides access to email stored in Maildirs </para>
                  </entry>
                </row><row>
                  <entry>
                    <para>
                      <code>uw-imapd</code>
                    </para>
                  </entry>
                  <entry><para>&pop-uwimapd;</para></entry>
                  <entry><para>&size-uwimapd;</para></entry>
                  <entry>
                    <para> IMAP </para>
                  </entry>
                  <entry>
                    <para> the University of Washington IMAP </para>
                  </entry>
                </row><row>
                  <entry>
                    <para>
                      <code>cyrus-imapd-2.2</code>
                    </para>
                  </entry>
                  <entry><para>&pop-cyrusimapdcc;</para></entry>
                  <entry><para>&size-cyrusimapdcc;</para></entry>
                  <entry>
                    <para> IMAP </para>
                  </entry>
                  <entry>
                    <para> part of the Cyrus IMAPd suite </para>
                  </entry>
                </row></tbody>
            </tgroup>
          </table>
          <para/>
        </section>
      </section>
    </section>
    <section id="theprintserverandutility">
      <title>The print server and utility</title>
      <para>In the old Unix-like system, the BSD <ulink url="&lineprinterdaemon;">Line printer daemon</ulink> was the standard.  Since the standard print out format of the free software is PostScript on the Unix like system, some filter system was used along with <ulink url="&ghostscript;">Ghostscript</ulink> to enable printing to the non-PostScript printer. </para>
      <para>Recently, <ulink url="&commonunixprintingsystem;">Common UNIX Printing System</ulink> (CUPS) is the new de facto standard.  The CUPS uses <ulink url="&internetprintingprotocol;">Internet Printing Protocol</ulink> (IPP). The IPP is now supported by other OSs such as Windows XP and Mac OS X and has became new cross-platform de facto standard for remote printing with bi-directional communication capability. </para>
      <para>The standard printable data format for the application on the Debian system is the <ulink url="&postscriptps;">PostScript (PS)</ulink> which is a page description language.  The data in PS format is fed into the Ghostscript PostScript interpreter to produce the printable data specific to the printer.  See: <xref linkend="theghostscript"/> . </para>
      <para>Thanks to the file format dependent auto-conversion feature of the CUPS system, simply feeding any data to the <code>lpr</code> command should generate the expected print output. (In CUPS, <code>lpr</code> can be enabled by installing the <code>cups-bsd</code> package.) </para>
      <para>The Debian system has few notable packages for the print servers and utilities: </para>
      <table id="listofprintserversandutilities">
        
        <title> List of print servers and utilities. </title><tgroup x-pkgname=" 1 " x-popcon=" 2 " x-pkgsize=" 3 " cols="5">
          <colspec colname="xxx1"/>
          <colspec colname="xxx2"/>
          <colspec colname="xxx3"/>
          <colspec colname="xxx4"/>
          <colspec colname="xxx5"/>
          <thead><row>
              <entry>
                <para>
                  <emphasis role="strong">package</emphasis>
                </para>
              </entry>
              <entry>
                <para>
                  <emphasis role="strong">popcon</emphasis>
                </para>
              </entry>
              <entry>
                <para>
                  <emphasis role="strong">size</emphasis>
                </para>
              </entry>
              <entry>
                <para>
                  <emphasis role="strong">function</emphasis>
                </para>
              </entry>
              <entry>
                <para>
                  <emphasis role="strong">port</emphasis>
                </para>
              </entry>
            </row></thead><tbody><row>
              <entry>
                <para>
                  <code>lpr</code>
                </para>
              </entry>
              <entry><para>&pop-lpr;</para></entry>
              <entry><para>&size-lpr;</para></entry>
              <entry>
                <para> BSD lpr/lpd (<ulink url="&lineprinterdaemon;">Line printer daemon</ulink>) </para>
              </entry>
              <entry>
                <para> printer (515) </para>
              </entry>
            </row><row>
              <entry>
                <para>
                  <code>lprng</code>
                </para>
              </entry>
              <entry><para>&pop-lprng;</para></entry>
              <entry><para>&size-lprng;</para></entry>
              <entry>
                <para> , , (Enhanced) </para>
              </entry>
              <entry>
                <para> , , </para>
              </entry>
            </row><row>
              <entry>
                <para>
                  <code>cups</code>
                </para>
              </entry>
              <entry><para>&pop-cups;</para></entry>
              <entry><para>&size-cups;</para></entry>
              <entry>
                <para> Internet Printing CUPS server </para>
              </entry>
              <entry>
                <para> IPP (631) </para>
              </entry>
            </row><row>
              <entry>
                <para>
                  <code>cups-client</code>
                </para>
              </entry>
              <entry><para>&pop-cupsclient;</para></entry>
              <entry><para>&size-cupsclient;</para></entry>
              <entry>
                <para><ulink url="&systemvprintercommands;">System V printer commands</ulink> for CUPS: <code>lp</code>(1), <code>lpstat</code>(1), <code>lpoptions</code>(1), <code>cancel</code>(1), <code>lpmove</code>(8), <code>lpinfo</code>(8), <code>lpadmin</code>(8), ... </para>
              </entry>
              <entry>
                <para> , , </para>
              </entry>
            </row><row>
              <entry>
                <para>
                  <code>cups-bsd</code>
                </para>
              </entry>
              <entry><para>&pop-cupsbsd;</para></entry>
              <entry><para>&size-cupsbsd;</para></entry>
              <entry>
                <para><ulink url="&bsdprintercommands;">BSD printer commands</ulink> for CUPS: <code>lpr</code>(1), <code>lpq</code>(1), <code>lprm</code>(1), <code>lpc</code>(8) </para>
