New MailScanner machine

[Plant, Dean]

If it helps anyone, this is the package list from my minimal MailScanner
Kickstart. Inspired from http://www.owlriver.com/tips/tiny-centos/ with
packages added for MailScanner/MailWatch/Mailscanner-mrtg.

%packages
sudo
kernel
grub
openssh-server
openssh
openssh-clients
yum
# Added for MailScanner
sendmail-cf
sendmail-devel
compat-libstdc++-33
mysql
mrtg
perl-DBD-MySQL
mysql-server
sysstat
apr
apr-util
httpd
httpd-suexec
php
php-mysql
php-gd
php-pear
bind
bind-chroot
caching-nameserver
lm_sensors
net-snmp
net-snmp-utils
ntp
@ development-tools
#
-anacron
-apmd
-autofs
-bluez-libs
-bluez-bluefw
-bluez-hcidump
-bluez-utils
-comps
-cups
-cups-libs
-desktop-file-utils
-dhcpv6_client
-diskdumputils
-dmraid
-eject
-finger
-lftp
-logwatch
-rpmdb-CentOS
-fbset
-freetype
-fontconfig
-htmlview
-ipsec-tools
-iptables
-irda-utils
-isdn4k-utils
-lockdev
-mailcap
-mdadm
-mgetty
-minicom
-mt-st
-nano
-nc
-netdump
-nfs-utils
-quota
-pcmcia-cs
-pinfo
-portmap
-rdist
-rmt
-rp-pppoe
-rsh
-statserial
-setserial
-slocate
-specspo
-stunnel
-sysreport
-system-config-securitylevel-tui
-system-config-network-tui
-talk
-tcpdump
-vconfig
-wvdial
-wireless-tools
-ypbind
-yp-tools
-redhat-lsb
-xorg-x11-Mesa-libGL
-xorg-x11-libs
system-config-mouse
-pyxf86config
-rhpl
-libwvstreams
-ppp
-utemper
-wireless-tools



-----Original Message-----
From: mailscanner-bounces at lists.mailscanner.info
[mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Randal,
Phil
Sent: 05 April 2006 10:20
To: MailScanner discussion
Subject: RE: New MailScanner machine


Installing MailScanner on Centos 4.2 (my notes are old so some
versioning is incorrect)

1:  Install Centos 4.2

    Download the CentOS server CD from one of www.centos.org's mirrors
and burn to a CD.
	
	Boot from that CD
	press enter at the first text prompt
	perform the media check
	welcome: click next
	language selection: select English (English)
	keyboard: United Kingdom
	mouse: choose it
	automatic partition: accept
	remove all partitions
	say yes when warned
	Partitioning: accept default scheme
	Boot Loader: accept default
	network config: Unselect "Configure using DHCP" and enter
appropriate values
	Firewall: no firewall
	Additional Languages: English GB (set as default)
	Time Zone - select Europe/London
	root password: do not lose this and make it non-trivial
	Package Defaults: Customize
	Package Group selection:
	    Conf Tools
		    accept defaults
		Web Server
		    add php-mysql
			add php-pgsql
			remove squid
			remove webalyzer
		Mail Server
		    add sendmail-cf
			remove dovecot
			remove spamassassin (we'll install it ourselves
later)
		Windows File Server
		    do not select
		DNS
		    accept defaults
		FTP
		    do not select
		PostgreSQL
		    accept defaults
			add postgresql
			add postgresql-server
		MySQL
		    defaults
			add mysql-server
			add php-mysql
		Admin Tools
		    defaults
		System Tools
		    do not select
		Printing
		    do not select
		
	install that lot, then reboot (ejecting CD during reboot) and
log in as root
	
	reinsert Centos Server CD in CDROM drive
	rpm --import /media/cdrom/RPM-GPG-KEY-centos4
	
	then "yum install" the following (I'm not sure ALL are necessary
but most
	are for MailScanner/MailWatch/Mailscanner-mrtg)
	
		bzip2-devel
		db4-devel
		compat-libstdc++*
		curl-devel
		elinks
		emacs
		gcc-c++-3.4.4
		gmp-devel
		lynx
		mrtg
		net-snmp-utils
 	      openldap-devel
		php-gd
		python-devel
		rpm-build
		sendmail-devel
		
	then do a "yum update" to get everything up to date.
	
	chkconfig --level 2345 cups off
	chkconfig --level 2345 httpd on
	chkconfig --level 2345 mysqld on
	chkconfig --level 2345 named on
	chkconfig --level 2345 snmpd on
	
	edit /etc/resolv.conf adding at front
	nameserver 127.0.0.1
	
	reboot (again ejecting CD so we don't boot from it by mistake)
	
	login as root (well, as you and su where appropriate)

Install Unrar

	Unrar is an archive unpacker available from freshrpms.net.
	It is used to unpack .rar archives so we can virus scan them.
	
