Install/iRedMail/FreeBSD/Jail - Revision history

ZhangHuangbin: /* Chapter 2: Installing iRedMail in jail */

ZhangHuangbin — Fri, 03 Dec 2010 00:23:48 GMT

Chapter 2: Installing iRedMail in jail

← Older revision		Revision as of 00:23, 3 December 2010
Line 265:		Line 265:
	Enter "y" key on keyboard and wait for next question:		Enter "y" key on keyboard and wait for next question:

-	~~[code]~~- install -o root -g wheel -m 555 /var/ports/basejail/usr/ports/mail/postfix26/work/postfix-2.6.7/auxiliary/rmail/rmail /usr/local/bin/rmail	+	{{cmd\|<pre>- install -o root -g wheel -m 555 /var/ports/basejail/usr/ports/mail/postfix26/work/postfix-2.6.7/auxiliary/rmail/rmail /usr/local/bin/rmail
	install -o root -g wheel -m 555 /var/ports/basejail/usr/ports/mail/postfix26/work/postfix-2.6.7/auxiliary/qshape/qshape.pl /usr/local/bin/qshape		install -o root -g wheel -m 555 /var/ports/basejail/usr/ports/mail/postfix26/work/postfix-2.6.7/auxiliary/qshape/qshape.pl /usr/local/bin/qshape
	install -o root -g wheel -m 444 /var/ports/basejail/usr/ports/mail/postfix26/work/postfix-2.6.7/man/man1/qshape.1 /usr/local/man/man1		install -o root -g wheel -m 444 /var/ports/basejail/usr/ports/mail/postfix26/work/postfix-2.6.7/man/man1/qshape.1 /usr/local/man/man1
-	Would you like to activate Postfix in /etc/mail/mailer.conf [n]?[/~~code]~~	+	Would you like to activate Postfix in /etc/mail/mailer.conf [n]?</pre>}}

	Enter "y" key on keyboard and wait for finish installation of postfix. Next step is edit .iRedMail.installation.status file with command:		Enter "y" key on keyboard and wait for finish installation of postfix. Next step is edit .iRedMail.installation.status file with command:
-	~~[code]~~ee /root/iRedMail-0.6.1/.iRedMail.installation.status[/~~code]~~	+	{{cmd\|<pre>ee /root/iRedMail-0.6.1/.iRedMail.installation.status</pre>}}

	Add below line at end of file		Add below line at end of file
-	~~[code]~~export status_install_port_mailpostfix26='DONE'[/~~code]~~	+	{{cmd\|<pre>export status_install_port_mailpostfix26='DONE'</pre>}}

	Start installation script again:		Start installation script again:
-	~~[code]~~bash /root/iRedMail-0.6.1/iRedMail.sh[/~~code]~~	+	{{cmd\|<pre>bash /root/iRedMail-0.6.1/iRedMail.sh</pre>}}

	6. When installation is finished don't start postfix:		6. When installation is finished don't start postfix:

ZhangHuangbin: /* Chapter 1: Setup network */

ZhangHuangbin — Fri, 03 Dec 2010 00:22:30 GMT

Chapter 1: Setup network

← Older revision		Revision as of 00:22, 3 December 2010
Line 93:		Line 93:

	5. Setup pf rules. If You haven't /etc/pf.conf file then create file with command:		5. Setup pf rules. If You haven't /etc/pf.conf file then create file with command:
-	~~[code]~~touch /etc/pf.conf[/~~code]~~	+	{{cmd\|<pre># touch /etc/pf.conf</pre>}}

	And now edit pf.conf file:		And now edit pf.conf file:
-	~~[code]~~ee /etc/pf.conf[/~~code]~~	+	{{cmd\|<pre>ee /etc/pf.conf</pre>}}

	6. Add this lines to Your pf.conf:		6. Add this lines to Your pf.conf:
-	~~[code]~~# Ports forwarding. Uncomment services which You will be using.	+	{{cmd\|<pre># Ports forwarding. Uncomment services which You will be using.
	rdr pass on em0 proto tcp from any to em0 port 80 -> 192.168.1.1 port 80 # Apache (Roundcube, phpMyAdmin, PostfixAdmin)		rdr pass on em0 proto tcp from any to em0 port 80 -> 192.168.1.1 port 80 # Apache (Roundcube, phpMyAdmin, PostfixAdmin)
	rdr pass on em0 proto tcp from any to em0 port 443 -> 192.168.1.1 port 443 # Apache SSL (Roundcube, phpMyAdmin, PostfixAdmin)		rdr pass on em0 proto tcp from any to em0 port 443 -> 192.168.1.1 port 443 # Apache SSL (Roundcube, phpMyAdmin, PostfixAdmin)
Line 110:		Line 110:

	# NAT		# NAT
-	nat on em0 from 192.168.1.0/24 to any -> 188.256.256.256[/~~code]~~	+	nat on em0 from 192.168.1.0/24 to any -> 188.256.256.256</pre>}}

	7. Start/restart pf with command:		7. Start/restart pf with command:
-	~~[code]~~/etc/rc.d/pf restart[/~~code]~~	+	{{cmd\|<pre>/etc/rc.d/pf restart</pre>}}

	8. Edit jail's rc.conf file with command:		8. Edit jail's rc.conf file with command:
-	~~[code]~~ee /path/to/your/jail/etc/rc.conf[/~~code]~~	+	{{cmd\|<pre>ee /path/to/your/jail/etc/rc.conf</pre>}}
	Path to Your jail You added on jail install with ezjail.		Path to Your jail You added on jail install with ezjail.

	9. You must make some changes in jail's rc.conf file:		9. You must make some changes in jail's rc.conf file:
-	~~[code]~~# Network settings	+	{{cmd\|<pre># Network settings
	defaultrouter="188.256.256.256"		defaultrouter="188.256.256.256"
	early_late_divider="NETWORKING"		early_late_divider="NETWORKING"
	ifconfig_em0="inet 192.168.1.1 netmask 255.255.255.255 alias"		ifconfig_em0="inet 192.168.1.1 netmask 255.255.255.255 alias"
-	hostname="mail.example.com"[/~~code]~~	+	hostname="mail.example.com"</pre>}}

	10. Restart iRedMail jail with command:		10. Restart iRedMail jail with command:
-	~~[code]~~/usr/local/etc/rc.d/ezjail restart mail.example.com[/~~code]~~	+	{{cmd\|<pre>/usr/local/etc/rc.d/ezjail restart mail.example.com</pre>}}

	11. Make some test of network connection. In first step You must connect to jail. Check jails installed on Your machine with command:		11. Make some test of network connection. In first step You must connect to jail. Check jails installed on Your machine with command:
-	~~[code]~~jls~~[/code]~~	+	{{cmd\|<pre># jls
-	~~Results:~~	+	JID IP Address Hostname Path
-	~~[code]~~JID IP Address Hostname Path	+
	2 192.168.1.1 mail.example.com /home/jails/mail.example.com		2 192.168.1.1 mail.example.com /home/jails/mail.example.com
	3 192.168.1.3 dupa.com /home/jails/dupa.com		3 192.168.1.3 dupa.com /home/jails/dupa.com
-	6 192.168.1.2 duza-dupa.com /home/jails/duza-dupa.com[/~~code]~~	+	6 192.168.1.2 duza-dupa.com /home/jails/duza-dupa.com</pre>}}

	iRedMail jail have JID 2, so we run command:		iRedMail jail have JID 2, so we run command:
-	~~[code]~~jexec 2 csh[/~~code]~~	+	{{cmd\|<pre># jexec 2 csh</pre>}}

	12. Test connection on jail with pinging host FreeBSD.org and IP adress of this host (if DNS don't working) with commands:		12. Test connection on jail with pinging host FreeBSD.org and IP adress of this host (if DNS don't working) with commands:
-	~~[code]~~ping 69.147.83.40[/~~code]~~	+	{{cmd\|<pre># ping 69.147.83.40</pre>}}
	Results:		Results:
-	~~[code]~~PING 69.147.83.40 (69.147.83.40): 56 data bytes	+	{{cmd\|<pre>PING 69.147.83.40 (69.147.83.40): 56 data bytes
	64 bytes from 69.147.83.40: icmp_seq=0 ttl=54 time=151.446 ms		64 bytes from 69.147.83.40: icmp_seq=0 ttl=54 time=151.446 ms
	64 bytes from 69.147.83.40: icmp_seq=1 ttl=54 time=148.320 ms		64 bytes from 69.147.83.40: icmp_seq=1 ttl=54 time=148.320 ms
Line 150:		Line 149:
	--- 69.147.83.40 ping statistics ---		--- 69.147.83.40 ping statistics ---
	3 packets transmitted, 3 packets received, 0.0% packet loss		3 packets transmitted, 3 packets received, 0.0% packet loss
-	round-trip min/avg/max/stddev = 148.181/149.316/151.446/1.507 ms[/~~code]~~	+	round-trip min/avg/max/stddev = 148.181/149.316/151.446/1.507 ms</pre>}}