              </entry>
              <entry>
                <para> , , </para>
              </entry>
            </row><row>
              <entry>
                <para>
                  <code>cups-driver-gutenprint</code>
                </para>
              </entry>
              <entry><para>&pop-cupsdrivergutenprint;</para></entry>
              <entry><para>&size-cupsdrivergutenprint;</para></entry>
              <entry>
                <para> printer drivers for CUPS </para>
              </entry>
              <entry>
                <para> Not applicable </para>
              </entry>
            </row></tbody>
        </tgroup>
      </table>
      <tip><para> You can configure CUPS system by pointing your web browser to "<code>http://localhost:631/</code>" . </para></tip>
      <para/>
    </section>
    <section id="theremoteaccesssverandutilityssh">
      <title>The remote access server and utility (SSH)</title>
      <para>The <ulink url="&secureshell;">Secure SHell</ulink> (SSH) is the <emphasis role="strong">secure</emphasis> way to connect over the Internet.  A free version of SSH called <ulink url="&openssh;">OpenSSH</ulink> is available as the <code>ssh</code> package in Debian. </para>
      <table id="listofremoteaccerverandutilities">
        
        <title> List of remote access server and utilities. </title><tgroup x-pkgname=" 1 " x-popcon=" 2 " x-pkgsize=" 3 " cols="5">
          <colspec colname="xxx1"/>
          <colspec colname="xxx2"/>
          <colspec colname="xxx3"/>
          <colspec colname="xxx4"/>
          <colspec colname="xxx5"/>
          <thead><row>
              <entry>
                <para>
                  <emphasis role="strong">package</emphasis>
                </para>
              </entry>
              <entry>
                <para>
                  <emphasis role="strong">popcon</emphasis>
                </para>
              </entry>
              <entry>
                <para>
                  <emphasis role="strong">size</emphasis>
                </para>
              </entry>
              <entry>
                <para>
                  <emphasis role="strong">tool</emphasis>
                </para>
              </entry>
              <entry>
                <para>
                  <emphasis role="strong">comment</emphasis>
                </para>
              </entry>
            </row></thead><tbody><row>
              <entry>
                <para>
                  <code>openssh-client</code>
                </para>
              </entry>
              <entry><para>&pop-opensshclient;</para></entry>
              <entry><para>&size-opensshclient;</para></entry>
              <entry>
                <para> ssh </para>
              </entry>
              <entry>
                <para> Secure shell client </para>
              </entry>
            </row><row>
              <entry>
                <para>
                  <code>openssh-server</code>
                </para>
              </entry>
              <entry><para>&pop-opensshserver;</para></entry>
              <entry><para>&size-opensshserver;</para></entry>
              <entry>
                <para> sshd </para>
              </entry>
              <entry>
                <para> Secure shell server </para>
              </entry>
            </row><row>
              <entry>
                <para>
                  <code>ssh-askpass-fullscreen</code>
                </para>
              </entry>
              <entry><para>&pop-sshaskpassfullscreen;</para></entry>
              <entry><para>&size-sshaskpassfullscreen;</para></entry>
              <entry>
                <para> ssh-askpass-fullscreen </para>
              </entry>
              <entry>
                <para> asks user for a pass phrase for ssh-add (GNOME2) </para>
              </entry>
            </row><row>
              <entry>
                <para>
                  <code>ssh-askpass</code>
                </para>
              </entry>
              <entry><para>&pop-sshaskpass;</para></entry>
              <entry><para>&size-sshaskpass;</para></entry>
              <entry>
                <para> ssh-askpass </para>
              </entry>
              <entry>
                <para> asks user for a pass phrase for ssh-add (plain X) </para>
              </entry>
            </row></tbody>
        </tgroup>
      </table>
      <tip><para> Please use the <code>screen</code>(1) program to enable remote shell process to survive the interrupted connection (see <xref linkend="thescreenprogram"/>). </para></tip>
      <caution><para> See <xref linkend="extrasecuritymeaesfortheinternet"/> if your SSH is accessible from Internet. </para></caution>
      <para/>
      <section id="basicsofssh">
        <title>Basics of SSH</title>
        <para><code>/etc/ssh/sshd_not_to_be_run</code> must not be present if one wishes to run the OpenSSH server. </para>
        <para>SSH has two authentication protocols: </para>
        <table id="listofsshauthenttocolsandmethods">
          
          <title> List of SSH authentication protocols and methods. </title><tgroup x-pkgname=" " x-popcon=" " x-pkgsize="" cols="3">
            <colspec colname="xxx1"/>
            <colspec colname="xxx2"/>
            <colspec colname="xxx3"/>
            <thead><row>
                <entry>
                  <para>
                    <emphasis role="strong">SSH protocol</emphasis>
                  </para>
                </entry>
                <entry>
                  <para>
                    <emphasis role="strong">SSH method</emphasis>
                  </para>
                </entry>
                <entry>
                  <para>
                    <emphasis role="strong">description</emphasis>
                  </para>
                </entry>
              </row></thead><tbody><row>
                <entry>
                  <para> SSH-1 </para>
                </entry>
                <entry>
                  <para> RSAAuthentication </para>
                </entry>
                <entry>
                  <para> RSA identity key based user authentication </para>
                </entry>
              </row><row>
                <entry>
                  <para> , , </para>
                </entry>
                <entry>
                  <para>
                    RhostsAuthentication
                  </para>
                </entry>
                <entry>
                  <para><code>.rhosts</code> based host authentication (insecure, disabled) </para>
                </entry>
              </row><row>
