Generated by All in One SEO v5.0.0.1, this is an llms.txt file, used by LLMs to index the site. # Debian Tutorials Step by step tutorials showing you how to install and configure various applications and services on Debian based Linux distros. ## Sitemaps - [XML Sitemap](https://www.debiantutorials.com/sitemap.xml): Contains all public & indexable URLs for this website. ## Posts - [How to set up a web server (LAMP) on Debian 9 (stretch)](https://www.debiantutorials.com/how-to-set-up-a-web-server-lamp-on-debian-9-stretch/) - In this tutorial we'll install the Debian Linux 9 (squeeze), Apache 2 with mpm-itk (to run each web as a isolated user), PHP 7 support and MySql 5.7 database server. Additionally the tutorial covers installation of the vsftp server to provide FTP service, setting up letsencrypt and requesting a free certificate, installation of phpMyAdmin and - [How to install LAMP (Apache, PHP and MySql in Linux)](https://www.debiantutorials.com/how-to-install-lamp-apache-php-and-mysql-in-linux/) - Here's a basic guide on how to get Apache2, PHP5 and MySql working on most Debian based distros in a few easy steps. 1. Install Apache2 and PHP5 (as an Apache module) apt-get install apache2 php5 libapache2-mod-php5 php5-mysql 2. Install MySql server apt-get install mysql-server 3. At this point you may need to restart Apache - [Running Apache2 virtual hosts as different users with mpm-itk](https://www.debiantutorials.com/running-apache2-virtual-hosts-as-different-users-with-mpm-itk/) - apache2-mpm-itk is an MPM (Multi-Processing Module) for the Apache web server. mpm-itk allows you to run each of your vhost under a separate uid and gid — in short, the scripts and configuration files for one vhost no longer have to be readable for all the other vhosts. 1. Install the apache2-mpm-itk package apt-get install - [How to install Webmin](https://www.debiantutorials.com/how-to-install-webmin/) - 1. Install required dependencies apt-get install apt-show-versions libapt-pkg-perl libauthen-pam-perl libio-pty-perl libnet-ssleay-perl 2. Download Webmin (get the latest version here: http://webmin.com/download.html) wget https://prdownloads.sourceforge.net/webadmin/webmin_1.881_all.deb 3. Install Webmin dpkg -i webmin_1.881_all.deb Webmin is now installed. You can access it on https://yourserver:10000. - [How to upgrade to Debian Linux 9 (stretch)](https://www.debiantutorials.com/how-to-upgrade-to-debian-linux-9-stretch/) - 1. Update all packages currently installed to the latest versions apt-get update apt-get upgrade 2. Replace all occurrences of jessie with stretch in the apt sources file /etc/apt/sources.list using your favorite text editor (ex. pico /etc/apt/sources.list). Here's an example of what the file could look like after the change: deb http://ftp.debian.org/debian/ stretch main deb http://security.debian.org/ - [How to install MySQL server 5.6 or 5.7](https://www.debiantutorials.com/how-to-install-mysql-server-5-6-or-5-7/) - Here's a tutorial on how to install MySQL server 5.6 or 5.7 (selectable in the process). 1. Download the MySQL APT repository config tool (you can see more details and the latest version of the tool here: http://dev.mysql.com/downloads/repo/apt/) wget https://dev.mysql.com/get/mysql-apt-config_0.8.9-1_all.deb 2. Install the MySQL APT repository config tool dpkg -i mysql-apt-config_0.8.9-1_all.deb You will be asked - [How to install open-vm-tools (Open Virtual Machine Tools)](https://www.debiantutorials.com/how-to-install-open-vm-tools-open-virtual-machine-tools/) - VMware recommends using open-vm-tools instead of VMware tools as outlined in this article. The benefits of using open-vm-tools include improved stability as the package is optimized for each distribution, automatic updates smaller footprint. Installing open-vm-tools on Debian Linux is very easy, just install the package using apt-get and reboot the machine when completed. 1. Install - [How to install VMware tools](https://www.debiantutorials.com/how-to-install-vmware-tools/) - Please note that VMware recommends using open-vm-tools instead of VMware tools as outlined in this article. The benefits of using open-vm-tools include improved stability as the package is optimized for each distribution, automatic updates smaller footprint. You can find a tutorial on installing open-vm-tools on Debian Tutorials: How to install open-vm-tools (Open Virtual Machine Tools) - [How to upgrade from wheezy to jessie](https://www.debiantutorials.com/how-to-upgrade-from-wheezy-to-jessie/) - This tutorial covers upgrading your Debian Linux 7 (Wheezy) system to Debian Linux 8 (Jessie) in few easy steps. - [How to set up Let’s Encrypt SSL certificate for a site hosted on Apache web server](https://www.debiantutorials.com/how-to-set-up-letsencrypt-ssl-certificate-for-a-site-hosted-on-apache-web-server/) - We'll use the certbot to handle the verification and deployment, so the first step is to install certbot. 