There is a new version of this tutorial available for Ubuntu 20.04 (Focal Fossa).

The Perfect Server - Ubuntu 18.04 (Bionic Beaver) with Apache, PHP, MySQL, PureFTPD, BIND, Postfix, Dovecot and ISPConfig 3.1

This tutorial shows the installation of an Ubuntu 18.04 (Bionic Beaver) web hosting server with Apache 2.4, Postfix, Dovecot, Bind and PureFTPD to prepare it for the installation of ISPConfig 3.1. The resulting system will provide a Web, Mail, Mailinglist, DNS and FTP Server.

ISPConfig is a web hosting control panel that allows you to configure the following services through a web browser: Apache or Nginx web server, Postfix mail server, Courier or Dovecot IMAP/POP3 server, MySQL, BIND or MyDNS nameserver, PureFTPd, SpamAssassin, ClamAV, and many more. This setup covers the installation of Apache (instead of Nginx), BIND (instead of MyDNS), and Dovecot (instead of Courier).

1. Preliminary Note

In this tutorial, I use the hostname with the IP address and the gateway  These settings might differ for you, so you have to replace them where appropriate.  Before proceeding further you need to have a basic minimal installation of Ubuntu 18.04 as explained in the tutorial.

The commands in this tutorial have to be run with root permissions. To avoid adding sudo in front of each command, you'll have to become root user by running:

sudo -s

before you proceed.

2. Edit /etc/apt/sources.list And Update Your Linux Installation

Edit /etc/apt/sources.list. Comment out or remove the installation CD from the file and make sure that the universe and multiverse repositories are enabled. It should look like this afterwards:

nano /etc/apt/sources.list

# deb cdrom:[Ubuntu-Server 18.04 LTS _Bionic Beaver_ - Release amd64 (20180425.1)]/ bionic main restricted

#deb cdrom:[Ubuntu-Server 18.04 LTS _Bionic Beaver_ - Release amd64 (20180425.1)]/ bionic main restricted

# See for how to upgrade to
# newer versions of the distribution.
deb bionic main restricted
# deb-src bionic main restricted

## Major bug fix updates produced after the final release of the
## distribution.
deb bionic-updates main restricted
# deb-src bionic-updates main restricted

## N.B. software from this repository is ENTIRELY UNSUPPORTED by the Ubuntu
## team. Also, please note that software in universe WILL NOT receive any
## review or updates from the Ubuntu security team.
deb bionic universe
# deb-src bionic universe
deb bionic-updates universe
# deb-src bionic-updates universe

## N.B. software from this repository is ENTIRELY UNSUPPORTED by the Ubuntu
## team, and may not be under a free licence. Please satisfy yourself as to
## your rights to use the software. Also, please note that software in
## multiverse WILL NOT receive any review or updates from the Ubuntu
## security team.
deb bionic multiverse
# deb-src bionic multiverse
deb bionic-updates multiverse
# deb-src bionic-updates multiverse

## N.B. software from this repository may not have been tested as
## extensively as that contained in the main release, although it includes
## newer versions of some applications which may provide useful features.
## Also, please note that software in backports WILL NOT receive any review
## or updates from the Ubuntu security team.
deb bionic-backports main restricted universe multiverse
# deb-src bionic-backports main restricted universe multiverse

## Uncomment the following two lines to add software from Canonical's
## 'partner' repository.
## This software is not part of Ubuntu, but is offered by Canonical and the
## respective vendors as a service to Ubuntu users.
# deb bionic partner
# deb-src bionic partner

deb bionic-security main restricted
# deb-src bionic-security main restricted
deb bionic-security universe
# deb-src bionic-security universe
deb bionic-security multiverse
# deb-src bionic-security multiverse

Then run

apt-get update

to update the apt package database and

apt-get upgrade

to install the latest updates (if there are any). If you see that a new kernel gets installed as part of the updates, you should reboot the system afterwards:



3. Change the Default Shell

/bin/sh is a symlink to /bin/dash, however we need /bin/bash, not /bin/dash. Therefore, we do this:

dpkg-reconfigure dash

Use dash as the default system shell (/bin/sh)? <-- No

If you don't do this, the ISPConfig installation will fail.

4. Disable AppArmor

AppArmor is a security extension (similar to SELinux) that should provide extended security. In my opinion, you don't need it to configure a secure system, and it usually causes more problems than advantages (think of it after you have done a week of trouble-shooting because some service wasn't working as expected, and then you find out that everything was ok, only AppArmor was causing the problem). Therefore, I disable it (this is a must if you want to install ISPConfig later on).

We can disable it like this:

service apparmor stop
update-rc.d -f apparmor remove
apt-get remove apparmor apparmor-utils

5. Synchronize the System Clock

It is a good idea to synchronize the system clock with an NTP (network time protocol) server over the Internet when you run a physical server. In case you run a virtual server then you should skip this step. Just run

apt-get -y install ntp

and your system time will always be in sync.

6. Install Postfix, Dovecot, MariaDB, rkhunter, and binutils

For installing postfix, we need to ensure that sendmail is not installed and running. To stop and remove sendmail run this command:

service sendmail stop; update-rc.d -f sendmail remove

The error message:

Failed to stop sendmail.service: Unit sendmail.service not loaded.

Is ok, it just means that sendmail was not installed, so there was nothing to be removed.

Now we can install Postfix, Dovecot, MariaDB (as MySQL replacement), rkhunter, and binutils with a single command:

apt-get -y install postfix postfix-mysql postfix-doc mariadb-client mariadb-server openssl getmail4 rkhunter binutils dovecot-imapd dovecot-pop3d dovecot-mysql dovecot-sieve dovecot-lmtpd sudo

You will be asked the following questions:

General type of mail configuration: <-- Internet Site
System mail name: <--

It is important that you use a subdomain as "system mail name" like or and not a domain that you want to use as email domain (e.g. yourdomain.tld) later.

Next, open the TLS/SSL and submission ports in Postfix:

nano /etc/postfix/

Uncomment the submission and smtps sections as follows - add the line -o smtpd_client_restrictions=permit_sasl_authenticated,reject to both sections and leave everything thereafter commented:

submission inet n       -       y       -       -       smtpd
  -o syslog_name=postfix/submission
  -o smtpd_tls_security_level=encrypt
  -o smtpd_sasl_auth_enable=yes
  -o smtpd_client_restrictions=permit_sasl_authenticated,reject
#  -o smtpd_reject_unlisted_recipient=no
#  -o smtpd_client_restrictions=$mua_client_restrictions
#  -o smtpd_helo_restrictions=$mua_helo_restrictions
#  -o smtpd_sender_restrictions=$mua_sender_restrictions
#  -o smtpd_recipient_restrictions=permit_sasl_authenticated,reject
#  -o milter_macro_daemon_name=ORIGINATING
smtps     inet  n       -       y       -       -       smtpd
  -o syslog_name=postfix/smtps
  -o smtpd_tls_wrappermode=yes
  -o smtpd_sasl_auth_enable=yes
  -o smtpd_client_restrictions=permit_sasl_authenticated,reject
#  -o smtpd_reject_unlisted_recipient=no
#  -o smtpd_client_restrictions=$mua_client_restrictions
#  -o smtpd_helo_restrictions=$mua_helo_restrictions
#  -o smtpd_sender_restrictions=$mua_sender_restrictions
#  -o smtpd_recipient_restrictions=permit_sasl_authenticated,reject
#  -o milter_macro_daemon_name=ORIGINATING

NOTE: The whitespaces in front of the "-o .... " lines are important!