                <entry>
                  <para> , , </para>
                </entry>
                <entry>
                  <para> RhostsRSAAuthentication </para>
                </entry>
                <entry>
                  <para><code>.rhosts</code> authentication combined with RSA host key (disabled) </para>
                </entry>
              </row><row>
                <entry>
                  <para> , , </para>
                </entry>
                <entry>
                  <para>
                    ChallengeResponseAuthentication
                  </para>
                </entry>
                <entry>
                  <para> RSA challenge-response authentication </para>
                </entry>
              </row><row>
                <entry>
                  <para> , , </para>
                </entry>
                <entry>
                  <para>
                    PasswordAuthentication
                  </para>
                </entry>
                <entry>
                  <para> password based authentication </para>
                </entry>
              </row><row>
                <entry>
                  <para> SSH-2 </para>
                </entry>
                <entry>
                  <para>
                    PubkeyAuthentication
                  </para>
                </entry>
                <entry>
                  <para> public key based user authentication </para>
                </entry>
              </row><row>
                <entry>
                  <para> , , </para>
                </entry>
                <entry>
                  <para>
                    HostbasedAuthentication
                  </para>
                </entry>
                <entry>
                  <para><code>.rhosts</code> or <code>/etc/hosts.equiv</code> authentication combined with public key client host authentication (disabled) </para>
                </entry>
              </row><row>
                <entry>
                  <para> , , </para>
                </entry>
                <entry>
                  <para>
                    ChallengeResponseAuthentication
                  </para>
                </entry>
                <entry>
                  <para> challenge-response authentication </para>
                </entry>
              </row><row>
                <entry>
                  <para> , , </para>
                </entry>
                <entry>
                  <para>
                    PasswordAuthentication
                  </para>
                </entry>
                <entry>
                  <para> password based authentication </para>
                </entry>
              </row></tbody>
          </tgroup>
        </table>
        <para>Be careful about these differences if you are using a non-Debian system. </para>
        <para>See <code>/usr/share/doc/ssh/README.Debian.gz</code>, <code>ssh</code>(1), <code>sshd</code>(8), <code>ssh-agent</code>(1), and <code>ssh-keygen</code>(1) for details. </para>
        <para>Following are the key configuration files: </para>
        <table id="listofsshconfigurationfiles">
          
          <title> List of SSH configuration files. </title><tgroup x-pkgname=" " x-popcon="" x-pkgsize="" cols="2">
            <colspec colname="xxx1"/>
            <colspec colname="xxx2"/>
            <thead><row>
                <entry>
                  <para>
                    <emphasis role="strong">configuration file</emphasis>
                  </para>
                </entry>
                <entry>
                  <para>
                    <emphasis role="strong">function</emphasis>
                  </para>
                </entry>
              </row></thead><tbody><row>
                <entry>
                  <para>
                    <code>/etc/ssh/ssh_config</code>
                  </para>
                </entry>
                <entry>
                  <para> SSH client defaults.  See <code>ssh_config</code>(5). </para>
                </entry>
              </row><row>
                <entry>
                  <para>
                    <code>/etc/ssh/sshd_config</code>
                  </para>
                </entry>
                <entry>
                  <para> SSH server defaults.  See <code>sshd_config</code>(5). </para>
                </entry>
              </row><row>
                <entry>
                  <para>
                    <code>$HOME/.ssh/authorized_keys</code>
                  </para>
                </entry>
                <entry>
                  <para> the lists of the default public SSH keys that clients use to connect to this account on this host. </para>
                </entry>
              </row><row>
                <entry>
                  <para>
                    <code>$HOME/.ssh/identity</code>
                  </para>
                </entry>
                <entry>
                  <para> secret SSH-1 RSA key of the user. </para>
                </entry>
              </row><row>
                <entry>
                  <para>
                    <code>$HOME/.ssh/id_rsa</code>
                  </para>
                </entry>
                <entry>
                  <para> secret SSH-2 RSA key of the user. </para>
                </entry>
              </row><row>
                <entry>
                  <para>
                    <code>$HOME/.ssh/id_dsa</code>
                  </para>
                </entry>
                <entry>
                  <para> secret SSH-2 DSA key of the user. </para>
                </entry>
              </row></tbody>
          </tgroup>
        </table>
        <tip><para> See <code>ssh-keygen</code>(1), <code>ssh-add</code>(1) and <code>ssh-agent</code>(1) for how to use public and secret SSH keys. </para></tip>
        <para>The following will start an <code>ssh</code>(1) connection from a client. </para>
        <table id="listofsshclientstartupexamples">
          
          <title> List of SSH client startup examples. </title><tgroup x-pkgname=" " x-popcon="" x-pkgsize="" cols="2">
            <colspec colname="xxx1"/>
            <colspec colname="xxx2"/>
            <thead><row>
                <entry>
                  <para>
                    <emphasis role="strong">command</emphasis>
                  </para>
                </entry>
                <entry>
                  <para>
                    <emphasis role="strong">description</emphasis>
                  </para>
                </entry>
              </row></thead><tbody><row>
                <entry>
