ISP Mail Server 3.x HowTo - Revision history

Zcrayfish: /* Install PostfixAdmin */ Remove dead link.

2024-01-21T10:03:41Z

Install PostfixAdmin: Remove dead link.

← Older revision		Revision as of 10:03, 21 January 2024
Line 174:		Line 174:


	'''NOTE:''' Check https://sourceforge.net/tracker/index.php?func=detail&aid=2859165&group_id=191583&atid=937964~~{{dead link}}~~ if you have bug on listing domains page.		'''NOTE:''' Check <nowiki>https://sourceforge.net/tracker/index.php?func=detail&aid=2859165&group_id=191583&atid=937964</nowiki> if you have bug on listing domains page.

	== Install Postfix ==		== Install Postfix ==

Zcrayfish: Rescued dead link.

2023-12-20T11:12:44Z

Rescued dead link.

← Older revision		Revision as of 11:12, 20 December 2023
Line 465:		Line 465:
	* Verify clamsmtp is listening on port 10025:		* Verify clamsmtp is listening on port 10025:
	netstat -anp \| grep clamsmtp		netstat -anp \| grep clamsmtp
	* [~~https~~://~~memberwebs~~.~~com~~/stef/software/clamsmtp/postfix.html Following the clamsmtp instructions]~~{{dead link}}~~		* [http://thewalter.net/stef/software/clamsmtp/postfix.html Following the clamsmtp instructions]
	** edit /etc/postfix/main.cf and add:		** edit /etc/postfix/main.cf and add:
	content_filter = scan:[127.0.0.1]:10025		content_filter = scan:[127.0.0.1]:10025

Sertonix: replace /etc/init.d with rc-service

2023-11-17T10:50:24Z

replace /etc/init.d with rc-service

← Older revision		Revision as of 10:50, 17 November 2023
Line 94:		Line 94:

	apk add postgresql postgresql-client		apk add postgresql postgresql-client
	~~/etc/init.d/~~postgresql setup		rc-service postgresql setup
	~~/etc/init.d/~~postgresql start		rc-service postgresql start
	rc-update add postgresql		rc-update add postgresql

Line 322:		Line 322:

	newaliases # so postfix is happy...		newaliases # so postfix is happy...
	~~/etc/init.d/~~postfix start		rc-service postfix start
	rc-update add postfix		rc-update add postfix

Line 429:		Line 429:

	Start dovecot		Start dovecot
	~~/etc/init.d/~~dovecot start		rc-service dovecot start
	rc-update add dovecot		rc-update add dovecot

Line 461:		Line 461:
	rc-update add clamd		rc-update add clamd
	rc-update add clamsmtpd		rc-update add clamsmtpd
	~~/etc/init.d/~~clamd start		rc-service clamd start
	~~/etc/init.d/~~clamsmtpd start		rc-service clamsmtpd start
	* Verify clamsmtp is listening on port 10025:		* Verify clamsmtp is listening on port 10025:
	netstat -anp \| grep clamsmtp		netstat -anp \| grep clamsmtp
Line 514:		Line 514:

	* Restart dovecot		* Restart dovecot
	~~/etc/init.d/~~dovecot restart		rc-service dovecot restart
	* Edit /etc/postfix/main.cf and add:		* Edit /etc/postfix/main.cf and add:
	# TLS Stuff -- since we allow SASL with tls only, we have to set up TLS first		# TLS Stuff -- since we allow SASL with tls only, we have to set up TLS first
Line 730:		Line 730:
	Restart Postfix and Dovecot:		Restart Postfix and Dovecot:

	~~/etc/init.d/~~postfix restart		rc-service postfix restart
	~~/etc/init.d/~~dovecot restart		rc-service dovecot restart

	'''TODO''' This will cause over-quota emails to bounce. Which could be a source of backscatter. We need a way of checking quota limits after RBL checking but before the message is accepted in the queue.		'''TODO''' This will cause over-quota emails to bounce. Which could be a source of backscatter. We need a way of checking quota limits after RBL checking but before the message is accepted in the queue.
Line 757:		Line 757:

	<pre>		<pre>
	~~/etc/init.d/~~postfix restart		rc-service postfix restart
	~~/etc/init.d/~~dovecot restart		rc-service dovecot restart
	</pre>		</pre>

Line 794:		Line 794:
	* Restart lighttpd to verify the new php libraries are used		* Restart lighttpd to verify the new php libraries are used

