Final Document Submitted to Sandhar

Sandhar Technologies

Zimbra Mail Server

By Tetra Information Service Pvt. Ltd.

Support Contact Details

service@tetrain.com

011-46571743/44/45

Table of Content

1. Zimbra Server Architecture.

1. ZIMBRA : Installation & Configuration.

1. Avoiding conflicts: what are the default port configurations when Zimbra is installed

1. How do I make sure that DNS is configured correctly

1. What are the top issues affecting performance

1. How do I change the Zimbra server's hostname, IP address and credentials

1. How to restore mails from archive server

1. Since there is no password restriction on mailing group, what would be best practice for restricting users from sending mails to " everyone "

1. How can we increase or decrease mail size quota

1. How to create a mail ID

1. How to create diff groups

1. Is there any daily checklist of the best practice which can be reviewed on daily basis to check whether the Zimbra mailing server and its all services ar functioning properly

1. How to configure archive server

Sandhar Technologies Mail Server Architecture

Cluster : 2 Nodes (node1.sandhar.in, node2.sandhar.in )

Commonly named as node.sandhar.in and working with name mail.sandhar.in

Archiving : 1 Server (archive.sandhar.in)

Node2.sandhar.in

172.17.16.98Archive.sandhar.in

172.17.16.99 Node1.sandhar.in

172.17.16.97Node.sandhar.in

172.17.16.22

Only MD's Mails were forwared to the remote MS exchange server for the mobile syncronization facility, It's done by adding an additional domain in the server name msexc.sandhar.in and create the user and then provide the remote mail box information in mail transport.

Final Documentation

1) ZIMBRA : Installation & Configuration

# install first below

[root@mail ~]# yum -y install nc sysstat

Download the ZCS 8.5 package

[root@mail ~]# tar zxvf zcs-8.5.1_GA_3056.RHEL6_64.20141103151539.tgz

[root@mail ~]# cd zcs-8.5.1_GA_3056.RHEL6_64.20141103151539

# execute install scripts

[root@mail zcs-8.5.1_GA_3056.RHEL6_64.20141103151539]#./install.sh –platform-override

Operations logged to /tmp/install.log.1178

Checking for existing installation…

zimbra-ldap…NOT FOUND

zimbra-logger…NOT FOUND

zimbra-mta…NOT FOUND

zimbra-snmp…NOT FOUND

zimbra-store…NOT FOUND

zimbra-apache…NOT FOUND

zimbra-spell…NOT FOUND

zimbra-convertd…NOT FOUND

zimbra-memcached…NOT FOUND

zimbra-proxy…NOT FOUND

zimbra-archiving…NOT FOUND

zimbra-cluster…NOT FOUND

zimbra-core…NOT FOUND

PLEASE READ THIS AGREEMENT CAREFULLY BEFORE USING THE SOFTWARE.

ZIMBRA, INC. (“ZIMBRA”) WILL ONLY LICENSE THIS SOFTWARE TO YOU IF YOU

FIRST ACCEPT THE TERMS OF THIS AGREEMENT. BY DOWNLOADING OR INSTALLING

THE SOFTWARE, OR USING THE PRODUCT, YOU ARE CONSENTING TO BE BOUND BY

THIS AGREEMENT. IF YOU DO NOT AGREE TO ALL OF THE TERMS OF THIS

AGREEMENT, THEN DO NOT DOWNLOAD, INSTALL OR USE THE PRODUCT.

License Terms for the Zimbra Collaboration Suite:

http://www.zimbra.com/license/zimbra_public_eula_2.1.html

Do you agree with the terms of the software license agreement? [N] y  # Yes

Do you agree with the terms of the software license agreement? [N] y  # Yes again

Checking for prerequisites…

FOUND: NPTL

FOUND: nc-1.84-22

FOUND: sudo-1.7.4p5-13

FOUND: libidn-1.18-2

FOUND: gmp-4.3.1-7

FOUND: /usr/lib64/libstdc++.so.6

Checking for suggested prerequisites…

FOUND: perl-5.10.1

FOUND: sysstat

FOUND: sqlite

Prerequisite check complete.