                  <para>
                    <code>ssh username@hostname.domain.ext</code>
                  </para>
                </entry>
                <entry>
                  <para> connect with default mode </para>
                </entry>
              </row><row>
                <entry>
                  <para>
                    <code>ssh -v username@hostname.domain.ext</code>
                  </para>
                </entry>
                <entry>
                  <para> connect with default mode with debugging messages </para>
                </entry>
              </row><row>
                <entry>
                  <para>
                    <code>ssh -1 username@hostname.domain.ext</code>
                  </para>
                </entry>
                <entry>
                  <para> force to connect with SSH version 1 </para>
                </entry>
              </row><row>
                <entry>
                  <para>
                    <code>ssh -1 -o RSAAuthentication=no -l username hostname.domain.ext</code>
                  </para>
                </entry>
                <entry>
                  <para> force to use password with SSH version 1 </para>
                </entry>
              </row><row>
                <entry>
                  <para>
                    <code>ssh -o PreferredAuthentications=password -l username hostname.domain.ext</code>
                  </para>
                </entry>
                <entry>
                  <para> force to use password with SSH version 2 </para>
                </entry>
              </row></tbody>
          </tgroup>
        </table>
        <para>If you use the same user name on the local and the remote host, you can eliminate typing "<code>username@</code>".  Even if you use different user name on the local and the remote host, you can eliminate it using "<code>~/.ssh/config</code>".  For <ulink url="&debianaliothservice;">Debian Alioth service</ulink> with account name "<code>foo-guest</code>", you set "<code>~/.ssh/config</code>" to contain: </para>
        <screen>Host alioth.debian.org svn.debian.org git.debian.org
    User foo-guest
</screen>
        <para>For the user, <code>ssh</code>(1) functions as a smarter and more secure <code>telnet</code>(1).  Unlike <code>telnet</code> command, <code>ssh</code> command does not bomb on the <code>telnet</code> escape character (initial default CTRL-]). </para>
        <para/>
      </section>
      <section id="portforwardingfomtppopdtunneling">
        <title>Port forwarding for SMTP/POP3 tunneling</title>
        <para>To establish a pipe to connect to port 25 of remote-server from port 4025 of localhost, and to port 110 of remote-server from port 4110 of localhost through <code>ssh</code>, execute on the local machine: </para>
        <para/>
        <screen># ssh -q -L 4025:remote-server:25 4110:remote-server:110 username@remote-server
</screen>
        <para>This is a secure way to make connections to SMTP/POP3 servers over the Internet.  Set the <code>AllowTcpForwarding</code> entry to <code>yes</code> in <code>/etc/ssh/sshd_config</code> of the remote host. </para>
        <para/>
      </section>
      <section id="connectingwithfewerpasswordsrsa">
        <title>Connecting with fewer passwords -- RSA</title>
        <para>One can avoid having to remember a password for each remote system by using RSAAuthentication (SSH-1 protocol) or PubkeyAuthentication (SSH-2 protocol). </para>
        <para>On the remote system, set the respective entries, "RSAAuthentication yes" or "PubkeyAuthentication yes", in <code>/etc/ssh/sshd_config</code>. </para>
        <para>Then generate authentication keys locally and install the public key on the remote system: </para>
        <itemizedlist>
          <listitem><para>RSAAuthentication: RSA1 key for SSH-1 (deprecated because superseded.) </para></listitem>
        </itemizedlist>
        <para/>
        <screen>$ ssh-keygen
$ cat .ssh/identity.pub | ssh user1@remote "cat - &gt;&gt;.ssh/authorized_keys"
</screen>
        <itemizedlist>
          <listitem>
            <para>PubkeyAuthentication: RSA key for SSH-2 </para>
          </listitem>
        </itemizedlist>
        <para/>
        <screen>$ ssh-keygen -t rsa
$ cat .ssh/id_rsa.pub | ssh user1@remote "cat - &gt;&gt;.ssh/authorized_keys"
</screen>
        <itemizedlist>
          <listitem>
            <para>PubkeyAuthentication: DSA key for SSH-2 (deprecated because key is smaller and slow.  Also see <ulink url="&dsabfhbb;">DSA-1571-1</ulink>.) </para>
          </listitem>
        </itemizedlist>
        <para/>
        <screen>$ ssh-keygen -t dsa
$ cat .ssh/id_dsa.pub | ssh user1@remote "cat - &gt;&gt;.ssh/authorized_keys"
</screen>
        <note><para> There are no more reasons to work around RSA patent using DSA since it has been expired.  DSA stands for <ulink url="&digitalsignaturealgorithm;">Digital Signature Algorithm</ulink> and slow. </para></note>
        <para>One can change the pass phrase later with "<code>ssh-keygen -p</code>".  Make sure to verify settings by testing the connection.  In case of any problem, use "<code>ssh -v</code>". </para>
        <para>You can add options to the entries in <code>authorized_keys</code> to limit hosts and to run specific commands.  See <code>sshd</code>(8) for details. </para>
        <para>Note that SSH-2 has <code>HostbasedAuthentication</code>.  For this to work, you must adjust the settings of <code>HostbasedAuthentication</code> to <code>yes</code> in both <code>/etc/ssh/sshd_config</code> on the server machine and <code>/etc/ssh/ssh_config</code> or <code>$HOME/.ssh/config</code> on the client machine. </para>
        <para/>
      </section>
      <section id="dealingwithaliensshclients">
        <title>Dealing with alien SSH clients</title>
        <para>There are a few free <ulink url="&ssh;">SSH</ulink> clients available for other platforms. </para>
        <table id="listoffreesshcliorotherplatforms">
          
          <title> List of free SSH clients for other platforms. </title><tgroup x-pkgname=" " x-popcon="" x-pkgsize="" cols="2">
            <colspec colname="xxx1"/>
            <colspec colname="xxx2"/>
            <thead><row>
                <entry>
                  <para>
                    <emphasis role="strong">environment</emphasis>
                  </para>
                </entry>
                <entry>
                  <para>
                    <emphasis role="strong">free SSH program</emphasis>
                  </para>
                </entry>
              </row></thead><tbody><row>