Restart Postfix afterward:

service postfix restart

We want MySQL to listen on all interfaces, not just localhost. Therefore, we edit /etc/mysql/mariadb.conf.d/50-server.cnf and comment out the line bind-address =

nano /etc/mysql/mariadb.conf.d/50-server.cnf
# Instead of skip-networking the default is now to listen only on
# localhost which is more compatible and is not less secure.
#bind-address           =


Now we set a root password in MariaDB. Run:


You will be asked these questions:

Enter current password for root (enter for none): <-- press enter
Set root password? [Y/n] <-- y
New password: <-- Enter the new MariaDB root password here
Re-enter new password: <-- Repeat the password
Remove anonymous users? [Y/n] <-- y
Disallow root login remotely? [Y/n] <-- y
Reload privilege tables now? [Y/n] <-- y

Set the password authentication method in MariaDB to native so we can use PHPMyAdmin later to connect as root user:

echo "update mysql.user set plugin = 'mysql_native_password' where user='root';" | mysql -u root

Edit the file /etc/mysql/debian.cnf and set the MYSQL / MariaDB root password there twice in the rows that start with password.

nano /etc/mysql/debian.cnf

The MySQL root password that needs to be added is shown in read, in this example the password is "howtoforge". Replace the word "howtoforge" with the password that you have set for the MySQL root user with the mysql_secure_installation command.

# Automatically generated for Debian scripts. DO NOT TOUCH!
host = localhost
user = root
password = howtoforge
socket = /var/run/mysqld/mysqld.sock
host = localhost
user = root
password = howtoforge
socket = /var/run/mysqld/mysqld.sock
basedir = /usr

Then we restart MariaDB:

service mysql restart

Now check that networking is enabled. Run

netstat -tap | grep mysql

The output should look like this:

[email protected]:~# netstat -tap | grep mysql
tcp6 0 0 [::]:mysql [::]:* LISTEN 30591/mysqld
[email protected]:~#

7. Install Amavisd-new, SpamAssassin, and Clamav

To install amavisd-new, SpamAssassin, and ClamAV, we run

apt-get -y install amavisd-new spamassassin clamav clamav-daemon unzip bzip2 arj nomarch lzop cabextract apt-listchanges libnet-ldap-perl libauthen-sasl-perl clamav-docs daemon libio-string-perl libio-socket-ssl-perl libnet-ident-perl zip libnet-dns-perl libdbd-mysql-perl postgrey

The ISPConfig 3 setup uses amavisd which loads the SpamAssassin filter library internally, so we can stop SpamAssassin to free up some RAM:

service spamassassin stop
update-rc.d -f spamassassin remove

To start ClamAV use:

service clamav-daemon start

The following error can be ignored on the first run of freshclam.

ERROR: /var/log/clamav/freshclam.log is locked by another process
ERROR: Problem with internal logger (UpdateLogFile = /var/log/clamav/freshclam.log).

The amavisd-new program has currently a bug in Ubuntu 18.04 which prevents that emails get signed with Dkim correctly. Run the following commands to patch amavisd-new.

cd /tmp
cd /usr/sbin
cp -pf amavisd-new amavisd-new_bak
patch < /tmp/ubuntu-amavisd-new-2.11.patch

In case you get an error for thelast 'patch' command, then Ubuntu has probably fixed the issue in the meantime, so it should be safe to ignore that error then.

7.1 Install Metronome XMPP Server (optional)

The Metronome XMPP Server provides an XMPP chat server. This step is optional, if you do not need a chat server, then you can skip this step. No other ISPConfig functions depend on this software.

Install the following packages with apt.

apt-get -y install git lua5.1 liblua5.1-0-dev lua-filesystem libidn11-dev libssl-dev lua-zlib lua-expat lua-event lua-bitop lua-socket lua-sec luarocks luarocks
luarocks install lpc

Add a shell user for Metronome.

adduser --no-create-home --disabled-login --gecos 'Metronome' metronome

Download Metronome to the /opt directory and compile it.

cd /opt; git clone metronome
cd ./metronome; ./configure --ostype=debian --prefix=/usr
make install

Metronome has now be installed to /opt/metronome.

Share this page:

Suggested articles

143 Comment(s)

Add comment


By: lnxgs


I installed fail2ban, but on ispconfig control panel on show fail2ban-log I get this error:

fail2ban is not installed on this server.See more (for debian) here...

O.s: Ubuntu 18.04 and last ispconfig.



By: John

Can we additional PHP version in this instalation? Like PHP 5.6 and PHP 7.1 ?

By: Danny

I cant seem to use phpmyadmin.

The username password are correct because if i use a username with wrong password it will tell me its wrong.

cant seem to find a correct answer...

By: Raysv


Followed this to the letter, but when trying to send outgoing mails from the webmail client just results in "Authentication faied", roundcube logs also shows that, but with no more info. 

Any suggestion?

By: till

 Or you configured roundcube to connect to a different host than lokalhost. Compare your postfix with the one from this tutorial.common mistakes are that you might have not removed the # in front of the submission and smtps lines. If you need further help, then please post here:

By: djesys

Thank you !

How do we get mailman to work though ?

journalctl -xe:


-- Unit mailman.service has begun starting up.

Jun 11 14:31:22 b0x mailmanctl[1748]: Site list is missing: mailman

Jun 11 14:31:22 b0x systemd[1]: mailman.service: Control process exited, code=exited status=1

Jun 11 14:31:22 b0x systemd[1]: mailman.service: Failed with result 'exit-code'.

Jun 11 14:31:22 b0x systemd[1]: Failed to start Mailman Master Queue Runner.

-- Subject: Unit mailman.service has failed

-- Defined-By: systemd

-- Support:


-- Unit mailman.service has failed.


-- The result is RESULT.

By: till

Ensure that you created the 'mailman' mailinglist as described in chapter 10 by using the command 'newlist mailman'.

By: djesys

How can I access phpmyadmin ? I tried http://ip.ip.ip.ip:8081/phpmyadmin as in was in a previous tutorial.


By: till

You mix up apache and nginx servers here. On a nginx server, phpmyadmin is on port 8081, on an apache server, phpmyadmin is on port 80.

By: vincent1890

No link for download ovf/ova

By: till

The download link is in the menu on the right side of the page, directly below the big red download icon. If you don't see a menu on the right side, then turn off your ad blocker in case you have one installed. Some ad blockers are buggy remove whole web page columns and menus here on howtoforge.

By: Julian

Uncommenting the #bind-address line in the MariaDB config has no effect, it's documented in the comment above that the default is already to bind to localhost ( You would only uncomment that line if you wanted to change the bind address to another interface.

By: till

> You would only uncomment that line if you wanted to change the bind address to another interface.

And that's exactly why you shall uncomment it in this tutorial. Please follow the tutorial closely, otherwise, the setup will not be fully working and you would not be able to configure access to MySQL databases in ISPConfig.

By: Corey

Do you have a tutorial coming for clustering that works with this tutorial? I see the Debian 8.4 one on the site but not sure if that would work well with the Perfect Server tutorial?