	Network is working. Now we check our DNS with command:		Network is working. Now we check our DNS with command:
-	~~[code]~~ping freebsd.org[/~~code]~~	+	{{cmd\|<pre>ping freebsd.org</pre>}}

	Results:		Results:
-	~~[code]~~PING freebsd.org (69.147.83.40): 56 data bytes	+	{{cmd\|<pre>PING freebsd.org (69.147.83.40): 56 data bytes
	64 bytes from 69.147.83.40: icmp_seq=0 ttl=54 time=150.721 ms		64 bytes from 69.147.83.40: icmp_seq=0 ttl=54 time=150.721 ms
	64 bytes from 69.147.83.40: icmp_seq=1 ttl=54 time=149.631 ms		64 bytes from 69.147.83.40: icmp_seq=1 ttl=54 time=149.631 ms
Line 163:		Line 162:
	--- freebsd.org ping statistics ---		--- freebsd.org ping statistics ---
	3 packets transmitted, 3 packets received, 0.0% packet loss		3 packets transmitted, 3 packets received, 0.0% packet loss
-	round-trip min/avg/max/stddev = 149.631/151.071/152.862/1.342 ms[/~~code]~~	+	round-trip min/avg/max/stddev = 149.631/151.071/152.862/1.342 ms</pre>}}

	All is working. Now we quit from jail with command:		All is working. Now we quit from jail with command:
-	~~[code]~~exit~~[/code]~~	+	{{cmd\|<pre>exit
-	~~Results:~~	+	mail# exit
-	~~[code]~~mail# exit	+
	exit		exit
-	#[/~~code]~~	+	#</pre>}}

	If all is okay You can go to next chapter, if don't then setup Your network correctly.		If all is okay You can go to next chapter, if don't then setup Your network correctly.
-

	= Chapter 2: Installing iRedMail in jail =		= Chapter 2: Installing iRedMail in jail =

ZhangHuangbin: /* What You must know about jail */

ZhangHuangbin — Thu, 18 Nov 2010 03:08:32 GMT

What You must know about jail

← Older revision		Revision as of 03:08, 18 November 2010
Line 13:		Line 13:

	== What You must know about jail ==		== What You must know about jail ==
-	~~Before install~~ read FreeBSD ~~Handbook~~ and ~~Wiki:~~	+	Please read FreeBSD handbook and wiki before we go further, make sure you understand what Jail is and what it's used for.
	* http://www.freebsd.org/doc/handbook/jails.html		* http://www.freebsd.org/doc/handbook/jails.html
	* http://en.wikipedia.org/wiki/FreeBSD_jail		* http://en.wikipedia.org/wiki/FreeBSD_jail

ZhangHuangbin: /* Chapter 3: Moving iRedMail to jail */

ZhangHuangbin — Thu, 18 Nov 2010 03:04:30 GMT

Chapter 3: Moving iRedMail to jail

← Older revision		Revision as of 03:04, 18 November 2010
Line 357:		Line 357:
	First Install iRedMail as Chapter 1 and 2. Next step - update only this what You need.		First Install iRedMail as Chapter 1 and 2. Next step - update only this what You need.