1. Add the jessie backports apt repository (not needed when running Debian Linux 9, stretch) echo "deb http://ftp.debian.org/debian jessie-backports main" >> /etc/apt/sources.list apt-get update 2. Install certbot For Debian Linux 9 (stretch), use the following command: apt-get - [Compile the Kernel on Debian etch](https://www.debiantutorials.com/compile-the-kernel-on-debian-etch/) - Compiling the kernel from source on Debian is actually pretty simple thing to do. This guide has been tested on standard etch installation but will probably work on other versions and debian-like operating systems. The system is easy to break if not done right, compile and install the kernel at your own risk! Install required - [Using more than 4 GB RAM on Debian etch 32bit](https://www.debiantutorials.com/using-more-than-4-gb-ram-on-debian-etch-32bit/) - By default Debian etch 32bit allows a maximum of 4 GB RAM. The limit can be raised up to 64 GB with a single apt-get command / kerenl update: apt-get install linux-image-2.6-686-bigmem That's it, reboot your system and you will be able to install up to 64GB of RAM to your system. - [APT tips and tricks](https://www.debiantutorials.com/apt-tips-and-tricks/) - Search installed packages: apt-cache search package Get details about a specific installed package: apt-cache show package Install new package (Note that you can install several packages at a time by seperating the package name by a single space): apt-get install package1 package2 Remove a package apt-get remove package When you are removing the package some - [Setting up NFS client/server](https://www.debiantutorials.com/setting-up-nfs-clientserver/) - Network File System (NFS) is a network file system protocol originally developed by Sun Microsystems in 1983, allowing a user on a client computer to access files over a network as easily as if the network devices were attached to its local disks. Server 1. Install the server package apt-get install nfs-kernel-server 2. Grant permission - [Installing and configuring Samba](https://www.debiantutorials.com/installing-and-configuring-samba/) - Samba is a free software re-implementation of SMB/CIFS networking protocol providing file and print services for various Microsoft Windows clients and can integrate with a Windows Server domain, either as a Primary Domain Controller (PDC) or as a domain member. It can also be part of an Active Directory domain. 1. Install the base packages - [Upgrade from lenny to squeeze](https://www.debiantutorials.com/upgrade-from-lenny-to-squeeze/) - Debian has released a stable version of Debian 6.0 (squeeze). If you're running previous version of Debian, you can easily upgrade. 1. Update all packages currently installed to the latest lenny versions apt-get update apt-get upgrade 2. Replace all occurrences of lenny with squeeze in the apt sources file (pico /etc/apt/sources.list). Here's an example of - [How to install Sun Java runtime (JRE)](https://www.debiantutorials.com/how-to-install-sun-java-runtime-jre/) - 1. Add non-free packages to apt sources (pico /etc/apt/sources.list) Add "non-free" behind "main" for all lines in the file. For example, change: deb http://ftp.debian.org/debian/ squeeze main deb-src http://ftp.debian.org/debian/ squeeze main to deb http://ftp.debian.org/debian/ squeeze main non-free deb-src http://ftp.debian.org/debian/ squeeze main non-free 2. Update apt apt-get update 3. Install Sun Java runtime environment (JRE) apt-get install - [How to detect if your server is vulnerable to the Shellshock bug and fix it](https://www.debiantutorials.com/how-to-detect-if-your-server-is-vulnerable-to-the-shellshock-bug-and-fix-it/) - Shellshock vulnerability is a security bug affecting Unix/Linux operating system through the bash shell. Disclosed on September 24 2014, it has been rated 10 (the maximum score) for severity by NIST. Debian installs bash by default so you're probably affected! To check