                <entry>
                  <para> Windows </para>
                </entry>
                <entry>
                  <para> puTTY (<ulink url="&httpwwwchiarkgreguksgtathamputty;">http://www.chiark.greenend.org.uk/~sgtatham/putty/</ulink>) (GPL) </para>
                </entry>
              </row><row>
                <entry>
                  <para> Windows (cygwin) </para>
                </entry>
                <entry>
                  <para> SSH in cygwin (<ulink url="&httpwwwcygwincom;">http://www.cygwin.com/</ulink>) (GPL) </para>
                </entry>
              </row><row>
                <entry>
                  <para> Macintosh Classic </para>
                </entry>
                <entry>
                  <para> macSSH (<ulink url="&httpwwwmacsshcom;">http://www.macssh.com/</ulink>) (GPL) </para>
                </entry>
              </row><row>
                <entry>
                  <para> Mac OS X </para>
                </entry>
                <entry>
                  <para> OpenSSH; use <code>ssh</code> in the Terminal application (GPL) </para>
                </entry>
              </row></tbody>
          </tgroup>
        </table>
        <para/>
      </section>
      <section id="settingupsshagent">
        <title>Setting up ssh-agent</title>
        <para>It is safer to protect your SSH authentication key with a pass phrase.  If it was not set, use <code>ssh-keygen -p</code> to set it. </para>
        <para>Place your public key (e.g.  <code>~/.ssh/id_rsa.pub</code>) into <code>~/.ssh/authorized_keys</code> on a remote host using a password-based connection to the remote host as described above. </para>
        <para/>
        <screen>$ ssh-agent bash
$ ssh-add ~/.ssh/id_rsa
Enter passphrase for /home/osamu/.ssh/id_rsa:
Identity added: /home/osamu/.ssh/id_rsa (/home/osamu/.ssh/id_rsa)
</screen>
        <itemizedlist>
          <listitem><para>No passphrase needed from here on, e.g.: </para></listitem>
        </itemizedlist>
        <para/>
        <screen>$ scp foo user@remote.host:foo
</screen>
        <itemizedlist>
          <listitem><para>No password requested. </para></listitem>
          <listitem><para>Press ^D to terminating ssh-agent session. </para></listitem>
        </itemizedlist>
        <para>For the X server, the normal Debian startup script executes <code>ssh-agent</code> as the parent process.  So you only need to execute <code>ssh-add</code> once. For more, read <code>ssh-agent</code>(1)and <code>ssh-add</code>(1). </para>
        <para/>
      </section>
      <section id="troubleshootingssh">
        <title>Troubleshooting SSH</title>
        <para>If you have problems, check the permissions of configuration files and run <code>ssh</code> with the "<code>-v</code>" option. </para>
        <para>Use the "<code>-P</code>" option if you are root and have trouble with a firewall; this avoids the use of server ports 1--1023. </para>
        <para>If <code>ssh</code> connections to a remote site suddenly stop working, it may be the result of tinkering by the sysadmin, most likely a change in <code>host_key</code> during system maintenance.  After making sure this is the case and nobody is trying to fake the remote host by some clever hack, one can regain a connection by removing the <code>host_key</code> entry from <code>$HOME/.ssh/known_hosts</code> on the local machine. </para>
        <para/>
      </section>
    </section>
    <section id="othernetworkapplicationservers">
      <title>Other network application servers</title>
      <table id="listofothernetwoplicationservers">
        
        <title> List of other network application servers. </title><tgroup x-pkgname=" 1 " x-popcon=" 2 " x-pkgsize=" 3 " cols="5">
          <colspec colname="xxx1"/>
          <colspec colname="xxx2"/>
          <colspec colname="xxx3"/>
          <colspec colname="xxx4"/>
          <colspec colname="xxx5"/>
          <thead><row>
              <entry>
                <para>
                  <emphasis role="strong">package</emphasis>
                </para>
              </entry>
              <entry>
                <para>
                  <emphasis role="strong">popcon</emphasis>
                </para>
              </entry>
              <entry>
                <para>
                  <emphasis role="strong">size</emphasis>
                </para>
              </entry>
              <entry>
                <para>
                  <emphasis role="strong">protocol</emphasis>
                </para>
              </entry>
              <entry>
                <para>
                  <emphasis role="strong">focus</emphasis>
                </para>
              </entry>
            </row></thead><tbody><row>
              <entry>
                <para>
                  <code>telnetd</code>
                </para>
              </entry>
              <entry><para>&pop-telnetd;</para></entry>
              <entry><para>&size-telnetd;</para></entry>
              <entry>
                <para>
                  <ulink url="&telnet;">TELNET</ulink>
                </para>
              </entry>
              <entry>
                <para> TELNET server </para>
              </entry>
            </row><row>
              <entry>
                <para>
                  <code>telnetd-ssl</code>
                </para>
              </entry>
              <entry><para>&pop-telnetdssl;</para></entry>
              <entry><para>&size-telnetdssl;</para></entry>
              <entry>
                <para> , , </para>
              </entry>
              <entry>
                <para> , , (SSL support) </para>
              </entry>
            </row><row>
              <entry>
                <para>
                  <code>nfs-kernel-server</code>
                </para>
              </entry>
              <entry><para>&pop-nfskernelserver;</para></entry>
              <entry><para>&size-nfskernelserver;</para></entry>
              <entry>
                <para>
                  <ulink url="&nfs;">NFS</ulink>
                </para>
              </entry>
              <entry>
                <para> Unix file sharing </para>
              </entry>
            </row><row>
              <entry>
                <para>
                  <code>nfs-user-server</code>
                </para>
              </entry>
              <entry><para>&pop-nfsuserserver;</para></entry>
              <entry><para>&size-nfsuserserver;</para></entry>
              <entry>
                <para> , , </para>
              </entry>
              <entry>
