Postfix+uucp+ssh - Revision history

Adj: /* Telling postfix about the UUCP message transport service */

2014-10-16T17:20:27Z

Telling postfix about the UUCP message transport service

← Older revision		Revision as of 17:20, 16 October 2014
Line 317:		Line 317:
	uucp unix - n n - - pipe		uucp unix - n n - - pipe
	flags=F user=uucp argv=uux -r -n -z -a$sender - $nexthop!rmail ($recipient)		flags=F user=uucp argv=uux -r -n -z -a$sender - $nexthop!rmail ($recipient)

	This will
			<code>master.cf</code> is where each of Postfix's "services" (components which run in separate processes) lives, how to start it, and how to communicate with it.

	==== Tell the hub how get mail destined for the leaf node to the leaf node, using the UUCP transport ====		==== Tell the hub how get mail destined for the leaf node to the leaf node, using the UUCP transport ====

Adj: /* test it */

2014-10-16T06:50:28Z

test it

← Older revision		Revision as of 06:50, 16 October 2014
Line 309:		Line 309:

	This says leaf node called the hub node. Logged in successfully. And no files were transfered. <code>uulog -D</code> will dump a lot more debug info.		This says leaf node called the hub node. Logged in successfully. And no files were transfered. <code>uulog -D</code> will dump a lot more debug info.

			=== Postfix ===
			A very nice Internet mail transfer agent. Human readable config files (I'm looking at you, sendmail). Decent logging. Acts like a UNIXy program (I'm looking at you, qmail).

			==== Telling postfix about the UUCP message transport service ====
			This goes on both the hub and leaf nodes. Add an entry in /etc/postfix/master.cf:
			uucp unix - n n - - pipe
			flags=F user=uucp argv=uux -r -n -z -a$sender - $nexthop!rmail ($recipient)
			This will

			==== Tell the hub how get mail destined for the leaf node to the leaf node, using the UUCP transport ====

Adj: /* add a password so the leaf system can authenticate */

2014-10-16T04:07:09Z

add a password so the leaf system can authenticate

← Older revision		Revision as of 04:07, 16 October 2014
Line 292:		Line 292:
	Speaking of authentication, we'll need some entries in <code>/etc/uucp/passwd</code> on the hub system:		Speaking of authentication, we'll need some entries in <code>/etc/uucp/passwd</code> on the hub system:
	arch.imarketingplatform.com choo1zei6su4Oofoov3eekohshii0liR8ii4gahJ3gaiqu7ahDi9zoh7ufaehi5k		arch.imarketingplatform.com choo1zei6su4Oofoov3eekohshii0liR8ii4gahJ3gaiqu7ahDi9zoh7ufaehi5k

			==== test it ====
			Do this on the leaf node:

			$ sudo -u uucp /usr/sbin/uucico -x 11 -s mail.imarketingplatform.com; echo $?
			0
			$ uulog
			uucico mail.imarketingplatform.com - (2014-10-16 03:55:33.03 4968) Calling system mail.imarketingplatform.com (port mail.imarketingplatform.com-SSH)
			uucico mail.imarketingplatform.com - (2014-10-16 03:55:34.35 4968) Login successful
			uucico mail.imarketingplatform.com - (2014-10-16 03:55:34.49 4968) Handshake successful (protocol 'a' starting: 10, 10, 4, 2400, 16384, 0)
			uucico mail.imarketingplatform.com - (2014-10-16 03:55:44.73 4968) Protocol 'a' messages: sent 11, received 10
			uucico mail.imarketingplatform.com - (2014-10-16 03:55:44.73 4968) Protocol 'a' packets: sent 2, received 1
			uucico mail.imarketingplatform.com - (2014-10-16 03:55:44.73 4968) Protocol 'a' errors: bytes resent 0, timeouts 1, errors 0
			uucico mail.imarketingplatform.com - (2014-10-16 03:55:44.77 4968) Call complete (10 seconds 0 bytes 0 bps)
			$

			This says leaf node called the hub node. Logged in successfully. And no files were transfered. <code>uulog -D</code> will dump a lot more debug info.