if your server is vulnerable, run this command: env x='() { :;}; echo - [How to re-stream RTSP stream with Wowza Media Server](https://www.debiantutorials.com/how-to-re-stream-rtsp-stream-with-wowza-media-server/) - When publishing live streams to the public from IP camera or other source, you will in most cases need a streaming server to re-stream the source for security purposes and to be able to handle the traffic. Wowza is great for that! Here's how to install it and set up a live RTSP re-stream. Install - [How to install ffmpeg with H.264/MPEG-4 AVC](https://www.debiantutorials.com/how-to-install-ffmpeg-with-h-264mpeg-4-avc/) - H.264/MPEG-4 Part 10 or AVC (Advanced Video Coding) is a standard for video compression, and is currently one of the most commonly used formats for the recording, compression, and distribution of high definition video. The ffmpeg package provided by Debian repositories doesn't support H.264 due to patent restrictions. Luckily deb-multimedia.org provides a ffmpeg package compiled - [How to compile and install latest version of Nginx (1.6) from source with PageSpeed module (ngx_pagespeed)](https://www.debiantutorials.com/compile-install-latest-version-nginx-1-6-source-pagespeed-module-ngx_pagespeed/) - PageSpeed (ngx_pagespeed) is a Nginx module created by Google to help Make the Web Faster by rewriting web pages to reduce latency and bandwidth. The version included with Debian Wheezy is 1.2 which is getting pretty old. Here's how to install the latest stable version of Nginx with the PageSpeed module. This tutorial is tested - [How to compile and install Nginx from source with PageSpeed module (ngx_pagespeed)](https://www.debiantutorials.com/compile-install-nginx-source-pagespeed-module-ngx_pagespeed/) - PageSpeed (ngx_pagespeed) is a Nginx module created by Google to help Make the Web Faster by rewriting web pages to reduce latency and bandwidth. In this tutorial you'll be installing Nginx 1.2. If you want to install the latest stable version of Nginx (1.6), read this instead: How to compile and install latest version of - [Install and configure PowerDNS with geo backend (CDN/geographic DNS blancing)](https://www.debiantutorials.com/install-configure-powerdns-geo-backend-cdngeographic-dns-blancing/) - The Geo backend can be used to distribute queries globally using an IP-address/country mapping table, several of which are freely available online or can be acquired for a small fee. This allows visitors to be sent to a server close to them, with no appreciable delay, as would otherwise be incurred with a protocol level - [How to disable SSLv3 in Nginx (protect against the POODLE vulnerability)](https://www.debiantutorials.com/disable-sslv3-nginx-protect-poodle-vulnerability/) - SSL 3.0 is an obsolete and insecure protocol recently affected by the POODLE (Padding Oracle On Downgraded Legacy Encryption) vulnerability which allows a man-in-the-middle attacker to decrypt ciphertext using a padding oracle side-channel attack. SSLv3 has been replaced by TLS which is supported by all modern browsers so it should be safe to disable SSLv3. - [Request and install SSL using Apache2 and OpenSSL](https://www.debiantutorials.com/request-and-install-ssl-using-apache2-and-openssl/) - First we'll need to create a certificate signing request (CSR) containing the certificate application info and a private key. Make sure you don't expose you're private key (test.com.key) to the public or the safety of the encrypted information could be compromised. mkdir /etc/apache2/ssl cd /etc/apache2/ssl openssl req -new -nodes -keyout test.com.key -out test.com.csr Answer the - [How to detect if your server is vulnerable to the Heartbleed OpenSSL bug and fix it](https://www.debiantutorials.com/how-to-detect-if-your-server-is-vulnerable-to-the-heartbleed-openssl-bug-and-fix-it/) - This is a serious bug affecting a lot of servers including Debian Wheezy. Act fast because everything is being scanned and information is being leaked right now! The Heartbleed Bug is a serious vulnerability in the popular OpenSSL cryptographic software library. This weakness allows stealing the information protected, under normal conditions, by the SSL/TLS encryption - [Add a second hard disk](https://www.debiantutorials.com/add-a-second-hard-disk/) - Last updated April 6, 2014 Compatible releases etchlennysqueezewheezy Notice This tutorial is for older Debian versions and may not work for current