Jump to content
Main menu
Main menu
move to sidebar
hide
Navigation
Main page
Recent changes
Random page
Help about MediaWiki
TetraWiki
Search
Search
Appearance
Create account
Log in
Personal tools
Create account
Log in
Pages for logged out editors
learn more
Contributions
Talk
Editing
Final Document Submitted to Sandhar
Page
Discussion
English
Read
Edit
View history
Tools
Tools
move to sidebar
hide
Actions
Read
Edit
View history
General
What links here
Related changes
Special pages
Page information
Appearance
move to sidebar
hide
Warning:
You are not logged in. Your IP address will be publicly visible if you make any edits. If you
log in
or
create an account
, your edits will be attributed to your username, along with other benefits.
Anti-spam check. Do
not
fill this in!
[[Category: Sandhar Technologies]] <center><u>'''Sandhar Technologies'''</u></center> <center><u>'''Zimbra Mail Server'''</u></center> <center><u>'''By Tetra Information Service Pvt. Ltd.'''</u></center> <div align="right"><u>'''Support Contact Details'''</u></div> <div align="right">[mailto:service@tetrain.com service@tetrain.com]</div> <div align="right"><u>'''011-46571743/44/45'''</u></div> <center><u>'''Table of Content'''</u></center> # '''Zimbra Server Architecture.''' # '''ZIMBRA : Installation & Configuration.''' # '''Avoiding conflicts: what are the default port configurations when Zimbra is installed''' # '''How do I make sure that DNS is configured correctly''' # '''What are the top issues affecting performance''' # '''How do I change the Zimbra server's hostname, IP address and credentials''' # '''How to restore mails from archive server''' # '''Since there is no password restriction on mailing group, what would be best practice for restricting users from sending mails to " everyone "''' # '''How can we increase or decrease mail size quota''' # '''How to create a mail ID''' # '''How to create diff groups''' # '''Is there any daily checklist of the best practice which can be reviewed on daily basis to check whether the Zimbra mailing server and its all services ar functioning properly''' # '''How to configure archive server''' <center><u>'''Sandhar Technologies Mail Server Architecture'''</u></center> Cluster : 2 Nodes (node1.sandhar.in, node2.sandhar.in ) Commonly named as node.sandhar.in and working with name mail.sandhar.in Archiving : 1 Server (archive.sandhar.in) Node2.sandhar.in 172.17.16.98Archive.sandhar.in 172.17.16.99 Node1.sandhar.in 172.17.16.97Node.sandhar.in 172.17.16.22 Only MD's Mails were forwared to the remote MS exchange server for the mobile syncronization facility, It's done by adding an additional domain in the server name msexc.sandhar.in and create the user and then provide the remote mail box information in mail transport. <center><u>'''''Final Documentation'''''</u></center> '''1) ZIMBRA : Installation & Configuration ''' <nowiki># install first below</nowiki> [root@mail ~]# yum -y install nc sysstat Download the ZCS 8.5 package [root@mail ~]# tar zxvf zcs-8.5.1_GA_3056.RHEL6_64.20141103151539.tgz [root@mail ~]# cd zcs-8.5.1_GA_3056.RHEL6_64.20141103151539 <nowiki># execute install scripts</nowiki> [root@mail zcs-8.5.1_GA_3056.RHEL6_64.20141103151539]#./install.sh āplatform-override Operations logged to /tmp/install.log.1178 Checking for existing installation⦠zimbra-ldapā¦NOT FOUND zimbra-loggerā¦NOT FOUND zimbra-mtaā¦NOT FOUND zimbra-snmpā¦NOT FOUND zimbra-storeā¦NOT FOUND zimbra-apacheā¦NOT FOUND zimbra-spellā¦NOT FOUND zimbra-convertdā¦NOT FOUND zimbra-memcachedā¦NOT FOUND zimbra-proxyā¦NOT FOUND zimbra-archivingā¦NOT FOUND zimbra-clusterā¦NOT FOUND