                <para> , , </para>
              </entry>
            </row><row>
              <entry>
                <para>
                  <code>samba</code>
                </para>
              </entry>
              <entry><para>&pop-samba;</para></entry>
              <entry><para>&size-samba;</para></entry>
              <entry>
                <para>
                  <ulink url="&smb;">SMB</ulink>
                </para>
              </entry>
              <entry>
                <para> windows file and printer sharing </para>
              </entry>
            </row><row>
              <entry>
                <para>
                  <code>netatalk</code>
                </para>
              </entry>
              <entry><para>&pop-netatalk;</para></entry>
              <entry><para>&size-netatalk;</para></entry>
              <entry>
                <para>
                  <ulink url="&atp;">ATP</ulink>
                </para>
              </entry>
              <entry>
                <para> apple/mac file and printer sharing (AppleTalk) </para>
              </entry>
            </row><row>
              <entry>
                <para>
                  <code>proftpd</code>
                </para>
              </entry>
              <entry><para>&pop-proftpd;</para></entry>
              <entry><para>&size-proftpd;</para></entry>
              <entry>
                <para>
                  <ulink url="&ftp;">FTP</ulink>
                </para>
              </entry>
              <entry>
                <para> general file download </para>
              </entry>
            </row><row>
              <entry>
                <para>
                  <code>wu-ftpd</code>
                </para>
              </entry>
              <entry><para>&pop-wuftpd;</para></entry>
              <entry><para>&size-wuftpd;</para></entry>
              <entry>
                <para> , , </para>
              </entry>
              <entry>
                <para> , , </para>
              </entry>
            </row><row>
              <entry>
                <para>
                  <code>apache2-mpm-prefork</code>
                </para>
              </entry>
              <entry><para>&pop-apachecmpmprefork;</para></entry>
              <entry><para>&size-apachecmpmprefork;</para></entry>
              <entry>
                <para>
                  <ulink url="&http;">HTTP</ulink>
                </para>
              </entry>
              <entry>
                <para> general web server </para>
              </entry>
            </row><row>
              <entry>
                <para>
                  <code>apache2-mpm-worker</code>
                </para>
              </entry>
              <entry><para>&pop-apachecmpmworker;</para></entry>
              <entry><para>&size-apachecmpmworker;</para></entry>
              <entry>
                <para> , , </para>
              </entry>
              <entry>
                <para> , , </para>
              </entry>
            </row><row>
              <entry>
                <para>
                  <code>squid</code>
                </para>
              </entry>
              <entry><para>&pop-squid;</para></entry>
              <entry><para>&size-squid;</para></entry>
              <entry>
                <para> , , </para>
              </entry>
              <entry>
                <para> general web <ulink url="&proxyserver;">proxy server</ulink> </para>
              </entry>
            </row><row>
              <entry>
                <para>
                  <code>squid3</code>
                </para>
              </entry>
              <entry><para>&pop-squidd;</para></entry>
              <entry><para>&size-squidd;</para></entry>
              <entry>
                <para> , , </para>
              </entry>
              <entry>
                <para> , , </para>
              </entry>
            </row><row>
              <entry>
                <para>
                  <code>slpd</code>
                </para>
              </entry>
              <entry><para>&pop-slpd;</para></entry>
              <entry><para>&size-slpd;</para></entry>
              <entry>
                <para>
                  <ulink url="&slp;">SLP</ulink>
                </para>
              </entry>
              <entry>
                <para><ulink url="&openslp;">OpenSLP</ulink> Server as <ulink url="&ldap;">LDAP</ulink> server </para>
              </entry>
            </row><row>
              <entry>
                <para>
                  <code>bind9</code>
                </para>
              </entry>
              <entry><para>&pop-bindj;</para></entry>
              <entry><para>&size-bindj;</para></entry>
              <entry>
                <para>
                  <ulink url="&dns;">DNS</ulink>
                </para>
              </entry>
              <entry>
                <para> IP address for other hosts </para>
              </entry>
            </row><row>
              <entry>
                <para>
                  <code>dhcp3-server</code>
                </para>
              </entry>
              <entry><para>&pop-dhcpdserver;</para></entry>
              <entry><para>&size-dhcpdserver;</para></entry>
              <entry>
                <para>
                  <ulink url="&dhcp;">DHCP</ulink>
                </para>
              </entry>
              <entry>
                <para> IP address of client itself </para>
              </entry>
            </row></tbody>
        </tgroup>
      </table>
      <para>Common Internet File System Protocol (CIFS) is the same protocol as Server Message Block (SMB). </para>
      <tip><para> Use of proxy server such as <code>squid</code> is much more efficient for saving bandwidth than use of local mirror server with the full Debian archive contents. </para></tip>
      <para/>
    </section>
    <section id="othernetworkapplicationclients">
      <title>Other network application clients</title>
      <table id="listofnetworkapplicationclients">
        
        <title> List of network application clients. </title><tgroup x-pkgname=" 1 " x-popcon=" 2 " x-pkgsize=" 3 " cols="5">
          <colspec colname="xxx1"/>
          <colspec colname="xxx2"/>
          <colspec colname="xxx3"/>
          <colspec colname="xxx4"/>
          <colspec colname="xxx5"/>
          <thead><row>
              <entry>
                <para>
                  <emphasis role="strong">package</emphasis>
                </para>
              </entry>
              <entry>
                <para>
