Jump to content

Pahwa Bryair Zimbra

From TetraWiki
Revision as of 12:47, 29 July 2015 by Manojsemwal (talk | contribs) (Created page with " '''Pahwa New Architecture''' File:Pahwa 01.jpg Installation :- On IMSS server :- //Install Postfix Yum install...")
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
                                                   Pahwa New Architecture



Installation :-

On IMSS server :- //Install Postfix Yum install postfix

// Install Trend IMSS Download IMSS_v7.1_Linux_1224_r2.tar.gz for Untar the file and run the installation script :- ./ isinst.sh Press y when ask for installation and confirm . It will ask for database server to install locally , press y and proceed .



Postfix Configuration. cd /etc/postfix

  1. vim main.cf

//insert following entry

mydomain = pahwa.com myhostname = imss.pahwa.com mydestination = $myhostname, localhost.$mydomain, $mydomain default_process_limit=200 imss_timeout=10m imss_connect_timeout=1s content_filter = imss:localhost:10025 imss_destination_recipient_limit=200 imss_destination_concurrency_limit=200

smtpd_client_restrictions = 

 permit_mynetworks,
 reject_rbl_client bl.spamcop.net,
 reject_rbl_client b.barracudacentral.org,
 reject_rbl_client cbl.abuseat.org,
 reject_rbl_client dnsbl.sorbs.net,
 permit

disable_vrfy_command = yes smtpd_recipient_restrictions = 

 check_recipient_access hash:/etc/postfix/recipient_domains, permit_mynetworks, permit_sasl_authenticated,
 reject_unverified_recipient,
 reject_non_fqdn_sender,
 reject_non_fqdn_recipient,
 reject_unauth_destination,
 reject_unauth_pipelining,
 reject

smtpd_sender_restrictions = 

 permit_mynetworks,
 permit_sasl_authenticated,
 check_sender_access hash:/etc/postfix/sender_access
 reject_unknown_sender_domain

mynetworks = 127.0.0.1, 192.168.0.5, 192.168.0.254, 192.168.0.2


//For recipent restriction

  1. vim recipient_domains

//Make Entry :- pahwa.com OK

//Now Postmap command to make db


  1. postmap recipient_domains

//For Sender restriction

  1. vim /etc/postfix/sender_access

pahwa.com REJECT postmaster@imss.pahwa.com REJECT


  1. postmap sender_access


//Also Edit master.cf

  1. vim master.cf


//IMSS: content filter smtp transport imss for IMSS imss unix - - n - - smtp 

        -o disable_dns_lookups=yes
        -o smtp_connect_timeout=$imss_connect_timeout
        -o smtp_data_done_timeout=$imss_timeout

//IMSS: content filter loop back smtpd localhost:10026 inet n - n - 200 smtpd 

        -o content_filter=
        -o smtpd_timeout=$imss_timeout
        -o local_recipient_maps=
        -o myhostname=postfix.imss71
        -o smtpd_client_restrictions=
        -o smtpd_enforce_tls=no


//IMSS Configuration Via Graphical Panel :- All the configurations are done by IT team of Pahwa like filters and rules for AV/AS . we have defined :-

IMSS configuration -> SMTP Routing -> Domain-based delivery

Domain IP Port pahwa.com 192.168.0.2 25

Fetch mail is also configured on this server, to download mails from mx2 in case of failure of mx1 http://192.168.1.15/wiki/index.php/Fetchmail Configuration of fetch mail was downloaded from old server



DRBD and HEARTBEAT configuration:-


Step :1 Download EPEL and ELRepo (epel is for heartbeat and elrepo is for DRBD)

  1. rpm -Uvh http://elrepo.org/elrepo-release-6-4.el6.elrepo.noarch.rpm

vi /etc/yum.repos.d/elrepo.repo enabled=0

  1. yum --enablerepo=elrepo install drbd83-utils kmod-drbd83

rpm -Uvh http://download.fedora.redhat.com/pub/epel/6/x86_64/epel-release-6-5.noarch.rpm