zimbra-coreā¦NOT FOUND PLEASE READ THIS AGREEMENT CAREFULLY BEFORE USING THE SOFTWARE. ZIMBRA, INC. (āZIMBRAā) WILL ONLY LICENSE THIS SOFTWARE TO YOU IF YOU FIRST ACCEPT THE TERMS OF THIS AGREEMENT. BY DOWNLOADING OR INSTALLING THE SOFTWARE, OR USING THE PRODUCT, YOU ARE CONSENTING TO BE BOUND BY THIS AGREEMENT. IF YOU DO NOT AGREE TO ALL OF THE TERMS OF THIS AGREEMENT, THEN DO NOT DOWNLOAD, INSTALL OR USE THE PRODUCT. License Terms for the Zimbra Collaboration Suite: [http://www.zimbra.com/license/zimbra_public_eula_2.1.html http://www.zimbra.com/license/zimbra_public_eula_2.1.html] Do you agree with the terms of the software license agreement? [N] y # Yes Do you agree with the terms of the software license agreement? [N] y # Yes again Checking for prerequisites⦠FOUND: NPTL FOUND: nc-1.84-22 FOUND: sudo-1.7.4p5-13 FOUND: libidn-1.18-2 FOUND: gmp-4.3.1-7 FOUND: /usr/lib64/libstdc++.so.6 Checking for suggested prerequisites⦠FOUND: perl-5.10.1 FOUND: sysstat FOUND: sqlite Prerequisite check complete. Checking for installable packages Found zimbra-core Found zimbra-ldap Found zimbra-logger Found zimbra-mta Found zimbra-snmp Found zimbra-store Found zimbra-apache Found zimbra-spell Found zimbra-memcached Found zimbra-proxy Select the packages to install Install zimbra-ldap [Y] # Enter Install zimbra-logger [Y] # Enter Install zimbra-mta [Y] # Enter Install zimbra-snmp [Y] # Enter Install zimbra-store [Y] # Enter Install zimbra-apache [Y] # Enter Install zimbra-spell [Y] # Enter Install zimbra-memcached [N] # Enter Install zimbra-proxy [N] # Enter Checking required space for zimbra-core Checking space for zimbra-store Installing: zimbra-core zimbra-ldap zimbra-logger zimbra-mta zimbra-snmp zimbra-store zimbra-apache zimbra-spell zimbra-memcached zimbra-proxy You appear to be installing packages on a platform different than the platform for which they were built. This platform is CentOS6_64 Packages found: RHEL6_64 This may or may not work. Using packages for a platform in which they were not designed for may result in an installation that is NOT usable. Your support options may be limited if you choose to continue. Install anyway? [N] y # Yes The system will be modified. Continue? [N] y # Yes Removing /opt/zimbra Removing zimbra crontab entryā¦done. Cleaning up zimbra init scriptsā¦done. Cleaning up /etc/ld.so.confā¦done. Cleaning up /etc/security/limits.confā¦done. Finished removing Zimbra Collaboration Server. Installing packages zimbra-coreā¦ā¦zimbra-core-8.5.1_GA_3056.RHEL6_64.20141103151539.x86_64.rpmā¦done zimbra-ldapā¦ā¦zimbra-ldap-8.5.1_GA_3056.RHEL6_64.20141103151539.x86_64.rpmā¦done zimbra-loggerā¦ā¦zimbra-logger-8.5.1_GA_3056.RHEL6_64.20141103151539.x86_64.rpmā¦done zimbra-mtaā¦ā¦zimbra-mta-8.5.1_GA_3056.RHEL6_64.20141103151539.x86_64.rpmā¦done zimbra-snmpā¦ā¦zimbra-snmp-8.5.1_GA_3056.RHEL6_64.20141103151539.x86_64.rpmā¦done zimbra-storeā¦ā¦zimbra-store-8.5.1_GA_3056.RHEL6_64.20141103151539.x86_64.rpmā¦done zimbra-apacheā¦ā¦zimbra-apache-8.5.1_GA_3056.RHEL6_64.20141103151539.x86_64.rpmā¦done zimbra-spellā¦ā¦zimbra-spell-8.5.1_GA_3056.RHEL6_64.20141103151539.x86_64.rpmā¦done zimbra-memcachedā¦ā¦zimbra-memcached-8.5.1_GA_3056.RHEL6_64.20141103151539.x86_64.rpmā¦done zimbra-proxyā¦ā¦zimbra-proxy-8.5.1_GA_3056.RHEL6_64.20141103151539.x86_64.rpmā¦done Operations logged to /tmp/zmsetup.01082013-134300.log Installing LDAP configuration databaseā¦done. Setting defaults⦠DNS ERROR resolving MX for dlp.sandhar.in It is suggested that the domain name have an MX record configured in DNS <nowiki># the following error will be shown on many servers, then proceed with Yes.