	We'll use the package from Dag Wieers' RPM repository for RHEL 4
	
	create the file /etc/yum.repos.d/dag.repo
--------
[dag]
name=Dag RPM Repository for Red Hat Enterprise Linux
baseurl=http://apt.sw.be/redhat/el$releasever/en/$basearch/dag
gpgcheck=1
gpgkey=http://dag.wieers.com/packages/RPM-GPG-KEY.dag.txt
enabled=1
includepkgs=unrar
-------

    yum install unrar


	Install clamav 0.88 and spamassassin 3.11 from Julian's tarball
	
	cd /usr/src
	wget
http://www.sng.ecs.soton.ac.uk/mailscanner/files/4/install-Clam-SA.tar.g
z
	tar zxvf install-Clam-SA.tar.gz
	cd install-Clam-SA
	./install.sh
	
	edit /usr/local/etc/freshclam.conf
		 
        to set "uk" database location.
	
	freshclam
	
	    this should retrieve the current virus patterns without
giving any
		warnings.  If you get warnings about digital signatures
not being
		supported you've failed to install gmp-devel earlier.

    edit /etc/mail/spamassassin/v310.pre to make sure dcc and razor2
	plugins are enabled
	
	Then install MailScanner
	
	cd /usr/src
	wget
http://www.sng.ecs.soton.ac.uk/mailscanner/files/4/rpm/MailScanner-4.51.
5-1.rpm.tar.gz
	tar zxvf MailScanner-4.51.5-1.rpm.tar.gz
	cd MailScanner-4.50.10-1
	./install.sh
	
	follow the instructions given at end of install to the letter
	
	service sendmail stop
	chkconfig --level 2345 sendmail off
	chkconfig --level 2345 MailScanner on
	
	Performance tuning MailScanner
	
	add the following line to /etc/fstab
	none /var/spool/MailScanner/incoming tmpfs defaults 0 0
	service MailScanner stop
	mount /var/spool/MailScanner/incoming

etc...

My notes are in a state of flux, so I'll stop there for the moment.

Cheers,

Phil


----
Phil Randal
Network Engineer
Herefordshire Council
Hereford, UK  

> -----Original Message-----
> From: mailscanner-bounces at lists.mailscanner.info 
> [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf 
> Of Ken Goods
> Sent: 04 April 2006 23:52
> To: MailScanner Mailing List (E-mail)
> Subject: OT: New MailScanner machine
> 
> I'm putting together a new machine to replace the one 
> currently filtering
> our mail and delivering to an exchange server. The load 
> increased back in
> December due to an update of MailScanner, Spamassassin, 
> ClamAV, (and adding
> bitdefender). Spamassassin is timing out regularly and the 
> machine is in
> heavy swap. (P233 with 196MB, processing ~8k emails per day).
> 
> I have found another machine in the boneyard that has a little more
> horsepower (550 PIII with 384MB) and would like to build a 
> new box running
> the same configuration, plus it gives me a chance to add some 
> "legs" to the
> old OS (Redhat 9). My plan is Centos 4.0 for the OS and sticking with
> everything else as it suits my comfort level.
> 
> My question is this... I want to load the least services to support
> MailScanner, Spamassassin, Clam, Bitdefender, Webmin, and 
> Mailscanner-Mrtg.
> I noticed that there are three ISO's for Centos and another for Centos
> Server. Can I get away with just the Server ISO and use a 
> minimal install or
> do I need to get all four and use a combination of them? 
> Sorry if this is
> noob but I've looked around and can't find much information on the
> difference between the server ISO and the others and thought 
> someone here
> may have some experience.
> 
> Any help would be appreciated much.
> 
> TIA
> Ken
> -- 
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
> 
> Before posting, read http://wiki.mailscanner.info/posting
> 
> Support MailScanner development - buy the book off the website! 
> 
-- 
MailScanner mailing list
mailscanner at lists.mailscanner.info
http://lists.mailscanner.info/mailman/listinfo/mailscanner

Before posting, read http://wiki.mailscanner.info/posting

Support MailScanner development - buy the book off the website!