  1. vi /etc/yum.repos.d/epel.repo

enabled=0

  1. yum --enablerepo=epel install heartbeat

Same configyration in Node1 and Node2

vim /etc/hosts 192.168.0.5 node1.pahwa.com node1 192.168.0.2 mail21c.pahwa.com mail21c node2.pahwa.com need to be added later



  1. mv /etc/drbd.d/global_common.conf /etc/drbd.d/global_common.sample

and create a new file:

  1. vi /etc/drbd.d/global_common.conf

global { usage-count no; } common { syncer { rate 100M; } }


Create a new resource file that I called “main”, on both servers they have to be equal:

  1. vi /etc/drbd.d/main.res

resource main { protocol C; startup { wfc-timeout 0; degr-wfc-timeout 120; } disk { on-io-error detach; } on node1.pahwa.com { device /dev/drbd0; disk /dev/vg_pahwa/LogVol01; meta-disk internal; address 10.0.0.1:7788; on node2.pahwa.com { device /dev/drbd0; disk /dev/vg_pahwa/LogVol01; meta-disk internal; address 10.0.0.2:7788;


Now we have to create the metadata on both servers: 

#dd if=/dev/zero of= /dev/vg_home1 bs=1M count=50

drbdadm create-md main (run on node1) drbdadm create-md main (run on node2) node 2 is not configured yet and need to be configured.


[root@node1 drbd.d]# service drbd start Starting DRBD resources: [ d(main) s(main) n(main) ].



We will tell DRBD that server1 is the Primary server: On node1:

  1. drbdsetup /dev/drbd0 primary -o

On node1:

  1. mkfs.ext4 /dev/drbd0

Now DRBD is configured , now you ready to mount your /dev/drbd0 to /opt On Node1

  1. mount –t ext4 /dev/drbd0 /opt

We will install heartbeat from the EPEL repository:

  1. rpm -Uvh http://download.fedora.redhat.com/pub/epel/6/x86_64/epel-release-6-5.noarch.rpm
  2. vi /etc/yum.repos.d/epel.repo
      enabled=0
  1. yum --enablerepo=epel install heartbeat

Create the following file on both servers with the exact same content:

  1. vi /etc/ha.d/ha.cf

keepalive 2 deadtime 30 bcast eth0 node node1.pahwa.com node2.pahwa.com


The next setp is to create the resource file for heartbeat on both servers with exact same content again:

  1. vi /etc/ha.d/haresources

node1.pahwa.com IPaddr::192.168.0.2/24/eth0 drbddisk::main Filesystem::/dev/drbd0::/opt::ext4 zimbra

  1. first word is the hostname of the primary server then the IP 192.168.0.2 is the one I choose to be the virtual IP to be moved to the slave in case of a failure.

The last thing is to create the authentication file on both servers again with the same content:

  1. vi /etc/ha.d/authkeys

auth 3

3 md5 asd1234f

This password file should only be readable by the root user:

  1. chmod 600 /etc/ha.d/authkeys

Need To Configure Same settings on node2.pahwa.com which will be provided later by Client. Currently IP Alias is Added Directly on eth0 for node1.pahwa.com



Zimbra Installation On node1.pahwa.com:-

Download zcs-8.6.0_GA_1153.RHEL6_64.20141215151155.tgz and untar the compressed file .


  1. cd zcs-8.6.0_GA_1153.RHEL6_64.20141215151155

now inside this directory run install.sh

./install.sh --platform-override

now follow the onscreen instructions and install zimbra .

Do not install zimbra-proxy and zimbra-memcahce , Just press [N] while setup prompts for install .


After Successful Installation we need to create users which was provided by IT team of pahwa with passwords .

//script location /root/Desktop/scripts


zmprov < /PATH_of_script


Now we want all external mails to go via IMSS server so we have Defined External Relay IP under Global Config via Admin Panel as 192.168.0.10:25

Retrieved from "https://wiki.tetrain.com/index.php?title=Pahwa_Bryair_Zimbra&oldid=2024"