Installation
|
-----------
|
|
It is recommended to use a clean (fresh) Debian etch install where you just selected "Standard System" as the package selection during setup. Then follow the steps below to setup your server with ISPConfig 3:
|
|
assign hostname (for example ispconfig)
|
|
echo ispconfig.example.com > /etc/hostname
|
|
vi /etc/hosts
|
and add line similar but appropriate:
|
127.0.0.1 localhost.localdomain localhost
|
192.168.0.100 ispconfig.example.com ispconfig
|
|
1) Add the debian volatile repository to the apt sources list:
|
|
vi /etc/apt/sources.list
|
|
and insert the line:
|
|
deb http://volatile.debian.org/debian-volatile etch/volatile main contrib non-free
|
|
Then execute these commands to insert the Debian voltaile gpg key to the apt keyring:
|
|
cd /tmp
|
apt-get install wget
|
wget http://www.debian.org/volatile/etch-volatile.asc
|
apt-key add etch-volatile.asc
|
rm -f etch-volatile.asc
|
|
Now we update the package list by executing:
|
|
apt-get update
|
|
Now Install Postfix, Courier, Saslauthd, MySQL, phpMyAdmin, ntpdate, rkhunter, binutils with the following command line (on one line!):
|
|
apt-get install postfix postfix-mysql postfix-doc mysql-client mysql-server courier-authdaemon courier-authlib-mysql courier-pop courier-pop-ssl courier-imap courier-imap-ssl libsasl2 libsasl2-modules libsasl2-modules-sql sasl2-bin libpam-mysql openssl courier-maildrop getmail4 ntp ntpdate rkhunter binutils sudo
|
|
Answer the questions from the package manager as follows.
|
|
Create directories for web-based administration ? <-- No
|
General type of configuration? <-- Internet site
|
Mail name? <-- server1.mydomain.tld
|
SSL certificate required <-- Ok
|
|
...use your own domain name of course ;)
|
|
Edit the file /etc/mysql/my.cnf
|
|
vi /etc/mysql/my.cnf
|
|
and comment out the line
|
|
bind-address = 127.0.0.1
|
|
then restart mysql
|
|
/etc/init.d/mysql restart
|
|
Set the mysql database password:
|
|
mysqladmin -u root password yourrootsqlpassword
|
mysqladmin -h ispconfig.local -u root password yourrootsqlpassword
|
|
|
2) Install Amavisd-new, Spamassassin and Clamav (1 line!):
|
|
apt-get install amavisd-new spamassassin clamav clamav-daemon zoo unzip bzip2 arj nomarch lzop cabextract apt-listchanges libnet-ldap-perl libauthen-sasl-perl clamav-docs daemon libio-string-perl libio-socket-ssl-perl libnet-ident-perl zip libnet-dns-perl
|
|
3) Install apache, PHP5 and phpmyadmin (1 line!):
|
|
apt-get install apache2 apache2.2-common apache2-doc apache2-mpm-prefork apache2-utils libexpat1 ssl-cert libapache2-mod-php5 php5 php5-common php5-gd php5-mysql php5-imap phpmyadmin php5-cli php5-cgi libapache2-mod-fcgid
|
|
Then run the following to enable the Apache modules:
|
|
a2enmod suexec
|
a2enmod rewrite
|
a2enmod ssl
|
a2enmod actions
|
a2enmod include
|
|
4) Install pure-ftpd and quota
|
|
apt-get install pure-ftpd-common pure-ftpd-mysql quota quotatool
|
|
Edit the file /etc/default/pure-ftpd-common
|
|
vi /etc/default/pure-ftpd-common
|
|
and change the start mode from inetd to standalone.
|
|
Edit the file /etc/inetd.conf
|
|
vi /etc/inetd.conf
|
|
and comment out the line for the FTP service, so it looks like this:
|
|
# ftp stream tcp nowait root /usr/sbin/tcpd /usr/sbin/pure-ftpd-wrapper
|
|
Then execute:
|
|
/etc/init.d/openbsd-inetd restart
|
|
|
5) Install mydns
|
|
apt-get install mydns-mysql
|
|
What is the hostname of the machine on which the database will run? -> localhost
|
What is the database name for the MyDNS database? -> mydns
|
Would you like to set up the database and tables automatically? -> yes
|
What is the username of the MySQL administrator? -> root
|
Enter the MySQL administrator password -> yourrootsqlpassword
|
Confirm this password -> yourrootsqlpassword
|
What is the MyDNS username? -> mydns
|
What is the MyDNS user password? -> mydnspassword
|
|
The mydns installer is a bit tricky, you will have to select to create a new database for mydns and use a existing mysql user, e.g. the mysql root user. This database is only to fullfill the requirements for the debian pacakge during installation and will not be used by ISPConfig later. ISPConfig will automatically change the mydns configuration files to use the ISPConfig database.
|
|
|
6) Install vlogger and webalizer
|
|
apt-get install vlogger webalizer
|
|
7) Install Jailkit (optional, only needed if you want to use chrroting for SSH users)
|
|
apt-get install build-essential autoconf automake1.9 libtool flex bison debhelper
|
cd /tmp
|
wget http://olivier.sessink.nl/jailkit/jailkit-2.7.tar.gz
|
tar xvfz jailkit-2.7.tar.gz
|
cd jailkit-2.7
|
./debian/rules binary
|
cd ..
|
dpkg -i jailkit_2.7-1_i386.deb
|
rm -rf jailkit-2.7*
|
|
8) Install fail2ban (optional but recomended, because the monitor tries to show the log)
|
More info at: http://www.howtoforge.com/fail2ban_debian_etch
|
|
apt-get install fail2ban
|
|
|
9) Install ISPConfig 3
|
|
There are two possile scenarios, but not both:
|
9.1) Install the latest released version
|
9.2) Install directly from SVN
|
|
9.1) Installation of last version from tar.gz
|
|
cd /tmp
|
wget http://www.ispconfig.org/downloads/ISPConfig-3.0.0.9-rc2.tar.gz
|
tar xvfz ISPConfig-3.0.0.9-rc2.tar.gz
|
cd ispconfig3_install/install/
|
|
9.2) Installation from SVN
|
|
apt-get install subversion
|
cd /tmp
|
svn export svn://svn.ispconfig.org/ispconfig3/trunk/
|
cd trunk/install
|
|
|
9.1+9.2) Now proceed with the ISPConfig installation.
|
|
Now start the installation process by executing:
|
|
php -q install.php
|
|
The installer will configure all services like postfix, sasl, courier, etc. for you. A manual setup as required for ISPConfig 2 (perfect setup guides) is not necessary. To login to the ISPConfig controlpanel, open the following URL in your browser (replace the IP to match your settings!):
|
|
http://192.168.0.100:8080/
|
|
the default login is:
|
|
user: admin
|
password: admin
|
|
In case you get a permission denied error from apache, please restart the apache webserver process.
|
|
Optional:
|
|
Install a webbased Email Client
|
|
apt-get install squirrelmail
|
ln -s /usr/share/squirrelmail/ /var/www/webmail
|
|
Access squirrelmail:
|
|
http://192.168.0.100/webmail
|
|
|
To configure squirrelmail, run:
|
|
/usr/sbin/squirrelmail-configure
|
|
----------------------------------------------------------------------------------------------------------
|
|
Hints:
|
|
debian 4.0 under openvz:
|
|
VPSID=101
|
for CAP in CHOWN DAC_READ_SEARCH SETGID SETUID NET_BIND_SERVICE NET_ADMIN SYS_CHROOT SYS_NICE CHOWN DAC_READ_SEARCH SETGID SETUID NET_BIND_SERVICE NET_ADMIN SYS_CHROOT SYS_NICE
|
do
|
vzctl set $VPSID --capability ${CAP}:on --save
|
done
|
|
----------------------------------------------------------------------------------------------------------
|
|
Optional packages recommended:
|
|
denyhosts - a utility to help sys admins thwart ssh crackers
|
rsync - fast remote file copy program (for backup)
|
