Cai Dat Isp3 Centos

8/13/2019 Cai Dat Isp3 Centos

1/23

cd /tmp wget http://www.ispconfig...3-stable.tar.gz tar xvfz ISPConfig-3-stable.tar.gz cd ispconfig3_install/install

php -q update.php

http://www.ispconfig.org/files/file/2-ispconfig/

http://nguoibaclieu.com/diendan/threads/thiet-lap-may-chu-ubuntu-11-10-va-cai-dat-ispconfig-3.3577/

1. 4. L y quy n root Sau khi reboot, b n c th ng nh p v i ti kho n v a to ra(administrator). B i v bn cn ch y nh ng dng l nh ti p theo v i quy nroot nn c n thm t sudo sau m i lnh, ho c tr thnh root ngay by gi :sudo suBn cng c th kch ho t ng nh p root b ng cch ch y lnh:

sudo passwd root V to ra m t m t kh u root. Sau bn c th ng nh p tr c tip v iquy n root. Tuy nhin iu ny khng c khuy n co t cc nh phttri n v c ng ng Ubuntu b i nhi u l do.

5. Ci t SSH Server (ty ch n khng b t bu c) Nu bn khng ci t OpenSSH server trong qu trnh ci t, b n c th ci b ng lnh:apt-get install ssh openssh-server T y bn c th dng ch ng trnh SSH Client nh PuTTY k t ni t my tr m ti Ubuntu 11.10 Server v ti p tc cc bc tip theo.

6. Ci t vim-nox (khng b t bu c) Do chng ti s dng vi l ch ng trnh text editor. Nh ng theo m c nh, vi to mt s hnh ng l v i Ubuntu v Debian, sa li ny ta c n ci vim-nox:pt-get install vim-nox (Bn khng c n ci vim-nox n u bn s dng joe hay nano ).
http://www.ispconfig.org/downloads/ISPConfig-3-stable.tar.gzhttp://www.ispconfig.org/downloads/ISPConfig-3-stable.tar.gzhttp://www.ispconfig.org/downloads/ISPConfig-3-stable.tar.gzhttp://www.ispconfig.org/files/file/2-ispconfig/http://www.ispconfig.org/files/file/2-ispconfig/http://nguoibaclieu.com/diendan/threads/thiet-lap-may-chu-ubuntu-11-10-va-cai-dat-ispconfig-3.3577/http://nguoibaclieu.com/diendan/threads/thiet-lap-may-chu-ubuntu-11-10-va-cai-dat-ispconfig-3.3577/http://nguoibaclieu.com/diendan/threads/thiet-lap-may-chu-ubuntu-11-10-va-cai-dat-ispconfig-3.3577/http://nguoibaclieu.com/diendan/threads/thiet-lap-may-chu-ubuntu-11-10-va-cai-dat-ispconfig-3.3577/http://nguoibaclieu.com/diendan/threads/thiet-lap-may-chu-ubuntu-11-10-va-cai-dat-ispconfig-3.3577/http://www.ispconfig.org/files/file/2-ispconfig/http://www.ispconfig.org/downloads/ISPConfig-3-stable.tar.gz


2/23

7. C u hnh network: Bi v trnh ci t Ubuntu cu hnh h thng c cc thi t lp m ngthng qua DHCP, m ta c n m t a ch IP t nh nn s cu hnh l i/etc/network/interfaces v iu ch nh n u cn. V d chng ta c a ch

IP 192.168.0.100 :vi /etc/network/interfaces

M:

# This file describes the network interfaces available on your system# and how to activate them. For more information, see interfaces(5).

# The loopback network interfaceauto loiface lo inet loopback

# The primary network interfaceauto eth0

iface eth0 inet staticaddress 192.168.0.100netmask 255.255.255.0network 192.168.0.0broadcast 192.168.0.255gateway 192.168.0.1

Khi ng li mng: /etc/init.d/networking restart Ch nh s a /etc/hosts nh sau:vi /etc/hosts

By gi chy: echo nhim.vn > /etc/hostname/etc/init.d/hostname restart Sau ch y tip:hostnamehostname -f C hai s hin th server1.example.com .