By: helios842000

Hi, I have a vbulletin forum that only runs under php 5.6, it is possible to add this version as it was proposed for version 16.04? thanks

By: Bjoern

Let's encrypt only worked after the instructions in the manual, that means after the manual installation of the script. Since it is not allowed to publish parts of the script, I ask the author of the manual to do so.

By: till

Let's encrypt works fine when installed according to this tutorial, the steps from ISPConfig manual were not required on any of my servers that I run with Ubuntu 18.04. So there must have done something else wrong the first time you installed Let's encrypt.-

By: Kazuto

I can't access phpmyadmin. ip:80 nor ip:8081 works.

By: till

PHPMyAdmin is on port 80 on Apache servers like used in this setup. If you can't reach it, then you missed enabling it for apache during installation as shown in this tutorial. You can fix that by running:


dpkg-reconfigure phpmyadmin

By: bill

First, Thanks for the great software and the hours of tech support you have given over many years.

If not too much trouble, please post somewhere how to properly setup composer and git such that the ISPConfig user works. I have found bits a pieces in the forum and thru google but nothing consice. So much is going to a composer only install, it would be a real benefit.


By: heero


I followed the guide step by step but I cannot access my domain. The domain that I created was through VirtualBox. I don't know if that could affect anything?

By: ggmanugg

Perfekte Anleitung. Detailliert und funktioniert fehlerfrei :) Weiter so!

By: keith

I followed the tutorial on 18.04 as I have done countless times on older versions of ubuntu. I get a white screen on .php files, but normal .html loads just fine./var/logs shows nothing that help?

By: till

Check the apache error.log of the website to find out why PHP fails in your server. If you need more help, post in the forum.

By: Evelyn

Just a couple of tips for others...

if the server is NATed and you want to specify to specify a passive port range for FTPd.

40110-40210 in this example:

echo "40110 40210" > /etc/pure-ftpd/conf/PassivePortRange

And/Or Force FTPd to announce an external ip address:

echo "[server_ip_here]" > /etc/pure-ftpd/conf/ForcePassiveIP

And do a restart

/etc/init.d/pure-ftpd-mysql restart


To adjust the phpmysql upload size, 10 megs in this example:

nano /etc/php/7.2/apache2/php.ini

max_upload_size = 10M

save and do a

service apache2 restart


By: Darko

Thank you! Can you do a updated Debian one ? The one here is OLD now.

By: Mario

I made all the tutorial, but i like how to see a website that i add in ispconfig

By: till

Open a web browser and enter the domain name of the site that you added in ISPConfig. The domain name must exist in DNS and point to the IP address of your server.

By: Johan

 I end up with the dev version when installing ispconfig with this link in the manual , had to run a update after installation , and i did use stable during first installation.

wget -O ispconfig.tar.gz


By: till

This is the stable branch, so all is fine. 3.1dev is not the master or unstable branch.

By: Johan

dev means development for the rest of the world , development is not a stable version (it could be stable but doesn't need to be). Please reconsider the naming or the file to download as after an update the version changed to 3.1.13 (except for the database , that stayed on version 3.1dev)

By: Herbert

Thks for wonderful tutorial keep it up

By: Antonino

I got an error during the installation of amavis, sorry but I have only a short error message:

ExecStart=/etc/init.d/amavis start (code=exited, status=1/FAILURE)

BTW fixed so

nano /etc/amavis/conf.d/05-node_id

Uncomment the host the and set the following

$myhostname ="";


Maybe will be useful for other




By: Antonino

As usual "Perfect Tutorial"


- My personal suggest


- My Main question

I just finish to install a new VPS

I have a vps with ubuntu 16 and the last ispconfig installed. I need to migrate it to the new installation.

I know how to do it manually, but if there are some short ways, they are the welcome.


Manual steps :

a) Setup Isp Config (Clients, sites and so on)

  I will use 2 chrome windows to make the same configuration (copy and paste from one to the second) :-(

b) Copy websites folders from remote vps to the new one:

   scp from remote and than chown...

c) Import mysql dump databases

d) Enable the new ISPConfig installation with Let's Encrypt for website (already done in the old current vps)

I don't know how to procede

e) Try to understand is there is a way to enable ispconfig panel to use a valid and public SSL certificate (let's encrypt)

I don't know how to do it


ISPConfig guide pdf talks about MASTER and SLAVE but atm I just only need to import from the old current vps or do all import process manually.

I am sure, I am not the 1st one that needs to migrate an old installation to a new one.

Any suggestions?



By: Connor

So I'm getting this error when trying to install amavisd-new on debian 9. I know that this guide is for ubuntu, but literally everything here has functioned perfectly besides amavisd-new. This is a copy of part of the terminal output of apt-get -y install amavisd-new.



Setting up amavisd-new (1:2.10.1-4) ...

Creating/updating amavis user account...

Job for amavis.service failed because the control process exited with error code.

See "systemctl status amavis.service" and "journalctl -xe" for details.

invoke-rc.d: initscript amavis, action "start" failed.

? amavis.service - LSB: Starts amavisd-new mailfilter

   Loaded: loaded (/etc/init.d/amavis; generated; vendor preset: enabled)

   Active: failed (Result: exit-code) since Tue 2018-09-11 09:49:11 PDT; 7ms ago

     Docs: man:systemd-sysv-generator(8)

  Process: 29673 ExecStart=/etc/init.d/amavis start (code=exited, status=1/FAILURE)


Sep 11 09:49:11 gibsonhomeserver amavis[29673]:   The value of variable $myhostname is "gibsonhomeserver",…e been

Sep 11 09:49:11 gibsonhomeserver amavis[29673]:   a fully qualified domain name; perhaps uname(3) did not … such.

Sep 11 09:49:11 gibsonhomeserver amavis[29673]:   You must explicitly assign a FQDN of this host to variab…stname

Sep 11 09:49:11 gibsonhomeserver amavis[29673]:   in /etc/amavis/conf.d/05-node_id, or fix what uname(3) p…host's

Sep 11 09:49:11 gibsonhomeserver amavis[29673]:   network name!

Sep 11 09:49:11 gibsonhomeserver amavis[29673]: (failed).

Sep 11 09:49:11 gibsonhomeserver systemd[1]: amavis.service: Control process exited, code=exited status=1

Sep 11 09:49:11 gibsonhomeserver systemd[1]: Failed to start LSB: Starts amavisd-new mailfilter.

Sep 11 09:49:11 gibsonhomeserver systemd[1]: amavis.service: Unit entered failed state.

Sep 11 09:49:11 gibsonhomeserver systemd[1]: amavis.service: Failed with result 'exit-code'.

Hint: Some lines were ellipsized, use -l to show in full.

dpkg: error processing package amavisd-new (--configure):

 subprocess installed post-installation script returned error exit status 1

Errors were encountered while processing:


E: Sub-process /usr/bin/dpkg returned an error code (1)

By: till

Your server uses an invalid hostname and that's what amavis complains about. See Ubuntu base server tutorial, chapter 8, on how to configure the hostname of an Ubuntu server: After you fixed the hostname, rerun the failed command to install amavis and then continue with the tutorial.

By: mercury

Followed the instruction above. Everything was fine but cannot open phpmyadmin seems something wrong. Sorry i am new to servers Need help.


By: till

Then you did not select 'apache2' during phpmyadmin installation. Options must be activated with the space bar in apt to activate them. Use command:


dpkg-reconfigure phpmyadmin


to redo the phpmyadmin setup and activate it for apache2 this time.