	~~/etc/init.d/~~lighttpd restart		rc-service lighttpd restart

	* Get the additional php modules needed:		* Get the additional php modules needed:
Line 1,224:		Line 1,224:
	<pre>		<pre>
	rc-update add slapd default		rc-update add slapd default
	~~/etc/init.d/~~slapd start		rc-service slapd start
	</pre>		</pre>

Line 1,253:		Line 1,253:
	In order to enable php-ldap support you need to restart lighttpd server		In order to enable php-ldap support you need to restart lighttpd server

	~~/etc/init.d/~~lighttpd restart		rc-service lighttpd restart

	Edit /etc/roundcube/main.inc.php:		Edit /etc/roundcube/main.inc.php:
Line 1,306:		Line 1,306:
	Ensure the busybox cron service is started and is configured to auto-start:		Ensure the busybox cron service is started and is configured to auto-start:

	~~/etc/init.d/~~cron start		rc-service cron start
	rc-update add cron default		rc-update add cron default

Zcrayfish: Marked a dead link.

2023-08-25T03:42:34Z

Marked a dead link.

← Older revision		Revision as of 03:42, 25 August 2023
Line 174:		Line 174:


	'''NOTE:''' Check https://sourceforge.net/tracker/index.php?func=detail&aid=2859165&group_id=191583&atid=937964 if you have bug on listing domains page.		'''NOTE:''' Check https://sourceforge.net/tracker/index.php?func=detail&aid=2859165&group_id=191583&atid=937964{{dead link}} if you have bug on listing domains page.

	== Install Postfix ==		== Install Postfix ==

Zcrayfish: Marked a dead link.

2023-08-25T03:41:37Z

Marked a dead link.

← Older revision		Revision as of 03:41, 25 August 2023
Line 465:		Line 465:
	* Verify clamsmtp is listening on port 10025:		* Verify clamsmtp is listening on port 10025:
	netstat -anp \| grep clamsmtp		netstat -anp \| grep clamsmtp
	* [https://memberwebs.com/stef/software/clamsmtp/postfix.html Following the clamsmtp instructions]		* [https://memberwebs.com/stef/software/clamsmtp/postfix.html Following the clamsmtp instructions]{{dead link}}
	** edit /etc/postfix/main.cf and add:		** edit /etc/postfix/main.cf and add:
	content_filter = scan:[127.0.0.1]:10025		content_filter = scan:[127.0.0.1]:10025

Sertonix: use https links

2023-08-25T03:06:47Z

use https links

← Older revision		Revision as of 03:06, 25 August 2023
Line 115:		Line 115:
	Download PostfixAdmin from Sourceforge. When these instructions were written, 2.93 was the current release, so (replace host.example.com with the actual domain):		Download PostfixAdmin from Sourceforge. When these instructions were written, 2.93 was the current release, so (replace host.example.com with the actual domain):

	wget ~~http~~://downloads.sourceforge.net/project/postfixadmin/postfixadmin/postfixadmin-2.93/postfixadmin-2.93.tar.gz		wget <nowiki>https://downloads.sourceforge.net/project/postfixadmin/postfixadmin/postfixadmin-2.93/postfixadmin-2.93.tar.gz</nowiki>
	tar zxvf postfixadmin-2.93.tar.gz		tar zxvf postfixadmin-2.93.tar.gz
	mkdir -p /var/www/domains/host.example.com/www/postfixadmin		mkdir -p /var/www/domains/host.example.com/www/postfixadmin
Line 149:		Line 149:
	$CONF['special_alias_control'] = 'YES';		$CONF['special_alias_control'] = 'YES';
	$CONF['fetchmail'] = 'NO';		$CONF['fetchmail'] = 'NO';
	$CONF['user_footer_link'] = "http://host.example.com/postfixadmin";		$CONF['user_footer_link'] = "<nowiki>http://host.example.com/postfixadmin</nowiki>";
	$CONF['footer_link'] = 'http://host.example.com/postfixadmin/main.php';		$CONF['footer_link'] = '<nowiki>http://host.example.com/postfixadmin/main.php</nowiki>';
	$CONF['create_mailbox_subdirs_prefix']="";		$CONF['create_mailbox_subdirs_prefix']="";
	$CONF['used_quotas'] = 'YES';		$CONF['used_quotas'] = 'YES';
Line 174:		Line 174:


	'''NOTE:''' Check ~~http~~://sourceforge.net/tracker/index.php?func=detail&aid=2859165&group_id=191583&atid=937964 if you have bug on listing domains page.		'''NOTE:''' Check https://sourceforge.net/tracker/index.php?func=detail&aid=2859165&group_id=191583&atid=937964 if you have bug on listing domains page.