</nowiki> Change domain name? [Yes] y # Yes Create domain: [mail.sandhar.in] sandhar.in # input doman name MX: mail.sandhar.in (10.0.0.32) Interface: 10.0.0.32 Interface: 127.0.0.1 Interface: ::1 done. Checking for port conflicts Main menu 1) Common Configuration: 2) zimbra-ldap: Enabled 3) zimbra-store: Enabled +Create Admin User: yes +Admin user to create: admin@sandhar.in <nowiki>******* +Admin Password UNSET</nowiki> +Anti-virus quarantine user: virus-quarantine.u81auho8@sandhar.in +Enable automated spam training: yes +Spam training user: spam.m6vf8lprt8@sandhar.in +Non-spam(Ham) training user: ham.vpd5_v3c@sandhar.in +SMTP host: mail.sandhar.in +Web server HTTP port: 80 +Web server HTTPS port: 443 +Web server mode: https +IMAP server port: 143 +IMAP server SSL port: 993 +POP server port: 110 +POP server SSL port: 995 +Use spell check server: yes +Spell server URL: [http://mail.ssitsolution.com:7780/aspell.php http://mail.sandhar.in:7780/aspell.php] +Configure for use with mail proxy: FALSE +Configure for use with web proxy: FALSE +Enable version update checks: TRUE +Enable version update notifications: TRUE +Version update notification email: admin@sandhar.in +Version update source email: admin@sandhar.in 4) zimbra-mta: Enabled 5) zimbra-snmp: Enabled 6) zimbra-logger: Enabled 7) zimbra-spell: Enabled 8) Default Class of Service Configuration: r) Start servers after configuration yes s) Save config to file x) Expand menu q) Quit Address unconfigured (**) items (? ā help) 3 # select ā3ā Store configuration 1) Status: Enabled 2) Create Admin User: yes 3) Admin user to create: admin@sandhar.in <nowiki>** 4) Admin Password UNSET</nowiki> 5) Anti-virus quarantine user: virus-quarantine.u81auho8@sandhar.in 6) Enable automated spam training: yes 7) Spam training user: spam.m6vf8lprt8@sandhar.in 8) Non-spam(Ham) training user: ham.vpd5_v3c@sandhar.in 9) SMTP host: mail.sandhar.in 10) Web server HTTP port: 80 11) Web server HTTPS port: 443 12) Web server mode: https 13) IMAP server port: 143 14) IMAP server SSL port: 993 15) POP server port: 110 16) POP server SSL port: 995 17) Use spell check server: yes 18) Spell server URL: [http://mail.ssitsolution.com:7780/aspell.php http://mail.sandhar.in:7780/aspell.php] 19) Configure for use with mail proxy: FALSE 20) Configure for use with web proxy: FALSE 21) Enable version update checks: TRUE 22) Enable version update notifications: TRUE 23) Version update notification email: admin@sandhar.in 24) Version update source email: admin@sandhar.in Select, or ārā for previous menu [r] 4 # select ā4ā and set admin password Password for admin@sandhar.in (min 6 characters): [xFuoltBR] youradminpassword # input password Store configuration 1) Status: Enabled 2) Create Admin User: yes 3) Admin user to create: admin@sandhar.in 4) Admin Password set 5) Anti-virus quarantine user: virus-quarantine.u81auho8@sandhar.in 6) Enable automated spam training: yes 7) Spam training user: spam.m6vf8lprt8@sandhar.in 8) Non-spam(Ham) training user: ham.vpd5_v3c@sandhar.in 9) SMTP host: mail.sandhar.in 10) Web server HTTP port: 80 11) Web server HTTPS port: 443 12) Web server mode: https 13) IMAP server port: 143 14) IMAP server SSL port: 993 15) POP server port: 110 16) POP server SSL port: 995 17) Use spell check server: yes 18) Spell server URL: [http://mail.ssitsolution.com:7780/aspell.php http://mail.sandhar.in:7780/aspell.php] 19) Configure for use with mail proxy: FALSE 20) Configure for use with web proxy: FALSE 21) Enable version update checks: TRUE 22) Enable version update notifications: TRUE 23) Version update notification email: admin@sandhar.in 