Wednesday, February 18, 2009

Building the sample machine - Steps

Title: Procedurs on building sample machine

Today, I and my partners are going to configure a mail server on a Linux OS. And the following tasks need to be implemented.

1. A computer that pre-installed with Linux OS like fedora 9/10 or Ubuntu 8.10.

2. Install and configure Sendmail.

3. Install and configure Mail Scanner, Spamassassin and ClamAV.

4. Install and configure white/black list filter like DCC, Razor2 and Pyzor.

Task 1:

We will get a computer and format and install Linux OS into it, if did not get a pre-installed Linux OS computer. This is a quite easy task among the other so I not going to show the steps on how I achieve this task.

Task 2:

Sendmail is one of the free to use mail agent. Normally, this is optional software integrated with Linux OS. If looking for new version, following is the official download page:

Download Page: http://www.sendmail.org/releases

Installation and Operation Guide: http://www.sendmail.org/doc/sendmail-current/doc/op/op.pdf

Configuration ReadMe: http://www.sendmail.org/documentation/configurationReadme

The main configuration files

we need to

concern in Sendmail are

Sample - /etc/resolv.conf:

domain esc.kbu.edu.my
nameserver 192.168.1.20

Please Note: An incorrectly configured resolv.conf file can lead to errors when running the m4 command to process the information in your sendmail.mc file.

Sample - /etc/hosts:

127.0.0.1 esc.kbu.edu.my localhost.localdomain localhost esc

Sample - /etc/mail/access:

localhost.localdomain RELAYlocalhost RELAY
127.0.0.1 RELAY
192.168.1.20 RELAY
esc.kbu.edu.my RELAY

Please Note: You'll then have to con

vert this text file into a Sendmail readable database file named /etc/mail/access.db. Here are the commands you need:

[root@esc.kbu.edu.my]# cd /etc/mail
[root@esc.kbu.edu.my]# make

Sample - /etc/mail/sendmail.mc:

Uncomment the following and edit the necessary information:

DAEMON_OPTIONS(‘Port=smtp, Name=MTA’)
DAEMON_OPTIONS(‘Port=submission, Name=MSA’)
FEATURE(`accept_unresolvable_domains')dnl
FEATURE(`masquerade_envelope')dnl
MASQUERADE_AS(`esc.kbu.edu.my')dnl
MASQUERADE_DOMAIN(`esc.kbu.edu.my')dnl
MASQUERADE_DOMAIN(localhost)dnl
MASQUERADE_DOMAIN(localhost.localdomain)dnl

Please Note: You'll then have to convert this text file into a Sendmail reada

ble configuration file named /etc/mail/sendmail.cf. Here are the commands you need:

[root@esc.kbu.edu.my]# m4 /etc/mail/sendmail.mc > /etc/mail/sendmail.cf

Please Note: After all the editing, use the following command to restart the service

[root@esc.kbu.edu.my]# /etc/init.d/sendmail restart

Task 3:

First, we need to download the setup file that is combined with Spamassassin and ClamAV.

Download Page: http://www.mailscanner.info/downloads.html

Download Link: http://www.mailscanner.info/files/4/install-Clam-SA-latest.tar.gz














General Guide:
http://www.mailscanner.info/install_guides.html

Installation and Configuration Guide (For Ubuntu):
http://www.mailscanner.info/ubuntu.html

Installation and Configuration Guide (For Other Unix/Linux):
http://www.mailscanner.info/other.html


Sample - /etc/clamd.conf:

LogFile /var/lib/clamav/log/clamd.log
#LogFileUnlock
LogTime
LogSyslog
#PidFile

TemporaryDirectory /var/lib/clamav/tmp
DatabaseDirectory /var/lib/clamav/db
LocalSocket /var/lib/clamav/run/clamd.sock
FixStaleSocket
#TCPSocket

User Clamav

ScanPE
ScanOLE2
ScanMail
ScanHTML
#ScanArchive
ScanRAR

Sample - /etc/freshclam.conf:

Link: http://svn.pardus.org.tr/pardus/tags/2007.1/applications/security/clamav/files/freshclam.conf

Task 4:

A : DCC (Distributed Checksum Clearinghouse)

Download Page: http://www.dcc-servers.net/dcc/

Install

tar -zxvf dcc.tar.Z
cd dcc-1.3.92
./configure
make
make install

Configure
[root@esc.kbu.edu.my]# cd /etc/mail/spamassassin
[root@esc.kbu.edu.my]# vi v310.pre


Uncomment from
#loadplugin Mail::SpamAssassin::Plugin::DCC
To
loadplugin Mail::SpamAssassin::Plugin::DCC

Installation checking

[root@esc.kbu.edu.my]# cdcc info

Activate DCC function

[root@esc.kbu.edu.my]# cd /etc/mail/spamassassin
[root@esc.kbu.edu.my]# vi local.cf

Add the following into that configuration file:
use_dcc 1
dcc_home /var/dcc

[root@esc.kbu.edu.my]# cd /var/dcc
[root@esc.kbu.edu.my]# vi dcc_conf

Edit from
DCCIFD_ENABLE=off

To
DCCIFD_ENABLE=on
ln -s /var/dcc/libexec/rcDCC /etc/rc.d/init.d/DCC
chkconfig --add DCC

B: Pyzor

Download Page: http://pyzor.sourceforge.net/

Install

tar jxvf pyzor-0.4.0.tar.bz2
cd pyzor-0.4.0
python setup.py build
python setup.py install
chmod -R a+rX /usr/share/doc/pyzor \
/usr/lib/python2.5/site-packages/pyzor \
/usr/bin/pyzor /usr/bin/pyzord

Configure

Use the following command to download a folder named as servers from the pyzor server:

pyzor discover

Activate DCC function

[root@esc.kbu.edu.my]# cd /etc/mail/spamassassin
[root@esc.kbu.edu.my]# vi local.cf

Add the following into that configuration file:
use_pyzor 1
pyzor _options --homedir /etc/mail/spamassassin

Run the following command to download again the folder into the specified path:

pyzor --homedir /etc/mail/spamassassin discover

C: Razor2

Download Page: http://razor.sourceforge.net/

We need both razor-agents-2.84 and razor-agents-sdk.

Install razor-agents-2.84

tar -vxf razor-agents-2.84.tar.bz2
cd razor-agents-2.84
perl Makefile.PL
make
make test
make install

Install razor-agents-sdk

tar -vxf razor-agents-sdk-2.07.tar.bz2
cd razor-agents-sdk-2.07
perl Makefile.PL
make
make test
make install

razor-client
razor-admin –create
razor-admin -register -user=user@XXX.XXX -pass= xxxx

Activate DCC function

[root@esc.kbu.edu.my]# cd /etc/mail/spamassassin
[root@esc.kbu.edu.my]# vi local.cf

Add the following into that configuration file:
use_razor2 1

Checking

Use the following command to check whether the Razor2 working or not. If working, “razor2 is available” this sentence will be appear.

[root@esc.kbu.edu.my]# spamassassin -t -D razor2 < /usr/share/doc/spamassassin-3.2.5/sample-spam.txt

No comments:

Post a Comment