                  <emphasis role="strong">popcon</emphasis>
                </para>
              </entry>
              <entry>
                <para>
                  <emphasis role="strong">size</emphasis>
                </para>
              </entry>
              <entry>
                <para>
                  <emphasis role="strong">protocol</emphasis>
                </para>
              </entry>
              <entry>
                <para>
                  <emphasis role="strong">focus</emphasis>
                </para>
              </entry>
            </row></thead><tbody><row>
              <entry>
                <para>
                  <code>netcat</code>
                </para>
              </entry>
              <entry><para>&pop-netcat;</para></entry>
              <entry><para>&size-netcat;</para></entry>
              <entry>
                <para>
                  <ulink url="&tcpip;">TCP/IP</ulink>
                </para>
              </entry>
              <entry>
                <para> TCP/IP swiss army knife </para>
              </entry>
            </row><row>
              <entry>
                <para>
                  <code>stunnel4</code>
                </para>
              </entry>
              <entry><para>&pop-stunnele;</para></entry>
              <entry><para>&size-stunnele;</para></entry>
              <entry>
                <para>
                  <ulink url="&ssl;">SSL</ulink>
                </para>
              </entry>
              <entry>
                <para> Universal SSL Wrapper </para>
              </entry>
            </row><row>
              <entry>
                <para>
                  <code>telnet</code>
                </para>
              </entry>
              <entry><para>&pop-telnet;</para></entry>
              <entry><para>&size-telnet;</para></entry>
              <entry>
                <para>
                  <ulink url="&telnet;">TELNET</ulink>
                </para>
              </entry>
              <entry>
                <para> TELNET client </para>
              </entry>
            </row><row>
              <entry>
                <para>
                  <code>telnet-ssl</code>
                </para>
              </entry>
              <entry><para>&pop-telnetssl;</para></entry>
              <entry><para>&size-telnetssl;</para></entry>
              <entry>
                <para> , , </para>
              </entry>
              <entry>
                <para> , , (SSL support) </para>
              </entry>
            </row><row>
              <entry>
                <para>
                  <code>nfs-common</code>
                </para>
              </entry>
              <entry><para>&pop-nfscommon;</para></entry>
              <entry><para>&size-nfscommon;</para></entry>
              <entry>
                <para>
                  <ulink url="&nfs;">NFS</ulink>
                </para>
              </entry>
              <entry>
                <para> Unix file sharing </para>
              </entry>
            </row><row>
              <entry>
                <para>
                  <code>smbclient</code>
                </para>
              </entry>
              <entry><para>&pop-smbclient;</para></entry>
              <entry><para>&size-smbclient;</para></entry>
              <entry>
                <para>
                  <ulink url="&smb;">SMB</ulink>
                </para>
              </entry>
              <entry>
                <para> MS windows file and printer sharing client </para>
              </entry>
            </row><row>
              <entry>
                <para>
                  <code>smbfs</code>
                </para>
              </entry>
              <entry><para>&pop-smbfs;</para></entry>
              <entry><para>&size-smbfs;</para></entry>
              <entry>
                <para> , , </para>
              </entry>
              <entry>
                <para> Mount and umount commands for remote MS windows file </para>
              </entry>
            </row><row>
              <entry>
                <para>
                  <code>ftp</code>
                </para>
              </entry>
              <entry><para>&pop-ftp;</para></entry>
              <entry><para>&size-ftp;</para></entry>
              <entry>
                <para>
                  <ulink url="&ftp;">FTP</ulink>
                </para>
              </entry>
              <entry>
                <para> FTP client </para>
              </entry>
            </row><row>
              <entry>
                <para>
                  <code>lftp</code>
                </para>
              </entry>
              <entry><para>&pop-lftp;</para></entry>
              <entry><para>&size-lftp;</para></entry>
              <entry>
                <para> , , </para>
              </entry>
              <entry>
                <para> , , </para>
              </entry>
            </row><row>
              <entry>
                <para>
                  <code>ncftp</code>
                </para>
              </entry>
              <entry><para>&pop-ncftp;</para></entry>
              <entry><para>&size-ncftp;</para></entry>
              <entry>
                <para> , , </para>
              </entry>
              <entry>
                <para> Full screen FTP client </para>
              </entry>
            </row><row>
              <entry>
                <para>
                  <code>wget</code>
                </para>
              </entry>
              <entry><para>&pop-wget;</para></entry>
              <entry><para>&size-wget;</para></entry>
              <entry>
                <para><ulink url="&http;">HTTP</ulink> and <ulink url="&ftp;">FTP</ulink> </para>
              </entry>
              <entry>
                <para> Web downloader </para>
              </entry>
            </row><row>
              <entry>
                <para>
                  <code>curl</code>
                </para>
              </entry>
              <entry><para>&pop-curl;</para></entry>
              <entry><para>&size-curl;</para></entry>
              <entry>
                <para> , , </para>
              </entry>
              <entry>
                <para> , , </para>
              </entry>
            </row><row>
              <entry>
                <para>
                  <code>dog</code>
                </para>
              </entry>
              <entry><para>&pop-dog;</para></entry>
              <entry><para>&size-dog;</para></entry>
              <entry>
                <para>