8. Ch nh s a /etc/apt/sources.list v c p nh tLinux

Sa li /etc/apt/sources.list . Cho a ci t vo, ch c chnrng universe v multiverse repositories c bt:vi /etc/apt/sources.list M:#

# deb cdrom:[Ubuntu-Server 11.10 _Oneiric Ocelot_ - Release amd64 (20111011)]/dists/oneiric/main/binary-i386/


3/23


4/23

deb-src http://security.ubuntu.com/ubuntu oneiric-security multiverse

## Uncomment the following two lines to add software from Canonical's## 'partner' repository.## This software is not part of Ubuntu, but is offered by Canonical and the## respective vendors as a service to Ubuntu users.

# deb http://archive.canonical.com/ubuntu oneiric partner# deb-src http://archive.canonical.com/ubuntu oneiric partner

## Uncomment the following two lines to add software from Ubuntu's## 'extras' repository.## This software is not part of Ubuntu, but is offered by third-party## developers who want to ship their latest software.# deb http://extras.ubuntu.com/ubuntu oneiric main# deb-src http://extras.ubuntu.com/ubuntu oneiric main

Chy lnh: apt-get update

Cp nh

t c

s

d

liu c

a apt package:apt-get upgrade

Cui cng kh i ng li h thng:reboot

9. Thay i Shell m c nh /bin/sh l mt symlink t i /bin/dash , tuy nhin chng ta c n /bin/bash ch khngph i /bin/dash . V v y thay i n b ng lnh:dpkg-reconfigure dash Use dash as the default system shell (/bin/sh)?


5/23

Chng ta c th ci t ton b chng trnh ny b ng dng l nh:M:apt-get install postfix postfix-mysql postfix-doc mysql-client mysql-server courier-authdaemon courier-authlib-mysql courier-pop courier-pop-ssl courier-imap courier-imap-ssl libsasl2-2 libsasl2-modules libsasl2-modules-sql sasl2-bin libpam-mysql

openssl getmail4 rkhunter binutils maildropBn s nh n c nh ng cu h i sau:New password for the MySQL "root" user:


6/23

[...]

Sau t o li chng th :mkimapdcertmkpop3dcert Khi ng li Courier-IMAP-SSL v Courier-POP3-SSL:

/etc/init.d/courier-imap-ssl restart/etc/init.d/courier-pop-ssl restart

13. Ci t Amavisd-new, SpamAssassin, vClamav Bn s dng dng l nh sau ci t Amavisd-new, SpamAssassin, v Clamav:M:apt-get install amavisd-new spamassassin clamav clamav-daemon zoo unzip bzip2 arjnomarch lzop cabextract apt-listchanges libnet-ldap-perl libauthen-sasl-perl clamav-docs daemon libio-string-perl libio-socket-ssl-perl libnet-ident-perl zip libnet-dns-perl

ISPConfig 3 s dng Amavisd ti b lc SpamAssassin, chng ta c n cho d ng qu trnh ny gii phng RAM:/etc/init.d/spamassassin stopupdate-rc.d -f spamassassin remove

14. Ci t Apache2, PHP5, phpMyAdmin, FCGI,suExec, Pear, v mcrypt Apache2, PHP5, phpMyAdmin, FCGI, suExec, Pear, v mcrypt c th ci t d dng b ng lnhsau:M:apt-get install apache2 apache2.2-common apache2-doc apache2-mpm-prefork apache2-

utils libexpat1 ssl-cert libapache2-mod-php5 php5 php5-common php5-gd php5-mysqlphp5-imap phpmyadmin php5-cli php5-cgi libapache2-mod-fcgid apache2-suexec php-pearphp-auth php5-mcrypt mcrypt php5-imagick imagemagick libapache2-mod-suphp librubylibapache2-mod-ruby

Bn s th y hai cu h i:Web server to reconfigure automatically:


7/23

(iu ny ch cn thi t i v i nh ng file .rb ).Sau kh i ng li Apache:/etc/init.d/apache2 restart

15. Ci t PureFTPd v Quota

PureFTPd v Quota c th ci t bng lnh:apt-get install pure-ftpd-common pure-ftpd-mysql quota quotatool Sa li file /etc/default/pure-ftpd-common :vi /etc/default/pure-ftpd-common V m b o chc chn start mode c set l standalone v VIRTUALCHROOT=true :M:[...]STANDALONE_OR_INETD=standalone[...]VIRTUALCHROOT=true[...]