-	~~[b]~~What You must update?~~[/b]~~	+	'''What You must update?'''
-	1. Copy old vmail dir to new vmail dir in JAIL	+
-	2. Check permission in vmail dir (/var/mail for me)	+	* Copy old vmail dir to new vmail dir in JAIL
-	~~[code]~~ls -l /var/vmail/	+	* Check permission in vmail dir (/var/mail for me)
		+	{{cmd\|<pre>
		+	# ls -l /var/vmail/
	total 4		total 4
	drwx------ 4 vmail vmail 512 Nov 12 22:18 sieve		drwx------ 4 vmail vmail 512 Nov 12 22:18 sieve
-	drwx------ 10 vmail vmail 512 Nov 9 16:06 vmail1[/~~code]~~	+	drwx------ 10 vmail vmail 512 Nov 9 16:06 vmail1
		+	</pre>}}
		+
	If You haven't owner vmail:vmail then setup this with command:		If You haven't owner vmail:vmail then setup this with command:
-	~~[code]~~# chown -R vmail:vmail /var/vmail[/~~code]~~	+	{{cmd\|<pre>
		+	# chown -R vmail:vmail /var/vmail
		+	</pre>}}

-	3. Export from older MySQL tables in vmail database and import to newer. If You changing dir of vmail run this command in phpMyAdmin:	+	* Export from older MySQL tables in vmail database and import to newer. If You changing dir of vmail run this command in phpMyAdmin:
-	~~[code]~~UPDATE mailbox SET storagebasedirectory='/var/vmail' WHERE storagebasedirectory='/home/vmail';~~[/code]~~	+	** /var/vmail - my new vmail dir
-	/~~var/vmail - my new vmail dir~~	+	** /home/vmail - my old vmail dir
-	~~/home/vmail - my old vmail dir~~	+	{{cmd\|<pre>
		+	mysql> UPDATE mailbox SET storagebasedirectory='/var/vmail' WHERE storagebasedirectory='/home/vmail';
		+	</pre>}}

ZhangHuangbin: /* System requirement */

ZhangHuangbin — Thu, 18 Nov 2010 03:02:18 GMT

System requirement

← Older revision		Revision as of 03:02, 18 November 2010
Line 20:		Line 20:
	* pf (firewall) compiled in kernel. If You haven't pf then add this lines to Your kernel configuration:		* pf (firewall) compiled in kernel. If You haven't pf then add this lines to Your kernel configuration:
	{{cfg\|\|<pre>		{{cfg\|\|<pre>
-	]device pf	+	device pf
	options ALTQ		options ALTQ
	options ALTQ_CBQ # Class Bases Queuing (CBQ)		options ALTQ_CBQ # Class Bases Queuing (CBQ)

ZhangHuangbin: /* Chapter 2: Installing iRedMail in jail */

ZhangHuangbin — Thu, 18 Nov 2010 03:01:12 GMT

Chapter 2: Installing iRedMail in jail

← Older revision		Revision as of 03:01, 18 November 2010
Line 324:		Line 324:

	Add this line:		Add this line:
-	{{~~cmd~~\|<pre>	+	{{cfg\|amavisd.conf\|<pre>
	@inet_acl = qw( 192.168.1.1 );		@inet_acl = qw( 192.168.1.1 );
	</pre>}}		</pre>}}

ZhangHuangbin: /* Chapter 2: Installing iRedMail in jail */

ZhangHuangbin — Thu, 18 Nov 2010 02:59:37 GMT

Chapter 2: Installing iRedMail in jail

← Older revision		Revision as of 02:59, 18 November 2010
Line 283:		Line 283:

	6. When installation is finished don't start postfix:		6. When installation is finished don't start postfix:
-	~~[code]~~*************************************************************************	+	{{cmd\|<pre>
		+	*************************************************************************
	* iRedMail-0.6.1 installation and configuration complete.		* iRedMail-0.6.1 installation and configuration complete.
	*************************************************************************		*************************************************************************

-	< Question > Would you like to start postfix now? [y\|N][/~~code]~~	+	< Question > Would you like to start postfix now? [y\|N]
		+	</pre>}}

	Enter "n" key on Your keyboard.		Enter "n" key on Your keyboard.

	7. Edit apache22/Includes/phpmyadmin.conf file with command:		7. Edit apache22/Includes/phpmyadmin.conf file with command:
-	~~[code]~~ee /usr/local/apache22/Includes/phpmyadmin.conf[/~~code]~~	+	{{cmd\|<pre>
		+	# ee /usr/local/apache22/Includes/phpmyadmin.conf
		+	</pre>}}

	Uncomment lines:		Uncomment lines:
-	~~[code]~~Alias /phpmyadmin "/usr/local/www/phpMyAdmin"	+	{{cmd\|<pre>
-	Alias /mysql "/usr/local/www/phpMyAdmin"[/~~code]~~	+	Alias /phpmyadmin "/usr/local/www/phpMyAdmin"
		+	Alias /mysql "/usr/local/www/phpMyAdmin"
		+	</pre>}}

