Login  View  Edit  Attributes  History  Attach  Print  Search

Ella

info: created a script to rotate the spam. keep 4 weeks of spam, then it is deleted. a sieve filter puts all mail in the spam user directly in the archive folder, all spam, viruses, etc. over 10 (set in /etc/amavis/amavisd.conf) going to one account.

imapd.log not being used.

used ipurge to get rid of mail older than 20 days in test. have to use -f option, but this means it checks all folders under level requested, and if you are cleaning the inbox, this is all folders, so be careful. must do as user cyrus: /usr/sbin/ipurge -d 20 -f user.test

Maybe should do this: put the following in my cyrus.conf on one of my servers (in the EVENTS section):

purgetrash cmd="/usr/sbin/ipurge -f -d 14 *.Trash" at=0301

Which purges all messages older than 14 days, in all users' Trash folders and runs every morning at 3:01am. See the man pages for ipurge and cyrus.conf for more details.

I am still getting error, [warn] NameVirtualHost *:80 has no VirtualHosts It is just a warning, and not clear to me how to fix it, unless I give my domain its own ip. not worth it at this point.
http://www.mydigitallife.info/2007/08/11/apache-warn-namevirtualhost-80-has-no-virtualhosts-error-when-start/
http://httpd.apache.org/docs/2.2/vhosts/examples.html

Procedure used to switch to new machine: http://www.mail-archive.com/info-cyrus@lists.andrew.cmu.edu/msg38092.html
mail set up based on:
http://www200.pair.com/mecham/spam/spamfilter20090215.html
+ cyrus instead of outside mail delivery http://cyrusimap.web.cmu.edu/imapd/install-configure.html
did just before switch:

  • change names in bacula-fd.conf
  • get rid of ip 17 in /etc/exports on billie
  • move stuff for website, munin, webalizer, etc from ella.
    • /var/lib/munin /var/log/munin /var/run/munin
    • rsync entire directory: /var/www/
    • may want to look at directories, and not move the mailman default list? /var/lib/mailman/archives /var/lib/mailman/data /var/lib/mailman/logs /var/lib/mailman/lists /var/lib/mailman/archives
  • close access to mail/web server on firewall
    • update /var/cyrus and /var/spool/cyrus with rsync from ella - see web page above for explicit instructions
    to change logging for cyrus: /etc/default/cyrus2.2/

used saslpasswd2 to create users postmaster, can't use cyrus to log in saslpasswd2 cyrus

good to know:

  • once you are sure crontab is running mail_pass like it should be, can stop sending emails every night by editing mail_pass.sh
  • working through master.cf useful how-to:
  • dealing with aliases
# If you change the alias database, run newaliases
*to deal with modules in apache use [@a2enmod module
and a2dismod module

Still to do:

certificates on ella

  • /etc/ssl/certs/ (not ours)
  • /etc/postfix (referred to in postfix/main.cf, smtp.shadlen.org)
  • /etc/ssl/shadlen (backup copies)
  • /etc/cyrus/ (imapd.conf - cyrus config, imap.shadlen.org, ca)
  • /etc/apaceh2/ (set in sites-enabled/secure, www.shadlen.org)
  • tweaking settings:

If you want to configure your system to use more instances of amavisd-new, allocate at least 60MB for each additional instance. It you wanted to double the number of child processes from 2 to 4, you would edit amavisd.conf and change: $max_servers = 2; to $max_servers = 4; Then edit master.cf and change: smtp-amavis unix - - - - 2 smtp to smtp-amavis unix - - - - 4 smtp

Amavisd-new (SpamAssassin actually) will be the biggest bottleneck in the system. On a busy server you will probably want 2GB RAM so you can accommodate somewhere around 12 $max_servers.

If you run sa-learn --force-expire or spamassassin --lint -D or other spamassassin commands from the root account, SpamAssassin may change the owner of the Bayes files to 'root'. If it does, amavis will no longer be able to read those files. You would need to run chown -R amavis:amavis /var/lib/amavis to regain ownership. In general, if you do any spamassassin maintenance from the command prompt as root, the best thing to do is run chown -R amavis:amavis /var/lib/amavis afterwards; just to make sure. You can avoid these problems by remembering to run spamassassin commands as the amavis user. For example su amavis -c 'sa-learn --sync --force-expire'

This script does have some entries that are dependent on the version of SA. If you are not running SA 3.2.5, the script may need to be edited, and you must remember to edit this file when a new version of SA comes out: vi /usr/sbin/sa-update.sh

Notice the lines that may need to be changed. Change 3.002005 if needed (3.3.0 might be 3.003000 for example): rm -f /var/lib/spamassassin/3.002005/saupdates_openprotect_com/70_sare_whitelist_spf.cf rm -f /var/lib/spamassassin/3.002005/saupdates_openprotect_com/70_sare_stocks.cf rm -f /var/lib/spamassassin/3.002005/saupdates_openprotect_com/loadplugins.pre

Exit (or save) the file and run the script: sa-update.sh

Need to stop apache when home directory is unavailable, would be nice to be able to restart it without trying to serve home. Actually, worked to just do umount -l /home before disconnecting home and then remount when available

Tried installing wordpress, but had problems getting mysql working, and didn't want to screw around with it. Something to play with for new server

Bind using jail now, but still need to check into logging, not sure what is being logged.

want to have web server use UTF-8 by default. look at tianming's email

munin

  • can change munin frequency in /etc/cron.d/munin,

Testing

testing and how-to stuff:

This excludes much the server says back to you...

server1:~# telnet 10.208.108.13 25
Trying 127.0.0.1...
Connected to localhost.
Escape character is '^]'.
220 server1.example.com ESMTP Postfix (Debian/GNU)
ehlo localhost
250-server1.example.com
250-PIPELINING
250-SIZE 10240000
250-VRFY
250-ETRN
250-STARTTLS
250-AUTH LOGIN PLAIN
250-AUTH=LOGIN PLAIN
250-ENHANCEDSTATUSCODES
250-8BITMIME
250 DSN
mail from:<steve@example.com>
rcpt to:<john@example.com>
data
Hi John,

just wanted to drop you a note.
.
quit

look at log file for postfix sending. This should not involve spam filtering. spam filtering is only through mail.shadlen.org (14) not actually sure about port 25 on mail.shadlen.org check to inbox

http://www200.pair.com/mecham/spam/spamfilter20090215.html#testit

At the bottom of the above link are also hints about dealing with logfiles and backing up config files.

spamassassin -t < message.eml

to see more infos (what SA is actually doing)

spamassassin -D -t < message.eml

check website check squirrel mail