INSTALL_DEBIAN_5.0.txt 8.82 KB
Newer Older
tbrehm's avatar
tbrehm committed
1
2
3
Installation
-----------

4
5
6
# It is recommended to use a clean (fresh) Debian lenny install where you just selected "Standard System" as the package selection during
# setup. Then follow the steps below to setup your server with ISPConfig 3. In this guide "vi" is used as texteditor, but you ofcourse
# you can use whatever you prefer. You should be root for doing all of this.
tbrehm's avatar
tbrehm committed
7

8
9
10
11
12
13

# Check we have Fully Qualified Domain Name

/bin/hostname

# it should return something like "ispconfig.example.com"
14
# if not, then we assign a hostname (for example ispconfig):
fantu's avatar
fantu committed
15
16
17
18

echo ispconfig.example.com > /etc/hostname

vi /etc/hosts
19

20
# and add lines similar but appropriate:
21

fantu's avatar
fantu committed
22
23
24
127.0.0.1       localhost.localdomain   localhost
192.168.0.100   ispconfig.example.com   ispconfig

tbrehm's avatar
tbrehm committed
25
26


27
28
29
30
31
32
# Some optional choices

opt0.1) Optionally install SSH-server to get remote shell

apt-get install ssh openssh-server

33
opt0.2) Optionally if you are not running in virtual machine you can set server clocksync via NTP. Virtual quests get this from the host.
34
35
36
37
38

apt-get install ntp ntpdate



39
# Next is the real deal
40

fantu's avatar
fantu committed
41
1) Install Postfix, Courier, Saslauthd, MySQL, phpMyAdmin, rkhunter, binutils with the following command line (on one line!):
42

43
apt-get install postfix postfix-mysql postfix-doc mysql-client mysql-server courier-authdaemon courier-authlib-mysql courier-pop courier-pop-ssl courier-imap courier-imap-ssl libsasl2-2 libsasl2-modules libsasl2-modules-sql sasl2-bin libpam-mysql openssl courier-maildrop getmail4 rkhunter binutils
44
45

# Answer the questions from the package manager as follows.
tbrehm's avatar
tbrehm committed
46
47
48
49
50
51

Create directories for web-based administration ? <-- No
General type of configuration? <-- Internet site
Mail name? <-- server1.mydomain.tld
 SSL certificate required <-- Ok

52
# ...use your own domain name of course ;)
tbrehm's avatar
tbrehm committed
53

54
55
56


# Edit the file /etc/mysql/my.cnf
57
58
59

vi /etc/mysql/my.cnf

60
# and comment out the line
61
62
63

bind-address          = 127.0.0.1

64
# then restart mysql
65
66
67

/etc/init.d/mysql restart

tbrehm's avatar
tbrehm committed
68
69
2) Install Amavisd-new, Spamassassin and Clamav (1 line!):

70
apt-get install amavisd-new spamassassin clamav clamav-daemon zoo unzip bzip2 arj nomarch lzop cabextract apt-listchanges libnet-ldap-perl libauthen-sasl-perl clamav-docs daemon libio-string-perl libio-socket-ssl-perl libnet-ident-perl zip libnet-dns-perl
tbrehm's avatar
tbrehm committed
71
72
73



74
3) Install apache, PHP5, phpmyadmin, better fastCGI, suexec, Pear and mcrypt (1 line!):
75

76
apt-get install apache2 apache2.2-common apache2-doc apache2-mpm-prefork apache2-utils libexpat1 ssl-cert libapache2-mod-php5 php5 php5-common php5-gd php5-mysql php5-imap phpmyadmin php5-cli php5-cgi libapache2-mod-fcgid apache2-suexec php-pear php-auth php5-mcrypt mcrypt php5-imagick imagemagick libapache2-mod-suphp
77
78


79
# When phpMyAdmin is asking weather to configure itself automatically, select "Apache2"
80
81
82