versions. Please refer to the links below to find a newer tutorial. How to add a new hard disk or partition using UUID and ext4 filesystem Adding a additional hard disk to your - [How to add a new hard disk or partition using UUID and ext4 filesystem](https://www.debiantutorials.com/how-to-add-a-new-hard-disk-or-partition-using-uuid-and-ext4-filesystem/) - Last updated April 6, 2014 Compatible releases squeezewheezy Adding a additional hard disk to your workstation or server is easy and often required. Here's we'll step through the process of identifing the newly attached drive, prepare and mount it by referencing UUID which is a preferred method today. If you have just added a virtual - [How to install Nginx with PHP and MySql support on wheezy](https://www.debiantutorials.com/how-to-install-nginx-with-php-and-mysql-support-on-wheezy/) - Nginx is an open source reverse proxy server, load balancer, HTTP cache, and a web server. The Nginx project started with a strong focus on high concurrency, high performance and low memory usage. Users have been moving to Nginx because of the high performance and stability and as of February 2014, Nginx is hosting around - [How to install ownCloud on wheezy](https://www.debiantutorials.com/how-to-install-owncloud-on-wheezy/) - ownCloud gives you universal access to your files through a web interface or WebDAV. It also provides a platform to easily view & sync your contacts, calendars and bookmarks across all your devices and enables basic editing right on the web. 1. Add the ownCloud repository as apt source echo 'deb http://download.opensuse.org/repositories/isv:ownCloud:community/Debian_7.0/ /' >> /etc/apt/sources.list.d/owncloud.list - [How to install DirectAdmin on squeeze](https://www.debiantutorials.com/how-to-install-directadmin-on-squeeze/) - DirectAdmin is a web hosting control panel providing a graphical interface and automation tools to simplify server and account management. Features include: E-mail, FTP, DNS and web management, Statistics, Apache configuration, User and reseller management and more. Before you install DirectAdmin, make sure you have a fresh installation of Debian 6 (squeeze), either 32 or - [Installing vsftpd using text file for virtual users](https://www.debiantutorials.com/installing-vsftpd-using-text-file-for-virtual-users/) - Notice This tutorial is for older Debian versions and may not work for current versions. Please refer to the links below to find a newer tutorial. Installing vsftpd using text file for virtual users on squeeze/wheezy vsftpd is a secure, fast and stable FTP server. In this tutorial we'll install the server and make it - [Installing vsftpd using text file for virtual users on squeeze/wheezy](https://www.debiantutorials.com/installing-vsftpd-using-text-file-for-virtual-users-on-squeezewheezy/) - vsftpd (Very Secure FTP Daemon) is a secure, fast and stable FTP server. In this tutorial we'll install the server and make it check in a flat text file for virtual users allowed to login. 1. Install required packages apt-get install vsftpd libpam-pwdfile 2. Configure vsftpd (pico /etc/vsftpd.conf) Edit these variables in the config file - [Installing Zend Optimizer](https://www.debiantutorials.com/installing-zend-optimizer/) - Notice This tutorial is for older Debian versions and may not work for current versions. Please refer to the links below to find a newer tutorial. Installing Zend Guard Loader (Zend Optimizer) on wheezy The Zend Optimizer enables you to run Zend Guard encoded files. 1. Download a copy of Zend Optimizer / Guard from - [Installing Zend Guard Loader (Zend Optimizer) on wheezy](https://www.debiantutorials.com/installing-zend-guard-loader-zend-optimizer-on-wheezy/) - Zend Guard Loader is a free runtime application that enables PHP to run the scripts encoded by Zend Guard. 1. Download a copy of Zend Guard Loader from the location below and upload to your server. By default PHP 5.4 is installed on wheezy so select the package Zend Guard Loader (Runtime for PHP 5.4). - [How to install node.js on squeeze or wheezy](https://www.debiantutorials.com/how-to-install-nodejs-on-squeeze-or-wheezy/) - Node.js is a server-side software system designed for writing scalable Internet applications, notably web servers. Programs are written on the server side in JavaScript, using event-driven, asynchronous I/O to minimize overhead and maximize scalability. Node.js contains a built-in HTTP server library, making it possible to run a web server without the use of external software, - [Upgrade from squeeze to wheezy](https://www.debiantutorials.com/upgrade-from-squeeze-to-wheezy/) - Debian just released a stable version of Debian 7.0 (wheezy). If you're running previous version of Debian, you can easily upgrade. 