Cyrus Murder

[Henrique de Moraes Holschuh]

On Mon, 07 Mar 2005, Charles Marcus wrote:
> considering SuSE SLES9 for our servers, I guess this would be a great 
> fit - if it is safe and secure enough.

It is quite safe and secure enough.  The recent audits and paranoia-fit
coding sessions Cyrus went through probably have left it with very, very few
holes (none known).

AFAIK murder requires full conectivity to all servers, since it does
referrals.  I am not sure if you can tell 2.2.x cyrus to never refer and
proxy everything (so you could have the backends fully firewalled), but even
if it doesn't, you can use a Perdition proxy to do it.

> 5. I want the two servers to stay in sync at all times - although a 
> delay of minutes is obviously completely acceptable.

You don't have to, with murder.  You can have different frontends talking to
the same set of backend servers.  Just make sure the mupdate server is up to
the task (as well as connectivity to it).

Syncing two *active* cyrus spools is not anywhere close to trivial, so the
above method is much simpler to set up.

> Currently, we are using an outsourced email hosting provider, and the 
> speed, because it is all IMAP, and because we deal with a lot of large 
> attachments, is *very* slow. I want the new system to scream, but I am 
> nervous about security.

With murder, you could even pull the ingenious trick someone posted a while
back, of moving the user mailboxes to backends close to their networks,
while still having it all accessible everywhere, in a flat namespace (shared
folders REALLY benefit from a flat namespace).

-- 
  "One disk to rule them all, One disk to find them. One disk to bring
  them all and in the darkness grind them. In the Land of Redmond
  where the shadows lie." -- The Silicon Valley Tarot
  Henrique Holschuh
---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html