By gi chng ta c u h nh PureFTPd cho php FTP v TLS. B ng cch k t hp ph ng php

m ha TLS s lm cho giao th c FTP c an ton h n r t nhi u.echo 1 > /etc/pure-ftpd/conf/TLS s dng TLS, chng ta c n t o chng ch SSL. y chng ti s to trong /etc/ssl/private/ ,do c n t o th mc trc:mkdir -p /etc/ssl/private/ Tip theo t o chng ch SSL:M:openssl req -x509 -nodes -days 7300 -newkey rsa:2048 -keyout /etc/ssl/private/pure-ftpd.pem -out /etc/ssl/private/pure-ftpd.pem

Country Name (2 letter code) [AU]:


8/23

vi /etc/fstab M:# /etc/fstab: static file system information.## Use 'blkid' to print the universally unique identifier for a

# device; this may be used with UUID= as a more robust way to name devices# that works even if disks are added and removed. See fstab(5).## proc /proc proc nodev,noexec,nosuid 0 0/dev/mapper/server1-root / ext4 errors=remount-ro,usrjquota=quota.user,grpjquota=quota.group,jqfmt=vfsv0 0 1# /boot was on /dev/sda1 during installationUUID=6fbce377-c3d6-4eb3-8299-88797d4ad18d /boot ext2 defaults 02/dev/mapper/server1-swap_1 none swap sw 0 0/dev/fd0 /media/floppy0 auto rw,user,noauto,exec,utf8 0 0

Kch ho t quota, ch y lnh sau:mount -o remount / quotacheck -avugmquotaon -avug

16. Ci t BIND DNS Server Bn ch y lnh sau ci t BIND:apt-get install bind9 dnsutils

17. Ci t logger, Webalizer, v AWstats apt-get install vlogger webalizer awstats

Sau m

/etc/cron.d/awstats :vi /etc/cron.d/awstats V to ch thch v hai vi c nh k trong :M:#*/10 * * * * www-data [ -x /usr/share/awstats/tools/update.sh ] &&/usr/share/awstats/tools/update.sh

# Generate static reports:#10 03 * * * www-data [ -x /usr/share/awstats/tools/buildstatic.sh ] &&/usr/share/awstats/tools/buildstatic.sh

18. Ci t Jailkit Jailkit ch cn thi t nu bn mu n Chroot user SSH, c n lu rng Jailkit ph i c ci ttr c ISPConfig . Tuy t i khng lm ng c li.M:apt-get install build-essential autoconf automake1.9 libtool flex bison debhelper

cd /tmpwget http://olivier.sessink.nl/jailkit/jailkit-2.14.tar.gztar xvfz jailkit-2.14.tar.gzcd jailkit-2.14./debian/rules binary


9/23

Bn s nh n c thng bo:M:x86_64-linux-gnu-gcc -lpthread -o jk_socketd jk_socketd.o jk_lib.o utils.oiniparser.ojk_socketd.o: In function main':/tmp/jailkit-2.14/src/jk_socketd.c:474: undefined reference to `pthread_create'collect2: ld returned 1 exit statusmake[2]: *** [jk_socketd] Error 1make[2]: Leaving directory /tmp/jailkit-2.14/src'make[1]: *** [all] Error 2make[1]: Leaving directory /tmp/jailkit-2.14'make: *** [build-arch-stamp] Error 2root@server1:/tmp/jailkit-2.14#