24) Version update source email: admin@sandhar.in Select, or ārā for previous menu [r] r # back Main menu 1) Common Configuration: 2) zimbra-ldap: Enabled 3) zimbra-store: Enabled 4) zimbra-mta: Enabled 5) zimbra-snmp: Enabled 6) zimbra-logger: Enabled 7) zimbra-spell: Enabled 8) Default Class of Service Configuration: r) Start servers after configuration yes s) Save config to file x) Expand menu q) Quit <nowiki>*** CONFIGURATION COMPLETE ā press āaā to apply</nowiki> Select from menu, or press āaā to apply config (? ā help) a # apply Save configuration data to a file? [Yes] # Enter Save config in file: [/opt/zimbra/config.7621] # Enter Saving config in /opt/zimbra/config.7621ā¦done.The system will be modified ā continue? [No] y # Yes Operations logged to /tmp/zmsetup.01082013-165631.log Setting local config valuesā¦done. Initializing core configā¦Setting up CAā¦done. Deploying CA to /opt/zimbra/conf/ca ā¦done. Creating SSL zimbra-store certificateā¦done. Creating new zimbra-ldap SSL certificateā¦done. Creating new zimbra-mta SSL certificateā¦done. Installing mailboxd SSL certificatesā¦done. Installing MTA SSL certificatesā¦done. Installing LDAP SSL certificateā¦done. Initializing ldapā¦done. Setting replication passwordā¦done. Setting Postfix passwordā¦done. Setting amavis passwordā¦done. Setting nginx passwordā¦done. Creating server entry for mail.sandhar.inā¦done. Setting Zimbra IP Modeā¦done. Saving CA in ldap ā¦done. Saving SSL Certificate in ldap ā¦done. Setting spell check URLā¦done. Setting service ports on mail.sandhar.inā¦done. Adding mail.sandhar.in to zimbraMailHostPool in default COSā¦done. Setting zimbraFeatureTasksEnabled=TRUEā¦done. Setting zimbraFeatureBriefcasesEnabled=FALSEā¦done. Setting MTA auth hostā¦done. Setting TimeZone Preferenceā¦done. Initializing mta configā¦done. Setting services on mail.ssandhar.inā¦done. Creating domain sandhar.inā¦done. Setting default domain nameā¦done. Creating domain sandhar.inā¦already exists. Creating admin account admin@sandhar.inā¦done. Creating root aliasā¦done. Creating postmaster aliasā¦done. Creating user spam.ger0jvv1@sandhar.inā¦done. Creating user ham.zz8dhhpvdh@sandhar.inā¦done. Creating user virus-quarantine.zrfydwcl0y@sandhar.inā¦done. Setting spam training and Anti-virus quarantine accountsā¦done. Initializing store sql databaseā¦done. Setting zimbraSmtpHostname for mail.sandhar.inā¦done. Configuring SNMPā¦done. Setting up syslog.confā¦done. Starting serversā¦done. Installing common zimlets⦠com_zimbra_srchhighlighterā¦done. com_zimbra_urlā¦done. com_zimbra_phoneā¦done. com_zimbra_attachmailā¦done. com_zimbra_ymemoticonsā¦done. com_zimbra_emailā¦done. com_zimbra_adminversioncheckā¦done. com_zimbra_bulkprovisionā¦done. com_zimbra_proxy_configā¦done. com_zimbra_attachcontactsā¦done. com_zimbra_tooltipā¦done. com_zimbra_clientuploaderā¦done. com_zimbra_dateā¦done. com_zimbra_cert_managerā¦done. com_zimbra_viewmailā¦done. com_zimbra_webexā¦done. Finished installing common zimlets. Restarting mailboxdā¦done. Creating galsync account for default domainā¦failed. You have the option of notifying Zimbra of your installation. This helps us to track the uptake of the Zimbra Collaboration Server. The only information that will be transmitted is: The VERSION of zcs installed (8.5.1_GA_3056_CentOS6_64) The ADMIN EMAIL ADDRESS created (admin@sandhar.in) Notify Zimbra of your installation? [Yes] Notifying Zimbra of installation via Notification complete Setting up zimbra crontabā¦done. Moving /tmp/zmsetup.01082013-165631.log to /opt/zimbra/log Configuration complete ā press return to exit '''2) Avoiding conflicts: what are the default port configurations when Zimbra is installed?''' Some Important open port there is may more ports zimbra use internally, but below wer important and need to take care. 587 Subbmission smtp port143 Imap port 465 secure smtp port 22 ssh port 25 smtp port 443 secure http port 7071 zimbra admin port 993 secure imap 995 secure pop 389 ldap port '''3) How do I make sure that DNS is configured correctly?''' 