	8. Start apache22 and mysql-server with commands:		8. Start apache22 and mysql-server with commands:
-	~~[code]~~/usr/local/etc/rc.d/apache22 start~~[/code]~~	+	{{cmd\|<pre>
-	~~[code]~~/usr/local/etc/rc.d/mysql-server start[/~~code]~~	+	# /usr/local/etc/rc.d/apache22 start
		+	# /usr/local/etc/rc.d/mysql-server start
		+	</pre>}}

-	9. Open phpMyAdmin in web browser with url: ~~[url]~~http://mail.example.com/mysql~~[/url]~~ and log in.	+	9. Open phpMyAdmin in web browser with url: http://mail.example.com/mysql and log in.

	10. Go to MySQL Permissions (I haven't eng version I dont know how its called) and add IP 192.168.1.1 to user 'vmail'.		10. Go to MySQL Permissions (I haven't eng version I dont know how its called) and add IP 192.168.1.1 to user 'vmail'.

	11. Edit postfix26/master.cf file with command:		11. Edit postfix26/master.cf file with command:
-	~~[code]~~ee /usr/local/etc/postfix26/master.cf[/~~code]~~	+	{{cmd\|<pre># ee /usr/local/etc/postfix26/master.cf</pre>}}

	Change one line for jail ip:		Change one line for jail ip:
-	~~[code]~~ -o mynetworks=192.168.1.1[/~~code]~~	+	{{cmd\|<pre> -o mynetworks=192.168.1.1</pre>}}

	12. Edit amavisd.conf with command:		12. Edit amavisd.conf with command:
-	~~[code]~~ee /usr/local/etc/amavisd.conf [/~~code]~~	+	{{cmd\|<pre># ee /usr/local/etc/amavisd.conf</pre>}}

	Add this line:		Add this line:
-	~~[code]~~@inet_acl = qw( 192.168.1.1 );[/~~code]~~	+	{{cmd\|<pre>
		+	@inet_acl = qw( 192.168.1.1 );
		+	</pre>}}

	13. If You want using awstats edit awstats.conf:		13. If You want using awstats edit awstats.conf:

ZhangHuangbin: /* Chapter 2: Installing iRedMail in jail */

ZhangHuangbin — Thu, 18 Nov 2010 02:56:47 GMT

Chapter 2: Installing iRedMail in jail

← Older revision		Revision as of 02:56, 18 November 2010
Line 319:		Line 319:

	13. If You want using awstats edit awstats.conf:		13. If You want using awstats edit awstats.conf:
-	~~[code]~~ee /usr/local/etc/apache22/Includes/awstats.conf[/~~code]~~	+	{{cmd\|<pre>
		+	# ee /usr/local/etc/apache22/Includes/awstats.conf
		+	</pre>}}

	You must make some changes (installation script have errors) on first lines:		You must make some changes (installation script have errors) on first lines:
-	~~[code]#~~	+	{{cfg\|\|<pre>
-	~~# File generated by iRedMail (2010.11.09.12.00.01):~~	+
-	#	+
-	~~# Version: 0.6.1~~	+
-	~~# Project: [url]http://www.iredmail.org/[/url]~~	+
-	#	+
-	~~# Community: [url]http://www.iredmail.org/forum/[/url]~~	+
-	#	+
-		+
	# Note: Please refer to /usr/local/etc/apache22/extra/httpd-ssl.conf for SSL/TLS setting.		# Note: Please refer to /usr/local/etc/apache22/extra/httpd-ssl.conf for SSL/TLS setting.

Line 345:		Line 339:

	AuthName "Authorization Required"		AuthName "Authorization Required"
-	AuthType Basic[/~~code]~~	+	AuthType Basic
		+	</pre>}}

-	Now go to web browser: ~~[url]~~http://mail.example.com/awstats,~~[/url]~~ it's should ~~be working~~.	+	Now go to web browser: http://mail.example.com/awstats, it should work.

