<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
<title></title>
</head>
<body bgcolor="#ffffff" text="#000000">
<br>
<br>
On 1/6/2011 11:11 AM, Chuck Tetlow wrote:
<blockquote cite="mid:20110106200122.M47810@tetlow.net" type="cite">
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
<meta content="OPENWEBMAIL" name="GENERATOR">
<font size="2">> <br>
> I've been giving this a bit more thought. Our DNS MX record
points to <br>
> nomealaska.org and this is working. Our new website will be
<br>
> <a moz-do-not-send="true" target="_blank"
href="http://www.nomealaska.org/">www.nomealaska.org</a> - and
my A record will point to that new ip address. <br>
> <br>
> I've created an A record of webmail.nomealaska.org pointing
to our email <br>
> server's ip address. Can I have webmail users access their
mail by going <br>
> to <a moz-do-not-send="true" target="_blank"
href="https://webmail.nomealaska.org/">https://webmail.nomealaska.org</a>
instead of having our new hosting <br>
> company create a redirect on the new website from <br>
> <a moz-do-not-send="true" target="_blank"
href="http://www.nomealaska.org/">www.nomealaska.org</a>/webmail
? <br>
> <br>
<br>
Yes - we do that in a number of cases. <br>
<br>
Companies that want to host their own website, or have some
specific MS requirement keep their website elsewhere. We host
their e-mail and they use webmail using the name
"mail.domain.tld/webmail". <br>
<br>
The only think you must be sure to configure - make sure the BX
server site uses a different name than "www" in the site
configuration. If you leave it "www", each time a person hits
the name webmail - the DNS will correctly point them to your
box. But the BX will automatically redirect to www - and
they'll be directed to the off-site box. Its a vicious loop
that is frustrating and keeps them from using webmail. So make
sure the site is configured with the name "mail" or "webmail" in
the site set up configuration (we use mail). Then the DNS
simply points that name (mail or webmail) to your BX site IP.
<br>
<br>
<br>
<br>
> I see in /etc/httpd/conf.d/squirrelmail.conf there is an
Alias field <br>
> that now has "/webmail /usr/share/squirrelmail". Can that
be changed to <br>
> "webmail/ /usr/share/squirrelmail" assuming the server
remains named <br>
> nomealaska.org with an alias of webmail.nomealaska.org? Or
is this <br>
> possible and if so, how to do it? <br>
> <br>
> Do I need to install a new SSL certificate for <br>
> <a moz-do-not-send="true" target="_blank"
href="https://webmail.nomealaska.org/">https://webmail.nomealaska.org</a>
even though it would be an alias of <br>
> existing nomealaska.org? <br>
> <br>
<br>
I'm not a expert on certificates - but I believe that a
certificate is uniquely tied to a name, not simply the domain.
<br>
<br>
So if the site's name changes from <a class="moz-txt-link-abbreviated" href="http://www.domain.tld">www.domain.tld</a> to
webmail.domain.tld - you will need a new certificate. If you
leave the old certificate on the box when you change the site
name - I think your users will get those "name doesn't match the
certificate" security warnings.
<br>
<br>
Good luck and let us know which way you go!
<br>
<br>
<br>
<br>
Chuck
<br>
</font><br>
</blockquote>
<font size="2"><br>
Thanks Chuck!<br>
<br>
I think I have it working now at
<a class="moz-txt-link-freetext" href="https://webmail.nomealaska.org/webmail">https://webmail.nomealaska.org/webmail</a> . Haven't migrated the
website yet so still have ample opportunity to break things but
should be fairly straightforward to change the www from the name
of the server as you and Jon suggested.<br>
<br>
The cert: I may just get a wildcard cert to reduce my cert
confusion. The above link does work but Firefox did give me the
dialog about security risks and I had to add the cert and
exception to get to the squirrelmail login.<br>
<br>
Regardless of type of cert, I suppose I should delete the current
one as it is in my /home/.sites/X/certs directory and I don't see
how I can install a second one there - unless you can create a new
directory to stuff it in there? or rename the certificate? Not
sure how all that is handled. Maybe the GUI does it for you?<br>
<br>
cheers, Jim<br>
</font>
<pre class="moz-signature" cols="72">--
Jim Dory
Engineering
City of Nome
PO Box 281
102 Division St.
Nome, AK 99762
907.443.6604
<a class="moz-txt-link-freetext" href="http://www.nomealaska.org">http://www.nomealaska.org</a></pre>
</body>
</html>