By: Kamil

Hi Till,

First of all, thank you so much for brilliant work on this tutorial! I followed it step by step in order to try to build our own small webhosting server for our projects and it is finally working! I just sent some money to support the ISPConfig development and to get a e-book with documentation.

Today I moved the first testing web running on WordPress and logged-in to the phpmyadmin to import the database and I'm still getting this error even when I just open some table without doing anything else:


Warning in ./libraries/sql.lib.php#613

count(): Parameter must be an array or an object that implements Countable


./libraries/sql.lib.php#2128: PMA_isRememberSortingOrder(array)

./libraries/sql.lib.php#2079: PMA_executeQueryAndGetQueryResponse(


boolean true,

string 'c1zivotnadovolene',

string 'wp_options',







string '',

string './themes/pmahomme/img/',




string 'SELECT * FROM `wp_options`',




./sql.php#221: PMA_executeQueryAndSendQueryResponse(


boolean true,

string 'c1zivotnadovolene',

string 'wp_options',







string '',

string './themes/pmahomme/img/',




string 'SELECT * FROM `wp_options`',




Please, would you be so kind and could you tell me if you have an idea what could be the problem?

Thank you so much for your help,


By: till

Thank you very much for supporting ISPConfig! In regard to the issue, that's a bug in the phpMyAdmin package from Ubuntu- It exists for months now, I have no idea why they don't fix it as phpMyAdmin is such a widely used software. Here are the instructions on how to fix it on your server until Ubuntu delivers a fixed package:

By: Kamil

Hi Till,

Thank you so much for you help! I have tried it and used this solution:

Edit file /usr/share/phpmyadmin/libraries/sql.lib.php:

sudo nano /usr/share/phpmyadmin/libraries/sql.lib.php

Replace: count($analyzed_sql_results['select_expr'] == 1)

With: (count($analyzed_sql_results['select_expr']) == 1)

Restart the server


sudo service apache2 restart

But when I added just one "(" it is showing me still some errors. If I put there two "((" it doesnt show the previous error but it shows Error 500, Internal server errror so there is still something wrong... 

Which solution of all of them on the link you gave me should be used for fixing the problem, please?

I am sorry, but I am not a experienced still enough in Linux and still learning a lot of things every day... 

Thank you and have a nice day,



By: Bernd

Hi At first thanks for the great tutorial (and all the others you provide).In chapter "7.1 Install Metronome XMPP Server" there is a little problem as the command "luarocks install lpc" needs gcc. so you need to install this first.

By: Matt G

installed ISPConfig by download from the site

kept getting a 'Not allowed' with the wget string in the instructions

It installs OK but then when i go to 'local-ip-addy:9000' it takes me to the standard "it works" page

when i goto 'local-ipaddy:9000/ipconfig i get

uses('tpl'); $app->tpl->....

Any Help would be great!



By: till

Hi Matt, the wget command works fine here, just tested it. Please make a post in the ispconfig forum here at howtoforge so we can help you debugging your issue.

By: Wim

I was puzzled by the comment near the Postfix installation "It is important that you use a subdomain as "system mail name" like or and not a domain that you want to use as email domain (e.g. yourdomain.tld) later." My server has no subdomains. So how should I explain this?

I got errors for the Amavis command:

Setting up postgrey (1.36-5) ...

Warning: The home dir /var/lib/postgrey you specified can't be accessed: No such file or directory

And later:

Creating/updating amavis user account...

Job for amavis.service failed because the control process exited with error code              .

See "systemctl status amavis.service" and "journalctl -xe" for details.

invoke-rc.d: initscript amavis, action "start" failed.

? amavis.service - LSB: Starts amavisd-new mailfilter

   Loaded: loaded (/etc/init.d/amavis; generated)

   Active: failed (Result: exit-code) since Fri 2018-10-05 17:42:01 UTC; 14ms ago

     Docs: man:systemd-sysv-generator(8)

  Process: 24268 ExecStart=/etc/init.d/amavis start (code=exited, status=1/FAILURE)

Oct 05 17:42:00 ubuntu-s-1vcpu-2gb-ams3-perenboom systemd[1]: Starting LSB: Starts amavisd-new mailfilter...

Oct 05 17:42:01 ubuntu-s-1vcpu-2gb-ams3-perenboom amavis[24268]: Starting amavisd:   The value of variable $myhostname is "bilbil", but should have been

Oct 05 17:42:01 ubuntu-s-1vcpu-2gb-ams3-perenboom amavis[24268]:   a fully qualified domain name; perhaps uname(3) did not provide such.

Oct 05 17:42:01 ubuntu-s-1vcpu-2gb-ams3-perenboom amavis[24268]:   You must explicitly assign a FQDN of this host to variable $myhostname

Oct 05 17:42:01 ubuntu-s-1vcpu-2gb-ams3-perenboom amavis[24268]:   in /etc/amavis/conf.d/05-node_id, or fix what uname(3) provides as a host's

Oct 05 17:42:01 ubuntu-s-1vcpu-2gb-ams3-perenboom amavis[24268]:   network name!

Oct 05 17:42:01 ubuntu-s-1vcpu-2gb-ams3-perenboom amavis[24268]: (failed).

Oct 05 17:42:01 ubuntu-s-1vcpu-2gb-ams3-perenboom systemd[1]: amavis.service: Control process exited, code=exited status=1

Oct 05 17:42:01 ubuntu-s-1vcpu-2gb-ams3-perenboom systemd[1]: amavis.service: Failed with result 'exit-code'.

Oct 05 17:42:01 ubuntu-s-1vcpu-2gb-ams3-perenboom systemd[1]: Failed to start LSB: Starts amavisd-new mailfilter.

dpkg: error processing package amavisd-new (--configure):

 installed amavisd-new package post-installation script subprocess returned error exit status 1

By: Rholand

You're missing apt install mysql-server

By: till

No, that's not missing. The setup uses MariaDB instead of MySQL and when you read the guide, then you'll see that the package mariadb-server gets installed.

By: Curtis Maurand


A change for Ubuntu 18.04.  All of the commands can still use service and update-rc.d, but given the systemctl bits of ubuntu, they should be used going forward.  just IMHO

systemctl stop apparmor

systemctl disable apparmor

apt-get -y remove apparmor apparmor-utils


systemctl stop sendmail; systemctl disable sendmail

the errors will be:

Failed to stop sendmail.service: Unit sendmail.service not loaded.

Failed to disable unit: unit file sendmail.service does not exsit.

systemctl postfix restart

systemctl restart mysql

systemctl stop spamassassin

systemctl disable spamassassin

systemctl start clamav-daemon


Regards, Curtis

By: Mateus

my vps is hostinger, and the / etc / fstab file contains the lines: proc / proc proc defaults 0 0 none / dev / pts devpts wr, gid = 5, mode620 0 0 none / run / shm tmpfs default 0 0 Where to insert the ,usrjquota = quota.user, grpjquota =, jqfmt = vfsv0 ??

By: till

Skip editing the fstab and proceed with the next step. The VPS you use seems to not have a mount point for the root filesystem in fstab.

By: ruliezz

Instead of disabling AppArmor you should better deep dive in learning AppArmor and make your application ready for AppArmor. This quote is an excuse not to learn AppArmor: "it usually causes more problems than advantages". Instead of that lets learn AppArmor and try to dance with it instead of disable it:

By: NBElite

Thanks :)

By: Ben

I installed a new ubuntu client 18.04. After successful completion I completed all your steps for the perfect server.

