Debian (or Ubuntu 7.xx) + Postifx+ Spam Gateway + Virtual Domains and User Verificati

Discussion in 'Suggest HOWTO' started by Joshy, Apr 19, 2008.

  1. Joshy

    Joshy New Member

    Hi guys,

    I want to try and setup a centralised server for scanning multiple personal domains and then relay them to a single server.

    I've only found a comparable tutorial but it was written for CentOS and I'd prefer to use Debian/Ubuntu.

    I've got the virtual domains bit down pat and user verification following a different guide, but I can't figure out how to setup spamassassin+RBL+postgrey+mailscanner (for a web interface) with multiple domains? :confused: :confused:


  2. till

    till Super Moderator Staff Member ISPConfig Developer

    One easy solution (virtual user setup + amavisd incl. web interface might be the new ISPConfig 3 version on Debian 3. I use it for this purpose for several months now and it works fine for me.


    It is recommended to use a clean (fresh) Debian etch install where you just selected "Standard System" as the package selection during setup. Then follow the steps below to setup your server with ISPConfig 3:

    1) Install Postfix, Courier, Saslauthd, MySQL, phpMyAdmin with the following command line (on one line!):

    apt-get install postfix postfix-mysql postfix-doc mysql-client mysql-server courier-authdaemon courier-authlib-mysql courier-pop courier-pop-ssl courier-imap courier-imap-ssl postfix-tls libsasl2 libsasl2-modules libsasl2-modules-sql sasl2-bin libpam-mysql openssl courier-maildrop getmail4

    Answer the questions from the package manager as follows.

    Create directories for web-based administration ? <-- No
    General type of configuration? <-- Internet site
    Mail name? <-- server1.mydomain.tld
    SSL certificate required <-- Ok

    ...use your own domain name of course ;)

    2) Install Amavisd-new, Spamassassin and Clamav (1 line!):

    apt-get install amavisd-new spamassassin clamav clamav-daemon zoo unzip bzip2 arj nomarch lzop cabextract apt-listchanges libnet-ldap-perl libauthen-sasl-perl clamav-docs daemon libio-string-perl libio-socket-ssl-perl libnet-ident-perl zip libnet-dns-perl

    3) Install apache, PHP5 and phpmyadmin (1 line!):

    apt-get install apache2 apache2.2-common apache2-doc apache2-mpm-prefork apache2-utils libexpat1 ssl-cert libapache2-mod-php5 php5 php5-common php5-gd php5-mysql php5-imap phpmyadmin php5-cli

    Then run the following to enable the Apache modules:

    a2enmod suexec
    a2enmod rewrite
    a2enmod ssl

    4) Install pure-ftpd and quota

    apt-get install pure-ftpd-common pure-ftpd-mysql quota quotatool

    Edit the file /etc/default/pure-ftpd-common

    vi /etc/default/pure-ftpd-common

    and change the start mode from inetd to standalone.

    Edit the file /etc/inetd.conf

    vi /etc/inetd.conf

    and comment out the line for the FTP service, so it looks like this:

    # ftp stream tcp nowait root /usr/sbin/tcpd /usr/sbin/pure-ftpd-wrapper

    Then execute:

    /etc/init.d/openbsd-inetd restart

    5) Install mydns

    apt-get install mydns-mysql

    The mydns installer is a bit tricky, you will have to select to create a new database for mydns and use a existing mysql user, e.g. the mysql root user. This database is only to fullfill the requirements for the debian pacakge during installation and will not be used by ISPConfig later. ISPConfig will automatically change the mydns configuration files to use the ISPConfig database.

    6) Install vlogger and webalizer

    apt-get install vlogger webalizer

    7) Install ISPConfig 3

    apt-get install php5-cli

    Installation from SVN

    apt-get install subversion
    cd /tmp
    svn export svn://
    cd trunk/install

    Now proceed with the ISPConfig installation.

    Now start the installation process by executing:

    php -q install.php

    The installer will configure all services like postfix, sasl, courier, etc. for you. A manual setup as required for ISPConfig 2 (perfect setup guides) is not nescessary. To login to the ISPConfig controlpanel, open the following URL in your browser (replace the IP to match your settings!):

    the default login is:

    user: admin
    password: admin

    In case you get a permission denied error from apache, please restart the apache webserver process.


    Install a webbased FTP Client

    apt-get install squirrelmail
    ln -s /usr/share/squirrelmail/ /var/www/webmail

    Access squirrelmail:

    To configure squirrelmail, run:

  3. Joshy

    Joshy New Member

  4. Rocky

    Rocky Member


    I've compiled a tutorial that walks you through the setup of a spam gateway that I call the SpamSnake. I'm currently revising my tutorial and below are the details of my build.

    It has a complete frontend called mailwatch, which is used to view incoming emails as they hit the queue. From there you can setup users to manage their own emails or domain. They can teach the SpamSnake to recognize what's spam and what's ham according to their needs. It works with multiple domains and relays the messages to an SMTP server. Let me know if something like that would interest you.

    The Perfect SpamSnake – Postfix w/Bayesian Filtering and Anti-Backscatter (Relay Recipients), Apache, Mysql, Bind, MailScanner (Spamassassin, ClamAV, Pyzor, Razor, DCC-Client), MailWatch, SPF Checks, FuzzyOcr, PDF/XLS/Phishing Sanesecurity Signatures, Postfix-gld (Greylisting Optional), Logwatch Statistical Reporting (Optional), Outgoing Disclaimer with alterMIME (Optional)
    Last edited: Apr 28, 2008
  5. Joshy

    Joshy New Member


    Thanks for the reply.

    That'd definitely be something I'd be interested in. Is there any particular reason it's not released on the HowToForge website, or are you only selling it?

    Either way, I'd be interested. PM me if you'd like.

  6. Rocky

    Rocky Member


    I never really thought about selling it, since everything I used was free. Maybe I'll start asking for donations??? lol

    The tutorial is currently being reviewed and will be released shortly. I'm sure it will be as helpful for you as it is for me.

    Thanks for your interest.
  7. falko

    falko Super Moderator ISPConfig Developer

    I'll publish it in the next days. We always have some other tutorials in the queue that's why we don't publish new tutorials immediately. :)
  8. Rocky

    Rocky Member

  9. Joshy

    Joshy New Member

    Thanks mate! I'll give it a go tonight and let you know how it turns out! :)

Share This Page