New MailScanner machine

[Randal, Phil]

No time at all, alas, and it will doubtless be rewritten when I build my
next MailScanner box in a week or two.   Half my notes say to copy a
whole host of my own pre-prepared config files here and there, so they
need massaging.

One day I'll get it sorted.

At the moment I'm busy trialling server virtualisation.

Cheers,

Phil
----
Phil Randal
Network Engineer
Herefordshire Council
Hereford, UK  

> -----Original Message-----
> From: mailscanner-bounces at lists.mailscanner.info 
> [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf 
> Of Martin Hepworth
> Sent: 05 April 2006 10:33
> To: 'MailScanner discussion'
> Subject: RE: New MailScanner machine
> 
> Phil
> 
> Ooo shiney
> 
> Have you got some time to add this to the wiki...??
> 
> --
> Martin Hepworth 
> Snr Systems Administrator
> Solid State Logic
> Tel: +44 (0)1865 842300
> 
> > -----Original Message-----
> > From: mailscanner-bounces at lists.mailscanner.info 
> [mailto:mailscanner-
> > bounces at lists.mailscanner.info] On Behalf Of Randal, Phil
> > Sent: 05 April 2006 10:20
> > To: MailScanner discussion
> > Subject: RE: New MailScanner machine
> > 
> > Installing MailScanner on Centos 4.2 (my notes are old so some
> > versioning is incorrect)
> > 
> > 1:  Install Centos 4.2
> > 
> >     Download the CentOS server CD from one of 
> www.centos.org's mirrors
> > and burn to a CD.
> > 
> > 	Boot from that CD
> > 	press enter at the first text prompt
> > 	perform the media check
> > 	welcome: click next
> > 	language selection: select English (English)
> > 	keyboard: United Kingdom
> > 	mouse: choose it
> > 	automatic partition: accept
> > 	remove all partitions
> > 	say yes when warned
> > 	Partitioning: accept default scheme
> > 	Boot Loader: accept default
> > 	network config: Unselect "Configure using DHCP" and enter
> > appropriate values
> > 	Firewall: no firewall
> > 	Additional Languages: English GB (set as default)
> > 	Time Zone - select Europe/London
> > 	root password: do not lose this and make it non-trivial
> > 	Package Defaults: Customize
> > 	Package Group selection:
> > 	    Conf Tools
> > 		    accept defaults
> > 		Web Server
> > 		    add php-mysql
> > 			add php-pgsql
> > 			remove squid
> > 			remove webalyzer
> > 		Mail Server
> > 		    add sendmail-cf
> > 			remove dovecot
> > 			remove spamassassin (we'll install it ourselves
> > later)
> > 		Windows File Server
> > 		    do not select
> > 		DNS
> > 		    accept defaults
> > 		FTP
> > 		    do not select
> > 		PostgreSQL
> > 		    accept defaults
> > 			add postgresql
> > 			add postgresql-server
> > 		MySQL
> > 		    defaults
> > 			add mysql-server
> > 			add php-mysql
> > 		Admin Tools
> > 		    defaults
> > 		System Tools
> > 		    do not select
> > 		Printing
> > 		    do not select
> > 
> > 	install that lot, then reboot (ejecting CD during reboot) and
> > log in as root
> > 
> > 	reinsert Centos Server CD in CDROM drive
> > 	rpm --import /media/cdrom/RPM-GPG-KEY-centos4
> > 
> > 	then "yum install" the following (I'm not sure ALL are necessary
> > but most
> > 	are for MailScanner/MailWatch/Mailscanner-mrtg)
> > 
> > 		bzip2-devel
> > 		db4-devel
> > 		compat-libstdc++*
> > 		curl-devel
> > 		elinks
> > 		emacs
> > 		gcc-c++-3.4.4
> > 		gmp-devel
> > 		lynx
> > 		mrtg
> > 		net-snmp-utils
> >  	      openldap-devel
> > 		php-gd
> > 		python-devel
> > 		rpm-build
> > 		sendmail-devel
> > 
> > 	then do a "yum update" to get everything up to date.
> > 
> > 	chkconfig --level 2345 cups off
> > 	chkconfig --level 2345 httpd on
> > 	chkconfig --level 2345 mysqld on
> > 	chkconfig --level 2345 named on
> > 	chkconfig --level 2345 snmpd on
> > 
> > 	edit /etc/resolv.conf adding at front
> > 	nameserver 127.0.0.1
> > 
> > 	reboot (again ejecting CD so we don't boot from it by mistake)
> > 
> > 	login as root (well, as you and su where appropriate)
> > 
> > Install Unrar
> > 
> > 	Unrar is an archive unpacker available from freshrpms.net.
> > 	It is used to unpack .rar archives so we can virus scan them.
> > 
> > 	We'll use the package from Dag Wieers' RPM repository for RHEL 4
> > 
> > 	create the file /etc/yum.repos.d/dag.repo
> > --------
> > [dag]
> > name=Dag RPM Repository for Red Hat Enterprise Linux
> > baseurl=http://apt.sw.be/redhat/el$releasever/en/$basearch/dag
> > gpgcheck=1
> > gpgkey=http://dag.wieers.com/packages/RPM-GPG-KEY.dag.txt
> > enabled=1
> > includepkgs=unrar
> > -------
> > 
> >     yum install unrar
> > 
> > 
> > 	Install clamav 0.88 and spamassassin 3.11 from Julian's tarball
> > 
> > 	cd /usr/src
> > 	wget
> > 