Checking for installable packages

Found zimbra-core

Found zimbra-ldap

Found zimbra-logger

Found zimbra-mta

Found zimbra-snmp

Found zimbra-store

Found zimbra-apache

Found zimbra-spell

Found zimbra-memcached

Found zimbra-proxy

Select the packages to install

Install zimbra-ldap [Y] # Enter

Install zimbra-logger [Y] # Enter

Install zimbra-mta [Y] # Enter

Install zimbra-snmp [Y] # Enter

Install zimbra-store [Y] # Enter

Install zimbra-apache [Y] # Enter

Install zimbra-spell [Y] # Enter

Install zimbra-memcached [N] # Enter

Install zimbra-proxy [N] # Enter

Checking required space for zimbra-core

Checking space for zimbra-store

Installing:

zimbra-core

zimbra-ldap

zimbra-logger

zimbra-mta

zimbra-snmp

zimbra-store

zimbra-apache

zimbra-spell

zimbra-memcached

zimbra-proxy

You appear to be installing packages on a platform different

than the platform for which they were built.

This platform is CentOS6_64

Packages found: RHEL6_64

This may or may not work.

Using packages for a platform in which they were not designed for

may result in an installation that is NOT usable. Your support

options may be limited if you choose to continue.

Install anyway? [N] y # Yes

The system will be modified. Continue? [N] y # Yes

Removing /opt/zimbra

Removing zimbra crontab entry…done.

Cleaning up zimbra init scripts…done.

Cleaning up /etc/ld.so.conf…done.

Cleaning up /etc/security/limits.conf…done.

Finished removing Zimbra Collaboration Server.

Installing packages

zimbra-core……zimbra-core-8.5.1_GA_3056.RHEL6_64.20141103151539.x86_64.rpm…done

zimbra-ldap……zimbra-ldap-8.5.1_GA_3056.RHEL6_64.20141103151539.x86_64.rpm…done

zimbra-logger……zimbra-logger-8.5.1_GA_3056.RHEL6_64.20141103151539.x86_64.rpm…done

zimbra-mta……zimbra-mta-8.5.1_GA_3056.RHEL6_64.20141103151539.x86_64.rpm…done

zimbra-snmp……zimbra-snmp-8.5.1_GA_3056.RHEL6_64.20141103151539.x86_64.rpm…done

zimbra-store……zimbra-store-8.5.1_GA_3056.RHEL6_64.20141103151539.x86_64.rpm…done

zimbra-apache……zimbra-apache-8.5.1_GA_3056.RHEL6_64.20141103151539.x86_64.rpm…done

zimbra-spell……zimbra-spell-8.5.1_GA_3056.RHEL6_64.20141103151539.x86_64.rpm…done

zimbra-memcached……zimbra-memcached-8.5.1_GA_3056.RHEL6_64.20141103151539.x86_64.rpm…done

zimbra-proxy……zimbra-proxy-8.5.1_GA_3056.RHEL6_64.20141103151539.x86_64.rpm…done

Operations logged to /tmp/zmsetup.01082013-134300.log

Installing LDAP configuration database…done.

Setting defaults…

DNS ERROR resolving MX for dlp.sandhar.in

It is suggested that the domain name have an MX record configured in DNS

# the following error will be shown on many servers, then proceed with Yes.

Change domain name? [Yes] y # Yes

Create domain: [mail.sandhar.in] sandhar.in  # input doman name

MX: mail.sandhar.in (10.0.0.32)

Interface: 10.0.0.32

Interface: 127.0.0.1

Interface: ::1

done.

Checking for port conflicts

Main menu

1) Common Configuration:

2) zimbra-ldap:                             Enabled

3) zimbra-store:                            Enabled

+Create Admin User:                    yes

+Admin user to create:                 admin@sandhar.in

******* +Admin Password                        UNSET

+Anti-virus quarantine user:           virus-quarantine.u81auho8@sandhar.in

+Enable automated spam training:       yes

+Spam training user:                   spam.m6vf8lprt8@sandhar.in

+Non-spam(Ham) training user:          ham.vpd5_v3c@sandhar.in

+SMTP host:                            mail.sandhar.in

+Web server HTTP port:                 80

+Web server HTTPS port:                443

+Web server mode:                      https

+IMAP server port:                     143

+IMAP server SSL port:                 993

+POP server port:                      110

+POP server SSL port:                  995

+Use spell check server:               yes

+Spell server URL:                     http://mail.sandhar.in:7780/aspell.php

+Configure for use with mail proxy:    FALSE

+Configure for use with web proxy:     FALSE

+Enable version update checks:         TRUE

+Enable version update notifications:  TRUE

+Version update notification email:    admin@sandhar.in

+Version update source email:          admin@sandhar.in

4) zimbra-mta:                              Enabled

5) zimbra-snmp:                             Enabled

6) zimbra-logger:                           Enabled

7) zimbra-spell:                            Enabled

8) Default Class of Service Configuration:

r) Start servers after configuration        yes

s) Save config to file

x) Expand menu

q) Quit

Address unconfigured (**) items (? – help) 3  # select “3”

