Word for Word

8
Mar/100

Mail Server with Virtual Domain @ OpenSuse 11.1 x86_64

Cyrus SASL version 2.1.23

Postfix version 2.7.0

Dovecot version 1.1.7

Squirrelmail version 1.4.20

Installation

# yast -i dovecot11 db1

- Cyrus SASL
# http://repository.wowtutorial.org/cyrus-sasl-2.1.23.tar.gz # cp /usr/local/ssl/include/openssl/* /usr/include/openssl/ # cp /usr/include/db1/db.h /usr/include/ # echo "/usr/local/mysql/lib/mysql" >> /etc/ld.so.conf # /sbin/ldconfig -v | grep libmysqlclient # ./configure --enable-anon --enable-plain --enable-login --enable-sql \ --disable-krb4 --disable-otp --disable-cram --disable-digest \ --with-mysql=/usr/local/mysql/lib/mysql --without-pam --without-saslauthd \ --without-pwcheck --prefix=/usr --with-plugindir=/usr/lib/sasl2 # make -j2 # make install

- Postfix

# wget ftp://ftp.reverse.net/pub/postfix/official/postfix-2.7.0.tar.gz # cp /usr/local/ssl/include/openssl/* /usr/include/openssl/ # ln -s ./libssl.so.0.9.8 ./libssl.so # ln -s ./libdb.so.2 ./libdb.so # ln -s ./libcrypto.so.0.9.8 ./libcrypto.so # make makefiles 'CCARGS=-DHAS_MYSQL -I/usr/local/mysql/include/mysql -DUSE_SASL_AUTH -DUSE_TLS -DUSE_CYRUS_SASL -I/usr /include/sasl' 'AUXLIBS=-L/usr/local/mysql/lib/mysql -lmysqlclient -lz -lm -L/usr/lib64 -lssl -lcrypto -lsasl2' # make && make install

Generate SSL for Postfix

# cd /etc/ssl # openssl req -new -x509 -nodes -out smtpd.pem -keyout smtpd.pem -days 3650

Edit Postfix main.cf

# cd /etc/postfix # cp main.cf main.cf-ori # nano main.cf

mynetworks_style = host smtpd_banner = $myhostname ESMTP $mail_name ($mail_version) (Mail Server Q) unknown_local_recipient_reject_code = 450 smtp-filter_destination_concurrency_limit = 2 lmtp-filter_destination_concurrency_limit = 2 data_directory = /var/lib/postfix

mydomain = lordofbandwidth.com myhostname = $mydomain mynetworks = 208.99.198.183;127.0.0.1 smtpd_sasl_local_domain = smtpd_sasl_auth_enable = yes smtpd_sasl_security_options = noanonymous broken_sasl_auth_clients = yes smtpd_recipient_restrictions = permit_sasl_authenticated, permit_mynetworks, check_relay_domains,reject _unauth_destination internet_interface = all alias_maps = hash:/etc/aliases smtpd_tls_auth_only = no smtp_use_tls = yes smtpd_use_tls = yes smtp_tls_note_starttls_offer = yes smtpd_tls_key_file = /etc/postfix/ssl/smtpd.key smtpd_tls_cert_file = /etc/postfix/ssl/smtpd.crt smtpd_tls_CAfile = /etc/postfix/ssl/cacert.pem smtpd_tls_loglevel = 1 smtpd_tls_received_header = yes smtpd_tls_session_cache_timeout = 3600s tls_random_source = dev:/dev/urandom readme_directory = no sample_directory = /etc/postfix sendmail_path = /usr/sbin/sendmail html_directory = no setgid_group = postdrop command_directory = /usr/sbin manpage_directory = /usr/local/man daemon_directory = /usr/libexec/postfix newaliases_path = /usr/bin/newaliases mailq_path = /usr/bin/mailq queue_directory = /var/spool/postfix mail_owner = postfix virtual_maps = hash:/etc/postfix/virtual virtual_gid_maps = static:125 virtual_mailbox_limit = 112400000 virtual_mailbox_maps = hash:/etc/postfix/virtual_mailbox virtual_minimum_uid = 125 virtual_transport = virtual virtual_uid_maps = static:125 sender_canonical_maps = hash:/etc/postfix/sender_canonical

Edit /etc/postfix/virtual

# nano /etc/postfix/virtual lordofbandwidth.com virtual user@lordofbandwidth.com user

unix-shell.org virtual admin@unix-shell.org admin

# nano /etc/postfix/virtual_mailbox user@lordofbandwidth.com user admin@unix-shell.org admin

# nano /etc/postfix/sender_canonical user user@lordofbandwidth.com admin admin@unix-shell.org

Tagged as: imap, Linux, mail server, opensuse, postfix, squirrelmail, x86_64

3
Mar/100

BIND Master Slave @ Opensuse 11.1 x86_64

BIND Version version: 9.7.0

ns1 IP Address : 208.99.198.183
ns2 IP Address : 208.99.198.179

- Instalation

# wget ftp://ftp.nominum.com/pub/isc/bind9/9.7.0/bind-9.7.0.tar.gz
# tar -zxvf bind-9.7.0.tar.gz
# make && make install

- Configure ns1 primary name server

# rndc-confgen -a -k rndc-key -b 256
# cat /etc/rndc.key
key "rndc-key" {
algorithm hmac-md5;
secret "77yB4b3HtL7iz4r4n1R5xmaUlDx5sCNOcxEv6TvgQTo=";
};
# nano /etc/named.conf
key "rndc-key" {
algorithm hmac-md5;
secret "77yB4b3HtL7iz4r4n1R5xmaUlDx5sCNOcxEv6TvgQTo=";
};
controls {
inet 127.0.0.1 port 953
allow { 127.0.0.1; } keys { "rndc-key"; };
};
options {
directory "/var/lib/named";
allow-transfer { 208.99.198.179; };
notify no;
};