1<sup>st</sup> login to the server and check with below commands <nowiki># host sandhar.in</nowiki> <nowiki># host -t mx sandhar.in </nowiki> or we can test with dig command <nowiki>#dig sandhar.in</nowiki> <nowiki># dig sandhar.in -t mx</nowiki> DNS is working internally in the server. '''4) What are the top issues affecting performance?''' 1: Hardware performance 2: Disk Size (/opt partition ) 3: Network performance 4: Server Memory ( RAM ) '''5) How do I change the Zimbra server's hostname, IP address and credentials?''' 1: Changing Zimbra server hostname is not adviseable cause everything intenally works with name, if needed and very important then have to analyse the effect at that moment have proper downtime and then can be done only by Us cause it might affect all the services and a very risky thing to do. 2: IP address and credentials As the server is behind the firewall the credentials were simple but not adviseable that can be changed after informing us node1: 172.17.16.97 : [mailto:root@4321 root@4321] node2: 172.17.16.98 : root123 archive: 172.17.16.99 : root123 node: 172.17.16.22: its a floating IP between node1 and node2 '''6) How to restore mails from archive server?''' 1<sup>st</sup> login to the archive server switch user to zimbra let take the example for the amit.sharma1 hit the below commands $ zmprov gmi [mailto:amit.sharma1@archive.sandhar.in amit.sharma1@archive.sandhar.in] above command will give the mailbox id suppose it give 33 then go to directory $ cd /opt/zimbra/store/0/ $ rsync -aP 33 [mailto:root@192.168.1.22 root@172.17.16.22]:/tmp/ # it will prompt for the password of machine 22 provide it then the directory will transfer to the server Now login to 172.17.16.22 and check the directory was there or not by below command. <nowiki># ls /tmp/</nowiki> above will show a directory maned 33, now change the permission of the directory so hat zimbra can work on it as with below command. <nowiki># chown zimbra.zimbra /tmp/33 -R</nowiki> <nowiki># su ā zimbra</nowiki> $ zmmailbox -zadmin mbox> selectMailbox [mailto:amit.sharma1@sandhar.in amit.sharma1@sandhar.in] mbox [mailto:amit.sharma1@sandhar.in amit.sharma1@sandhar.in]> creatFolder /Recovery mbox [mailto:amit.sharma1@sandhar.in amit.sharma1@sandhar.in]> addMessage /Recovery /tmp/33/ <nowiki>#/tmp/33 is the path of the folder in which acrive mails were there.</nowiki> Note: Please do not do the above without under our observation till you haven't have a good experince with cli and understanding of the process. '''7) Since there is no password restriction on mailing group, what would be best practice for restricting users from sending mails to " everyone "''' There is a process on group restricting that only who can delever the mail on that particular group, which can be done at backend via CLI only. '''8) How can we increase or decrease mail size quota?''' There is no Such option of mail size quota, its a users mailbox quota which can be maintain via GUI admin panel login to Admin Panel and hit below Manage -->> [mailto:user@sandhar.in user@sandhar.in] -->>double click on user, go to advance in the left pane, and set the quota accordingly, 0 stands for unlimited quota. '''9) How