1. Update all packages currently installed to the latest squeeze versions apt-get update apt-get upgrade 2. Replace all occurrences of squeeze with wheezy in the apt sources file (pico /etc/apt/sources.list). Here's an example of - [Secure SSH with Two-Factor Authentication (using Google Authenticator) on squeeze](https://www.debiantutorials.com/secure-ssh-with-two-factor-authentication-using-google-authenticator-on-squeeze/) - Two-Factor authentication adds an extra layer of security to the authentication process to prevent unauthorized users to access your services or data. Normally you only type username and password (something you know) but with Two-Factor authentications, additionally you need to provide something you have (mobile phone running Android, iOS or Blackberry with one time codes - [How to install Percona Server (MySql Server replacement) on squeeze](https://www.debiantutorials.com/how-to-install-percona-server-mysql-server-replacement-on-squeeze/) - Percona Server is an enhanced drop-in replacement for MySQL. Persona server is free open source solution, offering better performance, scalability, features, and instrumentation. Self-tuning algorithms and support for extremely high-performance hardware make it the clear choice for organizations that demand excellent performance and reliability from their MySQL database server. You can upgrade from MySql server - [Implementing SPF checks in Postfix](https://www.debiantutorials.com/implementing-spf-checks-in-postfix/) - Sender Policy Framework (SPF), as defined in RFC 4408, is an e-mail validation system designed to prevent e-mail spam by addressing a common vulnerability, source address spoofing. SPF allows administrators to specify which hosts are allowed to send e-mail from a given domain by creating a specific DNS SPF record in the public DNS. Mail - [How to generate Courier mail graphs with Couriergraph and rrdtool](https://www.debiantutorials.com/how-to-generate-courier-mail-graphs-with-couriergraph-and-rrdtool/) - Couriergraph is a very simple mail statistics RRDtool frontend for Postfix that produces daily, weekly, monthly and yearly graphs of Courier's POP3, IMAP, POP3s and IMAPs logins. Assuming you already have Courier and Apache installed, just install these packages: apt-get install rrdtool couriergraph Navigate to this location to view the graphs: http://yourserver/cgi-bin/couriergraph.cgi - [How to generate Postfix mail graphs with Mailgraph and rrdtool](https://www.debiantutorials.com/how-to-generate-postfix-mail-graphs-with-mailgraph-and-rrdtool/) - Mailgraph is a very simple mail statistics RRDtool frontend for Postfix and Sendmail that produces daily, weekly, monthly and yearly graphs of received/sent and bounced/rejected mail. Assuming you already have Postfix and Apache installed, just install these packages: apt-get install rrdtool mailgraph Navigate to this location to view the graphs: http://yourserver/cgi-bin/mailgraph.cgi - [Installing Pure-FTPd with MySql backend on squeeze](https://www.debiantutorials.com/installing-pure-ftpd-with-mysql-backend-on-squeeze/) - Pure-FTPd is actively supported, and it was always designed with security in mind. It doesn't provide useless bells and whistles, but focuses on efficiency and ease of use. The server can run with privilege separation for paranoid security. It can even run 100% non-root, with its built-in chroot() emulation and virtual accounts. 1. Install the - [How to monitor SNMP devices with MRTG](https://www.debiantutorials.com/how-to-monitor-snmp-devices-with-mrtg/) - The Multi Router Traffic Grapher (MRTG) is free software for monitoring and measuring the traffic load on network links. It allows the user to see traffic load on a network over time in graphical form. 1. Install MRTG apt-get install mrtg 2. Create a config file with the cfgmaker tool by connecting to a SNMP - [Enable Active Directory / LDAP authentication in Apache](https://www.debiantutorials.com/enable-active-directory-ldap-authentication-in-apache/) - If you already have a central directory of users installed (AD or LDAP) you can configure most