Editing Energo's Implementation Document with Services

[[category:Energo Group]]

'''The Document is very OLD and Only Kept for Concept Understanding . This Architecture is not There with Customer . Please use this document for only as technology Document '''

= Energo Group  =


'''Table of Contents'''
= Mail Server =

This Document explains mail server implementation in Energo Group. We will use Open Source applications to achieves requirement

qmail-ldap with the following features: 

* Users stored in LDAP database (inherent to qmail-ldap) 
* Automatic creation of home and maildir directories. 
* Clamav antivirus through qmail-scanner.
* SMTP encryption 
* AntiSPAM with SpamAssassin 
* Blacklist support(RBL) 
* POP 
* IMAP
* Disclaimer 

Software used:

Open source applications used to create this Mai server are.

* qmail-1.03
* openldap-2.3.27
* courier-imap-4.0.2
* SpamAssassin 3.2.5
* ClamAV 0.95.2
* cangrejomail-2.0.3
* phpldapadmin-1.1.0.7

Cron Jobs :


0 */4 * * * /usr/local/bin/freshclam --quiet 2>&1 1> /dev/null


For updateing Antiviruse after every 4 hrs.


0 1 * * * sa-update --channelfile /etc/mail/spamassassin

For updating Spam Filter every day


0 1 * * * sh /root/energogroup.sh


For update energogroup every day


30 6 * * 7 sh /root/report.sh


For reporting status of users mail dirrectory every sunday


22 4 * * * sh /root/backup.sh

For backup every night.

== Qmail ==
Qmail is a secure, reliable, efficient, simple message transfer agent. It is meant as a replacement for the entire sendmail-binmail system on typical Internet-connected UNIX hosts.


'''Secure:''' Security isn't just a goal, but an absolute requirement. Mail delivery is critical for users; it cannot be turned off, so it must be completely secure. (This is why I started writing qmail: I was sick of the security holes in sendmail and other MTAs.) 


'''Reliable:''' qmail's straight-paper-path philosophy guarantees that a message, once accepted into the system, will never be lost. qmail also supports maildir, a new, super-reliable user mailbox format. Maildirs, unlike mbox files and mh folders, won't be corrupted if the system crashes during delivery. Even better, not only can a user safely read his mail over NFS, but any number of NFS clients can deliver mail to him at the same time. 


'''Efficient: '''On a Pentium under BSD/OS, qmail can easily sustain 200000 local messages per day---that's separate messages injected and delivered to mailboxes in a real test! Although remote deliveries are inherently limited by the slowness of DNS and SMTP, qmail overlaps 20 simultaneous deliveries by default, so it zooms quickly through mailing lists.


For more information please follow the link [http://cr.yp.to/qmail.html http://cr.yp.to/qmail.html]


Mail Server Ips and Mx points.


mail.energoindia.com

122.160.23.19

mail1.energoindia.com 203.122.59.72

== Ldap ==
OpenLDAP Software is an open source implementation of the “Lightweight Directory Access Protocol” we are using ldap for user account infomation store .

== Courier-imap/imaps ==
The Courier IMAP server is a fast, scalable, enterprise IMAP server that uses Maildirs. Many E-mail service providers use the Courier IMAP server to easy handle hundreds of thousands of mail accounts. We are useing Courier IMAP for web mail access.

== SpamAssassin Anti Spam ==
SpamAssassin uses a wide variety of local and network tests to identify spam signatures. This makes it harder for spammers to identify one aspect which they can craft their messages to work around. We are using spamassassin for spam mail filtering. Plugin used with spamassassin are DCC , Razor and Pyzor.

== ClamAV Anti Virus ==
Clam AntiVirus is an open source (GPL) anti-virus toolkit for UNIX, designed especially for e-mail scanning on mail gateways. It provides a number of utilities including a flexible and scalable multi-threaded daemon, a command line scanner and advanced tool for automatic database updates.

== Cangrejo Webmail ==
CangrejoMail is css version of the popular webmail "SquirrelMail". 

Open with the url : [http://mail.energoindia.com/ http://mail.energoindia.com]

== PhpLdapadmin web gui tool ==
phpLDAPadmin (also known as PLA) is a web-based LDAP client. It provides easy, anywhere-accessible, multi-language administration for your LDAP server. 

Open with the url [http://mail.energoindia.com/ldapadmin http://mail.energoindia.com/ldapadmin]

= Proxy Server =
Web caching proxy server is will with the provide following features:

* Making the most of your Internet Connection 
* Website Content Acceleration and Distribution
* Blocing unwanted Sites 
* Allowing Internet Access on IP base.

Software used:

Open source applications used to create this Mai server are.

* squid-2.6.STABLE6
* sarg-2.2.3
* SqStat 1.20

== Squid ==
Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. It reduces bandwidth and improves response times by caching and reusing frequently-requested web pages. Squid has extensive access controls and makes a great server accelerator.

== Sarg Report ==
Sarg - Squid Analysis Report Generator is a tool that allow you to view "where" your users are going to on the Internet. Sarg provides many informations about Squid users activities: times, bytes, sites, etc...

Open with the url : [http://mail.energoindia.com/sarg http://mail.energoindia.com/sarg]

== Sqstat ==
SqStat is a script which allows to look through active squid users connections. It use cachemgr protocol to get information from squid proxy server

Open with the url : [http://mail.energoindia.com/sqstat/sqstat.php http://mail.energoindia.com/sqstat/sqstat.php]

= Firewall Server =
Firewall is basically used for separating the inner and outer traffic. Here We used the shorewall as the Firewall. We use firewall block incoming traffic and allow ip based access We also used Firewall to give netted environment means there is no need to give the proxy settings for the clients and for internet these IP must have defined in the Firewall.


Local ip: 192.168.10.1

Remote ip: 122.160.23.19


Software Used:

* shorewall-3.0.4

= Backup Server =
Rsynce Server is used for backup server . We have configured a script to take the backup of all importent data on firewall server.

Directory for backup:

/home/vmailUsers mail directory

/var/qmailQmail Server Configuretion

/var/qmail2Qmail Server Configuretion

/var/log/qmailQmail Server logs


/var/log/qmail2

Qmail Server logs

/etc System configuretion files


/var/www/htmlWebmail data