Hy ci t gcc-4.4:apt-get install gcc-4.4 V xem /usr/bin/gc c:ls -l /usr/bin/gcc*/usr/ bin/gcc hin hnh phi l mt symlink ti /usr/bin/gcc -4.6:

root@server1:/tmp/jailkit-2.14# ls -l /usr/bin/gcc*lrwxrwxrwx 1 root root 7 2011-08-14 09:16 /usr/bin/gcc -> gcc-4.6-rwxr-xr-x 1 root root 259232 2011-10-05 23:56 /usr/bin/gcc-4.4-rwxr-xr-x 1 root root 349120 2011-09-16 16:31 /usr/bin/gcc-4.6root@server1:/tmp/jailkit-2.14# Chng ta s thay i iu ny b ng cch lin k t /usr/bin/gcc ti /usr/bin/gcc-4.4 :ln -sf /usr/bin/gcc-4.4 /usr/bin/gcc V xy dng Jailkit:make clean./configuremakemake clean./debian/rules binary Nu lnh ./debian/rules binary khng a ra l i no, b n c th ci t gi .deb nh sau:cd ..dpkg -i jailkit_2.14-1_*.debrm -rf jailkit-2.14* Cui cng chng ta thay i symlink /usr/bin/gcc n tr ti /usr/bin/gcc-4.6 ln n a.ln -sf /usr/bin/gcc-4.6 /usr/bin/gcc

Cn ti p... bboy_nonoyes, 12 Thng 8 2012 #4

3. bboy_nonoyes

19. Ci t fail2ban Mc d y l ty ch n khng b t bu c, nh ng chng ti khuy n co b n ci t bi mn hnhISPConfig s hin th ng nh p fail2ban:apt-get install fail2ban lm cho fail2ban theo di PureFTPd, SASL, v Courier, t o file /etc/fail2ban/jail.local:vi /etc/fail2ban/jail.local M:
http://nguoibaclieu.com/diendan/members/bboy_nonoyes.2/http://nguoibaclieu.com/diendan/threads/thiet-lap-may-chu-ubuntu-11-10-va-cai-dat-ispconfig-3.3577/#post-10362http://nguoibaclieu.com/diendan/threads/thiet-lap-may-chu-ubuntu-11-10-va-cai-dat-ispconfig-3.3577/#post-10362http://nguoibaclieu.com/diendan/threads/thiet-lap-may-chu-ubuntu-11-10-va-cai-dat-ispconfig-3.3577/#post-10362http://nguoibaclieu.com/diendan/threads/thiet-lap-may-chu-ubuntu-11-10-va-cai-dat-ispconfig-3.3577/#post-10362http://nguoibaclieu.com/diendan/members/bboy_nonoyes.2/http://nguoibaclieu.com/diendan/members/bboy_nonoyes.2/http://nguoibaclieu.com/diendan/threads/thiet-lap-may-chu-ubuntu-11-10-va-cai-dat-ispconfig-3.3577/#post-10362http://nguoibaclieu.com/diendan/threads/thiet-lap-may-chu-ubuntu-11-10-va-cai-dat-ispconfig-3.3577/#post-10362http://nguoibaclieu.com/diendan/members/bboy_nonoyes.2/


10/23

[pureftpd]

enabled = trueport = ftpfilter = pureftpdlogpath = /var/log/syslog

maxretry = 3

[sasl]

enabled = trueport = smtpfilter = sasllogpath = /var/log/mail.logmaxretry = 5

[courierpop3]

enabled = trueport = pop3filter = courierpop3logpath = /var/log/mail.logmaxretry = 5

[courierpop3s]

enabled = trueport = pop3sfilter = courierpop3slogpath = /var/log/mail.logmaxretry = 5

[courierimap]

enabled = trueport = imap2filter = courierimaplogpath = /var/log/mail.logmaxretry = 5

[courierimaps]

enabled = trueport = imapsfilter = courierimapslogpath = /var/log/mail.logmaxretry = 5


11/23


12/23

vi /etc/fail2ban/filter.d/courierimap.conf M:# Fail2Ban configuration file## $Revision: 100 $

#[Definition]

# Option: failregex# Notes.: regex to match the password failures messages in the logfile. The# host must be matched by a group named "host". The tag "" can# be used for standard IP/hostname matching and is only an alias for# (?:::f{4,6}:)?(?P\S+)# Values: TEXT#failregex = imapd: LOGIN FAILED.*ip=\[.*:\]

