Had an existing Postfix configurationup and running. Notes for bringing up the same available at https://www.sandeeprao.net/configuring-secure-mail-server-using-postfix-with-dovecot-spamassasin-postgrey-and-opendkim/ As I could add more vCPU and RAM to the VM, thought of adding anti-virus check on receipt of mails. As I had already configured amavis + spamassassin it was pretty straight forward, install the required clamav packages along…
Author: sandeep
NIC Bonding
Upgraded the lab by adding a new server, primarily hosting an NFS server. Upgraded all servers by adding 2 x 10G NICs in all the servers connected via Microtik CRS309 Desktop Router (Using SwitchOS and not RouterOS) – supports LACP. On the server-side decided to bond both the 10G NICs so that better network throughput…
Configuring secure mail server using Postfix with Dovecot, Amavis, Spamassasin, Postgrey and OpenDKIM
Prerequisite : https://www.sandeeprao.net/preparing-for-configuring-secure-mail-server-using-postfix-dovecot-spamassassin-and-opendkim/ Install required packages #apt install -y razor #apt install -y amavisd-new dovecot-core dovecot-imapd dovecot-lmtpd dovecot-mysql dovecot-sieve haveged mailutils mariadb-server opendkim opendkim-tools p7zip postfix postfix-mysql postgrey spamassassin Create require vmail user and group #groupadd -g 5000 vmail #useradd -g vmail -u 5000 vmail -d /var/vmail Create mailbox directory #mkdir -p /var/vmail #chown -R…
Preparing for configuring secure mail server using Postfix, Dovecot, Spamassassin and OpenDKIM
My requirements Have registered domain and a web server is already hosted for the same. Need is to add a ‘mail’ subdomain associated with a different public IP and set up a mail server. Have access to DNS management and will be configuring mail server on a VM on my server (hosted in a datacenter)…
dnsmasq : For my local network
Need was to have a DNS service serving my local network name resolutions. After surfing on multiple how tos, found dnsmasq would suffice my needs. Install dnsmasq #apt install -y dnsmasq Edit the configuration file and updated the following entries (uncomment if commented) # Never forward plain names (without a dot or domain part) domain-needed…
Highly available, Load balanced MariaDB cluster using Galera, HAProxy and Keepalived
Bring up 5 Vms and in each VM update /etc/hosts with following entries (to match requirements) 10.1.1.5 db1 10.1.1.6 db2 10.1.1.7 db3 10.1.1.10 haproxy1 10.1.1.11 haproxy2 Install mariadb in db1, db2 and db3. Install net-tools also, netstat would be handy for some checks. Stop mariadb service. apt install mariadb-server net-tools service mariadb stop Edit /etc/mysql/mariadb.conf.d/50-server.cnf…
Configure Postfix – Relay only!
Did not want to use any SMTP plugin in the WordPress installation. Reading through the posts on the net to achieve mails being sent from WordPress the wp_mail() is used and it attempts to delivery the mail to port 25 of localhost. So decided to configure Postfix to accepts mails for delivery to be relayed…
Install Word Press on Debian Buster, HTTPS access only
Bring up a fresh installation of Debian Buster. Had opted only for ssh access and standard utilities during installation. Note : Preferred not to use any wordpress plugins to have the redirection to https. Wanted to keep the blog, plain simple and faster – page completely being displayed when accessed. Install php7.3 and php modules…