Store configuration

1) Status:                                  Enabled

2) Create Admin User:                       yes

3) Admin user to create:                    admin@sandhar.in

** 4) Admin Password                           UNSET

5) Anti-virus quarantine user:              virus-quarantine.u81auho8@sandhar.in

6) Enable automated spam training:          yes

7) Spam training user:                      spam.m6vf8lprt8@sandhar.in

8) Non-spam(Ham) training user:             ham.vpd5_v3c@sandhar.in

9) SMTP host:                               mail.sandhar.in

10) Web server HTTP port:                    80

11) Web server HTTPS port:                   443

12) Web server mode:                         https

13) IMAP server port:                        143

14) IMAP server SSL port:                    993

15) POP server port:                         110

16) POP server SSL port:                     995

17) Use spell check server:                  yes

18) Spell server URL:                        http://mail.sandhar.in:7780/aspell.php

19) Configure for use with mail proxy:       FALSE

20) Configure for use with web proxy:        FALSE

21) Enable version update checks:            TRUE

22) Enable version update notifications:     TRUE

23) Version update notification email:       admin@sandhar.in

24) Version update source email:             admin@sandhar.in

Select, or ‘r’ for previous menu [r] 4  # select “4” and set admin password

Password for admin@sandhar.in (min 6 characters): [xFuoltBR] youradminpassword # input password

Store configuration

1) Status:                                  Enabled

2) Create Admin User:                       yes

3) Admin user to create:                    admin@sandhar.in

4) Admin Password                           set

5) Anti-virus quarantine user:              virus-quarantine.u81auho8@sandhar.in

6) Enable automated spam training:          yes

7) Spam training user:                      spam.m6vf8lprt8@sandhar.in

8) Non-spam(Ham) training user:             ham.vpd5_v3c@sandhar.in

9) SMTP host:                               mail.sandhar.in

10) Web server HTTP port:                    80

11) Web server HTTPS port:                   443

12) Web server mode:                         https

13) IMAP server port:                        143

14) IMAP server SSL port:                    993

15) POP server port:                         110

16) POP server SSL port:                     995

17) Use spell check server:                  yes

18) Spell server URL:                        http://mail.sandhar.in:7780/aspell.php

19) Configure for use with mail proxy:       FALSE

20) Configure for use with web proxy:        FALSE

21) Enable version update checks:            TRUE

22) Enable version update notifications:     TRUE

23) Version update notification email:       admin@sandhar.in

24) Version update source email:             admin@sandhar.in

Select, or ‘r’ for previous menu [r] r   # back

Main menu

1) Common Configuration:

2) zimbra-ldap:                             Enabled

3) zimbra-store:                            Enabled

4) zimbra-mta:                              Enabled

5) zimbra-snmp:                             Enabled

6) zimbra-logger:                           Enabled

7) zimbra-spell:                            Enabled

8) Default Class of Service Configuration:

r) Start servers after configuration        yes

s) Save config to file

x) Expand menu

q) Quit

*** CONFIGURATION COMPLETE – press ‘a’ to apply

Select from menu, or press ‘a’ to apply config (? – help) a   # apply

Save configuration data to a file? [Yes] # Enter

Save config in file: [/opt/zimbra/config.7621] # Enter

Saving config in /opt/zimbra/config.7621…done.The system will be modified – continue? [No] y   # Yes

Operations logged to /tmp/zmsetup.01082013-165631.log

Setting local config values…done.

Initializing core config…Setting up CA…done.

Deploying CA to /opt/zimbra/conf/ca …done.

Creating SSL zimbra-store certificate…done.

Creating new zimbra-ldap SSL certificate…done.

Creating new zimbra-mta SSL certificate…done.