> http://www.sng.ecs.soton.ac.uk/mailscanner/files/4/install-Cla
> m-SA.tar.g
> > z
> > 	tar zxvf install-Clam-SA.tar.gz
> > 	cd install-Clam-SA
> > 	./install.sh
> > 
> > 	edit /usr/local/etc/freshclam.conf
> > 
> >         to set "uk" database location.
> > 
> > 	freshclam
> > 
> > 	    this should retrieve the current virus patterns without
> > giving any
> > 		warnings.  If you get warnings about digital signatures
> > not being
> > 		supported you've failed to install gmp-devel earlier.
> > 
> >     edit /etc/mail/spamassassin/v310.pre to make sure dcc and razor2
> > 	plugins are enabled
> > 
> > 	Then install MailScanner
> > 
> > 	cd /usr/src
> > 	wget
> > 
> http://www.sng.ecs.soton.ac.uk/mailscanner/files/4/rpm/MailSca
> nner-4.51.
> > 5-1.rpm.tar.gz
> > 	tar zxvf MailScanner-4.51.5-1.rpm.tar.gz
> > 	cd MailScanner-4.50.10-1
> > 	./install.sh
> > 
> > 	follow the instructions given at end of install to the letter
> > 
> > 	service sendmail stop
> > 	chkconfig --level 2345 sendmail off
> > 	chkconfig --level 2345 MailScanner on
> > 
> > 	Performance tuning MailScanner
> > 
> > 	add the following line to /etc/fstab
> > 	none /var/spool/MailScanner/incoming tmpfs defaults 0 0
> > 	service MailScanner stop
> > 	mount /var/spool/MailScanner/incoming
> > 
> > etc...
> > 
> > My notes are in a state of flux, so I'll stop there for the moment.
> > 
> > Cheers,
> > 
> > Phil
> > 
> > 
> > ----
> > Phil Randal
> > Network Engineer
> > Herefordshire Council
> > Hereford, UK
> > 
> > > -----Original Message-----
> > > From: mailscanner-bounces at lists.mailscanner.info
> > > [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf
> > > Of Ken Goods
> > > Sent: 04 April 2006 23:52
> > > To: MailScanner Mailing List (E-mail)
> > > Subject: OT: New MailScanner machine
> > >
> > > I'm putting together a new machine to replace the one
> > > currently filtering
> > > our mail and delivering to an exchange server. The load
> > > increased back in
> > > December due to an update of MailScanner, Spamassassin,
> > > ClamAV, (and adding
> > > bitdefender). Spamassassin is timing out regularly and the
> > > machine is in
> > > heavy swap. (P233 with 196MB, processing ~8k emails per day).
> > >
> > > I have found another machine in the boneyard that has a 
> little more
> > > horsepower (550 PIII with 384MB) and would like to build a
> > > new box running
> > > the same configuration, plus it gives me a chance to add some
> > > "legs" to the
> > > old OS (Redhat 9). My plan is Centos 4.0 for the OS and 
> sticking with
> > > everything else as it suits my comfort level.
> > >
> > > My question is this... I want to load the least services 
> to support
> > > MailScanner, Spamassassin, Clam, Bitdefender, Webmin, and
> > > Mailscanner-Mrtg.
> > > I noticed that there are three ISO's for Centos and 
> another for Centos
> > > Server. Can I get away with just the Server ISO and use a
> > > minimal install or
> > > do I need to get all four and use a combination of them?
> > > Sorry if this is
> > > noob but I've looked around and can't find much information on the
> > > difference between the server ISO and the others and thought
> > > someone here
> > > may have some experience.
> > >
> > > Any help would be appreciated much.
> > >
> > > TIA
> > > Ken
> > > --
> > > MailScanner mailing list
> > > mailscanner at lists.mailscanner.info
> > > http://lists.mailscanner.info/mailman/listinfo/mailscanner
> > >
> > > Before posting, read http://wiki.mailscanner.info/posting
> > >
> > > Support MailScanner development - buy the book off the website!
> > >
> > --
> > MailScanner mailing list
> > mailscanner at lists.mailscanner.info
> > http://lists.mailscanner.info/mailman/listinfo/mailscanner
> > 
> > Before posting, read http://wiki.mailscanner.info/posting
> > 
> > Support MailScanner development - buy the book off the website!
> 
> 
> **********************************************************************
> 
> This email and any files transmitted with it are confidential and
> intended solely for the use of the individual or entity to whom they
> are addressed. If you have received this email in error please notify
> the system manager.
> 
> This footnote confirms that this email message has been swept
> for the presence of computer viruses and is believed to be clean.	
> 
> **********************************************************************
> 
> -- 
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
> 
> Before posting, read http://wiki.mailscanner.info/posting
> 
> Support MailScanner development - buy the book off the website! 
>