I did not do the chat stuff. When I go to https://myserverip:8080 in any browser I set the site is not secure. The only browser I can use is IE when I click run anyway (not recommended). I do not own any certificates. I was assuming the one you set up was a free one. Is there anyway around this with out buying certificates.


By: till

You installed a so-called 'self-signed' SSL certificate, so the warning that you get in the browser is ok and not an error. If you want to install an SSL cert from let's encrypt instead, use this guide:

By: CarliumYT


When I try to login to the IP adress, my server refuses me to log on, can anyone help me with this? I've tried with different browsers. They say that there is a problem with the internet connection or that the line is too busy. 

- I use a virtual machine (VM box)

- I've tried with different browsers on the VM and desktop.

can anyone help me with this?


By: Ben Spradling

Hello: I am a novice ubuntu user. I have successfully installed ubuntu 18.04 fresh. Following your turorial I have run into several problems. My confusion comes in where to user I am assuming this should be my server host name and one of my domain names so I used Your also used howtoforge as a password. I used that but when I try to do the phpmyadmin installation it says invalid password. I have also tried a password I used in eariler steps. Should I use my own password instead of howtofoge.

By: till

Yes, use your own password.

By: Lococoyote

Trying to edit the sources.list results in opening a file that has only three lines in it which are all did I miss something?


By: Vic


In the synchronization step (5. Synchronize the System Clock), I execute it in my vps, it is possible, to undo it.


By: willriker

hi, i follow your step w/o to find any problem, but sometimes, the most simple things are dificult to solve, in may case , when i use ispconfig (like client) for create my site and my mail, which is the mail server name ( for MX record)???? i only know my name in the instalation process of postfix, but, because this is a multidomain server, i cannot find config file of postfix for each client/domain. tx in advance

By: Tamas Amon

For me does not working the ispconfig. How i see after install there is no documentroot in my apache config file. How I see there must be mod_fcgid support or mpm_itk_module. How can Iinstall it?

By: till

mpm_itk is not required and it is not recommended to install it. mod_fcgid is installed as part of this tutorial, if you don't have it installed, then you did not follow this guide closely. This tutorial has 3 pages, start with page one and follow it to the letter until the end of page 3 and you will have a fully functional ISPConfig server setup.

By: CarliumYT


I'vegone throught he whole guide, but I can't seem to be able to log into ISPconfig. Any Ideas to what I can do? I would like a respnse ASAP, since this is a school project.

I use:

*A virtual machine

*Ubuntu server 18.04

*Firefox as web-browser

The error message in the browser: "The server at is taking too long to respond."


Any help will be deebly aprischiated!



Carl M.

By: Earle

No issues, But did wanna say thanks for the great info ! 

Too bad there was not a buy me a cup of coffee donation button at the end. 


By: Tim

Step 8 - First bit - I get :

Processing triggers for libapache2-mod-php7.2 (7.2.10-0ubuntu0.18.04.1) ...

FATAL -> Failed to fork.


I'm using Ubuntu on AWS

By: till

Might be that your server instance is too small, e.g. not enough RAM.

By: Valentin Jianu

 Hello,I'm interested in installing and configuring (The Perfect Server - Ubuntu 18.04 (Bionic Beaver) with Apache, PHP, MySQL, PureFTPD, BIND, Postfix, Dovecot and ISPConfig 3.1 - Page 3) but honestly not, I did not. I tried http (s): // 8080 / or http (s): // 8080 / but it does not work.I think I have not been able to configure myself properly or something else? I want to announce that I am a beginner and I think I need to be as detailed if possible. (Step by Step)Thank you in advance,Best Regards,Valentin Jianu

By: till

The above guide is a step by step guide. Start with a clean and empty Ubuntu server and follow each step to the letter and you will always get a working server. You have to replace the domain and IP address with your own server IP address of course.

By: Marius

First erorr amavis.service not install not start


apt-get -y install apache2   not install completly....... crush...

By: till

You missed setting up the server hostname correctly when amavis is not starting (command hostname -f must return the FQDN hostname like and when apache fails to start, then you probably started from an unclean system.

By: Marius

 When i typing        


apt-get -y install apache2 apache2-doc apache2-utils libapache2-mod-php php7.2 php7.2-common php7.2-gd php7.2-mysql php7.2-imap phpmyadmin php7.2-cli php7.2-cgi libapache2-mod-fcgid apache2-suexec-pristine php-pear mcrypt  imagemagick libruby libapache2-mod-python php7.2-curl php7.2-intl php7.2-pspell php7.2-recode php7.2-sqlite3 php7.2-tidy php7.2-xmlrpc php7.2-xsl memcached php-memcache php-imagick php-gettext php7.2-zip php7.2-mbstring php-soap php7.2-soap


Results:  Unable to locate package imagemagic... 

Unable to locate libapache2-mod-pyton

By: till

Looks to me as if you made some typos in the command "Unable to locate libapache2-mod-pyton" python is writrten with h and the error shows that you typed it in without h and the other program is named "imagemagick" with ck at the end.

By: Niclas

The perfect Ubuntu doesn't exis....

I can't generate Let's Encrypt via ISPConfig interface? Any ideas!

By: till
By: Joachim

This is the best tutorial ever for a decent server setup!

Thank you so much

By: Joachim

Did follow the tutorial and everything works fine. Except when I try to send smtp mail over TLS. I get the following error in log:

Feb 17 14:04:47 ns352093 postfix/smtps/smtpd[19277]: SSL_accept error from localhost[]: -1Feb 17 14:04:47 ns352093 postfix/smtps/smtpd[19277]: warning: TLS library problem: error:14094418:SSL routines:ssl3_read_bytes:tlsv1 alert unknown ca:../ssl/record/rec_layer_s3.c:1399:SSL alert$Feb 17 14:04:47 ns352093 postfix/smtps/smtpd[19277]: lost connection after CONNECT from localhost[]Feb 17 14:04:47 ns352093 postfix/smtps/smtpd[19277]: disconnect from localhost[] commands=0/0


By: Roberto

This is what is shown using the upgrade tool

>> Update  Operating System: Ubuntu 16.04.6 LTS (Xenial Xerus)This application will update ISPConfig 3 on your server.Shall the script create a ISPConfig backup in /var/backup/ now? (yes,no) [yes]: yUnable to connect to mysql server Access denied for user 'root'@'localhost' (using password: YES)MySQL root password [secret]:


What can I do?

On seven other servers the upgrade worked very quick and well.

By: till

Probably you changed the MySQL root password after you installed ISPConfig. Enter the new MySQL root password as requested by the updater.

By: Shadow Wizard

"This tutorial is available as ready to use virtual machine image in ovf/ova format that is compatible with VMWare and Virtualbox. The virtual machine image uses the following login details:"

Um.. where?  I can't find a link to download it anywhere...  Am I missing something?

By: till

In the menu on the right side of the page, near the top, there where the big red download Icon is.

By: jjsjjs

This howto worked better and easier than the one with CentoS, i could not get https. But this worked right out of the box. Except some passwords had to be given else it would not cotinue. But more important phpMyadmin does not work. It gives the error that it is not installed. So that's strange because i just copy pasted the command. Also with the centos and this howto, the first inlog to isconfig seems not admin and admin. So i found a tut somewhere to change the password to admin and admin via mysql command, then it works. What could be the issue that phpmyadmin does not work or not seems to be installed. (follwing the tut it looked like it got installed) thanks very much.