                  <ulink url="&http;">HTTP</ulink>
                </para>
              </entry>
              <entry>
                <para> Web uploader (<code>cat</code> with URL support) </para>
              </entry>
            </row><row>
              <entry>
                <para>
                  <code>bind9-host</code>
                </para>
              </entry>
              <entry><para>&pop-bindjhost;</para></entry>
              <entry><para>&size-bindjhost;</para></entry>
              <entry>
                <para>
                  <ulink url="&dns;">DNS</ulink>
                </para>
              </entry>
              <entry>
                <para> The <code>host</code> command from bind9, priority standard </para>
              </entry>
            </row><row>
              <entry>
                <para>
                  <code>dnsutils</code>
                </para>
              </entry>
              <entry><para>&pop-dnsutils;</para></entry>
              <entry><para>&size-dnsutils;</para></entry>
              <entry>
                <para> , , </para>
              </entry>
              <entry>
                <para> The <code>dig</code> command from bind, priority standard </para>
              </entry>
            </row><row>
              <entry>
                <para>
                  <code>host</code>
                </para>
              </entry>
              <entry><para>&pop-host;</para></entry>
              <entry><para>&size-host;</para></entry>
              <entry>
                <para> , , </para>
              </entry>
              <entry>
                <para> The <code>host</code> command from dnsutils, priority extra </para>
              </entry>
            </row><row>
              <entry>
                <para>
                  <code>dhcp3-client</code>
                </para>
              </entry>
              <entry><para>&pop-dhcpdclient;</para></entry>
              <entry><para>&size-dhcpdclient;</para></entry>
              <entry>
                <para>
                  <ulink url="&dhcp;">DHCP</ulink>
                </para>
              </entry>
              <entry>
                <para> Obtain IP address </para>
              </entry>
            </row><row>
              <entry>
                <para>
                  <code>ldap-utils</code>
                </para>
              </entry>
              <entry><para>&pop-ldaputils;</para></entry>
              <entry><para>&size-ldaputils;</para></entry>
              <entry>
                <para>
                  <ulink url="&ldap;">LDAP</ulink>
                </para>
              </entry>
              <entry>
                <para> Obtain data from LDAP server </para>
              </entry>
            </row></tbody>
        </tgroup>
      </table>
      <para/>
      <para/>
      <para/>
    </section>
    <section id="thediagnosisofthesystemdaemons">
      <title>The diagnosis of the system daemons</title>
      <para>The <code>telnet</code> program enables manual connection and diagnosis of the system daemons.  E.g.: </para>
      <screen>$ telnet mail.ispname.net pop3
</screen>
      <para>The following <ulink url="&rfcs;">RFCs</ulink> provide required knowledge to text each system daemon. </para>
      <table id="listofpopularrfcs">
        
        <title> List of popular RFCs. </title><tgroup x-pkgname=" " x-popcon="" x-pkgsize="" cols="2">
          <colspec colname="xxx1"/>
          <colspec colname="xxx2"/>
          <thead><row>
              <entry>
                <para>
                  <emphasis role="strong">RFC</emphasis>
                </para>
              </entry>
              <entry>
                <para>
                  <emphasis role="strong">description</emphasis>
                </para>
              </entry>
            </row></thead><tbody><row>
              <entry>
                <para><ulink url="&rfcbjdj;">rfc1939</ulink> and <ulink url="&rfcceej;">rfc2449</ulink> </para>
              </entry>
              <entry>
                <para><ulink url="&popd;">POP3</ulink> service </para>
              </entry>
            </row><row>
              <entry>
                <para>
                  <ulink url="&rfcdfab;">rfc3501</ulink>
                </para>
              </entry>
              <entry>
                <para><ulink url="&imape;">IMAP4</ulink> service </para>
              </entry>
            </row><row>
              <entry>
                <para><ulink url="&rfccicb;">rfc2821</ulink> (<ulink url="&rfcicb;">rfc821</ulink>) </para>
              </entry>
              <entry>
                <para><ulink url="&smtp;">SMTP</ulink> service </para>
              </entry>
            </row><row>
              <entry>
                <para><ulink url="&rfccicc;">rfc2822</ulink> (<ulink url="&rfcicc;">rfc822</ulink>) </para>
              </entry>
              <entry>
                <para> Mail file format </para>
              </entry>
            </row><row>
              <entry>
                <para>
                  <ulink url="&rfccaef;">rfc2045</ulink>
                </para>
              </entry>
              <entry>
                <para>
                  <ulink url="&multipurposeinteilextensionsmime;">Multipurpose Internet Mail Extensions (MIME)</ulink>
                </para>
              </entry>
            </row><row>
              <entry>
                <para>
                  <ulink url="&rfcibj;">rfc819</ulink>
                </para>
              </entry>
              <entry>
                <para><ulink url="&dns;">DNS</ulink> service </para>
              </entry>
            </row><row>
              <entry>
                <para>
                  <ulink url="&rfccgbg;">rfc2616</ulink>
                </para>
              </entry>
              <entry>
                <para><ulink url="&http;">HTTP</ulink> service </para>
              </entry>
            </row><row>
              <entry>
                <para>
                  <ulink url="&rfccdjg;">rfc2396</ulink>
                </para>
              </entry>
              <entry>
                <para><ulink url="&uri;">URI</ulink> definition </para>
              </entry>
            </row></tbody>
        </tgroup>
      </table>
      <para>The port usage is described in <code>/etc/services</code>. </para>
      <note><para> For testing <ulink url="&tls;">TLS</ulink>/SSL services such as <ulink url="&https;">HTTPS</ulink>, you need TLS/SSL enabled <code>telnet</code> program. </para></note>
    </section>
  </chapter>