Adj: /* remote port configuration */

2014-10-12T06:01:24Z

remote port configuration

← Older revision		Revision as of 06:01, 12 October 2014
Line 176:		Line 176:
	seven-bit false		seven-bit false
	reliable true		reliable true
	command /usr/bin/ssh -2 -4 -a -C -c chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com -e none -k -l uucp -m umac-128-etm@openssh.com,umac-64-etm@openssh.com,hmac-ripemd160-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256-etm@openssh.com,umac-128@openssh.com,umac-64@openssh.com -o BatchMode=yes -o ChallengeResponseAuthentication=no -o GSSAPIAuthentication=no -o GSSAPIKeyExchange=no -o GSSAPIClientIdentity=no -o IdentitiesOnly=yes -o IdentityFile=/var/spool/uucp/.ssh/id_rsa -o KbdInteractiveAuthentication=no -o PasswordAuthentication=no -o PermitLocalCommand=no -o PreferredAuthentications=publickey -o PubkeyAuthentication=yes -o RekeyLimit="16K ~~10s"~~ -o RequestTTY=yes -o ServerAliveCountMax=3 -o ServerAliveInterval=5 -o StrictHostKeyChecking=yes -o Tunnel=no -q -tt mail.imarketingplatform.com		command /usr/bin/ssh -2 -4 -a -C -c chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com -e none -k -l uucp -m umac-128-etm@openssh.com,umac-64-etm@openssh.com,hmac-ripemd160-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256-etm@openssh.com,umac-128@openssh.com,umac-64@openssh.com -o BatchMode=yes -o ChallengeResponseAuthentication=no -o GSSAPIAuthentication=no -o GSSAPIKeyExchange=no -o GSSAPIClientIdentity=no -o IdentitiesOnly=yes -o IdentityFile=/var/spool/uucp/.ssh/id_rsa -o KbdInteractiveAuthentication=no -o PasswordAuthentication=no -o PermitLocalCommand=no -o PreferredAuthentications=publickey -o PubkeyAuthentication=yes -o RekeyLimit=16K -o RequestTTY=yes -o ServerAliveCountMax=3 -o ServerAliveInterval=5 -o StrictHostKeyChecking=yes -o Tunnel=no -q -tt mail.imarketingplatform.com

	And now for some explanation:		And now for some explanation:
Line 203:		Line 203:
	:; -o PreferredAuthentications=publickey : Offer only publickey authentication to the SSH server		:; -o PreferredAuthentications=publickey : Offer only publickey authentication to the SSH server
	:; -o PubkeyAuthentication=yes : Accept offers of public key authentication from the server		:; -o PubkeyAuthentication=yes : Accept offers of public key authentication from the server
	:; -o RekeyLimit=~~"16K 10s"~~ : Rekey the connection after 16kbytes of data ~~exchange or 10 seconds of connect time~~		:; -o RekeyLimit=16k : Rekey the connection after 16kbytes of exchanged data
	:; -o RequestTTY=yes : Request that the server allocate a pseudo TTY device.		:; -o RequestTTY=yes : Request that the server allocate a pseudo TTY device.
	:; -o ServerAliveCountMax=3 : If the server stops talking to us for 3 ServerAliveIntervals (next item), close the connection. We'll try again soon.		:; -o ServerAliveCountMax=3 : If the server stops talking to us for 3 ServerAliveIntervals (next item), close the connection. We'll try again soon.
Line 212:		Line 212:
	:; -tt : Force allocation of a pseudo TTY on the server side		:; -tt : Force allocation of a pseudo TTY on the server side
	:; mail.imarketingplatform.com : The name of the SSH server we'll be connecting to		:; mail.imarketingplatform.com : The name of the SSH server we'll be connecting to

			'''Important:''' ''Quotes and backslash escapes do not work in Taylor UUCP config files. Do not try to use them on SSH option parameters in this file. Mysterious failures will ensue.''

	Save this file and try the running uucico again:		Save this file and try the running uucico again:

Adj: /* remote port configuration */

2014-10-10T23:32:57Z

remote port configuration

← Older revision		Revision as of 23:32, 10 October 2014
Line 176:		Line 176:
	seven-bit false		seven-bit false
	reliable true		reliable true
	command /usr/bin/ssh -2 -4 -a -C -c chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com -e none -k -l uucp -m umac-128-etm@openssh.com,umac-64-etm@openssh.com,hmac-ripemd160-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256-etm@openssh.com,umac-128@openssh.com,umac-64@openssh.com -o BatchMode=yes -o ChallengeResponseAuthentication=no -o GSSAPIAuthentication=no -o GSSAPIKeyExchange=no -o GSSAPIClientIdentity=no -o IdentitiesOnly=yes -o IdentityFile=/var/spool/uucp/.ssh/id_rsa -o KbdInteractiveAuthentication=no -o PasswordAuthentication=no -o PermitLocalCommand=no -o PreferredAuthentications=publickey -o PubkeyAuthentication=yes -o RekeyLimit="16K 10s" -o RequestTTY=yes -o ServerAliveCountMax=3 -o ServerAliveInterval=5 -o StrictHostKeyChecking=yes -o Tunnel=no mail.imarketingplatform.com		command /usr/bin/ssh -2 -4 -a -C -c chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com -e none -k -l uucp -m umac-128-etm@openssh.com,umac-64-etm@openssh.com,hmac-ripemd160-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256-etm@openssh.com,umac-128@openssh.com,umac-64@openssh.com -o BatchMode=yes -o ChallengeResponseAuthentication=no -o GSSAPIAuthentication=no -o GSSAPIKeyExchange=no -o GSSAPIClientIdentity=no -o IdentitiesOnly=yes -o IdentityFile=/var/spool/uucp/.ssh/id_rsa -o KbdInteractiveAuthentication=no -o PasswordAuthentication=no -o PermitLocalCommand=no -o PreferredAuthentications=publickey -o PubkeyAuthentication=yes -o RekeyLimit="16K 10s" -o RequestTTY=yes -o ServerAliveCountMax=3 -o ServerAliveInterval=5 -o StrictHostKeyChecking=yes -o Tunnel=no -q -tt mail.imarketingplatform.com