By: till

The phpmyadmin issue happens when you don't select apache2 option during phpmyadmin package installation. Redo the phpmyadmin configuration and ensure that you select apache2 this time:


dpkg-reconfigure phpmyadmin


an option in apt is selected by using the tab pab bar and then activated with the space bar of your keyboard, if you don't select it with space bar, then the option is not chosen and phpmyadmin will not work.


Beside that, the Ubuntu and CentOS guide are equal and both work fine, but Ubuntu is recommended over CentOS for ISPConfig setups anyway, the software that ships with CentOS 7 is quite outdated.


Regarding ispconfig admin password, the password has been shown to you by the ispconfig installer while you installed ispconfig.

By: danny

 to get the quota to get to work without errors: apt-get install linux-image-extra-virtual

By: abarnes.81

Trying to download the ova file and it fails, everytime. When I try to resume, it also fails again and again. Can someone look into this or where would I post for support?


By: till

Just tested it, the download is fast (took about 7 minutes to download the 1.5GB file) and works fine until the end, no interruptions. The download cannot be resumed, if it failed, start it again.

By: Antonio Temprano

Nothing works :( From the beginning I started getting error messages about someting called amasvid and then, after every attempt to install anything, I kept getting error messages related to the f* amasvid. Do I have any option to solve the problem or do I have to reinstall the whole OS again and start from scratch?

By: till

Please post the error messages that you got in the ISPConfig installation forum to get help:

Amavisd problems are often caused by a wrong hostname setup of the server.

By: Thijs Koetsier

First; great job on this tutorial. I'm sure it helped many as it did me.

I've had problems connecting to FTP with FileZilla after following the setup for Pure FTP, especially with TLS. I could fix this by following the steps at section 3 here. I don't know why it didn't work for me at first, but maybe others will benefit from that as well.

By: awl

Two remarks / questions regarding SpamAssassin:

1. As mentioned here, daily updates of SpamAssassin rules are disabled by default (CRON=0 in /etc/default/spamassassin). Should we set CRON=1 to ensure regularly updates, or does ISPconfig 3 take care of it its own way?

2. After installing ISPcponfig following this Tutorial, all seems to work fine (at first glance), but running spamassassin -D --lint 2>&1 | grep failed lists 9 missing perl modules which seem to be needed by SpamAssassin. Is it harmless or should they be installed?

Best regards,



By: davidakadaz


First of all: Thank you Till for this tutorial :)

I followed up the steps, then almost all is working perfectly.

Just have an issue with postfix, when i send email to some Gmail recipient, they receive the email with a warning that the message isn't encrypted.

Dkim works, but when i test email domain using dkimvalidator, th SPF record serves softfail, the user is not authorized to use ... I don't understand why, also i'm wondering if it's not the reason why the emails aren't signed.

Any idea about how to fix it ?


By: till

Please make a new thread in the ispconfig support forum here at howtoforge so that we can help you to debug your problem.

By: Corey

I'm getting DKIM/DMARC issues from this setup as well - could this be because opendkim is not installed per instructions?

By: till

Opendkim is not needed as DKIM signing is done by amavisd-new. DKIM signing works fine here on my server which is based on this setup. If you need help with your server setup, then please post in the ispconfig forum here at howtoforge.

By: Leonardo

how can i install cacti on it? because i tried but php-modules do not works. 

[email protected]:~# php -m

[PHP Modules]






























































Zend OPcache




[Zend Modules]

Zend OPcache


[email protected]:~#


By: David Gale

Great tutorial. I have one problem with my php scripts. They run fine from /var/www/html/ but not in /var/www/clients/client1/ 

Is there something I need to do to enable in the virtual sites?

PHP 7.2.17-0ubuntu0.18.04.1 (cli) (built: Apr 18 2019 14:12:38) ( NTS )

Any help would be much appreciated


By: till

Enabling PHP in the website settings of that website in ISPConfig should be enough. Use php-fpm or php-fastcgi as PHP mode in the website. For further help, please post in the ISPConfig support forum here at howtoforge.

By: slick230

These instructions were extremely helpful!  Was able to get ISPConfig up and running on the first try.  I do have a question and realize it is probably not an issue with ISPConfig or the guide but rather DNS/Bind.

I installed ISPConfig on a fresh Ubuntu 18.04 box and then registered a new domain.

Within ISPConfig, I created a DNS zone for the domain I just registered which created the standard default records.  I then created 2 additional A records for ns1 and ns2.

When I try to update the nameservers at the registers site (Godaddy) it gives the following error, “the data provided cannot be used, please correct it and resubmit your request”.

Looking in /etc/bind there is a pri.doamin file but no .err files.  

The pri file has all the records listed that showup in the CP in ISPConfig.

The configuration has been set for over 48 hours so enough time should have pass for propagation to have taken place.

Is there a step I am missing to get the DNS server serve up the records?

I am also running ISPConfig on another Ubuntu box and the DNS works fine so I am a little confused ATM.


By: till

What you did is fine and when there is no .err file, then the zone has been created properly. You can use the command: "dig @localhost yourdomain.tld" to test the DNS server locally. If you need further help, please make a post in the ispconfig support forum here at howtoforge.

By: Edemilson Lima

After carefully install everything, I did go to and it is saying that my connection is not secure. I did try to go to and it is showing: "Possible attack detected. This action has been logged."


By: Dr.Dipl.Ing. Ben van Brakel

after install bind9 dnsutils haveged I got repeadatly a bunch of output in my syslog file like:june 18 15:00:00 abserver1 named[5318]: network unreachable resolving 'E.ROOt-SERVERS.NET/AAA/IN'; 2001:7fd::1#53june 18 15:00:00 abserver1 named[5318]: network unreachable resolving 'G.ROOt-SERVERS.NET/AAA/IN'; 2001:7fd::1#53Andjune 18 15:00:00 abserver1 named[5318]: SERVAIL unexpected RCODE resolving '': a lot of those 192.XXX numbers ??? Is this normal or have I done something wrong?This is the 10e time I try to installed ispconfig3.1 on my ubuntu 18.04 server but i have always the same problem I cannot sending or receiving mails to.Ifollewed your insrtruction by the letter. Before i had the server running 5 years on 12.04 andlater on 3 year on 16.04 witout anny problems. Anny suggestions are very welcome.With Ben van Brakel

By: till

There is nothing wrong with the instructions. The most common mistakes when mail sending fails is that the # is not removed in front of the submission and smtps lines as shown in the tutorial or that you use a wrong hostname, the hostname must be a subdomain like and not, if you would choose, then email receiving will fail for this domain. Please make a new thread for your problem in the ISPConfig forum here at howtoforge so we can help you to debug what's wrong with your server setup. Please include the content of your file and the messages that appear in the mail.log file in that post.

By: trezor

ERROR 2002 (HY000): Can't connect to local MySQL server through socket '/var/run/mysqld/mysqld.sock' (2).

there is something wrong with mariadb configuration options are

1 : changing to mysql default msql password with the command provided .

2 : adding the password twice manually to mysql (mariadb conf )...

starting a fresh new install of mariadb changing to msql default password but not adding any passwords manually see if works.

By: till

The instructions are fine, used them to install a server last week. According to the error message, MariaDB seems to be stopped on your server.