	== Install Postfix ==		== Install Postfix ==
Line 327:		Line 327:
	=== Create a domain in PostfixAdmin and test ===		=== Create a domain in PostfixAdmin and test ===

	Go to http://host.example.com/postfixadmin/		Go to <nowiki>http://host.example.com/postfixadmin/</nowiki>

	Log in using the superadmin account, create a domain for the local box (e.g. example.com), and create a user mailbox (e.g. root).		Log in using the superadmin account, create a domain for the local box (e.g. example.com), and create a user mailbox (e.g. root).
Line 465:		Line 465:
	* Verify clamsmtp is listening on port 10025:		* Verify clamsmtp is listening on port 10025:
	netstat -anp \| grep clamsmtp		netstat -anp \| grep clamsmtp
	* [~~http~~://memberwebs.com/stef/software/clamsmtp/postfix.html Following the clamsmtp instructions]		* [https://memberwebs.com/stef/software/clamsmtp/postfix.html Following the clamsmtp instructions]
	** edit /etc/postfix/main.cf and add:		** edit /etc/postfix/main.cf and add:
	content_filter = scan:[127.0.0.1]:10025		content_filter = scan:[127.0.0.1]:10025
Line 563:		Line 563:
	=== Mailbox Quotas ===		=== Mailbox Quotas ===

	In the default configuration, PostfixAdmin knows about quotas, but they are not enforced. Documentation on the web mentions the [~~http~~://vda.sourceforge.net vda patch to postfix] to enforce quotas. The only bad thing... its a ''patch''. Postfix and Dovecot are both conservative systems, so if the patch isn't in the upstream source, we'll assume there's a good reason. There is a way of using quotas without patches - and it involves using dovecot's [~~http~~://wiki2.dovecot.org/LDA deliver] lda for local delivery.		In the default configuration, PostfixAdmin knows about quotas, but they are not enforced. Documentation on the web mentions the [https://vda.sourceforge.net vda patch to postfix] to enforce quotas. The only bad thing... its a ''patch''. Postfix and Dovecot are both conservative systems, so if the patch isn't in the upstream source, we'll assume there's a good reason. There is a way of using quotas without patches - and it involves using dovecot's [https://wiki2.dovecot.org/LDA deliver] lda for local delivery.

	* Replace /etc/dovecot/dovecot.conf with the following:		* Replace /etc/dovecot/dovecot.conf with the following:
Line 710:		Line 710:
	chmod 600 /etc/dovecot/dovecot-dict-quota.conf		chmod 600 /etc/dovecot/dovecot-dict-quota.conf

	Side note: [~~http~~://wiki2.dovecot.org/Quota/Dict The Dovecot Quota Documentation] mentions the need for a trigger with pgsql. This was created in the PostfixAdmin install, which is why you instantiated the pgsql language when creating the database. If not, you will need to create the trigger, to reference the quota2 table, not the quota table mentioned in the dovecot docs.		Side note: [https://wiki2.dovecot.org/Quota/Dict The Dovecot Quota Documentation] mentions the need for a trigger with pgsql. This was created in the PostfixAdmin install, which is why you instantiated the pgsql language when creating the database. If not, you will need to create the trigger, to reference the quota2 table, not the quota table mentioned in the dovecot docs.


Line 1,175:		Line 1,175:

	# This is needed for proper representation of MD5-CRYPT format stored in database		# This is needed for proper representation of MD5-CRYPT format stored in database
	# see more details in ~~http~~://strugglers.net/~andy/blog/2010/01/23/openldap-and-md5crypt/		# see more details in https://strugglers.net/~andy/blog/2010/01/23/openldap-and-md5crypt/
	password-hash {CRYPT}		password-hash {CRYPT}
	password-crypt-salt-format "$1$%.8s"		password-crypt-salt-format "$1$%.8s"

Zcrayfish: nowiki'd hypothetical URLs.

2023-08-25T02:35:34Z

nowiki'd hypothetical URLs.

← Older revision		Revision as of 02:35, 25 August 2023
Line 161:		Line 161:
	chown www:www /var/www/domains/host.example.com/www/postfixadmin/templates_c		chown www:www /var/www/domains/host.example.com/www/postfixadmin/templates_c

	Go to https://host.example.com/postfixadmin/setup.php		Go to <nowiki>https://host.example.com/postfixadmin/setup.php</nowiki>

	Create the password hash, add it to the config.inc.php file		Create the password hash, add it to the config.inc.php file

	Go back to https://host.example.com/postfixadmin/setup.php		Go back to <nowiki>https://host.example.com/postfixadmin/setup.php</nowiki>

	Create superadmin account.		Create superadmin account.