	And now for some explanation:		And now for some explanation:
Line 209:		Line 209:
	:; -o StrictHostKeyChecking=yes : the SSH client will '''not''' add an entry to the .ssh/known_hosts file		:; -o StrictHostKeyChecking=yes : the SSH client will '''not''' add an entry to the .ssh/known_hosts file
	:; -o Tunnel=no : do not try to create a layer 2 or layer 3 tunnel with the other end.		:; -o Tunnel=no : do not try to create a layer 2 or layer 3 tunnel with the other end.
			:; -q : Make the client be quiet
			:; -tt : Force allocation of a pseudo TTY on the server side
	:; mail.imarketingplatform.com : The name of the SSH server we'll be connecting to		:; mail.imarketingplatform.com : The name of the SSH server we'll be connecting to

Adj: /* server side */

2014-10-10T23:31:23Z

server side

← Older revision		Revision as of 23:31, 10 October 2014
Line 267:		Line 267:

	==== server side ====		==== server side ====
			===== Set the server system's UUCP node name =====
			The server presents a name when a client connects. If this name does not match what the client is expecting, the client will hang up. (Smart, huh?)

			Add the following in <code>/etc/uucp/config</code>:
			nodename mail.imarketingplatform.com

			===== make the leaf system known =====
			Add info to <code>/etc/uucp/sys</code> on the hub system:
			system arch.imarketingplatform.com
			time Never
			call-login *
			call-password *
			protocol a
			sequence true
			free-space 67108864

			This is pretty much a turned around version of <code>/etc/uucp/sys</code> file on the leaf system. It is important that the hub system knows the leaf system exists, though. Else authentication will fail miserably.

			===== add a password so the leaf system can authenticate =====
			Speaking of authentication, we'll need some entries in <code>/etc/uucp/passwd</code> on the hub system:
			arch.imarketingplatform.com choo1zei6su4Oofoov3eekohshii0liR8ii4gahJ3gaiqu7ahDi9zoh7ufaehi5k

Adj: /* leaf node side */

2014-10-10T22:50:27Z

leaf node side

@@ Line 166: / Line 166: @@
  uucico mail.imarketingplatform.com - (2014-10-10 17:45:46.36 22019) ERROR: No matching ports
+ $
 ===== remote port configuration =====
@@ Line 260: / Line 240: @@
 We'll need to change the chat script the leaf node's uucico is using to adjust for the lack of a "<code>login: </code>" prompt.
 ==== server side ====

Adj: /* remote system setup */

2014-10-10T22:18:15Z

remote system setup

← Older revision		Revision as of 22:18, 10 October 2014
Line 168:		Line 168:

	Here, uucico is saying that it doesn't know how to connect to the remote system we told it to talk to. Which goes back to the '''<code>port mail.imarketingplatform.com</code>''' listing in our '''<code>/etc/uucp/sys</code>''' file. We'll fix that next.		Here, uucico is saying that it doesn't know how to connect to the remote system we told it to talk to. Which goes back to the '''<code>port mail.imarketingplatform.com</code>''' listing in our '''<code>/etc/uucp/sys</code>''' file. We'll fix that next.

			Back to <code>/etc/uucp/sys</code>, add this to the end of our mail.imarketingform.com system section:
			chat-timeout 5
			chat word: \P