zone "ervan.com" in {
type master;
file "ervan.com";
};

zone "198.99.208.in-addr.arpa" in {
type master;
file "198.99.208";
};
# nano /var/lib/named/ervan.com
$TTL 1W
@               IN SOA  @   root (
42              ; serial (d. adams)
2D              ; refresh
4H              ; retry
6W              ; expiry
1W )            ; minimum

ervan.com.      IN NS           ns1.ervan.com.
ervan.com.      IN NS           ns2.ervan.com.
IN MX           10 mail.ervan.com.
IN A            208.99.198.183
ns1             IN A            208.99.198.183
ns2             IN A            208.99.198.179
www             IN A            208.99.198.183
ftp             IN A            208.99.198.183
mail            IN A            208.99.198.183
# nano /var/lib/named/198.99.208
@               IN SOA          localhost.   root.localhost. (
42              ; serial (d. adams)
2D              ; refresh
4H              ; retry
6W              ; expiry
1W )            ; minimum

IN NS           ns1.ervan.com.
IN NS           ns2.ervan.com.
183           IN PTR          ns1.ervan.com.
179           IN PTR          ns2.ervan.com.

# service named start

- Configure ns2 as secondary name server

# nano /etc/named.conf
key "rndc-key" {
algorithm hmac-md5;
secret "77yB4b3HtL7iz4r4n1R5xmaUlDx5sCNOcxEv6TvgQTo=";
};
options {
directory "/var/lib/named";
allow-query { 208.99.198.183;127.0.0.1; };
allow-transfer { 208.99.198.183; };
transfer-format many-answers;
notify no;
};

zone "ervan.com" in {
type slave;
file "ervan.com";
masters { 208.99.198.183; };
};

zone "198.99.208.in-addr.arpa" in {
type slave;
file "198.99.208";
masters { 208.99.198.183; };
};

# chmod 777 /var/lib/named/
# service named start

- Test Result
Bind master slave is success if 2 files (198.99.208 & ervan.com) are appears in /var/lib/named at ns2(slave).
That 2 files (*on ns2) is auto transfered and updated from ns1 if named restarted or refreshed.
you can see log file in /var/log/message at ns2
this is my log file in my ns2 :

Mar  3 07:43:04 chai named[28605]: zone 198.99.208.in-addr.arpa/IN: Transfer started.
Mar  3 07:43:04 chai named[28605]: transfer of '198.99.208.in-addr.arpa/IN' from 208.99.198.183#53: connected using 208.99.198.179#43600
Mar  3 07:43:04 chai named[28605]: zone 198.99.208.in-addr.arpa/IN: transferred serial 42
Mar  3 07:43:04 chai named[28605]: transfer of '198.99.208.in-addr.arpa/IN' from 208.99.198.183#53: Transfer completed: 1 messages, 6 records, 208 bytes, 0.002 secs (104000 bytes/sec)
Mar  3 07:43:05 chai named[28605]: zone ervan.com/IN: Transfer started.
Mar  3 07:43:05 chai named[28605]: transfer of 'ervan.com/IN' from 208.99.198.183#53: connected using 208.99.198.179#35713
Mar  3 07:43:05 chai named[28605]: zone ervan.com/IN: transferred serial 42
Mar  3 07:43:05 chai named[28605]: transfer of 'ervan.com/IN' from 208.99.198.183#53: Transfer completed: 1 messages, 11 records, 265 bytes, 0.001 secs (265000 bytes/sec)

ervan:~ # dig www.ervan.com

; <<>> DiG 9.7.0 <<>> www.ervan.com
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 33334
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 2

;; QUESTION SECTION:
;www.ervan.com.                 IN      A

;; ANSWER SECTION:
www.ervan.com.          604800  IN      A       208.99.198.183

;; AUTHORITY SECTION:
ervan.com.              604800  IN      NS      ns1.ervan.com.
ervan.com.              604800  IN      NS      ns2.ervan.com.

;; ADDITIONAL SECTION:
ns1.ervan.com.          604800  IN      A       208.99.198.183
ns2.ervan.com.          604800  IN      A       208.99.198.179

;; Query time: 0 msec
;; SERVER: 208.99.198.183#53(208.99.198.183)
;; WHEN: Wed Mar  3 09:34:18 2010
;; MSG SIZE  rcvd: 115

Filed under: Linux

No Comments

3
Aug/090