# Option: ignoreregex# Notes.: regex to ignore. If this regex matches, the line is ignored.# Values: TEXT#ignoreregex =

vi /etc/fail2ban/filter.d/courierimaps.conf M:# Fail2Ban configuration file## $Revision: 100 $#

[Definition]

# Option: failregex# Notes.: regex to match the password failures messages in the logfile. The# host must be matched by a group named "host". The tag "" can# be used for standard IP/hostname matching and is only an alias for# (?:::f{4,6}:)?(?P\S+)# Values: TEXT#failregex = imapd-ssl: LOGIN FAILED.*ip=\[.*:\]

# Option: ignoreregex# Notes.: regex to ignore. If this regex matches, the line is ignored.# Values: TEXT

#ignoreregex =

V khi ng li fail2ban:/etc/init.d/fail2ban restart

20. Ci t SquirrelMail ci t d ch v webmail client SquirrelMail b n s dng lnh sau:


13/23

apt-get install squirrelmail Sau c u hnh cho n:squirrelmail-configure Thng bo cho SquirrelMail bi t chng ta ang s dng Courier-IMAP/-POP3:M:SquirrelMail Configuration : Read: config.php (1.4.0)

---------------------------------------------------------Main Menu --1. Organization Preferences2. Server Settings3. Folder Defaults4. General Options5. Themes6. Address Books7. Message of the Day (MOTD)8. Plugins9. Database10. Languages

D. Set pre-defined settings for specific IMAP serversC Turn color onS Save dataQ Quit

Command >> >


14/23

SquirrelMail Configuration : Read: config.php---------------------------------------------------------While we have been building SquirrelMail, we have discovered somepreferences that work better with some servers that don't work sowell with others. If you select your IMAP server, this option willset some pre-defined settings for that server.

Please note that you will still need to go through and make sureeverything is correct. This does not change everything. There areonly a few settings that this will change.

Please select your IMAP server:bincimap = Binc IMAP servercourier = Courier IMAP servercyrus = Cyrus IMAP serverdovecot = Dovecot Secure IMAP serverexchange = Microsoft Exchange IMAP serverhmailserver = hMailServermacosx = Mac OS X Mailservermercury32 = Mercury/32uw = University of Washington's IMAP server

quit = Do not change anythingCommand >> courier

imap_server_type = courierdefault_folder_prefix = INBOX.

trash_folder = Trashsent_folder = Sentdraft_folder = Drafts

show_prefix_option = falsedefault_sub_of_inbox = false

show_contain_subfolders_option = falseoptional_delimiter = .

delete_folder = true

Press any key to continue...


15/23

C Turn color onS Save dataQ Quit

Command >> > S

Data saved in config.phpPress enter to continue... >


16/23


17/23

http://192.168.0.100/squirrelmail http://www.example.com/squirrelmail Ho c bn c th truy c p thng qua trnh iu khi n ca ISPConfig vhost m khng c n b t k cu hnh no (t t nhin l sau khi ci t ISPConfig ph n di y):http://server1.example.com:8080/squirrelmail Nu bn mu n s dng b danh /webmail thay cho /squirrelmail , ch cnm /etc/apache2/conf.d/squirrelmail.conf :vi /etc/apache2/conf.d/squirrelmail.conf V thm vo dng Alias /webmail /usr/share/squirrelmail :M:Alias /squirrelmail /usr/share/squirrelmailAlias /webmail /usr/share/squirrelmail[...]

Ti li Apache:/etc/init.d/apache2 reload Sau truy c p Squirrelmail:http://192.168.0.100/webmail http://www.example.com/webmail http://server1.example.com:8080/webmail (sau khi ci t ISPConfig)
http://192.168.0.100/squirrelmailhttp://www.example.com/squirrelmailhttp://www.example.com/squirrelmailhttp://server1.example.com:8080/squirrelmailhttp://server1.example.com:8080/squirrelmailhttp://192.168.0.100/webmailhttp://www.example.com/webmailhttp://server1.example.com:8080/webmailhttp://server1.example.com:8080/webmailhttp://www.example.com/webmailhttp://192.168.0.100/webmailhttp://server1.example.com:8080/squirrelmailhttp://www.example.com/squirrelmailhttp://192.168.0.100/squirrelmail