# Then run the following to enable the Apache modules suexec, rewrite and ssl:

83
a2enmod suexec rewrite ssl actions include
84

85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
# Secure phpMyAdmin by deleting setuppassword-file
# and removing/commenting Setup Authorization from apache.conf

rm /etc/phpmyadmin/htpasswd.setup

vi /etc/phpmyadmin/apache.conf

# delete/comment following lines (between the ----- lines):
------------------------------------------------------
        # Authorize for setup
       <Files setup.php>
           # For Apache 1.3 and 2.0
           <IfModule mod_auth.c>
               AuthType Basic
               AuthName "phpMyAdmin Setup"
               AuthUserFile /etc/phpmyadmin/htpasswd.setup
           </IfModule>
           # For Apache 2.2
           <IfModule mod_authn_file.c>
               AuthType Basic
               AuthName "phpMyAdmin Setup"
               AuthUserFile /etc/phpmyadmin/htpasswd.setup
           </IfModule>
           Require valid-user
       </Files>
------------------------------------------------------

# restart apache before continuing
tbrehm's avatar
tbrehm committed
113

114
115
/etc/init.d/apache2 restart
 
tbrehm's avatar
tbrehm committed
116
117
118
119
120

4) Install pure-ftpd and quota

apt-get install pure-ftpd-common pure-ftpd-mysql quota quotatool

tbrehm's avatar
tbrehm committed
121
122
# Edit the file /etc/default/pure-ftpd-common to change the start mode from "inetd" to "standalone"
and set VIRTUALCHROOT=true
123
124
125

vi /etc/default/pure-ftpd-common

126
127
# Edit the file /etc/inetd.conf to prevent inetd from trying to start ftp.
# To do this, comment line starting like "ftp   stream  tcp" by adding "#"-sign in front of the line.
128
129

vi /etc/inetd.conf
130

131
# Then execute:
132
133
134

/etc/init.d/openbsd-inetd restart

tbrehm's avatar
tbrehm committed
135

136

tbrehm's avatar
tbrehm committed
137
138
5) Install mydns

139
140
141
apt-get install g++ libc6 gcc gawk make texinfo libmysqlclient15-dev

cd /tmp
tbrehm's avatar
tbrehm committed
142
143
wget http://heanet.dl.sourceforge.net/sourceforge/mydns-ng/mydns-1.2.8.25.tar.gz
tar xvfz mydns-1.2.8.25.tar.gz
144
145
146
147
148
cd mydns-1.2.8
./configure
make
make install

149
# Now create the start / stop script for mydns:
150
151
152

vi /etc/init.d/mydns

153
# and enter the following lines (between the ----- lines):
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213

------------------------------------------------------
#! /bin/sh
#
# mydns         Start the MyDNS server
#
# Author:       Philipp Kern <phil@philkern.de>.
#               Based upon skeleton 1.9.4 by Miquel van Smoorenburg
#               <miquels@cistron.nl> and Ian Murdock <imurdock@gnu.ai.mit.edu>.
#

set -e

PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin
DAEMON=/usr/local/sbin/mydns
NAME=mydns
DESC="DNS server"

SCRIPTNAME=/etc/init.d/$NAME

# Gracefully exit if the package has been removed.
test -x $DAEMON || exit 0

case "$1" in
  start)
        echo -n "Starting $DESC: $NAME"
        start-stop-daemon --start --quiet \
                --exec $DAEMON -- -b
        echo "."
        ;;
  stop)
        echo -n "Stopping $DESC: $NAME"
        start-stop-daemon --stop --oknodo --quiet \
                --exec $DAEMON
        echo "."
        ;;
  reload|force-reload)
        echo -n "Reloading $DESC configuration..."
        start-stop-daemon --stop --signal HUP --quiet \
                --exec $DAEMON
        echo "done."
        ;;
  restart)
        echo -n "Restarting $DESC: $NAME"
        start-stop-daemon --stop --quiet --oknodo \
                --exec $DAEMON
        sleep 1
        start-stop-daemon --start --quiet \
                --exec $DAEMON -- -b
        echo "."
        ;;
  *)
        echo "Usage: $SCRIPTNAME {start|stop|restart|reload|force-reload}" >&2
        exit 1
        ;;
esac

exit 0
---------------------------------------------------------------------------

