Roundcube webmail サーバーその他を設定した時のメモ, 8 Sep 2019

前回のものに追記や変更など

Roundcube の受信トレイは IMAPでメールボックス (Maildir) の内容が表示され、送信はプロバイダーの SMTP 使用する

IMAP には、dovecot-imapd
POP3 には、dovecot-pop3d を使用

fetchmail でプロバイダーの pop3 より受信し
postfix から /usr/lib/dovecot/deliver 経由でメールボックスへ配信
dovecot-sieve でメールのフィルタリングを行う

Windows などの端末にインストールされたメールソフトからは
IMAP もしくは、pop3 で受信する
送信はプロバイダーの smtp を使用する

ターゲットマシン

DELL PowerEdge T30

[F2] BIOS Menu > Legacy Boot に設定してインストール

ダウンロード

~~ubuntu-16.04.3-server-amd64.iso~~
~~または: debian-9.0.0-amd64-DVD-1.iso~~
debian-10.0.0-amd64-netinst.iso

Linux ディストリビューションのインストール

Legacy Boot ~~BIOS UEFI~~ 設定で DVD から起動

ユーザー名: rcadmin
サーバーIPアドレス: 192.168.11.9
言語: 日本語
Server をインストール
場所: 日本
キーボード / レイアウト: Japanese
ホスト名: roundcubeserver
新しいユーザー: rcadmin
パスワード: **
時間の設定: はい
パティション: ガイドディスク全体を使う
プロキシ: なし
tasksel: 自動的にアップデートしない

tasksel では下記を選択 (不要なものも含まれている)

LAMP server
Mail server
Samba file server
standard system utilities
OpenSSH server

インストール時の質問

MySQL root のパスワード: **
Postfix メール設定の一般形式: インターネットサイト
システムメール名: example.com
GRUB のインストール: はい

DVD からのインストール完了

su ができるように root のパスワード設定

sudo passwd root

1	sudo passwd root

vim モノクロ表示に設定

編集: ~/.vimrc

この設定はエラーになったので止めた

syntax off

1	syntax off

sudo のインストール

$ su -
# apt install sudo

1 2	$ su - # apt install sudo

ユーザー rcadmin が sudo を利用できるようにする

$ sudo visudo

1	$ sudo visudo

# User privilege specification
root		ALL=(ALL:ALL) ALL
rcadmin		ALL=(ALL:ALL) ALL

# User privilege specification

root ALL=(ALL:ALL) ALL

rcadmin ALL=(ALL:ALL) ALL

lsyncd のファイル転送先でユーザー rcadmin が rsync をパスワード無しの sudo で実行できるようにするには下記も追加するあと、TTY も無し

Defaults!/usr/bin/rsync    !requiretty
rcadmin   ALL=(ALL)       NOPASSWD: /usr/bin/rsync

1 2	Defaults!/usr/bin/rsync !requiretty rcadmin ALL=(ALL) NOPASSWD: /usr/bin/rsync

カーネルパニック時に自動的に再起動

lsync を使用するので監視可能なファイル数を増やす設定もしておく

編集: /etc/sysctl.conf

# reboot if kernel panic.
kernel.panic = 5

# lsyncd
fs.inotify.max_user_watches = 1920000

# reboot if kernel panic.

kernel.panic = 5

# lsyncd

fs.inotify.max_user_watches = 1920000

5 は再起動までの秒数 (1 – 60, 0: 再起動しない)

設定の反映

/sbin/sysctl -p

1	/sbin/sysctl -p

確認

/sbin/sysctl -n 'kernel.panic'

1	/sbin/sysctl -n 'kernel.panic'

IPアドレス固定, ネームサーバー設定

編集: /etc/network/interfaces

前回の設定

# iface enp3s0 inet dhcp
auto enp3s0
iface enp3s0 inet static
address 192.168.11.9
netmask 255.255.255.0
gateway 192.168.11.1
dns-nameservers 192.168.11.1

# iface enp3s0 inet dhcp

auto enp3s0

iface enp3s0 inet static

address 192.168.11.9

netmask 255.255.255.0

gateway 192.168.11.1

dns-nameservers 192.168.11.1

今回の設定

# This file describes the network interfaces available on your system
# and how to activate them. For more information, see interfaces(5).

source /etc/network/interfaces.d/*

# The loopback network interface
auto lo
iface lo inet loopback

# The primary network interface
allow-hotplug enp0s31f6
# iface enp0s31f6 inet dhcp

auto enp0s31f6
iface enp0s31f6 inet static
address 192.168.11.9
netmask 255.255.255.0
gateway 192.168.11.1
dns-nameservers 192.168.11.1

# This file describes the network interfaces available on your system

# and how to activate them. For more information, see interfaces(5).

source /etc/network/interfaces.d/*

# The loopback network interface

auto lo

iface lo inet loopback

# The primary network interface

allow-hotplug enp0s31f6

# iface enp0s31f6 inet dhcp

auto enp0s31f6

iface enp0s31f6 inet static

address 192.168.11.9

netmask 255.255.255.0

gateway 192.168.11.1

dns-nameservers 192.168.11.1

設定の反映

$ sudo systemctl restart networking

1	$ sudo systemctl restart networking

下記の方法は失敗する

$ sudo service network restart

1	$ sudo service network restart

これも失敗

$ sudo ifdown enp0s31f6
$ sudo ifup   enp0s31f6

1 2	$ sudo ifdown enp0s31f6 $ sudo ifup enp0s31f6

ip アドレス確認

$ ip addr show

1	$ ip addr show

下記の方法は失敗する

$ ifconfig

1	$ ifconfig

MariaDB のインストール

$ sudo apt install mariadb-server
$ sudo mysql_secure_installation

NOTE: RUNNING ALL PARTS OF THIS SCRIPT IS RECOMMENDED FOR ALL MariaDB
      SERVERS IN PRODUCTION USE!  PLEASE READ EACH STEP CAREFULLY!

In order to log into MariaDB to secure it, we'll need the current
password for the root user.  If you've just installed MariaDB, and
you haven't set the root password yet, the password will be blank,
so you should just press enter here.

Enter current password for root (enter for none): 
OK, successfully used password, moving on...

Setting the root password ensures that nobody can log into the MariaDB
root user without the proper authorisation.

You already have a root password set, so you can safely answer 'n'.

Change the root password? [Y/n] 
New password: 
Re-enter new password: 
Password updated successfully!
Reloading privilege tables..
 ... Success!


By default, a MariaDB installation has an anonymous user, allowing anyone
to log into MariaDB without having to have a user account created for
them.  This is intended only for testing, and to make the installation
go a bit smoother.  You should remove them before moving into a
production environment.

Remove anonymous users? [Y/n] 
 ... Success!

Normally, root should only be allowed to connect from 'localhost'.  This
ensures that someone cannot guess at the root password from the network.

Disallow root login remotely? [Y/n] 
 ... Success!

By default, MariaDB comes with a database named 'test' that anyone can
access.  This is also intended only for testing, and should be removed
before moving into a production environment.

Remove test database and access to it? [Y/n] 
 - Dropping test database...
 ... Success!
 - Removing privileges on test database...
 ... Success!

Reloading the privilege tables will ensure that all changes made so far
will take effect immediately.

Reload privilege tables now? [Y/n] 
 ... Success!

Cleaning up...

All done!  If you've completed all of the above steps, your MariaDB
installation should now be secure.

Thanks for using MariaDB!

$ sudo apt install mariadb-server

$ sudo mysql_secure_installation

NOTE: RUNNING ALL PARTS OF THIS SCRIPT IS RECOMMENDED FOR ALL MariaDB

SERVERS IN PRODUCTION USE! PLEASE READ EACH STEP CAREFULLY!

In order to log into MariaDB to secure it, we'll need the current

password for the root user. If you've just installed MariaDB, and

you haven't set the root password yet, the password will be blank,

so you should just press enter here.

Enter current password for root (enter for none):

OK, successfully used password, moving on...

Setting the root password ensures that nobody can log into the MariaDB

root user without the proper authorisation.

You already have a root password set, so you can safely answer 'n'.

Change the root password? [Y/n]

New password:

Re-enter new password:

Password updated successfully!

Reloading privilege tables..

... Success!

By default, a MariaDB installation has an anonymous user, allowing anyone

to log into MariaDB without having to have a user account created for

them. This is intended only for testing, and to make the installation

go a bit smoother. You should remove them before moving into a

production environment.

Remove anonymous users? [Y/n]

... Success!

Normally, root should only be allowed to connect from 'localhost'. This

ensures that someone cannot guess at the root password from the network.

Disallow root login remotely? [Y/n]

... Success!

By default, MariaDB comes with a database named 'test' that anyone can

access. This is also intended only for testing, and should be removed

before moving into a production environment.

Remove test database and access to it? [Y/n]

- Dropping test database...

... Success!

- Removing privileges on test database...

... Success!

Reloading the privilege tables will ensure that all changes made so far

will take effect immediately.

Reload privilege tables now? [Y/n]

... Success!

Cleaning up...

All done! If you've completed all of the above steps, your MariaDB

installation should now be secure.

Thanks for using MariaDB!

パッケージのインストール

~~debian ではそのままだとパッケージが光学ドライブからインストールされるので~~
~~/etc/apt/sources.list の下記の行をコメントアウトする~~

# deb cdrom:[Debian GNU/Linux 5.0.3 _Lenny_ - Official i386 CD Binary-1 20090905-08:23]/ lenny main

1	# deb cdrom:[Debian GNU/Linux 5.0.3 _Lenny_ - Official i386 CD Binary-1 20090905-08:23]/ lenny main

インストール前回

apt-get update
apt-get upgrade
apt-get update

apt-get install rsync lsyncd ntfs-3g alsa-utils fdclone imagemagick screen nkf ncftp postfix dovecot-imapd dovecot-managesieved aspell dovecot-sieve fetchmail php-pear dovecot-pop3d proftpd

apt-get update

apt-get upgrade

apt-get update

apt-get install rsync lsyncd ntfs-3g alsa-utils fdclone imagemagick screen nkf ncftp postfix dovecot-imapd dovecot-managesieved aspell dovecot-sieve fetchmail php-pear dovecot-pop3d proftpd

インストール今回

$ sudo apt update
$ sudo apt upgrade
$ sudo apt update

$ sudo apt install rsync lsyncd ntfs-3g alsa-utils fdclone imagemagick screen nkf postfix dovecot-imapd dovecot-managesieved aspell dovecot-sieve fetchmail php-pear dovecot-pop3d ntpdate php php-cgi php-mysqli php-pear php-mbstring php-gettext libapache2-mod-php php-common php-phpseclib php-mysql php-gd autossh expect

$ sudo apt update

$ sudo apt upgrade

$ sudo apt update

$ sudo apt install rsync lsyncd ntfs-3g alsa-utils fdclone imagemagick screen nkf postfix dovecot-imapd dovecot-managesieved aspell dovecot-sieve fetchmail php-pear dovecot-pop3d ntpdate php php-cgi php-mysqli php-pear php-mbstring php-gettext libapache2-mod-php php-common php-phpseclib php-mysql php-gd autossh expect

proftpd の起動方法を質問された場合: スタンドアロン

Postfix Configuration
メール設定の一般形式:
- 設定なし
- インターネットサイト
- スマートホスト付インターネットサイト
- サテライトシステム
* ローカルのみ

システムメール名:
example.com

Postfix Configuration

メール設定の一般形式:

- 設定なし

- インターネットサイト

- スマートホスト付インターネットサイト

- サテライトシステム

* ローカルのみ

システムメール名:

example.com

PHP 関連のパッケージのインストール

pear install Mail_Mime Net_SMTP Net_Sieve

1	pear install Mail_Mime Net_SMTP Net_Sieve

Mail_Mime, Net_SMTP, Net_Sieve が非推奨になっていてインストールに失敗する場合

pear install Mail_Mime Net_SMTP Net_Sieve

WARNING: "pear/Net_Sieve" is deprecated in favor of "channel://pear.horde.org/Horde_ManageSieve"

pear install Mail_Mime Net_SMTP Net_Sieve

WARNING: "pear/Net_Sieve" is deprecated in favor of "channel://pear.horde.org/Horde_ManageSieve"

github から取り寄せ zip を展開

wget https://github.com/pear/Net_Socket/archive/master.zip
wget https://github.com/pear/Net_SMTP/archive/master.zip
wget https://github.com/pear/Net_Sieve/archive/master.zip

wget https://github.com/pear/Net_Socket/archive/master.zip

wget https://github.com/pear/Net_SMTP/archive/master.zip

wget https://github.com/pear/Net_Sieve/archive/master.zip

確認してコピー

ls  /usr/share/php/Net/
mkdir /usr/share/php/Net/

cp -i Net_Sieve-master/Net/Sieve.php /usr/share/php/Net/
cp -i Net_Socket-master/Net/Net_Socket-master/Net/Socket.php /usr/share/php/Net/
cp -i Net_SMTP-master/Net/SMTP.php /usr/share/php/Net/

ls /usr/share/php/Net/

mkdir /usr/share/php/Net/

cp -i Net_Sieve-master/Net/Sieve.php /usr/share/php/Net/

cp -i Net_Socket-master/Net/Net_Socket-master/Net/Socket.php /usr/share/php/Net/

cp -i Net_SMTP-master/Net/SMTP.php /usr/share/php/Net/

dovecot の設定

編集: /etc/dovecot/conf.d/10-mail.conf

変更箇所:

mail_location = maildir:~/Maildir

mail_privileged_group = mail

mail_location = maildir:~/Maildir

mail_privileged_group = mail

編集: /etc/dovecot/conf.d/15-lda.conf

変更箇所:

postmaster_address = info@example.com

lda_mailbox_autocreate = yes

lda_mailbox_autosubscribe = yes

mail_plugins = $mail_plugins sieve

postmaster_address = info@example.com

lda_mailbox_autocreate = yes

lda_mailbox_autosubscribe = yes

mail_plugins = $mail_plugins sieve

postfix の設定

編集: /etc/postfix/main.cf

変更箇所:

# mailbox_command = procmail -a "$EXTENSION"
mailbox_command = /usr/lib/dovecot/deliver

1 2	# mailbox_command = procmail -a "$EXTENSION" mailbox_command = /usr/lib/dovecot/deliver

dovecot pop3 の設定

編集: /etc/dovecot/dovecot.conf

変更箇所:

# Enable installed protocols
!include_try /usr/share/dovecot/protocols.d/*.protocol
protocols = imap pop3 sieve

# Enable installed protocols

!include_try /usr/share/dovecot/protocols.d/*.protocol

protocols = imap pop3 sieve

編集: /etc/dovecot/conf.d/10-master.conf

変更箇所:

service pop3-login {
  inet_listener pop3 {
    port = 110
  }
  inet_listener pop3s {
    port = 995
    ssl = yes
  }
}

service pop3-login {

inet_listener pop3 {

port = 110

}

inet_listener pop3s {

port = 995

ssl = yes

}

編集: /etc/dovecot/conf.d/10-auth.conf

変更箇所:

#disable_plaintext_auth = yes
disable_plaintext_auth = no

#auth_mechanisms = plain
auth_mechanisms = plain login

#disable_plaintext_auth = yes

disable_plaintext_auth = no

#auth_mechanisms = plain

auth_mechanisms = plain login

設定の反映

/etc/init.d/dovecot restart
/etc/init.d/postfix restart

1 2	/etc/init.d/dovecot restart /etc/init.d/postfix restart

ローカルサーバー pop3 接続テスト

telnet 192.168.11.9 110
Trying 192.168.11.9...
Connected to 192.168.11.9.
Escape character is '^]'.
+OK Dovecot ready.
USER rcadmin
+OK
PASS ******
+OK Logged in.
RETR 1
-ERR There's no message 1.
QUIT
+OK Logging out.
Connection closed by foreign host.

telnet 192.168.11.9 110

Trying 192.168.11.9...

Connected to 192.168.11.9.

Escape character is '^]'.

+OK Dovecot ready.

USER rcadmin

+OK

PASS ******

+OK Logged in.

RETR 1

-ERR There's no message 1.

QUIT

+OK Logging out.

Connection closed by foreign host.

ftp server の設定 (なるべく sftp を使うようにする)

編集: /etc/proftpd/proftpd.conf

変更箇所:

UseIPv6 off
ServerType standalone
DefaultRoot   ~
IdentLookups    off
UseReverseDNS    off
ListOptions                     "-la"

UseIPv6 off

ServerType standalone

DefaultRoot ~

IdentLookups off

UseReverseDNS off

ListOptions "-la"

設定の反映

/etc/init.d/proftpd restart

1	/etc/init.d/proftpd restart

phpMyAdmin のインストール

これは失敗してインストールできなかった

$ sudo apt install phpmyadmin

1	$ sudo apt install phpmyadmin

apache2 を選択
phpmyadmin 用のデータベースを dbconfig-common で設定する
パスワードを設定

接続してみる

http://192.168.11.9/phpmyadmin/

1	http://192.168.11.9/phpmyadmin/

apache 設定

ウェブサーバーの初期ディレクトリーの入れ替えもする

シンボリックリンクを作成して、設定の有効化
(一部、既にファイルが存在しますと言われるが問題ない)

cd /etc/apache2/mods-enabled

ln -s ../mods-available/userdir.conf .
ln -s ../mods-available/userdir.load .
ln -s ../mods-available/rewrite.load .

ln -s ../mods-available/deflate.* .
ln -s ../mods-available/expires.load .
ln -s ../mods-available/headers.load .
ln -s ../mods-available/cgi* .
ln -s ../mods-available/rewrite.load .

cd /etc/apache2/mods-enabled

ln -s ../mods-available/userdir.conf .

ln -s ../mods-available/userdir.load .

ln -s ../mods-available/rewrite.load .

ln -s ../mods-available/deflate.* .

ln -s ../mods-available/expires.load .

ln -s ../mods-available/headers.load .

ln -s ../mods-available/cgi* .

ln -s ../mods-available/rewrite.load .

編集: /etc/apache2/apache2.conf

変更箇所:

# <Directory /var/www/>
<Directory /home/rcadmin/public_html>
        # Options Indexes FollowSymLinks
        Options FollowSymLinks ExecCGI
        # AllowOverride None
        AllowOverride All
        Require all granted
</Directory>

# <Directory /var/www/>

# Options Indexes FollowSymLinks

Options FollowSymLinks ExecCGI

# AllowOverride None

AllowOverride All

Require all granted

</Directory>

編集: /etc/apache2/mods-available/mime.conf

変更箇所:

AddHandler cgi-script .cgi .pl

1	AddHandler cgi-script .cgi .pl

~~編集: /etc/apache2/mods-available/php7.0.conf~~

編集: /etc/apache2/mods-available/php7.3.conf

変更箇所:

<IfModule mod_userdir.c>
    <Directory /home/*/public_html>
        # php_admin_flag engine Off
        php_admin_flag engine On
    </Directory>
</IfModule>

# php_admin_flag engine Off

php_admin_flag engine On

</Directory>

</IfModule>

編集: /etc/apache2/mods-available/userdir.conf

変更箇所:

<IfModule mod_userdir.c>
        UserDir public_html
        UserDir disabled root

        <Directory /home/*/public_html>
                # AllowOverride FileInfo AuthConfig Limit Indexes
                AllowOverride All
                # Options MultiViews Indexes SymLinksIfOwnerMatch IncludesNoExec
                Options FollowSymLinks ExecCGI
                <Limit GET POST OPTIONS>
                        Require all granted
                </Limit>
                <LimitExcept GET POST OPTIONS>
                        Require all denied
                </LimitExcept>
        </Directory>
</IfModule>

# vim: syntax=apache ts=4 sw=4 sts=4 sr noet

UserDir public_html

UserDir disabled root

# AllowOverride FileInfo AuthConfig Limit Indexes

AllowOverride All

# Options MultiViews Indexes SymLinksIfOwnerMatch IncludesNoExec

Options FollowSymLinks ExecCGI

Require all granted

</Limit>

Require all denied

</LimitExcept>

</Directory>

</IfModule>

# vim: syntax=apache ts=4 sw=4 sts=4 sr noet

編集: /etc/apache2/sites-available/000-default.conf

変更箇所:

# DocumentRoot /var/www/html
DocumentRoot /home/rcadmin/public_html

1 2	# DocumentRoot /var/www/html DocumentRoot /home/rcadmin/public_html

編集: /etc/php/7.0/apache2/php.ini

変更箇所:

;display_errors = Off
display_errors = On

;error_reporting = E_ALL & ~E_DEPRECATED & ~E_STRICT
error_reporting = E_ALL

;display_errors = Off

display_errors = On

;error_reporting = E_ALL & ~E_DEPRECATED & ~E_STRICT

error_reporting = E_ALL

設定の反映

/etc/init.d/apache2 restart

1	/etc/init.d/apache2 restart

php テスト用ファイル作成

mkdir /home/rcadmin/public_html

1	mkdir /home/rcadmin/public_html

編集: /home/rcadmin/public_html/index.php

<?php
echo 'Test';
phpinfo();

<?php

echo 'Test';

phpinfo();

apache2 動作テストウェブブラウザーで http://192.168.11.9/ を開いて確認する

screen のログ保存設定

保守の為に設定しておく

$ mkdir ~/log
$ chmod 700 ~/log

1 2	$ mkdir ~/log $ chmod 700 ~/log

編集: ~/.screenrc

logfile $HOME/log/screen-output.%Y%m%d-%n.log
logfile flush secs
deflog on

logfile $HOME/log/screen-output.%Y%m%d-%n.log

logfile flush secs

deflog on

ssh 接続がタイムアウトしないようにする

サーバー側

$ sudo vi /etc/ssh/sshd_config

1	$ sudo vi /etc/ssh/sshd_config

# server side setting
ClientAliveInterval 15
# ClientAliveCountMax 3

# server side setting

ClientAliveInterval 15

# ClientAliveCountMax 3

$ sudo /etc/init.d/ssh restart

1	$ sudo /etc/init.d/ssh restart

クライアント側

$ sudo vi /etc/ssh/ssh_config

1	$ sudo vi /etc/ssh/ssh_config

または、

$ vi ~/.ssh/config

1	$ vi ~/.ssh/config

# client side setting
ServerAliveInterval 15

1 2	# client side setting ServerAliveInterval 15

Maildir の雛形作成

フォルダ名について

&MFkweTBmMG4w4TD8MOs- すべてのメール
&MLQw33ux- ゴミ箱
&MLkwvzD8TtgwTQ- スターあり
&Tgtm+DBN- 下書き
&j,dg0TDhMPww6w- 迷惑メール
&kAFP4W4IMH8w4TD8MOs- 送信メール

雛形作成

cd /etc/skel
mkdir 'Maildir'
mkdir 'Maildir/.&j,dg0TDhMPww6w-'
mkdir 'Maildir/.&j,dg0TDhMPww6w-/cur'
mkdir 'Maildir/.&j,dg0TDhMPww6w-/new'
mkdir 'Maildir/.&j,dg0TDhMPww6w-/tmp'
mkdir 'Maildir/.&MFQwf3ux-'
mkdir 'Maildir/.&MFQwf3ux-/cur'
mkdir 'Maildir/.&MFQwf3ux-/new'
mkdir 'Maildir/.&MFQwf3ux-/tmp'
mkdir 'Maildir/cur'
mkdir 'Maildir/.&kAFP4W4IMH8-'
mkdir 'Maildir/.&kAFP4W4IMH8-/cur'
mkdir 'Maildir/.&kAFP4W4IMH8-/new'
mkdir 'Maildir/.&kAFP4W4IMH8-/tmp'
mkdir 'Maildir/new'
mkdir 'Maildir/.&Tgtm+DBN-'
mkdir 'Maildir/.&Tgtm+DBN-/cur'
mkdir 'Maildir/.&Tgtm+DBN-/new'
mkdir 'Maildir/.&Tgtm+DBN-/tmp'
mkdir 'Maildir/.&TuVSTTBuMOEw,DDr-'
mkdir 'Maildir/.&TuVSTTBuMOEw,DDr-/cur'
mkdir 'Maildir/.&TuVSTTBuMOEw,DDr-/new'
mkdir 'Maildir/.&TuVSTTBuMOEw,DDr-/tmp'
mkdir 'Maildir/tmp'
chmod -R 700 Maildir

cd /etc/skel

mkdir 'Maildir'

mkdir 'Maildir/.&j,dg0TDhMPww6w-'

mkdir 'Maildir/.&j,dg0TDhMPww6w-/cur'

mkdir 'Maildir/.&j,dg0TDhMPww6w-/new'

mkdir 'Maildir/.&j,dg0TDhMPww6w-/tmp'

mkdir 'Maildir/.&MFQwf3ux-'

mkdir 'Maildir/.&MFQwf3ux-/cur'

mkdir 'Maildir/.&MFQwf3ux-/new'

mkdir 'Maildir/.&MFQwf3ux-/tmp'

mkdir 'Maildir/cur'

mkdir 'Maildir/.&kAFP4W4IMH8-'

mkdir 'Maildir/.&kAFP4W4IMH8-/cur'

mkdir 'Maildir/.&kAFP4W4IMH8-/new'

mkdir 'Maildir/.&kAFP4W4IMH8-/tmp'

mkdir 'Maildir/new'

mkdir 'Maildir/.&Tgtm+DBN-'

mkdir 'Maildir/.&Tgtm+DBN-/cur'

mkdir 'Maildir/.&Tgtm+DBN-/new'

mkdir 'Maildir/.&Tgtm+DBN-/tmp'

mkdir 'Maildir/.&TuVSTTBuMOEw,DDr-'

mkdir 'Maildir/.&TuVSTTBuMOEw,DDr-/cur'

mkdir 'Maildir/.&TuVSTTBuMOEw,DDr-/new'

mkdir 'Maildir/.&TuVSTTBuMOEw,DDr-/tmp'

mkdir 'Maildir/tmp'

chmod -R 700 Maildir

Roundcube webmail のダウンロードと配置

cd /home/rcadmin/public_html/
wget https://github.com/roundcube/roundcubemail/releases/download/1.3.10/roundcubemail-1.3.10-complete.tar.gz
tar xvf roundcubemail-1.3.10-complete.tar.gz 
mv roundcubemail-1.3.10 roundcube

cd /home/rcadmin/public_html/

wget https://github.com/roundcube/roundcubemail/releases/download/1.3.10/roundcubemail-1.3.10-complete.tar.gz

tar xvf roundcubemail-1.3.10-complete.tar.gz

mv roundcubemail-1.3.10 roundcube

データーベース作成

以下 ${hoge} の部分は使用するデーターベースの情報に合わせる

mysql -u root -p

create database ${dbname} DEFAULT CHARACTER SET utf8;
GRANT ALL PRIVILEGES ON *.* TO ${username}@${server} IDENTIFIED BY '${password}' WITH GRANT OPTION;
GRANT ALL PRIVILEGES ON ${dbname}.* TO ${username}@${server} IDENTIFIED BY '${password}' WITH GRANT OPTION;

mysql -u root -p

create database ${dbname} DEFAULT CHARACTER SET utf8;

GRANT ALL PRIVILEGES ON *.* TO ${username}@${server} IDENTIFIED BY '${password}' WITH GRANT OPTION;

GRANT ALL PRIVILEGES ON ${dbname}.* TO ${username}@${server} IDENTIFIED BY '${password}' WITH GRANT OPTION;

データーベースを初期化する場合

mysql ${dbname} -u ${username} -p < /home/rcadmin/public_html/roundcube/SQL/mysql.initial.sql

1	mysql ${dbname} -u ${username} -p < /home/rcadmin/public_html/roundcube/SQL/mysql.initial.sql

データーベースをエクスポート＆インポートする場合

エクスポート

$ sudo mysqldump -u ${username} -p -h localhost ${dbname} > roundcubemail_190914-01.sql

1	$ sudo mysqldump -u ${username} -p -h localhost ${dbname} > roundcubemail_190914-01.sql

インポート

$ sudo mysql -u ${username} -p -h localhost ${dbname} < roundcubemail_190914-01.sql

1	$ sudo mysql -u ${username} -p -h localhost ${dbname} < roundcubemail_190914-01.sql

設定ファイルの編集

契約しているサーバーのメール設定に合わせて設定する

編集: /home/rcadmin/public_html/roundcube/config/config.inc.php

編集: /home/rcadmin/public_html/roundcube/config/defaults.inc.php

変更箇所:

// $config['mime_types'] = null;
$config['mime_types'] = '/home/rcadmin/public_html/roundcube/config/mime.types';

// $config['language'] = null;
$config['language'] = 'ja_JP';

// $config['mime_types'] = null;

$config['mime_types'] = '/home/rcadmin/public_html/roundcube/config/mime.types';

// $config['language'] = null;

$config['language'] = 'ja_JP';

ファイル /home/rcadmin/public_html/roundcube/config/mime.types は、http://svn.apache.org/repos/asf/httpd/httpd/trunk/docs/conf/mime.types からダウンロードして編集

プラグインのインストール

archive
zipdownload
managesieve
globaladdressbook
lkk_addressbook
markasjunk2

cd /home/rcadmin/public_html/roundcube/plugins/managesieve
cp config.inc.php.dist config.inc.php

1 2	cd /home/rcadmin/public_html/roundcube/plugins/managesieve cp config.inc.php.dist config.inc.php

/home/rcadmin/public_html/roundcube/config/config.inc.php を編集してプラグインを有効にする

fetchmail の設定

fetchmail でプロバイダーのメールサーバーから pop3 で受信する

mkdir -m 700 /home/rcadmin/fetchmail
touch /home/rcadmin/fetchmail/fetchmailrc
chmod 700 /home/rcadmin/fetchmail/fetchmailrc
touch /home/rcadmin/fetchmail/fetchmail.log

mkdir -m 700 /home/rcadmin/fetchmail

touch /home/rcadmin/fetchmail/fetchmailrc

chmod 700 /home/rcadmin/fetchmail/fetchmailrc

touch /home/rcadmin/fetchmail/fetchmail.log

編集: /home/rcadmin/fetchmail/fetchmailrc

set postmaster root
set nobouncemail

# uidl

set logfile /home/rcadmin/fetchmail/fetchmail.log

# delay second auto recieve
# set daemon 300
# set daemon 600

defaults
protocol pop3
keep
# flush
no mimedecode
smtphost localhost

# user
poll pop3.mail.example.com user "rcadmin@example.com" password "******" is rcadmin here
# end

set postmaster root

set nobouncemail

# uidl

set logfile /home/rcadmin/fetchmail/fetchmail.log

# delay second auto recieve

# set daemon 300

# set daemon 600

defaults

protocol pop3

keep

# flush

no mimedecode

smtphost localhost

# user

poll pop3.mail.example.com user "rcadmin@example.com" password "******" is rcadmin here

# end

定期的に受信及びメールサーバーから削除するように設定

crontab -e

1	crontab -e

# m h  dom mon dow   command

*/10 * *    * *   /usr/bin/fetchmail --keep  -f /home/rcadmin/fetchmail/fetchmailrc
*    1 */20 * *   /usr/bin/fetchmail --flush -f /home/rcadmin/fetchmail/fetchmailrc

# m h dom mon dow command

*/10 * * * * /usr/bin/fetchmail --keep -f /home/rcadmin/fetchmail/fetchmailrc

* 1 */20 * * /usr/bin/fetchmail --flush -f /home/rcadmin/fetchmail/fetchmailrc

Roundcube webmail を開く `http://192.168.11.9/roundcube/`

ログインして個々のユーザー設定を行う

フォルダー

次のフォルダーを購読に指定: ごみ箱, 下書き, 迷惑メール, 送信メール, 以前のメール, 送信済み

識別情報

表示名, 電子メールを設定

フィルター

フィルターセット managesieve ができているので振り分け設定をここで行う

設定

メッセージの表示 > 初期設定の文字セット: ISO-2022-JP (日本語)

特殊なフォルダー

購読フォルダーとの対応関係を設定する

Roundcube webmail にログイン出来ない場合の対処方法

$ sudo mysql -u root -p
Enter password: 
Welcome to the MariaDB monitor.  Commands end with ; or \g.
Your MariaDB connection id is 103
Server version: 10.3.17-MariaDB-0+deb10u1 Debian 10

Copyright (c) 2000, 2018, Oracle, MariaDB Corporation Ab and others.

Type 'help;' or '\h' for help. Type '\c' to clear the current input statement.

MariaDB [(none)]> use roundcubemail
Reading table information for completion of table and column names
You can turn off this feature to get a quicker startup with -A

Database changed
MariaDB [roundcubemail]> ALTER TABLE roundcubemail.users DROP COLUMN roundcubemail.users.alias;
Query OK, 0 rows affected (1.304 sec)
Records: 0  Duplicates: 0  Warnings: 0

MariaDB [roundcubemail]> exit

$ sudo mysql -u root -p

Enter password:

Welcome to the MariaDB monitor. Commands end with ; or \g.

Your MariaDB connection id is 103

Server version: 10.3.17-MariaDB-0+deb10u1 Debian 10

Type 'help;' or '\h' for help. Type '\c' to clear the current input statement.

MariaDB [(none)]> use roundcubemail

Reading table information for completion of table and column names

You can turn off this feature to get a quicker startup with -A

Database changed

MariaDB [roundcubemail]> ALTER TABLE roundcubemail.users DROP COLUMN roundcubemail.users.alias;

Query OK, 0 rows affected (1.304 sec)

Records: 0 Duplicates: 0 Warnings: 0

MariaDB [roundcubemail]> exit

killall のインストール

$ sudo apt install psmisc

1	$ sudo apt install psmisc

Remote desktop のインストール

$ sudo apt -y install xrdp
$ sudo systemctl enable xrdp

1 2	$ sudo apt -y install xrdp $ sudo systemctl enable xrdp

ファイアーウォールの状態確認

$ sudo ufw status
状態：非アクティブ

1 2	$ sudo ufw status 状態：非アクティブ

アクティブな場合

$ sudo ufw allow 5900
$ sudo ufw reload
$ sudo ufw status

$ sudo ufw allow 5900

$ sudo ufw reload

$ sudo ufw status

ディスプレイなしで起動しない場合

$ sudo vi /etc/default/grub

1	$ sudo vi /etc/default/grub

# If you change this file, run 'update-grub' afterwards to update
# /boot/grub/grub.cfg.
# For full documentation of the options in this file, see:
#   info -f grub -n 'Simple configuration'

GRUB_DEFAULT=0
GRUB_TIMEOUT_STYLE=hidden
GRUB_TIMEOUT=10
GRUB_DISTRIBUTOR=`lsb_release -i -s 2> /dev/null || echo Debian`
# GRUB_CMDLINE_LINUX_DEFAULT="quiet splash"
GRUB_CMDLINE_LINUX_DEFAULT="text" ★
GRUB_CMDLINE_LINUX=""

# Uncomment to enable BadRAM filtering, modify to suit your needs
# This works with Linux (no patch required) and with any kernel that obtains
# the memory map information from GRUB (GNU Mach, kernel of FreeBSD ...)
#GRUB_BADRAM="0x01234567,0xfefefefe,0x89abcdef,0xefefefef"

# Uncomment to disable graphical terminal (grub-pc only)
#GRUB_TERMINAL=console

# The resolution used on graphical terminal
# note that you can use only modes which your graphic card supports via VBE
# you can see them in real GRUB with the command `vbeinfo'
#GRUB_GFXMODE=640x480

# Uncomment if you don't want GRUB to pass "root=UUID=xxx" parameter to Linux
#GRUB_DISABLE_LINUX_UUID=true

# Uncomment to disable generation of recovery mode menu entries
#GRUB_DISABLE_RECOVERY="true"

# Uncomment to get a beep at grub start
#GRUB_INIT_TUNE="480 440 1"

# Uncomment to disable graphical terminal (grub-pc only)
GRUB_DISABLE_OS_PROBER=true ★
GRUB_TERMINAL=console       ★

# If you change this file, run 'update-grub' afterwards to update

# /boot/grub/grub.cfg.

# For full documentation of the options in this file, see:

# info -f grub -n 'Simple configuration'

GRUB_DEFAULT=0

GRUB_TIMEOUT_STYLE=hidden

GRUB_TIMEOUT=10

GRUB_DISTRIBUTOR=`lsb_release -i -s 2> /dev/null || echo Debian`

# GRUB_CMDLINE_LINUX_DEFAULT="quiet splash"

GRUB_CMDLINE_LINUX_DEFAULT="text" ★

GRUB_CMDLINE_LINUX=""

# Uncomment to enable BadRAM filtering, modify to suit your needs

# This works with Linux (no patch required) and with any kernel that obtains

# the memory map information from GRUB (GNU Mach, kernel of FreeBSD ...)

#GRUB_BADRAM="0x01234567,0xfefefefe,0x89abcdef,0xefefefef"

# Uncomment to disable graphical terminal (grub-pc only)

#GRUB_TERMINAL=console

# The resolution used on graphical terminal

# note that you can use only modes which your graphic card supports via VBE

# you can see them in real GRUB with the command `vbeinfo'

#GRUB_GFXMODE=640x480

# Uncomment if you don't want GRUB to pass "root=UUID=xxx" parameter to Linux

#GRUB_DISABLE_LINUX_UUID=true

# Uncomment to disable generation of recovery mode menu entries

#GRUB_DISABLE_RECOVERY="true"

# Uncomment to get a beep at grub start

#GRUB_INIT_TUNE="480 440 1"

# Uncomment to disable graphical terminal (grub-pc only)

GRUB_DISABLE_OS_PROBER=true ★

GRUB_TERMINAL=console ★

$ sudo update-grub2

1	$ sudo update-grub2

Webmin

http://doxfer.webmin.com/Webmin/Installation

apt (Debian/Ubuntu/Mint)

By adding the webmin repository and Jamie Cameron’s key it is possible to install & maintain the latest Webmin/Usermin versions.

Just Cut&Paste the entire text below and hit enter. This will install the latest Webmin version by adding the webmin-repo and corresponding key as well as installing necessary packages:

# sh -c 'echo "deb http://download.webmin.com/download/repository sarge contrib" > /etc/apt/sources.list.d/webmin.list'
# wget -qO - http://www.webmin.com/jcameron-key.asc | sudo apt-key add -
# apt update
# apt upgrade
# apt update
# apt install webmin

# sh -c 'echo "deb http://download.webmin.com/download/repository sarge contrib" > /etc/apt/sources.list.d/webmin.list'

# wget -qO - http://www.webmin.com/jcameron-key.asc | sudo apt-key add -

# apt update

# apt upgrade

# apt update

# apt install webmin

https://192.168.11.9:10000/

Webmin > Webmin Configuration > SSL Encryption
Enable SSL : No

http://192.168.11.9:10000/

SSL: No では、Firefox 62 ではエラーが出てアクセスできない、Chrome では OK

Error - No cookies

Your browser does not support cookies, which are required for this web server to work in session authentication mode

Error - No cookies

Your browser does not support cookies, which are required for this web server to work in session authentication mode

/etc/rc.local を使用可能にする

$ sudo vi /etc/systemd/system/rc-local.service

1	$ sudo vi /etc/systemd/system/rc-local.service

[Unit]
Description=/etc/rc.local
ConditionPathExists=/etc/rc.local

[Service]
Type=forking
ExecStart=/etc/rc.local start
TimeoutSec=0
StandardOutput=tty
RemainAfterExit=yes
SysVStartPriority=99

[Install]
WantedBy=multi-user.target

[Unit]

Description=/etc/rc.local

ConditionPathExists=/etc/rc.local

[Service]

Type=forking

ExecStart=/etc/rc.local start

TimeoutSec=0

StandardOutput=tty

RemainAfterExit=yes

SysVStartPriority=99

[Install]

WantedBy=multi-user.target

$ sudo vi /etc/rc.local

1	$ sudo vi /etc/rc.local

#!/bin/sh -e
#
# rc.local
#
# This script is executed at the end of each multiuser runlevel.
# Make sure that the script will "exit 0" on success or any other
# value on error.
#
# In order to enable or disable this script just change the execution
# bits.
#
# By default this script does nothing.

/bin/su -l USERNAME -c '/usr/bin/dropbox start'

exit 0

#!/bin/sh -e

# rc.local

# This script is executed at the end of each multiuser runlevel.

# Make sure that the script will "exit 0" on success or any other

# value on error.

# In order to enable or disable this script just change the execution

# bits.

# By default this script does nothing.

/bin/su -l USERNAME -c '/usr/bin/dropbox start'

exit 0

$ sudo chmod +x /etc/rc.local
$ # sudo systemctl daemon-reload
$ sudo systemctl enable rc-local
$ sudo systemctl start  rc-local.service
$ sudo systemctl status rc-local.service

$ sudo chmod +x /etc/rc.local

$ # sudo systemctl daemon-reload

$ sudo systemctl enable rc-local

$ sudo systemctl start rc-local.service

$ sudo systemctl status rc-local.service

リンク切れのシンボリックリンク一括削除方法

$ find . -xtype l | xargs rm

1	$ find . -xtype l \| xargs rm

See:

https://www.itechlounge.net/2017/10/linux-how-to-add-rc-local-in-debian-9/
https://blog.rhce.ro/unable-to-login-to-roundcube-php-error-failed-to-create-a-user-record/
https://qiita.com/PlanetMeron/items/3a41e14607a65bc9b60c
https://www.digitalocean.com/community/tutorials/how-to-install-mariadb-on-debian-10
https://computingforgeeks.com/install-phpmyadmin-with-apache-on-debian-10-buster/
https://qiita.com/bloodia/items/669f9fbf50d93f48994f
https://blog.osakana.net/archives/8159
https://qiita.com/tkykmw/items/7f1216088b789d0538fb#%E8%BB%A2%E9%80%81%E5%85%88%E3%83%9B%E3%82%B9%E3%83%88%E3%81%A7%E3%81%AE%E8%A8%AD%E5%AE%9A
https://github.com/axkibe/lsyncd/issues/547
https://qiita.com/tkykmw/items/7f1216088b789d0538fb#%E8%BB%A2%E9%80%81%E5%85%88%E3%83%9B%E3%82%B9%E3%83%88%E3%81%A7%E3%81%AE%E8%A8%AD%E5%AE%9A
https://ubuntuforums.org/showthread.php?t=1628566
https://pakira.blog.ss-blog.jp/2014-11-30
https://stackoverflow.com/questions/44797694/where-is-rc-local-in-debian-9-debian-stretch
https://github.com/ai-takeuchi/Roundcube-Plugin-LKK-AddressBook/

前回

Roundcube webmail サーバーを設定した時のメモ, 23 Nov 2017

ターゲットマシン

ダウンロード

Linux ディストリビューションのインストール

su ができるように root のパスワード設定

vim モノクロ表示に設定

sudo のインストール

カーネルパニック時に自動的に再起動

IPアドレス固定, ネームサーバー設定

MariaDB のインストール

パッケージのインストール

PHP 関連のパッケージのインストール

dovecot の設定

postfix の設定

dovecot pop3 の設定

ローカルサーバー pop3 接続テスト

ftp server の設定 (なるべく sftp を使うようにする)

phpMyAdmin のインストール

apache 設定

php テスト用ファイル作成

screen のログ保存設定

ssh 接続がタイムアウトしないようにする

Maildir の雛形作成

Roundcube webmail のダウンロードと配置

データーベース作成

プラグインのインストール

fetchmail の設定

Roundcube webmail を開く http://192.168.11.9/roundcube/

Roundcube webmail にログイン出来ない場合の対処方法

killall のインストール

Remote desktop のインストール

ディスプレイなしで起動しない場合

Webmin

/etc/rc.local を使用可能にする

リンク切れのシンボリックリンク一括削除方法

See:

前回

コメントを残す

Roundcube webmail を開く `http://192.168.11.9/roundcube/`