to create a mail ID?''' Login to Admin Panel hit the below. Manage -->> click on the right corner most setting tab, click on New and follow the instruction accordingly. '''10) How to create diff groups?''' Login to Admin Panel hit below Manage -->> click on distribution list, and follow the instruction accordingly. '''11) Is there any daily checklist of the best practice which can be reviewed on daily basis to check whether the Zimbra mailing server and its all services ar functioning properly''' For this nagios client can be implemented on the server as you were having the nagios server. '''12) How to configure archive server ? SOP for the same.''' == Introduction == This document shows how to create a simple archiving server. If you have a user 'keyur@example.com', all mails sent to and from this email ID will be forwarded to 'keyur@archive.example.com'. We will need two servers for this. Both will be installed with Zimbra, one being the live mail server 'example.com', and the other the archiving server, 'archive.example.com'. The archiving server should have a much larger HDD drive than the mail server, preferably formatted using LVM, to allow for expansion later. The installation on each server will be independent, ie, this isn't a multi-server setup. Each server will be a single-server, with the only difference being the domain names. In this example, let's assume the live server's domain is 'example.com', with IP 192.168.1.5, and the archiving server is 'archive.example.com', with IP 192.168.1.18. Install Zimbra on both as usual. == DNS == The servers will require a local DNS, as we use this to forward the mails. In this example, I will assume that we have set up a caching name server using bind on the live server. Typical entries would be something like this: example.com. IN A 192.0.43.10 mail.example.com. IN A 192.168.1.5 example.com. IN MX 10 mail.example.com. Along with this, we need to add an A and MX record for archive.example.com as well. archive.example.com. IN A 192.168.1.18 archive.example.com. IN MX 10 archive.example.com. Now all mails addressed to 'archive.example.com' will be forwarded to the archive server. == Postfix == In postfix, we can specify an email address to which all incoming and outgoing mails from a particular email ID will be forwarded to. This is done using 'sender_bcc_maps' and 'recipient_bcc_maps'. All these changes are done only on the main server. We make the following entries at the end of /opt/zimbra/postfix/conf/main.cf sender_bcc_maps = hash:/opt/zimbra/postfix/conf/archivelist recipient_bcc_maps = hash:/opt/zimbra/postfix/conf/archivelist The file '/opt/zimbra/postfix/conf/archivelist' will have users in the following format: keyur@example.com keyur@archive.example.com All mails to and from keyur@example.com will be forwarded to keyur@archive.example.com. == Manual addition == Create a user on the main server, and then the corresponding user on the archive server. Then add the users in the format as show above to the file '/opt/zimbra/postfix/conf/archivelist', and then run the postmap command as the zimbra user: $ postmap /opt/zimbra/postfix/conf/archivelist $ postfix reload
Summary:
Please note that all contributions to TetraWiki may be edited, altered, or removed by other contributors. If you do not want your writing to be edited mercilessly, then do not submit it here.
You are also promising us that you wrote this yourself, or copied it from a public domain or similar free resource (see
TetraWiki:Copyrights
for details).
Do not submit copyrighted work without permission!
Cancel
Editing help
(opens in new window)