214
# now execute:
215
216
217

chmod +x /etc/init.d/mydns
update-rc.d mydns defaults
tbrehm's avatar
tbrehm committed
218
219
220
221
222

6) Install vlogger and webalizer

apt-get install vlogger webalizer

223
7) Install Jailkit (optional, only needed if you want to use chrroting for SSH users)
tbrehm's avatar
tbrehm committed
224

225
226
227
228
229
230
231
232
apt-get install build-essential autoconf automake1.9 libtool flex bison
cd /tmp
wget http://olivier.sessink.nl/jailkit/jailkit-2.5.tar.gz
tar xvfz jailkit-2.5.tar.gz
cd jailkit-2.5
./configure
make
make install
tbrehm's avatar
tbrehm committed
233
cd ..
234
235
236
237
238
239
240
241
rm -rf jailkit-2.5*

8) Install fail2ban (optional but recomended, because the monitor tries to show the log)
More info at: http://www.howtoforge.com/fail2ban_debian_etch

apt-get install fail2ban

9) Install ISPConfig 3
tbrehm's avatar
tbrehm committed
242

243
# There are two possile scenarios, but not both:
244
245
9.1) Install the latest released version 
9.2) Install directly from SVN
tbrehm's avatar
tbrehm committed
246

247
9.1) Installation of last version from tar.gz
tbrehm's avatar
tbrehm committed
248
249

  cd /tmp
tbrehm's avatar
tbrehm committed
250
251
  wget http://www.ispconfig.org/downloads/ISPConfig-3.0.0.9-rc2.tar.gz
  tar xvfz ISPConfig-3.0.0.9-rc2.tar.gz
tbrehm's avatar
tbrehm committed
252
  cd ispconfig3_install/install/
tbrehm's avatar
tbrehm committed
253

254
9.2) Installation from SVN
tbrehm's avatar
tbrehm committed
255
256
257
258
259
260
261

  apt-get install subversion
  cd /tmp
  svn export svn://svn.ispconfig.org/ispconfig3/trunk/
  cd trunk/install


262
9.1+9.2) Now proceed with the ISPConfig installation.
tbrehm's avatar
tbrehm committed
263

264
# Now start the installation process by executing:
tbrehm's avatar
tbrehm committed
265
266
267

php -q install.php

268
# The installer will configure all services like postfix, sasl, courier, etc. for you. A manual setup as required for ISPConfig 2 (perfect setup guides) is not nescessary. To login to the ISPConfig controlpanel, open the following URL in your browser (replace the IP to match your settings!):
tbrehm's avatar
tbrehm committed
269
270
271

http://192.168.0.100:8080/

272
# the default login is:
tbrehm's avatar
tbrehm committed
273
274
275
276

user: admin
password: admin

277
# In case you get a permission denied error from apache, please restart the apache webserver process.
278

279
280
281


----------------------------------------------------------------------------------------------------------
282
283
Optional:

284
Install a webbased Email Client
285
286
287
288
289
290
291
292
293
294
295
296
297

apt-get install squirrelmail
ln -s /usr/share/squirrelmail/ /var/www/webmail

Access squirrelmail:

http://192.168.0.100/webmail


To configure squirrelmail, run:

/usr/sbin/squirrelmail-configure

298
299
300
301
302
303
----------------------------------------------------------------------------------------------------------

Hints:

debian 4.0 under openvz:

tbrehm's avatar
tbrehm committed
304
VPSID=101
305
306
307
308
for CAP in CHOWN DAC_READ_SEARCH SETGID SETUID NET_BIND_SERVICE NET_ADMIN SYS_CHROOT SYS_NICE CHOWN DAC_READ_SEARCH SETGID SETUID NET_BIND_SERVICE NET_ADMIN SYS_CHROOT SYS_NICE
do
  vzctl set $VPSID --capability ${CAP}:on --save
done
309
310
311

----------------------------------------------------------------------------------------------------------

312

313
Optional recommended packages:
314
315
316

denyhosts - a utility to help sys admins thwart ssh crackers
rsync - fast remote file copy program (for backup)