ShareTech Mail Server 付費版SSL增加範例

先至自己架設的LINUX主機輸入CSR相關資料後產生出KEY

openssl req -new -newkey rsa:2048 -nodes -keyout server.key -out server.csr

使用EMAIL、DNS、WEB三種選其一驗證方式後

1.憑證中心所產生出該Domain憑證並填入第一欄。範例為CRT。OOO_COM_TW.crt，。

2.將自己架設之LINUX主機所產生的KEY內容添入第二欄。範例為Server.key。

3.憑證中心產生出憑證中心之憑證檔內容放入中繼憑證欄位。範例名稱為SectigoRSADomainValidationSecureServerCA.crt。即可完成設定!

 

Ubuntu 時間及時區設定

# 執行時區設定指令，選擇您要設定的時區:      sudo tzselect  
     第5項ASIA  TAIPEI第43時區

# 更換系統時區檔:       sudo ln -sf /usr/share/zoneinfo/Asia/Taipei /etc/localtime

# 讓本機系統時間連線至網路時間伺服器對時:    sudo ntpdate pool.ntp.org

# 更新 主機 BIOS 的時間  :     sudo hwclock -w 

# 編輯排程，輸入以下範例行，系統將匯入排程每日對時一次:  
sudo crontab -e  

@daily /usr/sbin/ntpdate pool.ntp.org > /dev/null

讓Windows 7 HOME版開啟系統管理員帳戶？

1. 進入安全模式
2.啟動DOS輸入以下指令
3. net user administrator  /activ:yes
4.重新開機即可出現Administrator帳號

NET USE 關機使用方式

net use \\192.168.1.254\c$ /user:administrator password
shutdown /r /m \\192.168.1.254 /t 0
net use \\192.168.1.254\c$ /delete

安裝 Zimbra Collaboration Server - Open Source Edition 紀錄

在記錄安裝 Zimbra WebMail 前，建議大家可以觀看原廠安裝手冊，本BLOG只記錄相關要點筆記!

(測試紀錄-20121209---目前測試 ubuntu10.04&Zimbra 7.21效能較優，Ubuntu12.04&Zimbra 8效能較差!  目前Zimbra 7.2不支援Ubuntu 12.04)


Linux前置作業
1. 請將HOSTS前兩筆紀錄更改成
127.0.0.1       localhost.localdomain localhost
127.0.0.1       your.domain.address.tw   mail

Install BIND9

In many case, your server didn't got public IP directly. But you got public IP by NAT by network device. In this condition you have to use Split DNS as Zimbra suggest (More Info)

• Install bind9

sudo apt-get install bind9

• edit /etc/bind/named.conf.options by the line forwarders change to our DNS IP then append zone that the bottom of line

options {
        directory "/var/cache/bind";
 
        // If there is a firewall between you and nameservers you want
        // to talk to, you may need to fix the firewall to allow multiple
        // ports to talk.  See http://www.kb.cert.org/vuls/id/800113
 
        // If your ISP provided one or more IP addresses for stable
        // nameservers, you probably want to use them as forwarders.
        // Uncomment the following block, and insert the addresses replacing
        // the all-0's placeholder.
 
        forwarders {
                0.0.0.0;
        };
 
        auth-nxdomain no;    # conform to RFC1035
        listen-on-v6 { any; };
};
 
zone "mail.awen.tw" {
        type master;
        file "db.mail.awen.tw";
};

• then create /var/cache/bind/db.mail.awen.tw don't forget to change filename to match with zone file

$ttl 38400
@       IN      SOA     mail.awen.tw. mail.awen.tw. (
                        2012120907
                        10800
                        3600
                        604800
                        38400 )
        IN      NS      ns1.mail.awen.tw.
        IN      NS      ns2.mail.awen.tw.
        IN      A       192.168.12.214
        IN      MX      10 mail.awen.tw.
 
@       A       192.168.12.214
ns1     A       192.168.12.214
ns2     A       192.168.12.214
mail    A       192.168.12.214

• Then edit /etc/resolv.conf and change nameserver to 127.0.0.1   (***這非常重要)

search mail.awen.tw
nameserver 127.0.0.1

• restart bind9

sudo /etc/init.d/bind9 restart

• Test by dig command and it should return like below

dig mail.awen.tw mx

; <<>> DiG 9.7.0-P1 <<>> zimbra.wingfoss.com mx
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 57886
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 3
 
;; QUESTION SECTION:
;zimbra.wingfoss.com.           IN      MX
 
;; ANSWER SECTION:
mail.awen.tw.    38400   IN      MX      10 mail.awen.tw.
 
;; AUTHORITY SECTION:
mail.awen.tw.    38400   IN      NS      ns1.mail.awen.tw.
mail.awen.tw.    38400   IN      NS      ns2.mail.awen.tw.
 
;; ADDITIONAL SECTION:
mail.awen.tw. 38400  IN      A       192.168.12.214
mail.awen.tw. 38400  IN      A       192.168.12.214
mail.awen.tw. 38400  IN      A       192.168.12.214
 
;; Query time: 0 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Fri Nov  4 21:00:19 2011
;; MSG SIZE  rcvd: 145

2. 下載Zimbra壓縮檔並解壓至/tmp，另外至Zimbra下載 ZCSLicense.xml至該目錄。

Zimbra安裝作業
tar xzvf [zcs.tgz]
./install.sh

期間可能出現缺少元件，請以手動安裝
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Checking for prerequisites...
     FOUND: NPTL
     FOUND: sudo-1.7.2p1-1ubuntu5.3
     FOUND: libidn11-1.15-2
     FOUND: libpcre3-7.8-3build1
     FOUND: libgmp3c2-2:4.3.2+dfsg-1ubuntu1
     FOUND: libexpat1-2.0.1-7ubuntu1
     FOUND: libstdc++6-4.4.3-4ubuntu5
     MISSING: libperl5.10
Checking for suggested prerequisites...
     FOUND: perl-5.10.1
     MISSING: sysstat does not appear to be installed.
     MISSING: sqlite3 does not appear to be installed.~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
將 MISSING的元件用手動安裝即可!
後續可依原廠安裝手冊進行安裝!
http://www.zimbra.com/docs/ne/latest/single_server_install/wwhelp/wwhimpl/js/html/wwhelp.htm#href=NE_QuickStart_7_1.Installing_Zimbra_Software.html

Download
http://www.zimbra.com/downloads/os-downloads.html