Installing mailboxd SSL certificates…done.

Installing MTA SSL certificates…done.

Installing LDAP SSL certificate…done.

Initializing ldap…done.

Setting replication password…done.

Setting Postfix password…done.

Setting amavis password…done.

Setting nginx password…done.

Creating server entry for mail.sandhar.in…done.

Setting Zimbra IP Mode…done.

Saving CA in ldap …done.

Saving SSL Certificate in ldap …done.

Setting spell check URL…done.

Setting service ports on mail.sandhar.in…done.

Adding mail.sandhar.in to zimbraMailHostPool in default COS…done.

Setting zimbraFeatureTasksEnabled=TRUE…done.

Setting zimbraFeatureBriefcasesEnabled=FALSE…done.

Setting MTA auth host…done.

Setting TimeZone Preference…done.

Initializing mta config…done.

Setting services on mail.ssandhar.in…done.

Creating domain sandhar.in…done.

Setting default domain name…done.

Creating domain sandhar.in…already exists.

Creating admin account admin@sandhar.in…done.

Creating root alias…done.

Creating postmaster alias…done.

Creating user spam.ger0jvv1@sandhar.in…done.

Creating user ham.zz8dhhpvdh@sandhar.in…done.

Creating user virus-quarantine.zrfydwcl0y@sandhar.in…done.

Setting spam training and Anti-virus quarantine accounts…done.

Initializing store sql database…done.

Setting zimbraSmtpHostname for mail.sandhar.in…done.

Configuring SNMP…done.

Setting up syslog.conf…done.

Starting servers…done.

Installing common zimlets…

com_zimbra_srchhighlighter…done.

com_zimbra_url…done.

com_zimbra_phone…done.

com_zimbra_attachmail…done.

com_zimbra_ymemoticons…done.

com_zimbra_email…done.

com_zimbra_adminversioncheck…done.

com_zimbra_bulkprovision…done.

com_zimbra_proxy_config…done.

com_zimbra_attachcontacts…done.

com_zimbra_tooltip…done.

com_zimbra_clientuploader…done.

com_zimbra_date…done.

com_zimbra_cert_manager…done.

com_zimbra_viewmail…done.

com_zimbra_webex…done.

Finished installing common zimlets.

Restarting mailboxd…done.

Creating galsync account for default domain…failed.

You have the option of notifying Zimbra of your installation.

This helps us to track the uptake of the Zimbra Collaboration Server.

The only information that will be transmitted is:

The VERSION of zcs installed (8.5.1_GA_3056_CentOS6_64)

The ADMIN EMAIL ADDRESS created (admin@sandhar.in)

Notify Zimbra of your installation? [Yes]

Notifying Zimbra of installation via

Notification complete

Setting up zimbra crontab…done.

Moving /tmp/zmsetup.01082013-165631.log to /opt/zimbra/log

Configuration complete – press return to exit

2) Avoiding conflicts: what are the default port configurations when Zimbra is installed?

Some Important open port there is may more ports zimbra use internally, but below wer important and need to take care.

587 Subbmission smtp port143 Imap port

465 secure smtp port

22 ssh port

25 smtp port

443 secure http port

7071 zimbra admin port

993 secure imap

995 secure pop

389 ldap port

3) How do I make sure that DNS is configured correctly?

1^st login to the server and check with below commands

# host sandhar.in

# host -t mx sandhar.in

or we can test with dig command

#dig sandhar.in

# dig sandhar.in -t mx

DNS is working internally in the server.

4) What are the top issues affecting performance?

1: Hardware performance

2: Disk Size (/opt partition )

3: Network performance

4: Server Memory ( RAM )

5) How do I change the Zimbra server's hostname, IP address and credentials?

1: Changing Zimbra server hostname is not adviseable cause everything intenally works with name, if needed and very important then have to analyse the effect at that moment have proper downtime and then can be done only by Us cause it might affect all the services and a very risky thing to do.

2: IP address and credentials

As the server is behind the firewall the credentials were simple but not adviseable that can be changed after informing us

node1: 172.17.16.97 : root@4321

node2: 172.17.16.98 : root123

archive: 172.17.16.99 : root123

node: 172.17.16.22: its a floating IP between node1 and node2

6) How to restore mails from archive server?

