How to install Qmail Toaster on Debian Lenny

This article is an updating of many articles that I found on the internet. This article talks about the installation of an electronic mail server on the operating system Linux using Qmail and Debian Lenny. In my opinion this is one of the most robust and reliable mail server that can be deployed on Linux. Also this article I will be teaching how to use the package Qmail-Toaster (netqmail).

 
Introduction:

Firstly I would like to give the credits of article for the site that I used as source: www.qmailrocks.org.

I won't go over the Debian installation, but I recommend using its basic and updated installation.

We will be installing a complete electronic mail with resources such as:

• Electronic mail – SMTP / POP3 / IMAP
• Web-based Control Panel
• Antispam filters and antivirus.
• Service monitoring tools (QMAIL MRTG)

 This installation I used Debian 5 (Lenny) version 5.0.4 and all the latest updates.

Solving dependences and downloading the necessary packages:

Installing dependences:

# apt-get install bind9 libgdbm3 libgdbm-dev openssl libssl-dev stunnel libkrb5-dev patch bzip2 gcc g++ make mysql-server libmysqlclient15-dev apache2-mpm-prefork libapache2-mod-php5 wget equivs ncftp lynx unzip gnupg libdigest-sha1-perl libdigest-hmac-perl libnet-dns-perl libhtml-parser-perl perl-suid mrtg libdb-dev

Deactivating exim4 (Lenny Default email service) 

Downloading the necessary packages:

Now let’s add the following links to the “links” file.

# vi links 

Copy and paste all the information bellow:

 :x (save and exit)

 
All right! Now we can go ahead and download all the packages by typing the following command:

All the required packages are in the /usr/src/qmal directory.

Netqmail, daemontools, and ucspi-tool Installation:

Uncompressing and running netqmail pacth:

Installing Daemontools package:

(inside the netqmail directory)

# Type EOF to finish the edition.

# Whenever you need to clean the service erros run the following command:
svc -o /service/clear
EOF

In order to verify if the service is correctly installed, run the following command:

# ps ax | grep readproctitle

The output should be something like:

9796 ?        S      0:00 readproctitle service errors:  ................

Okay, so now let's install the ucspi-tool package:

# cd /usr/src/qmail/

# tar -xzvf ucspi-tcp-0.88.tar.gz

# cd ucspi-tcp-0.88

# vi error.h

Then replace "extern int errno; "  

 for  "#include <errno.h>" without quotes (").

:x  (save and exit)

# patch -p1 < /usr/src/qmail/netqmail-1.05/other-patches/ucspi-tcp-0.88.errno.patch

# make

# make setup check

Installing netqmail and solving dependences, directories and permissions:

# mkdir /var/qmail

# groupadd nofiles

# useradd -g nofiles -d /var/qmail/alias alias

# useradd -g nofiles -d /var/qmail qmaild

# useradd -g nofiles -d /var/qmail qmaill

# useradd -g nofiles -d /var/qmail qmailp

# groupadd qmail

# useradd -g qmail -d /var/qmail qmailq

# useradd -g qmail -d /var/qmail qmailr

# useradd -g qmail -d /var/qmail qmails

# cd /usr/src/qmail

# tar -xzf toaster-scripts-0.8.1.tar.gz

# cd netqmail-1.05/netqmail-1.05/

# make

# make setup check

# echo 3 > /var/qmail/control/spfbehavior

# echo 1 > /var/qmail/control/mfcheck

In the following text replace “ This e-mail address is being protected from spambots. You need JavaScript enabled to view it ” with your administrator user @ your domain.