Zcrayfish: /* WebMail (RoundCube) */ url cleanup

2023-08-05T15:33:10Z

WebMail (RoundCube): url cleanup

← Older revision		Revision as of 15:33, 5 August 2023
Line 737:		Line 737:
	=== WebMail (RoundCube) ===		=== WebMail (RoundCube) ===

	[~~http~~://roundcube.net/ RoundCube] is an "ajax /Web2.0" web-mail client. These instructions are for the Alpine Linux 2.2 repository		[https://roundcube.net/ RoundCube] is an "ajax /Web2.0" web-mail client. These instructions are for the Alpine Linux 2.2 repository

	* Verify that you have at least the following in /etc/postfix/main.cf. Unless you have followed the Relay for Authenticated Users section above, set '''smtpd_tls_auth_only = no''', otherwise leave it set to '''yes''':		* Verify that you have at least the following in /etc/postfix/main.cf. Unless you have followed the Relay for Authenticated Users section above, set '''smtpd_tls_auth_only = no''', otherwise leave it set to '''yes''':
Line 810:		Line 810:
	php composer.phar install --no-dev		php composer.phar install --no-dev

	* Point your browser to https://host.example.com/roundcube/installer		* Point your browser to <nowiki>https://host.example.com/roundcube/installer</nowiki>
	* Start installation		* Start installation

Line 849:		Line 849:

	* Follow the instructions in step 2 of the install to copy the files to the server		* Follow the instructions in step 2 of the install to copy the files to the server
	* You should now be able to get to roundcube at https://host.example.com/roundcube		* You should now be able to get to roundcube at <nowiki>https://host.example.com/roundcube</nowiki>

	* After its working, the INSTALL file recommends removing the install directory.		* After its working, the INSTALL file recommends removing the install directory.

Zcrayfish: /* Optional: Configure Web Server Virtual Domains */ upgraded URLs to https

2023-08-05T15:30:51Z

Optional: Configure Web Server Virtual Domains: upgraded URLs to https

← Older revision		Revision as of 15:30, 5 August 2023
Line 1,319:		Line 1,319:
	'''Note:''' These steps can be done ''in addition to'' the default lighttpd configuration above, which allows you to access the ACF, PostfixAdmin and Roundcube interfaces as subfolders of one web service.		'''Note:''' These steps can be done ''in addition to'' the default lighttpd configuration above, which allows you to access the ACF, PostfixAdmin and Roundcube interfaces as subfolders of one web service.

	'''Note:''' If you provide SSL access for multiple domain site you may need to follow ~~http~~://redmine.lighttpd.net/projects/lighttpd/wiki/Docs:SSL#SSL-on-multiple-domains in order to provide multi-domain certificates. If you would like to redirect hosts to their secure equivalents use the following instructions ~~http~~://redmine.lighttpd.net/projects/lighttpd/wiki/HowToRedirectHttpToHttps.		'''Note:''' If you provide SSL access for multiple domain site you may need to follow https://redmine.lighttpd.net/projects/lighttpd/wiki/Docs:SSL#SSL-on-multiple-domains in order to provide multi-domain certificates. If you would like to redirect hosts to their secure equivalents use the following instructions https://redmine.lighttpd.net/projects/lighttpd/wiki/HowToRedirectHttpToHttps.

	This server hosts three separate web applications, and these can be handled as three ''different'' virtual domains on the same web server. They will be distinguished by their DNS names, so you can choose domains for the three separate services (or at least the ones you want to publish):		This server hosts three separate web applications, and these can be handled as three ''different'' virtual domains on the same web server. They will be distinguished by their DNS names, so you can choose domains for the three separate services (or at least the ones you want to publish):

Zcrayfish: /* Set up Lighttpd + PHP */ nowiki'd a hypothetical URL

2023-08-05T15:28:56Z

Set up Lighttpd + PHP: nowiki'd a hypothetical URL

← Older revision		Revision as of 15:28, 5 August 2023
Line 87:		Line 87:
	rc		rc

	At this point you should be able to see the redirect page: https://host.example.com/		At this point you should be able to see the redirect page: <nowiki>https://host.example.com/</nowiki>

	== Install Postgresql ==		== Install Postgresql ==