Peter Nixon
peternixon
Involved Projects and Packages
DRAC is a daemon that dynamically updates a relay authorization map for
sendmail. It provides a way to allow legitimate users to relay mail
through an SMTP server, while still preventing others from using it as
a spam relay. User's IP addresses are added to the map immediately
after they have authenticated to the POP or IMAP server.
FlexPOP is a new POP server developed by VA Linux, which has the merit of being fast and secure. FlexPOP supports the Maildir format, thus it can be used on large-scale systems which use NFS spools. Other strong points include user authentication with LDAP, POP before SMTP support, POP lock (mutual exclusion) support when accessed concurrently, timeout setting support for POP commands, delayed response support when POP authentication errors occurred, and so on.
Gnarwl is an email autoresponder. Unlike the original vacation(1) program, gnarwl is based on LDAP. Traditionally you had to give every user, who wanted to use autoreply facilities full fledged system accounts (trusting them to set their forwarding up properly, cursing when they didn't). With gnarwl this is history. User information is now stored in LDAP. Thats right, no more messing around with system accounts or homedirs for users who just want their email working, but don't care to fuss around with shell commands.
libSieve provides a library to interpret Sieve scripts, and to execute those scripts over a given set of messages. The return codes from the libSieve functions let your program know how to handle the message, and then it's up to you to make it so. libSieve makes no attempt to have knowledge of how SMTP, IMAP, or anything else work; just how to parse and deal with a buffer full of emails. The rest is up to you!
Perdition is a fully featured POP3 and IMAP4 proxy server. It is able to handle both SSL and non-SSL connections and redirect users to a real-server based on a database lookup. Perdition supports modular based database access. ODBC, MySQL, PostgreSQL, GDBM, POSIX Regular Expression and NIS modules ship with the distribution. The API for modules is open allowing arbitrary modules to be written to allow access to any data store.
Perdition has many uses. Including, creating large mail systems where an end-user's mailbox may be stored on one of several hosts, integrating different mail systems together, migrating between different email infrastructures, and bridging plain-text, SSL and TLS services. It can also be used as part of a firewall.
SQLgrey is a Postfix grey-listing policy service with auto-white-listing written in Perl with SQL database as storage backend.
Greylisting stops 50 to 90 % junk mails (spam and virus) before they reach your Postfix server (saves BW, user time and CPU time).
SYMPA is an electronic mailing list manager. It is used to automate list
management functions such as subscription, moderation and management of
archives. SYMPA also manages sending of messages to the lists, and
makes it possible to reduce the load on the system. Provided that you
have enough memory on your system, Sympa is especially well adapted for big
lists. For a list with 20 000 subscribers, it takes 5 minutes to send a
message to 90% of subscribers, of course considering that the network is
available.
Library of Abstract Data Types (ADTs) that may be useful. Includes queue, dynamic array and key value ADT.
Generic logging layer that may be used to log to one or more of syslog, an
open file handle or a file name. Though due to to limitations in the
implementation of syslog opening multiple syslog loggers doesn't makes
sense. Includes the ability to limit which messages will be logged based on
priorities.
Library to simplify TCP/IP socket operations. Includes code to open a socket to a server as a client, to listen on socket for clients as a server and to pipe information between sockets.
Packages related to e-mail and instant messaging.
Jabberd 2 is a next generation jabberd server. It has been written from the ground up to be scalable, architecturally sound, and to support the latest protocol extensions coming out of the JSF.
jabberd14 is the original server implementation of the Jabber protocol, now known as XMPP. It is open source, and it is free. This implementation has been formerly known as just jabberd as well.
Please note: jabberd2 (also known as jabberd 2.x) is not a newer version of jabberd14 but a completely different project.
Openfire is a leading Open Source, cross-platform IM server based on the XMPP (Jabber) protocol. It has great performance, is easy to setup and use, and delivers an innovative feature set.
The ICQ Transport provides a gateway which allows Jabber users to
communicate with their contacts on the ICQ network.
The transport must be installed on the Jabber server, and it's
operation is nearly transparent to the user. They can interact with
their ICQ contacts in the same way as they do with their Jabber
contacts.
SIP Express Router (SER) is a very fast and flexible SIP (RFC3621) proxy server. Written entirely in C, SER can handle thousands calls per second even on low-budget hardware. A C Shell like scripting language provides full control over the server's behaviour. It's modular architecture allows only required functionality to be loaded. Currently the following modules are available: digest authentication, CPL scripts, instant messaging, MySQL support, a presence agent, radius authentication, record routing, an SMS Gateway, a jabber gateway, a transaction module, registrar and user location.
System an network monitoring software.
This is flowd, a NetFlow collector daemon intended to be small, fast and secure.
It features some basic filtering to limit or tag the flows that are recorded
and is privilege separated, to limit security exposure from bugs in flowd
itself.
The libffi library provides a portable, high level programming
interface to various calling conventions. This allows a programmer
to call any function specified by a call interface description at
run-time.
FFI stands for Foreign Function Interface. A foreign function
interface is the popular name for the interface that allows code
written in one language to call code written in another language.
The libffi library really only provides the lowest, machine
dependent layer of a fully featured foreign function interface. A
layer must exist above libffi that handles type conversions for
values passed between the two languages.
pmacct is a small set of passive network monitoring tools to measure, account, classify and aggregate IPv4 and IPv6 traffic; a pluggable and flexible architecture allows to store the collected traffic data into memory tables or SQL (MySQL, SQLite, PostgreSQL) databases. pmacct supports fully customizable historical data breakdown, flow sampling, filtering and tagging, recovery actions, and triggers. Libpcap, sFlow v2/v4/v5 and NetFlow v1/v5/v7/v8/v9 are supported, both unicast and multicast. Also, a client program makes it easy to export data to tools like RRDtool, GNUPlot, Net-SNMP, MRTG, and Cacti.
RANCID monitors a router's (or more generally a device's) configuration,
including software and hardware (cards, serial numbers, etc) and uses CVS
(Concurrent Version System) or Subversion to maintain history of changes.
RANCID does this by the very simple process summarized here:
* login to each device in the router table (router.db),
* run various commands to get the information that will be saved,
* cook the output; re-format, remove oscillating or incrementing data,
* email any differences (sample) from the previous collection to a mail
list,
* and finally commit those changes to the reivision control system
RANCID also includes looking glass software. It is based on Ed Kern's looking
glass which was once used for http://nitrous.digex.net/, for the old-school
folks who remember it. Our version has added functions, supports cisco,
juniper, and foundry and uses the login scripts that come with rancid; so it
can use telnet or ssh to connect to your devices(s).
Rancid currently supports Cisco routers, Juniper routers, Catalyst switches,
Foundry switches, Redback NASs, ADC EZT3 muxes, MRTd (and thus likely IRRd),
Alteon switches, and HP Procurve switches and a host of others.
Rancid is known to be used at: AOL, Global Crossing, MFN, NTT America,
Certainty Solutions Inc.
The sFlow toolkit provides command line utilities and scripts for analyzing sFlow data.
sflowtool interfaces to utilities such as tcpdump, Wireshark and Snort for detailed packet tracing and analysis, NetFlow compatible collectors for IP flow accounting, and provides text based output that can be used in scripts to provide customized analysis and reporting and for integrating with other tools such as Graphite or rrdtool.