	= Chapter 3: Moving iRedMail to jail =		= Chapter 3: Moving iRedMail to jail =

ZhangHuangbin: /* Chapter 2: Installing iRedMail in jail */

ZhangHuangbin — Thu, 18 Nov 2010 02:55:16 GMT

Chapter 2: Installing iRedMail in jail

← Older revision		Revision as of 02:55, 18 November 2010
Line 223:		Line 223:
	{{cmd\|<pre>		{{cmd\|<pre>
	[src/util]		[src/util]
-	cc -DDEF_CONFIG_DIR=\"/usr/local/etc/postfix\" -DDEF_DAEMON_DIR=\"/usr/local/libexec/postfix\" -DDEF_COMMAND_DIR=\"/usr/local/sbin\" -DDEF_SENDMAIL_PATH=\"/usr/local/sbin/sendmail\" -DDEF_NEWALIAS_PATH=\"/usr/local/bin/newaliases\" -DDEF_MAILQ_PATH=\"/usr/local/bin/mailq\" -DDEF_MANPAGE_DIR=\"/usr/local/man\" -DDEF_README_DIR=\"/usr/local/share/doc/postfix\" -DDEF_HTML_DIR=\"/usr/local/share/doc/postfix\" -DDEF_QUEUE_DIR=\"/var/spool/postfix\" -DDEF_DATA_DIR=\"/var/db/postfix\" -DDEF_MAIL_OWNER=\"postfix\" -DDEF_SGID_GROUP=\"maildrop\" -DHAS_PCRE -I/usr/local/include -DUSE_SASL_AUTH -DDEF_SERVER_SASL_TYPE=\"dovecot\" -DUSE_TLS -I/usr/include -I/usr/local/include/db46 -DHAS_MYSQL -I/usr/local/include/mysql -DHAS_LDAP -I/usr/local/include -DHAS_CDB -I/usr/local/include NO -O2 -fno-strict-aliasing -pipe -DLDAP_DEPRECATED -I. -DFREEBSD8 -c alldig.c	+	cc -DDEF_CONFIG_DIR=\"/usr/local/etc/postfix\" -DDEF_DAEMON_DIR=\"/usr/local/libexec/postfix\"
		+	-DDEF_COMMAND_DIR=\"/usr/local/sbin\" -DDEF_SENDMAIL_PATH=\"/usr/local/sbin/sendmail\"
		+	-DDEF_NEWALIAS_PATH=\"/usr/local/bin/newaliases\" -DDEF_MAILQ_PATH=\"/usr/local/bin/mailq\"
		+	-DDEF_MANPAGE_DIR=\"/usr/local/man\" -DDEF_README_DIR=\"/usr/local/share/doc/postfix\"
		+	-DDEF_HTML_DIR=\"/usr/local/share/doc/postfix\" -DDEF_QUEUE_DIR=\"/var/spool/postfix\"
		+	-DDEF_DATA_DIR=\"/var/db/postfix\" -DDEF_MAIL_OWNER=\"postfix\" -DDEF_SGID_GROUP=\"maildrop\"
		+	-DHAS_PCRE -I/usr/local/include -DUSE_SASL_AUTH -DDEF_SERVER_SASL_TYPE=\"dovecot\" -DUSE_TLS
		+	-I/usr/include -I/usr/local/include/db46 -DHAS_MYSQL -I/usr/local/include/mysql -DHAS_LDAP
		+	-I/usr/local/include -DHAS_CDB -I/usr/local/include NO -O2 -fno-strict-aliasing -pipe -DLDAP_DEPRECATED
		+	-I. -DFREEBSD8 -c alldig.c
	cc: NO: No such file or directory		cc: NO: No such file or directory
	*** Error code 1		*** Error code 1

ZhangHuangbin: /* Chapter 2: Installing iRedMail in jail */

ZhangHuangbin — Thu, 18 Nov 2010 02:54:01 GMT

Chapter 2: Installing iRedMail in jail

← Older revision		Revision as of 02:54, 18 November 2010
Line 185:		Line 185:
	3 192.168.1.3 dupa.com /home/jails/dupa.com		3 192.168.1.3 dupa.com /home/jails/dupa.com
	6 192.168.1.2 duza-dupa.com /home/jails/duza-dupa.com		6 192.168.1.2 duza-dupa.com /home/jails/duza-dupa.com
-	</pre>}	+	</pre>}}

	iRedMail jail have JID 2, so we run command:		iRedMail jail have JID 2, so we run command: