New MailScanner machine
Martin Hepworth
martinh at solid-state-logic.com
Wed Apr 5 10:32:32 IST 2006
Phil
Ooo shiney
Have you got some time to add this to the wiki...??
--
Martin Hepworth
Snr Systems Administrator
Solid State Logic
Tel: +44 (0)1865 842300
> -----Original Message-----
> From: mailscanner-bounces at lists.mailscanner.info [mailto:mailscanner-
> bounces at lists.mailscanner.info] On Behalf Of Randal, Phil
> Sent: 05 April 2006 10:20
> To: MailScanner discussion
> Subject: RE: New MailScanner machine
>
> Installing MailScanner on Centos 4.2 (my notes are old so some
> versioning is incorrect)
>
> 1: Install Centos 4.2
>
> Download the CentOS server CD from one of www.centos.org's mirrors
> and burn to a CD.
>
> Boot from that CD
> press enter at the first text prompt
> perform the media check
> welcome: click next
> language selection: select English (English)
> keyboard: United Kingdom
> mouse: choose it
> automatic partition: accept
> remove all partitions
> say yes when warned
> Partitioning: accept default scheme
> Boot Loader: accept default
> network config: Unselect "Configure using DHCP" and enter
> appropriate values
> Firewall: no firewall
> Additional Languages: English GB (set as default)
> Time Zone - select Europe/London
> root password: do not lose this and make it non-trivial
> Package Defaults: Customize
> Package Group selection:
> Conf Tools
> accept defaults
> Web Server
> add php-mysql
> add php-pgsql
> remove squid
> remove webalyzer
> Mail Server
> add sendmail-cf
> remove dovecot
> remove spamassassin (we'll install it ourselves
> later)
> Windows File Server
> do not select
> DNS
> accept defaults
> FTP
> do not select
> PostgreSQL
> accept defaults
> add postgresql
> add postgresql-server
> MySQL
> defaults
> add mysql-server
> add php-mysql
> Admin Tools
> defaults
> System Tools
> do not select
> Printing
> do not select
>
> install that lot, then reboot (ejecting CD during reboot) and
> log in as root
>
> reinsert Centos Server CD in CDROM drive
> rpm --import /media/cdrom/RPM-GPG-KEY-centos4
>
> then "yum install" the following (I'm not sure ALL are necessary
> but most
> are for MailScanner/MailWatch/Mailscanner-mrtg)
>
> bzip2-devel
> db4-devel
> compat-libstdc++*
> curl-devel
> elinks
> emacs
> gcc-c++-3.4.4
> gmp-devel
> lynx
> mrtg
> net-snmp-utils
> openldap-devel
> php-gd
> python-devel
> rpm-build
> sendmail-devel
>
> then do a "yum update" to get everything up to date.
>
> chkconfig --level 2345 cups off
> chkconfig --level 2345 httpd on
> chkconfig --level 2345 mysqld on
> chkconfig --level 2345 named on
> chkconfig --level 2345 snmpd on
>
> edit /etc/resolv.conf adding at front
> nameserver 127.0.0.1
>
> reboot (again ejecting CD so we don't boot from it by mistake)
>
> login as root (well, as you and su where appropriate)
>
> Install Unrar
>
> Unrar is an archive unpacker available from freshrpms.net.
> It is used to unpack .rar archives so we can virus scan them.
>
> We'll use the package from Dag Wieers' RPM repository for RHEL 4
>
> create the file /etc/yum.repos.d/dag.repo
> --------
> [dag]
> name=Dag RPM Repository for Red Hat Enterprise Linux
> baseurl=http://apt.sw.be/redhat/el$releasever/en/$basearch/dag
> gpgcheck=1
> gpgkey=http://dag.wieers.com/packages/RPM-GPG-KEY.dag.txt
> enabled=1
> includepkgs=unrar
> -------
>
> yum install unrar
>
>
> Install clamav 0.88 and spamassassin 3.11 from Julian's tarball
>
> cd /usr/src
> wget
> http://www.sng.ecs.soton.ac.uk/mailscanner/files/4/install-Clam-SA.tar.g
> z
> tar zxvf install-Clam-SA.tar.gz
> cd install-Clam-SA
> ./install.sh
>
> edit /usr/local/etc/freshclam.conf
>
> to set "uk" database location.
>
> freshclam
>
> this should retrieve the current virus patterns without
> giving any
> warnings. If you get warnings about digital signatures
> not being
> supported you've failed to install gmp-devel earlier.
>
> edit /etc/mail/spamassassin/v310.pre to make sure dcc and razor2
> plugins are enabled
>
> Then install MailScanner
>
> cd /usr/src
> wget
> http://www.sng.ecs.soton.ac.uk/mailscanner/files/4/rpm/MailScanner-4.51.
> 5-1.rpm.tar.gz
> tar zxvf MailScanner-4.51.5-1.rpm.tar.gz
> cd MailScanner-4.50.10-1
> ./install.sh
>
> follow the instructions given at end of install to the letter
>
> service sendmail stop
> chkconfig --level 2345 sendmail off
> chkconfig --level 2345 MailScanner on
>
> Performance tuning MailScanner
>
> add the following line to /etc/fstab
> none /var/spool/MailScanner/incoming tmpfs defaults 0 0
> service MailScanner stop
> mount /var/spool/MailScanner/incoming
>
> etc...
>
> My notes are in a state of flux, so I'll stop there for the moment.
>
> Cheers,
>
> Phil
>
>
> ----
> Phil Randal
> Network Engineer
> Herefordshire Council
> Hereford, UK
>
> > -----Original Message-----
> > From: mailscanner-bounces at lists.mailscanner.info
> > [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf
> > Of Ken Goods
> > Sent: 04 April 2006 23:52
> > To: MailScanner Mailing List (E-mail)
> > Subject: OT: New MailScanner machine
> >
> > I'm putting together a new machine to replace the one
> > currently filtering
> > our mail and delivering to an exchange server. The load
> > increased back in
> > December due to an update of MailScanner, Spamassassin,
> > ClamAV, (and adding
> > bitdefender). Spamassassin is timing out regularly and the
> > machine is in
> > heavy swap. (P233 with 196MB, processing ~8k emails per day).
> >
> > I have found another machine in the boneyard that has a little more
> > horsepower (550 PIII with 384MB) and would like to build a
> > new box running
> > the same configuration, plus it gives me a chance to add some
> > "legs" to the
> > old OS (Redhat 9). My plan is Centos 4.0 for the OS and sticking with
> > everything else as it suits my comfort level.
> >
> > My question is this... I want to load the least services to support
> > MailScanner, Spamassassin, Clam, Bitdefender, Webmin, and
> > Mailscanner-Mrtg.
> > I noticed that there are three ISO's for Centos and another for Centos
> > Server. Can I get away with just the Server ISO and use a
> > minimal install or
> > do I need to get all four and use a combination of them?
> > Sorry if this is
> > noob but I've looked around and can't find much information on the
> > difference between the server ISO and the others and thought
> > someone here
> > may have some experience.
> >
> > Any help would be appreciated much.
> >
> > TIA
> > Ken
> > --
> > MailScanner mailing list
> > mailscanner at lists.mailscanner.info
> > http://lists.mailscanner.info/mailman/listinfo/mailscanner
> >
> > Before posting, read http://wiki.mailscanner.info/posting
> >
> > Support MailScanner development - buy the book off the website!
> >
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
> Before posting, read http://wiki.mailscanner.info/posting
>
> Support MailScanner development - buy the book off the website!
**********************************************************************
This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they
are addressed. If you have received this email in error please notify
the system manager.
This footnote confirms that this email message has been swept
for the presence of computer viruses and is believed to be clean.
**********************************************************************
More information about the MailScanner
mailing list