By: willoriker


i use this Perfect server for several month, and now it´s refuse to conect fpt session with TLs, only flat. i check all setting w/o to find diference, and i reinstall pureftp an repeat all step.. same result? why? any new update???

tx in advance

By: till

I guess you use FileZilla? Then this is caused by a change in your FTP client, not in the tutorial. You have to wait until either FileZilla makes an update to fix it or Ubuntu provides a new pure-ftpd package which fixes this incompatibility between pure-ftpd and FileZilla which has been introduced by FileZilla. Other options are that you use an older FileZilla version or a different FTP client like WinSCP or FireFTP.

By: gerry

in my virtualisation case i had this error:


[email protected]:/opt# quotacheck -avugmquotacheck: Cannot stat() mounted device /dev/root: No such file or directoryquotacheck: Cannot find filesystem to check or filesystem not mounted with quota [email protected]:/opt# quotaon -avugquotaon: Cannot stat() mounted device /dev/root: No such file or directory


This helped:


ln -s /dev/xvda /dev/root


By: gerry

had an error with the apache link - repaired it by the following trick:


Navigate to the follwoing file.nano /etc/apache2/apache2.conf Then add the following line to the end of the file.Include /etc/phpmyadmin/apache.conf Then restart apache /etc/init.d/apache2 restart.

By: labsy

Till, please add under step (5.) timezone setup, othervise later mail might get refused, because it would come from future in some regions:

timedatectl set-timezone Europe/Berlin (for example)

Check propr time with:


By: DarkPhoenix

It will be very nice to add a section/paragraph for people who want to disable indexing a2dismod autoindexservice apache2 restart

Hi, everything works except cannot get FTP over TLS functioning using self-signed certificate with Filezilla ( v3.44.2 ) but does appear to work with CoffeecupFTP. Filezilla is adamant this is a server config issue and given that also fails I think they may be right. 

Filezilla log below, any ideas ?

Status: Resolving address of

Status: Connecting to

Status: Connection established, waiting for welcome message...

Response: 220---------- Welcome to Pure-FTPd [privsep] [TLS] ----------

Response: 220-You are user number 1 of 50 allowed.

Response: 220-Local time is now 21:44. Server port: 21.

Response: 220-This is a private system - No anonymous login

Response: 220-IPv6 connections are also welcome on this server.

Response: 220 You will be disconnected after 15 minutes of inactivity.

Command: AUTH TLS

Response: 234 AUTH TLS OK.

Status: Initializing TLS...

Status: Verifying certificate...

Status: TLS connection established.

Command: USER xxxusernamexxxx

Error: GnuTLS error -110 in gnutls_record_recv: The TLS connection was non-properly terminated.

Status: Server did not properly shut down TLS connection

Error: Could not read from socket: ECONNABORTED - Connection aborted

Error: Could not connect to server

By: gyy

After the installation on AWS server. I cannot see the Ispconfig login page using the server domain or even the elastic ip:8080.

Error on the browser is "ip address took too long to respond"

The Apache Ubuntu page opens if I remove the port 8080

Please help sombody.

By: Paul Fontela

Hello Till:

Is it possible that in this installation manual the installation step is missing the Mysql Server or MariaDB?Thank you


By: till

There is nothing missing, MariaDB is installed as part of the tutorial. Scroll up the page and read chapter 6 again, there you find the command:

apt-get -y install postfix postfix-mysql postfix-doc mariadb-client mariadb-server openssl getmail4 rkhunter binutils dovecot-imapd dovecot-pop3d dovecot-mysql dovecot-sieve dovecot-lmtpd sudo This command installs MariaDB server and client.

By: Matt White

HI I have got up to the install stage, I have entered my details for the database but then I get the following with no error message:


Login in to MySQL and disable validate_password with:


    UNINSTALL PLUGIN validate_password;[email protected]<myuser>:/tmp/ispconfig3-stable-3.1-090607b01bc9f4d9674ae3542316ef0e06085159/install# 

It goes no further than this.

By: till

There must be a misconfiguration in your mariadb config or you installed a wrong mariadb or mysql version. The message tells you what to do, you shall login to mysql as root user and then run the mentioned command.


mysql -u root -p


and then run:


UNINSTALL PLUGIN validate_password;


and then leave the mysql prompt.



By: Dirk


after the Command "mount -o remount /" become i the folling Error

Unrecognized mount option "jqfmt=vfsvo" or missing value

By: Lee

If someone got problem with filezilla, Use winscp It will solve the problem..

By: edf


Thank you so much for excellent guide! I wanted to suggest a few small edits:

1) Ubuntu has updated amavis so the script to modify is no longer needed in 18.04lts.

2) Twice during install when mysql is called (roundcube install and one prior, which I forgot to note), we also see:

Configuring roundcube-core ????????????????????????  ? Please provide the password for the administrative account "root" with   ?   ? which this package should create its MySQL database and user.            ?   ?                                                                          ?   ? Password of the database's administrative user:                          ?   ?                                                                          ?   ? ________________________________________________________________________ ?   ?                                                                          ?   ?                                  <Ok>

which needs the mysql root pw entered.

3) There are a few updated packages, including both ISPConfig and Jailkit.


I think that was it.


Again, *THANK YOU* for this incredible service!

By: dimitri

When installing ispconfig I am getting a lot of errors at the end. I tried to install ispconfig on several vps'es and every time the same:


Do you want a secure (SSL) connection to the ISPConfig web interface (y,n) [y]:


Generating RSA private key, 4096 bit long modulus (2 primes)



e is 65537 (0x010001)

Can't load /root/.rnd into RNG

139823769833920:error:2406F079:random number generator:RAND_load_file:Cannot open file:../crypto/rand/randfile.c:88:Filename=/root/.rnd

You are about to be asked to enter information that will be incorporated

into your certificate request.

What you are about to enter is what is called a Distinguished Name or a DN.

There are quite a few fields but you can leave some blank

For some fields there will be a default value,

If you enter '.', the field will be left blank.


Country Name (2 letter code) [AU]:NL

State or Province Name (full name) [Some-State]:ZH

Locality Name (eg, city) []:Amsterdam

Organization Name (eg, company) [Internet Widgits Pty Ltd]:none

Organizational Unit Name (eg, section) []:none

Common Name (e.g. server FQDN or YOUR name) []:srv05.deleted

Email Address []:[email protected]


Please enter the following 'extra' attributes

to be sent with your certificate request

A challenge password []:

An optional company name []:

Can't load /root/.rnd into RNG

140544043422144:error:2406F079:random number generator:RAND_load_file:Cannot open file:../crypto/rand/randfile.c:88:Filename=/root/.rnd

writing RSA key


By: Jos


I want to switch my old postfix installation (perfect server with courier virtual user mysql) with this installation because I updated ubuntu from 14 to 18.

How can I get my emails, what are the changes I need to do?


By: Jos


I don't know if I made myself understood correctly.

My old server under ubuntu 14.04 is coming to the end of its life and I am moving to ubuntu 18.04.

For the installation of Postfix I followed this tutorial ""

But now I followed the tutorial on this page.

How can I switch to recover my accounts with the inboxes.

Thank you for your help because I don't understand everything.