# cd ~alias

# echo " This e-mail address is being protected from spambots. You need JavaScript enabled to view it " > .qmail-postmaster

# echo " This e-mail address is being protected from spambots. You need JavaScript enabled to view it " > .qmail-mailer-daemon

# echo " This e-mail address is being protected from spambots. You need JavaScript enabled to view it " > .qmail-root

Running the fast netqmail configuration:

# cd /usr/src/qmail/netqmail-1.05/netqmail-1.05

# ./config-fast mailserver.com

Configuring the netqmail resources:

# cd /usr/src/qmail

# cp toaster-scripts-0.8.1/rc /var/qmail/rc

# chmod 755 /var/qmail/rc

# mkdir /var/log/qmail

# echo ./Maildir/ >/var/qmail/control/defaultdelivery

# cp toaster-scripts-0.8.1/qmailctl /var/qmail/bin/

# chmod 755 /var/qmail/bin/qmailctl

# ln -s /var/qmail/bin/qmailctl /usr/bin

# rm /usr/sbin/sendmail

# ln -s /var/qmail/bin/sendmail /usr/sbin/sendmail

# rm /usr/lib/sendmail

# ln -s /var/qmail/bin/sendmail /usr/lib/sendmail

# mkdir -p /var/qmail/supervise/qmail-send/log/

# mkdir -p /var/qmail/supervise/qmail-smtpd/log/

# mkdir -p /var/qmail/supervise/qmail-pop3d/log/

# mkdir -p /var/qmail/supervise/qmail-pop3ds/log/

# cp /usr/src/qmail/toaster-scripts-0.8.1/send.run /var/qmail/supervise/qmail-send/run

# cp /usr/src/qmail/toaster-scripts-0.8.1/send.log.run /var/qmail/supervise/qmail-send/log/run

# cp /usr/src/qmail/toaster-scripts-0.8.1/smtpd.run /var/qmail/supervise/qmail-smtpd/run

# cp /usr/src/qmail/toaster-scripts-0.8.1/smtpd.log.run /var/qmail/supervise/qmail-smtpd/log/run

# cp /usr/src/qmail/toaster-scripts-0.8.1/pop3d.run /var/qmail/supervise/qmail-pop3d/run

# cp /usr/src/qmail/toaster-scripts-0.8.1/pop3d.log.run /var/qmail/supervise/qmail-pop3d/log/run

# cp /usr/src/qmail/toaster-scripts-0.8.1/pop3ds.run /var/qmail/supervise/qmail-pop3ds/run

# cp /usr/src/qmail/toaster-scripts-0.8.1/pop3ds.log.run /var/qmail/supervise/qmail-pop3ds/log/run

# echo "20" > /var/qmail/control/concurrencyincoming

# find /var/qmail/supervise -name "run" -exec chmod 755 {} \;

# mkdir -p /var/log/qmail/smtpd

# mkdir -p /var/log/qmail/pop3d

# mkdir -p /var/log/qmail/pop3ds

# chown -R qmaill /var/log/qmail

# ln -s /var/qmail/supervise/qmail-send /var/qmail/supervise/qmail-smtpd /service

# qmailctl stat

The last command above should return something similar as folllows:

/service/qmail-send: up (pid 12577) 7 seconds
/service/qmail-send/log: up (pid 12583) 7 seconds
/service/qmail-smtpd: up (pid 12585) 7 seconds
/service/qmail-smtpd/log: up (pid 12588) 7 seconds
messages in queue: 0
messages in queue but not yet preprocessed: 0

Installing Vpopmail and its dependences.

First lets install vpopmail:

# cd /usr/src/qmail

# tar -xzvf vpopmail-5.4.13.tar.gz

# cd vpopmail-5.4.13

# patch -p0 < ../vpopmail-5.4.13-cumulative-1.patch

# groupadd -g 89 vchkpw

# useradd -u 89 -g vchkpw vpopmail

# ./configure --enable-logging=v --enable-auth-module=mysql --enable-auth-logging=y --enable-sql-logging --enable-valias --disable-mysql-limits --enable-libdir=/usr/lib

# make

# make install-strip

# echo '127.:allow,RELAYCLIENT=""' > /home/vpopmail/etc/tcp.smtp

# cd /home/vpopmail/etc

# tcprules tcp.smtp.cdb tcp.smtp.tmp < tcp.smtp

Attention! Replace the text YOURMYSQLPASSWORD by your preferred password and remember that this password will be used to create MySQL database and permissions.

# echo "localhost|0|admin|YOURMYSQLPASSWORD|vpopmail" > /home/vpopmail/etc/vpopmail.mysql

Changing your MYSQL root password:

mysqladmin –u root -p password 'YOURMYSQLPASSWORD'

Creating a mysql database and give the necessary access permissions to the Vpopmail user:

# mysql -u root -p

mysql> CREATE DATABASE vpopmail;

mysql> GRANT select,insert,update,delete,create,drop ON vpopmail.* TO admin@localhost IDENTIFIED BY 'YOURPASSWORD';

mysql> quit

# cd /usr/src/qmail/toaster-scripts-0.8.1

# cp vpopmailctl /home/vpopmail/bin/

# ln -s /home/vpopmail/bin/vpopmailctl /usr/bin/

Finishing netqmail installation and installing the actualization patches:

# cd /usr/src/qmail/netqmail-1.05/netqmail-1.05

# bunzip2 -c /usr/src/qmail/qmail-toaster-0.8.2.patch.bz2 | patch -p0

# patch -p0 < /usr/src/qmail/empf-toaster-0.8.1.patch

# make clean

# make

# qmailctl stop

# make setup check

# chown -R vpopmail:vchkpw /var/qmail/spam

# make cert

# make tmprsadh

Now we need to add the following line to Cron:

# echo "01 01 * * * /var/qmail/bin/update_tmprsadh > /dev/null 2>&1" >> /etc/crontab

Lets start qmail service:

# qmailctl start

Adding vpopmail to the daemontools:

# ln -s /var/qmail/supervise/qmail-pop3d /var/qmail/supervise/qmail-pop3ds /service

# sleep 5 && vpopmailctl stat

Replacing default sendmail with netqmail:

# rm -f /usr/lib/sendmail

# rm -f /usr/sbin/sendmail

# ln -s /var/qmail/bin/sendmail /usr/lib/sendmail

# ln -s /var/qmail/bin/sendmail /usr/sbin/sendmail

Configuring EMPF:

# touch  /var/qmail/control/policy

# echo "yourdomain.com:LREI," > /var/qmail/control/policy

 
With all these  configuration we have done all users must authenticate to be able to send messages from the e-mail server. An example of the use of this tool is when you receive messages such as " This e-mail address is being protected from spambots. You need JavaScript enabled to view it ", with the help of this patch a user has to be authenticated in order to send messages @yourdomain.

Installing courier-imap, autoresponder, and Ezmlm

Courier authlib and courier-imap installation: 

# cd /usr/src/qmail     

# tar jxvf courier-authlib-0.63.0.tar.bz2 

# cd courier-authlib-0.63.0 

# ./configure --prefix=/usr/local --exec-prefix=/usr/local --with-authvchkpw --without-authldap --without-authmysql --disable-root-check --with-ssl --with-authchangepwdir=/usr/local/libexec/authlib 

# make   

# make check  

# make install 

# cp courier-authlib.sysvinit /etc/init.d/courier-authlib    

# chmod 755 /etc/init.d/courier-authlib    

# update-rc.d courier-authlib defaults  

# cp /usr/local/etc/authlib/authdaemonrc.dist /usr/local/etc/authlib/authdaemonrc

# mkdir /var/lock/subsys

# /etc/init.d/courier-authlib start

Open the file “/usr/local/etc/authlib/authdaemonrc” and replace whatever is on authmodulelist with "authvchkpw" as following:

(Do the same with authmodulelistorig parameter)

authmodulelist="authvchkpw"

authmodulelistorig="authvchkpw"

# cd /usr/src/qmail     

# tar -xjvf courier-imap-4.8.0.tar.bz2 

# cd courier-imap-4.8.0  

# chown -R vpopmail.vchkpw ../courier-imap-4.8.0  

# su vpopmail     

$ umask 0022     

$ ./configure  

$ make  

$ exit  

# make install-strip     

# make install-configure  

# cp courier-imap.sysvinit /etc/init.d/courier-imap     

# chmod 755 /etc/init.d/courier-imap     

# update-rc.d courier-imap defaults 

# /etc/init.d/courier-imap start    

Open the file /usr/lib/courier-imap/etc/imapd and change the following options :

IMAPDSTART=NO
to:
IMAPDSTART=YES

On the file /usr/lib/courier-imap/etc/imapd-ssl change the following filed:

IMAPDSSLSTART=NO
to:
IMAPDSSLSTART=YES

 
Installing AutoResponder:

# cd /usr/src/qmail   

# tar -xzvf autorespond-2.0.4.tar.gz   

# cd autorespond-2.0.4 

# patch -p1 < ../autorespond-2.0.4-2.0.5.patch   

# make 

# make install  

Installing Ezmlm:

# cd /usr/src/qmail/   

# tar -xzvf ezmlm-0.53.tar.gz   

# tar -xzvf ezmlm-idx-0.443.tar.gz   

# mv ezmlm-idx-0.443/* ezmlm-0.53/ -f   

# cd ezmlm-0.53   

# patch -p0 < idx.patch   

# make 

# make setup  

next step will be installing vqadmin and qmailadmin...

Installing Vqadmin and QmailAdmin

First we will install the administration panel - Vqadmin:

# cd /usr/src/qmail

# tar -xzvf vqadmin-2.3.2.tar.gz

# cd vqadmin-2.3.2

# ./configure --enable-cgibindir=/usr/lib/cgi-bin --enable-htmldir=/var/www

# make

# make install-strip

# cd /usr/lib/cgi-bin/vqadmin

Open file .htaccess and change the value AuthUserFile as stated bellow:

AuthUserFile /etc/apache2/vqadmin.passwd

Now create the password file:

# htpasswd -c /etc/apache2/vqadmin.passwd admin

Now we need to add some apache configurations, so open the following file:

/etc/apache2/sites-enabled/000-default

At the end of file, just before the tag </VirtualHost>, add the following lines:

<Directory /usr/lib/cgi-bin/vqadmin/>

   deny from all

   Options ExecCGI

   AllowOverride AuthConfig

   Order deny,allow

</Directory>

 Save and restart Apache.

# /etc/init.d/apache2 restart

Now the admin panel can be access by the address: http://your_IP/cgi-bin/vqadmin/vqadmin.cgi

Type the password we used before, and go to add Domain to create your domain and set a password for postmaster. Attention: this information will be used later on to access QmailAdmin panel.

QmailAdmin is a panel much more friendly and easier than vqadmin.

So lets install QmailAdmin:

# cd /usr/src/qmail/ 

# tar -xzvf qmailadmin-1.2.14.tar.gz 

# cd qmailadmin-1.2.14 

# ./configure --enable-help --enable-htmldir=/var/www --enable-cgibindir=/usr/lib/cgi-bin --enable-imageurl=/images-qa --enable-imagedir=/var/www/images-qa 

# make 

# make install-strip  

Now QmailAdmin is available at http://your_IP/cgi-bin/qmailadmin/

Spamassassin, ClamAV, Ripmime, and SimScan Installation.

Now it is time to make our e-mail server more secure, so to do that we will install Spamassassin, ClamAV, Ripmime, and SimScan.

SpamAssassin installation:

# cd /usr/src/qmail/

# tar -xzvf Mail-SpamAssassin-3.2.5.tar.gz

# cd /usr/src/qmail/Mail-SpamAssassin-3.2.5

# perl Makefile.PL

# make

# make install

At this moment Spamassassin will complain about some dependences, but if no error message appear we can go ahead and continue the installation with no problems.

# groupadd spamd

# useradd -g spamd -d /home/spamassassin -s /bin/false -m spamd

Let’s create a script for the Spamassassin initialization.

Copy and paste the following script to the file spamd:

# vi /etc/init.d/spamd

#! /bin/sh

#Spamd init script for Debian (Lenny)

 

PATH=/sbin:/bin:/usr/sbin:/usr/bin:/usr/local/bin

DAEMON=/usr/local/bin/spamd

NAME=spamd

SNAME=spamd

DESC="SpamAssassin Mail Filter Daemon"

PIDFILE="/var/run/spamd/$NAME.pid"

PNAME="spamd"

DOPTIONS="-x -u spamd -H /home/spamassassin -d --pidfile=$PIDFILE"

 

# Defaults - don't touch, edit /etc/mail/spamassassin/local.cf

ENABLED=0

OPTIONS=""

 

#test -f /etc/mail/spamassassin/local.cf && . /etc/mail/spamassassin/local.cf

 

#test "$ENABLED" != "0" || exit 0

 

test -f $DAEMON || exit 0

 

set -e

 

case "$1" in

  start)

        echo -n "Starting $DESC: "

        start-stop-daemon --start --pidfile $PIDFILE --name $PNAME \

            --startas $DAEMON -- $OPTIONS $DOPTIONS

 

        echo "$NAME."

        ;;

  stop)

        echo -n "Stopping $DESC: "

 

        start-stop-daemon --stop --pidfile $PIDFILE --name $PNAME

 

        echo "$NAME."

        ;;

  restart|force-reload)

        echo -n "Restarting $DESC: "

        start-stop-daemon --stop --pidfile $PIDFILE --name $PNAME --retry 5

        start-stop-daemon --start --pidfile $PIDFILE --name $PNAME \

            --startas $DAEMON -- $OPTIONS $DOPTIONS

 

        echo "$NAME."

        ;;

  *)

        N=/etc/init.d/$SNAME

        echo "Usage: $N {start|stop|restart|force-reload}" >&2

        exit 1

        ;;

esac

 

exit 0

:x  Save and exit.

Ok, now we need to create a directory and set Spamassassin to the initialization:

# mkdir /var/run/spamd

# chown -R spamd /var/run/spamd

# chmod 755 /etc/init.d/spamd

# update-rc.d spamd defaults

# /etc/init.d/spamd start

To make sure that smpad is running type the following command:

# ps aux | grep spamd

The result should be something like:

root     11324  0.0  5.8  33692 30452 ?        Ss   Feb05   0:01 /usr/local/bin/spamd -x -u spamd -H /home/spamassassin -d --pidfile=/var/run/spamd/spamd.pid

Added spamd on logrotate:

# touch /etc/logrotate.d/spamd

Open the file and paste the text bellow:

# vi /etc/logrotate.d/spamd

# Spamassassin Logrotate

 

/var/log/spamd {

   daily

   notifempty

   missingok

   postrotate

   /usr/bin/killall -HUP spamd 2> /dev/null || true

   endscript

}

Let’s go ahead and install clamAV:

# cd /usr/src/qmail/

# tar -xzvf clamav-0.95.3.tar.gz

# cd clamav-0.95.3

# groupadd clamav

# useradd -g clamav clamav

# ./configure

# make

# make install

# touch /var/log/freshclam.log

# chmod 600 /var/log/freshclam.log

# chown clamav /var/log/freshclam.log

# cp /usr/src/qmail/toaster-scripts-0.8.1/freshclam /etc/init.d/freshclam

# chmod 755 /etc/init.d/freshclam

# update-rc.d freshclam defaults

# cp /usr/src/qmail/toaster-scripts-0.8.1/freshclam.logrotate /etc/logrotate.d/freshclam

# mkdir -p /var/qmail/supervise/clamd/log

# mkdir -p /var/log/clamd

# chown clamav /var/log/clamd

# cp /usr/src/qmail/toaster-scripts-0.8.1/clamd.run /var/qmail/supervise/clamd/run

# cp /usr/src/qmail/toaster-scripts-0.8.1/clamd.log.run /var/qmail/supervise/clamd/log/run

# chmod 755 /var/qmail/supervise/clamd/run

# chmod 755 /var/qmail/supervise/clamd/log/run

Configuring ClamAV to work with simscan:

Here we edit the file freshclam.conf and follow the steps bellow.

vi /usr/local/etc/freshclam.conf

Example ->
#Example

#UpdateLogFile /var/log/freshclam.log   ->
UpdateLogFile /var/log/freshclam.log

 
#LogTime yes  ->
LogTime yes

#LogSyslog yes  ->
LogSyslog yes

Let’s start the daemon clamd:

# ldconfig

# ln -s /var/qmail/supervise/clamd /service

# /etc/init.d/freshclam start

Next package will be ripmime:

# cd /usr/src/qmail/

# tar -xzvf ripmime-1.4.0.6.tar.gz

# cd ripmime-1.4.0.6

# make

# make install

And now Simscan installation:

# cd /usr/src/qmail/

# tar -xzvf simscan-1.2.tar.gz

# cd simscan-1.2

Running ripmime patch:

# patch -p0 < ../ripmime.txt

All right! If everything is worked as expected with this configuration simscan will delete automaticaly all the spam messages. In order to relax and control this process you can change the hit to the option –enable-spam-hits={number} (ex –enable-spam-hits={7}).

For any other type of configuration you can use:

# ./configure --help | less

# ./configure --enable-clamav=y --enable-attach=y --enable-dropmsg=y \

--enable-spam=y --enable-spamc-user=y \

--enable-qmail-queue=/var/qmail/bin/qmail-queue --enable-ripmime \

--enable-received=y --enable-user=clamav --enable-spam-auth-user=y  

# make

# make install

# echo ":clam=yes,spam=yes,spam_passthru=yes,attach=.vbs:.lnk:.scr:.wsh:.hta:.pif" > /var/qmail/control/simcontrol

# /var/qmail/bin/simscanmk -g

# echo '127.:allow,QMAILQUEUE="/var/qmail/bin/simscan"' > ~vpopmail/etc/tcp.smtp

# qmailctl stop

# qmailctl cdb

# qmailctl start

# qmailctl stat

- So far you server is totally functional, you can now create e-mail accounts for users of your domain(s).

Installing QmailMRTG

QmailMRTG is an analysis tool that enables us to evaluate our mail server.

Installing QmailMRTG:

# cd /usr/src/qmail/

# mkdir /var/www/qmailmrtg

# tar -xzf qmailmrtg7-4.2.tar.gz

# cd qmailmrtg7-4.2

Running the patch:

# patch -p0 < ../qmailmrtg7-4.2-cfg.patch

Compiling:

# make

# make install

# mkdir /etc/qmailmrtg

# cp qmail.mrtg.cfg  /etc/qmailmrtg/

Now open the file /etc/qmailmrtg/qmail.mrtg.cfg and change the first line as stated bellow.

WorkDir: /var/www/qmailmrtg

Save and exit.

Adding your domain name on the graphics.

# sed -i s/FQDN/yourdomain.com/g /etc/qmailmrtg/qmail.mrtg.cfg

Creating the index.html:

# indexmaker --section=title /etc/qmailmrtg/qmail.mrtg.cfg > /var/www/qmailmrtg/index.html

Now we need to run MRTG at least 3 or 4 times in order to create all the images.

# mrtg /etc/qmailmrtg/qmail.mrtg.cfg

And add this to crontab:

echo "*/5 * * * * /usr/bin/mrtg /etc/qmailmrtg/qmail.mrtg.cfg 2>&1 > /dev/null

" >> /etc/crontab

All right! QmailMRTG is ready to go and can be accessed at: http://your_server_IP/qmailmrtg/