			Running uucico again and checking the debug log, shows a different output now. Right after "<code>icexpect: Looking for 5 "word:"</code>", we see a line that says "<code>DEBUG: icexpect: Got</code>":
			uucico mail.imarketingplatform.com - (2014-10-10 22:06:10.73 32679) DEBUG: fconn_open: Opening port mail.imarketingplatform.com-SSH (default speed)
			uucico mail.imarketingplatform.com - (2014-10-10 22:06:10.73 32679) Calling system mail.imarketingplatform.com (port mail.imarketingplatform.com-SSH)
			uucico mail.imarketingplatform.com - (2014-10-10 22:06:10.73 32679) DEBUG: Forking /usr/bin/ssh -2 -4 -a -C -c chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128- gcm@openssh.com -e none -k -l uucp -m umac-128-etm@openssh.com,umac-64-etm@openssh.com,hmac-ripemd160-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256-etm@openssh.com,umac-128@openssh.com,umac-64@openssh.com -o BatchMode=yes -o ChallengeResponseAuthentication=no -o GSSAPIAuthentication=no -o GSSAPIKeyExchange=no -o GSSAPIClientIdentity=no -o IdentitiesOnly=yes -o IdentityFile=/var/spool/uucp/.ssh/id_rsa -o KbdInteractiveAuthentication=no -o PasswordAuthentication=no -o PermitLocalCommand=no -o PreferredAuthentications=publickey -o PubkeyAuthentication=yes -o RekeyLimit="64K 10s" -o RequestTTY=yes -o ServerAliveCountMax=3 -o ServerAliveInterval=5 -o StrictHostKeyChecking=yes -o Tunnel=no mail.imarketingplatform.com
			uucico mail.imarketingplatform.com - (2014-10-10 22:06:10.73 32679) DEBUG: icexpect: Looking for 5 "word:"
			uucico mail.imarketingplatform.com - (2014-10-10 22:06:10.73 32679) DEBUG: icexpect: Got "uucico mail.imarketingplatform.com - (2014-10-10 22:06:10.73 32679) ERROR: Line disconnected
			" (error)
			uucico mail.imarketingplatform.com - (2014-10-10 22:06:10.73 32679) DEBUG: fconn_close: Closing connection
			uucico mail.imarketingplatform.com - (2014-10-10 22:06:14.73 32679) DEBUG: Exit status 255
			uucico mail.imarketingplatform.com - (2014-10-10 22:06:14.73 32679) DEBUG: Call failed: 3 (Login failed)
			uucico mail.imarketingplatform.com - (2014-10-10 22:06:14.73 32683) DEBUG: usysdep_detach: Forked; old PID 32679, new pid 32683
			uucico - - (2014-10-10 22:06:14.73 32684) DEBUG: usysdep_detach: Forked; old PID 32683, new pid 32684
			uucico - - (2014-10-10 22:06:14.73 32684) DEBUG: Forking /usr/sbin/uuxqt

	===== remote port configuration =====		===== remote port configuration =====

Adj: /* leaf node side */

2014-10-10T21:23:31Z

leaf node side

@@ Line 133: / Line 133: @@
 The leaf system will be doing all of the calling out, so we'll set that up first.
 cron will be running something like '''<code>uucico -smail.imarketingplatform.com</code>''' periodically.  This will tell it to connect to the remote UUCP system it knows as mail.imarketingplatform.com (as listed in '''<code>/etc/uucp/sys</code>''') send any waiting files it has to the remote system and pull any files the remote system has down.
@@ Line 138: / Line 139: @@
  system mail.imarketingplatform.com
    time          Any
-   port          mail.imarketingplatform.com
+   port          mail.imarketingplatform.com-SSH
    call-login    *
    call-password *
@@ Line 167: / Line 168: @@
 Here, uucico is saying that it doesn't know how to connect to the remote system we told it to talk to.  Which goes back to the '''<code>port mail.imarketingplatform.com</code>''' listing in our '''<code>/etc/uucp/sys</code>''' file.  We'll fix that next.
 ==== server side ====

Adj: /* Taylor UUCP configuration */

2014-10-10T17:51:56Z

Taylor UUCP configuration

← Older revision		Revision as of 17:51, 10 October 2014
Line 129:		Line 129:
	=== Taylor UUCP configuration ===		=== Taylor UUCP configuration ===
	Wherein we will tell the hub and leaf systems about each other, configure UUCP authentication, and set them up to talk over our SSH connection		Wherein we will tell the hub and leaf systems about each other, configure UUCP authentication, and set them up to talk over our SSH connection

⚫	==== server side ====
	==== leaf node side ====		==== leaf node side ====
	The leaf system will be doing all of the calling out, so we'll set that up first.		The leaf system will be doing all of the calling out, so we'll set that up first.
Line 167:		Line 167:

	Here, uucico is saying that it doesn't know how to connect to the remote system we told it to talk to. Which goes back to the '''<code>port mail.imarketingplatform.com</code>''' listing in our '''<code>/etc/uucp/sys</code>''' file. We'll fix that next.		Here, uucico is saying that it doesn't know how to connect to the remote system we told it to talk to. Which goes back to the '''<code>port mail.imarketingplatform.com</code>''' listing in our '''<code>/etc/uucp/sys</code>''' file. We'll fix that next.

		⚫	==== server side ====