ISPconfig 3

[Christovampaynes]

Hello,
Sorry for the English, because I'm from Brazil!
I'm migrating from ISPConfig 2 to ISPconfig3 and have some questions:

1 - ispconfig3 has in setting up the "virtusertable" and "local-host-names", these files have to create manual or ispconfig3 not need?

2 - The file has the set of alias ISPconfig3 right through?

thank you

[till]

1) ISPConfig does not need tehse files.
2) There is no alias file used by ISPCOnfig 3.

ISPConfig 2 is aLinux system user postfix setup while ispconfig 3 uses a virtual user setup based on mysql. So you will not find any of the ispconfig 2 configuration files on a ispconfig 3 server as the setup is completely different.

[Christovampaynes]

So how will that setting these parameters?

mydestination = /etc/postfix/local-host-names
local_recipient_maps=proxy:unixasswd.byname $alias_maps

virtual_maps = hash:/etc/postfix/virtusertable

[till]

The settings you posted are from a ispconfig 2 file, they can not work with ispconfig 3 as ispconfig 3 uses a virtusl user setup as I described above.

Postfix is completely configured by the ispconfig 3 installer. Just install your new server as described in the perfect setup guide for ispconfig 3 (not the one for ispconfig 2, as thats incompatible with ispconfig 3 and ispconfig 3 van not be installed on a system that is configured for ispconfig 2) and then install ispconfig 3, the ispconfig installer will configure all config files. Dont change any settings in main.cf file manually.

[Christovampaynes]

now I understand. One more thing, these settings below can be made ​​through the ispconfig 3?

smtpd_client_restrictions =
permit_sasl_authenticated,
permit_mynetworks,
check_client_access hash:/etc/postfix/ip-access,
reject_unauth_pipelining,
reject_rbl_client maps_rbl_domains



smtpd_helo_restrictions =
permit_sasl_authenticated,
permit_mynetworks,
check_helo_access regexp:/etc/postfix/regras_ehlo,
reject_invalid_hostname,
reject_unauth_pipelining,
reject_rhsbl_sender dsn.rfc-ignorant.org,



smtpd_sender_restrictions =
permit_sasl_authenticated,
check_sender_access hash:/etc/postfix/bloqueados,
reject_unknown_sender_domain,
reject_unauth_pipelining,
reject_non_fqdn_sender,
reject_authenticated_sender_login_mismatch,
reject_unauthenticated_sender_login_mismatch,
reject_non_fqdn_sender,
reject_unlisted_sender,
reject_unauth_pipelining



smtpd_recipient_restrictions =
permit_sasl_authenticated,
permit_mynetworks,
reject_invalid_hostname,
reject_unverified_recipient,
reject_unknown_recipient_domain,
reject_unauth_pipelining,
reject_unauth_destination,
permit

[till]

Install a ispconfig setup as I described above, then verify that it works and make a backup of the main.cf file and then you can adjust settings if you think they are nescessary. If you then see that your changes dont work, then you can rollback your changes.

[Christovampaynes]

configuration that generates automatic pro ispconfig3 postfix is enough? is secure ?

[till]

The base setup is enough to run a secure webserver, but of course you can always configure it stricter. Most settings that you posted above are spam control settings and not security settings, if you want to add some of them additionally to the ispconfig base or not depends on your companys antispam policys and which users you want to block or not and if you can afford to block legetimate emails without content inspections from servers that have not a fully compliant configuration.

If you dont install ispconfig 3, you will not see the config that it generates

[Christovampaynes]

already installed from this how, "http://www.howtoforge.com/perfect-server-ubuntu-11.10-ispconfig-3-p6", the settings I posted are of the same SPAM, you have any tips for extra security? or some point that should be given more attention?

[Christovampaynes]

hello, as I create a reverse zone? adiconar need manual? in the primary zone is necessary to add a PTR record?
thank you