18/23


19/23

bboy_nonoyes, 12 Thng 8 2012 #5

4. bboy_nonoyes

21. C u hnh ISPConfig 3 ci t ISPConfig 3 t bn m i nh t, s dng lnh;cd /tmpwget http://www.ispconfig.org/downloads/ISPConfig-3-stable.tar.gz tar xfz ISPConfig-3-stable.tar.gzcd ispconfig3_install/install/ Tip theo ch y:php -q install.php B ci t ISPConfig 3 s cu hnh t t c cc d ch v nh Postfix, SASL, Courie... cho b n.M:root@server1:/tmp/ispconfig3_install/install# php -q install.php

--------------------------------------------------------------------------------_____ ___________ _____ __ _ ____|_ _/ ___| ___ \ / __ \ / _(_) /__ \

| | \ `--.| |_/ / | / \/ ___ _ __ | |_ _ __ _ _/ /| | `--. \ __/ | | / _ \| '_ \| _| |/ _` | |_ |

_| |_/\__/ / | | \__/\ (_) | | | | | | | (_| | ___\ \\___/\____/\_| \____/\___/|_| |_|_| |_|\__, | \____/

__/ ||___/

--------------------------------------------------------------------------------

>> Initial configuration

Operating System: Debian or compatible, unknown version.

Following will be a few questions for primary configuration so be careful.Default values are in [brackets] and can be accepted with .Tap in "quit" (without the quotes) to stop the installer.

Select language (en,de) [en]:


20/23

MySQL charset [utf8]:


21/23

* Stopping SASL Authentication Daemon saslauthd...done.

* Starting SASL Authentication Daemon saslauthd...done.

Stopping amavisd: amavisd-new.Starting amavisd: amavisd-new.

* Stopping ClamAV daemon clamd...done.* Starting ClamAV daemon clamdBytecode: Security mode set to "TrustSigned".

...done.* Stopping Courier authentication services authdaemond

...done.* Starting Courier authentication services authdaemond

...done.* Stopping Courier IMAP server imapd

...done.* Starting Courier IMAP server imapd

...done.* Stopping Courier IMAP-SSL server imapd-ssl

...done.* Starting Courier IMAP-SSL server imapd-ssl

...done.* Stopping Courier POP3 server...

...done.* Starting Courier POP3 server...

...done.* Stopping Courier POP3-SSL server...

...done.* Starting Courier POP3-SSL server...

...done.* Restarting web server apache2... waiting .... ...done.Restarting ftp server: Running: /usr/sbin/pure-ftpd-mysql-virtualchroot -lmysql:/etc/pure-ftpd/db/mysql.conf -l pam -8 UTF-8 -O clf:/var/log/pure-ftpd/transfer.log -D -H -b -A -E -u 1000 -Y 1 -BInstallation completed.root@server1:/tmp/ispconfig3_install/install#

Cc d ch v c cu hnh t ng nn b n khng c n thi t lp th cng.Sau bn c th truy c p ISPConfig 3 theohttp://server1.example.com:8080/ hoc http://192.168.0.100:8080/ . ng nh p vo v i tnti kho n v m t kh u u l admin (bn nn thay i mt kh u m c nh ny sau l n ngnh p u tin).
http://192.168.0.100:8080/http://192.168.0.100:8080/http://192.168.0.100:8080/http://192.168.0.100:8080/


22/23
http://www.quantrimang.com.vn/photos/image/102011/20/Ubuntu-Server-35.png


23/23

H thng ca bn sn sng s dng.

22. Cc link tham kh o Ubuntu: http://www.ubuntu.com/ISPConfig: http://www.ispconfig.org/
http://www.ubuntu.com/http://www.ubuntu.com/http://www.ispconfig.org/http://www.ispconfig.org/http://www.ispconfig.org/http://www.quantrimang.com.vn/photos/image/102011/20/Ubuntu-Server-36.pnghttp://www.ispconfig.org/http://www.ubuntu.com/

Documents

Cai Dat Isp3 Centos