1^st login to the archive server switch user to zimbra

let take the example for the amit.sharma1

hit the below commands

$ zmprov gmi amit.sharma1@archive.sandhar.in

above command will give the mailbox id suppose it give 33 then go to directory

$ cd /opt/zimbra/store/0/

$ rsync -aP 33 root@172.17.16.22:/tmp/ # it will prompt for the password of machine 22 provide it then the directory will transfer to the server

Now login to 172.17.16.22 and check the directory was there or not by below command.

# ls /tmp/

above will show a directory maned 33, now change the permission of the directory so hat zimbra can work on it as with below command.

# chown zimbra.zimbra /tmp/33 -R

# su – zimbra

$ zmmailbox -zadmin

mbox> selectMailbox amit.sharma1@sandhar.in

mbox amit.sharma1@sandhar.in> creatFolder /Recovery

mbox amit.sharma1@sandhar.in> addMessage /Recovery /tmp/33/

#/tmp/33 is the path of the folder in which acrive mails were there.

Note: Please do not do the above without under our observation till you haven't have a good experince with cli and understanding of the process.

7) Since there is no password restriction on mailing group, what would be best practice for restricting users from sending mails to " everyone "

There is a process on group restricting that only who can delever the mail on that particular group, which can be done at backend via CLI only.

8) How can we increase or decrease mail size quota?

There is no Such option of mail size quota, its a users mailbox quota which can be maintain via GUI admin panel

login to Admin Panel and hit below

Manage -->> user@sandhar.in -->>double click on user, go to advance in the left pane, and set the quota accordingly, 0 stands for unlimited quota.

9) How to create a mail ID?

Login to Admin Panel hit the below.

Manage -->> click on the right corner most setting tab, click on New and follow the instruction accordingly.

10) How to create diff groups?

Login to Admin Panel hit below

Manage -->> click on distribution list, and follow the instruction accordingly.

11) Is there any daily checklist of the best practice which can be reviewed on daily basis to check whether the Zimbra mailing server and its all services ar functioning properly

For this nagios client can be implemented on the server as you were having the nagios server.

12) How to configure archive server ? SOP for the same.

Introduction

This document shows how to create a simple archiving server. If you have a user 'keyur@example.com', all mails sent to and from this email ID will be forwarded to 'keyur@archive.example.com'. We will need two servers for this. Both will be installed with Zimbra, one being the live mail server 'example.com', and the other the archiving server, 'archive.example.com'. The archiving server should have a much larger HDD drive than the mail server, preferably formatted using LVM, to allow for expansion later.

The installation on each server will be independent, ie, this isn't a multi-server setup. Each server will be a single-server, with the only difference being the domain names.

In this example, let's assume the live server's domain is 'example.com', with IP 192.168.1.5, and the archiving server is 'archive.example.com', with IP 192.168.1.18. Install Zimbra on both as usual.

DNS

The servers will require a local DNS, as we use this to forward the mails. In this example, I will assume that we have set up a caching name server using bind on the live server. Typical entries would be something like this:

example.com. IN A 192.0.43.10

mail.example.com. IN A 192.168.1.5

example.com. IN MX 10 mail.example.com.

Along with this, we need to add an A and MX record for archive.example.com as well.

archive.example.com. IN A 192.168.1.18

archive.example.com. IN MX 10 archive.example.com.

Now all mails addressed to 'archive.example.com' will be forwarded to the archive server.

Postfix

In postfix, we can specify an email address to which all incoming and outgoing mails from a particular email ID will be forwarded to. This is done using 'sender_bcc_maps' and 'recipient_bcc_maps'. All these changes are done only on the main server. We make the following entries at the end of /opt/zimbra/postfix/conf/main.cf

sender_bcc_maps = hash:/opt/zimbra/postfix/conf/archivelist

recipient_bcc_maps = hash:/opt/zimbra/postfix/conf/archivelist

The file '/opt/zimbra/postfix/conf/archivelist' will have users in the following format: keyur@example.com keyur@archive.example.com All mails to and from keyur@example.com will be forwarded to keyur@archive.example.com.

Manual addition

Create a user on the main server, and then the corresponding user on the archive server. Then add the users in the format as show above to the file '/opt/zimbra/postfix/conf/archivelist', and then run the postmap command as the zimbra user:

$ postmap /opt/zimbra/postfix/conf/archivelist

$ postfix reload