By: Will A


AFter doing those steps 



Web server to reconfigure automatically: <-- apache2 Configure database for phpmyadmin with dbconfig-common? <-- YesMySQL application password for phpmyadmin: <-- Press enter

I have this error

ERROR 1045 (28000) : Access denied for user 'root'@'localhost' (using password: YES)

What could cause this error and how do I resolve it?


Thanks a lot :)


By: William Allaire

In fact, it was because I was not using the same password. A misunderstanding from my side.

By: Kangarooo

Installed with automated and this long one also. What link would be? Terminal ssh doesnt show what ip. Here mentioned ip:8080 also doesnt work. What tutorial works? Cant this be automated? Using latest DO 18.04.4

By: John

Hello Till,

How long will it take until an ISPConfig Ubuntu 20.04 installation guide is ready?

I'm waiting to ditch my current ISPConfig on Ubuntu 16.04.

Best regards

By: Ruppel

Hi Till,

thanks for your tutorials. As I had a little bit of time due to a corona break, I tried to learn ansible and code down your tutorial as an ansible script.

You can find the result here:

Best regards,


By: enrico

The gui does not start. I get the error mesages: suexec.log : [2020-04-12 19:34:21]: uid: (5002/ispconfig) gid: (5003/ispconfig) cmd: .php-fcgi-starter [2020-04-12 19:34:21]: cannot get docroot information (/var/www) latest apache error.log lines: The gui does not start. I get the error mesages: suexec.log : [2020-04-12 19:34:21]: uid: (5002/ispconfig) gid: (5003/ispconfig) cmd: .php-fcgi-starter [2020-04-12 19:34:21]: cannot get docroot information (/var/www) moreover can't get ssl working. The gui showing a "500 internal server error"

By: till

Either you did not start the installation from a clean and empty system or you left out some steps in the apache install chapter. The guide above has 3 pages, ensure that you followed all 3, starting from page one. And you must start with an empty and clean Ubuntu 18.04 system, if your system runs already some web server software or another hosting control panel, then the installation will fail, so it's important that you start from a clean basis.

By: just my 10 cents

Can you write part1 on the top title, cause I thought its only 7 steps. The link to pages 2 and 3 is below author name and I just assume everything below it is comment. Junk ads make me wont click green "next" button. You can also make the next button bigger and more noticeable than the author info -_-

By: YaBa

Thanks for the awesome tutorial! 

By: Sergi

Point 11 (installing PureFTPd and Quota) is the only point I can't get pass of this great tutorial. My fstab file contains the following line: UUID=05b9ca52-049a-4021-a777-d368fb7fd690 / xfs defaults 0 0Adding the indicated code followed by "defaults" causes an error and the entire partition becomes read-only permission :S Can you help me? Thank you very much!

By: Patrick

Here error I got when I try to install Apache, PHP, phpMyAdmin, FCGI, SuExec, Pear, and mcrypt. Any solution?

Note, selecting 'php7.2-thrift' for regex 'php7.2'

Note, selecting 'libapache2-mod-php7.2' for regex 'php7.2'

E: Unable to locate package php7.2-common php7.2-gd php7.2-mysql php7.2-imap php7.2-cli php7.2-cgi php7.2-curl php7.2-intl php7.2-pspell php7.2-recode php7.2-sqlite3 php7.2-tidy php7.2-xmlrpc php7.2-xsl php-gettext php7.2-zip php7.2-mbstring php7.2-soap

By: till

Are you sure that you are really using Ubuntu 18.04, the version this guide has been written for, and not 20.04?

By: Siddhesh Samant

Hatsoff for the wonderful contribution of Till Brehm for the Linux community , keep going ..

By: Ferri

Step number seven, the last script should be like this You're welcome.

cd /tmp wget cd /usr/sbincp -pf amavisd-new amavisd-new_bak patch < /tmp/ubuntu-amavisd-new-2.11.patch

By: reza mirzapour

HelloI went through all the installation steps on Ubuntu Linux and the installation success message came and there was no error, but I enter the IP address with: 8080, but nothing is displayed and the Unable to connect error is displayed. Where does the error come from? thank you

By: Emanoel

 Does not send email/var/log/mail.log

Nov  2 02:35:10 correio postfix/proxymap[712]: fatal: bad string length 0 < 1: \/etc\/postfix/mysql-verify_recipients.cf_dbname =

Nov  2 02:35:11 correio postfix/smtpd[618]: warning: private/proxymap socket: service dict_proxy_open: Success

Nov  2 02:35:11 correio postfix/master[410]: warning: process /usr/lib/postfix/sbin/proxymap pid 712 exit status 1

Nov  2 02:35:11 correio postfix/master[410]: warning: /usr/lib/postfix/sbin/proxymap: bad command startup -- throttling

By: Deddy

Hi All,

I've just installed ispconfig 3, on a new clean vps instance and followed all the steps on the "The Perfect Server" for Ubuntu 18 documentation.

It all went fine. 

However when I tried to start apache2 it gave me this error msg, but when I check the apache log there's no error msg logged. Thanks for the help.

[email protected]:/var/log/apache2# apachectl restart

AH00526: Syntax error on line 75 of /etc/apache2/sites-enabled/000-apps.vhost:

Invalid command 'SuexecUserGroup', perhaps misspelled or defined by a module not included in the server configuration

Action 'restart' failed.

The Apache error log may have more information.


==== this is line 75 of /etc/apache2/sites-enabled/000-apps.vhost ===

    SuexecUserGroup ispapps ispapps


By: till

 @Deddy: You left out some commands from the tutorial. Redo chapter 8.

By: jul

I can install roundcube, but when i want to send email from https://[IP]/ can not send / receive any email...

i can not send to my same email domain also


would you like to help me ?

By: Bill in New York

ISPConfig is amazing. Your directions are pretty close to flawless. Invariably every time something didn't work during installation it was be because I didn't follow exactly what you wrote.While I have been running ISPConfig for Ubuntu 16.04 for some time now, I recently installed the 18.04 version of ISPConfig on a newly configured machine running Ubuntu 18.04. A few minor comments, some of which may be helpful to others since I use ISPConfig for the sole purpose of running websites and email on my local area network with no connection to the broader internet.First, a few of the questions that are triggered during installation don't exactly track the tutorial. Presumably this is because of software updates that have occurred since the instructions for the 18.04 install were released (for example, the file now contains another line that must be uncommented --   -o smtpd_tls_auth_only=yes -- and there was an extra question in the mysql installation which required a yes answer).Second, in order to send unauthenticated emails contained PDF scans from legacy printers on my LAN, I had to edit the mynetworks definition in my file as follows:mynetworks = [::1]/128 was notable because it represented a change from ISPConfig 16.04.Third, in order to override the ability of the mail server to send email outside the LAN, I had to modify the file as follows:smtp      unix  -       -       y       -       -       localrelay     unix  -       -       y       -       -       local(This was consistent with changes I had made previously running ISPConfig under Ubuntu 16.04.)Fourth, rather than making RoundCube accessible by these changes to /etc/apache2/conf-enabled/roundcube.conf:Alias /roundcube /var/lib/roundcubeAlias /webmail /var/lib/roundcubeI modified /etc/apache2/sites-available/000-default.conf in order to host RoundCube at its own unique domain on my LAN by appending the following code:<VirtualHost *:80>DocumentRoot /var/lib/roundcube/ServerName webmail.[local TLD]</VirtualHost>Once again, many thanks.

By: sam

Im stuck at step 6. install Postfix after adding System mail name

the operation take for ever !