applications to use that directory instead of a local database for each application and make the user management much easier. Apache supports that so here are instructions on how to password protect a site or location using LDAP - [Setup Trac and Subversion](https://www.debiantutorials.com/setup-trac-and-subversion/) - Setup Trac and Subversion First install packages for both Trac and Subversion. We'll be using Apache to publish the Subversion repositories apt-get install python-setuptools trac subversion libapache2-svn Create the SVN repository directory structure, used to create new repositories later mkdir /var/svn/ mkdir /var/svn/tmpproject mkdir /var/svn/tmpproject/branches mkdir /var/svn/tmpproject/tags mkdir /var/svn/tmpproject/trunk Enable the Apache SVN module a2enmod - [Installing Nagios Core monitoring system (client and server)](https://www.debiantutorials.com/installing-nagios-core-monitoring-system-client-and-server/) - Nagios Core allows you to monitor your entire IT infrastructure to ensure systems, applications, services, and business processes are functioning properly. In the event of a failure, it can alert technical staff of the problem, allowing them to begin remediation processes before outages affect business processes, end-users, or customers. The monitoring server 1. Install Nagios - [Installing PowerDNS with MySql backend](https://www.debiantutorials.com/installing-powerdns-with-mysql-backend/) - The PowerDNS Nameserver is a modern, advanced and high performance authoritative-only nameserver. It is written from scratch and conforms to all relevant DNS standards documents. Furthermore, PowerDNS interfaces with almost any database. This tutorial has been tested and is working on Debian etch and lenny 1. Install the PowerDNS server and MySql backend using apt - [Scan your web server for vulnerabilities with Nikto on squeeze](https://www.debiantutorials.com/scan-your-web-server-for-vulnerabilities-with-nikto-on-squeeze/) - Nikto is a web server scanner which performs comprehensive tests against web servers for multiple items, including over 3500 potentially dangerous files/CGIs, versions on over 900 servers, and version specific problems on over 250 servers. 1. Add non-free archive to apt sources (pico /etc/apt/sources.list) deb http://ftp.uk.debian.org/debian/ squeeze main non-free deb-src http://ftp.uk.debian.org/debian/ squeeze main non-free Add - [Installing PowerDNS as supermaster with slaves](https://www.debiantutorials.com/installing-powerdns-as-supermaster-with-slaves/) - The PowerDNS Nameserver is a modern, advanced and high performance authoritative-only nameserver. It is written from scratch and conforms to all relevant DNS standards documents. Furthermore, PowerDNS interfaces with almost any database. This tutorial has been tested to be working on Debian squeeze. It's assumed that you are installing one supermaster and one or more - [Monitoring Varnish with Munin](https://www.debiantutorials.com/monitoring-varnish-with-munin/) - Varnish is a great reverse proxy and very useful for load balancing. Here you can find a tutorial on installing Varnish: Installing and configuring Varnish HTTP accelerator. Munin is a network/system monitoring application that presents output in graphs through a web interface. If you haven't installed it already, use this tutorial: Monitoring multiple servers with - [Scan your server for rootkits with rkhunter](https://www.debiantutorials.com/scan-your-server-for-rootkits-with-rkhunter/) - rkhunter (Rootkit Hunter) is a tool that scans for rootkits, backdoors and possible local exploits. It does this by comparing SHA-1 hashes of important files with known good ones in online database, searching for default directories (of rootkits), wrong permissions, hidden files, suspicious strings in kernel modules, and special tests for Linux and FreeBSD. 1. - [Installing and using the IPMI tool](https://www.debiantutorials.com/installing-and-using-the-ipmi-tool/) - The Intelligent Platform Management Interface (IPMI) is a standardized computer system interface used by system administrators to manage a computer system and monitor its operation. The development of this interface specification was led by Intel Corporation and is supported by more than two hundred computer systems vendors including Dell, Hewlett-Packard, Intel, and NEC Corporation. 1. - [Installing and configuring vsftpd for local unix users](https://www.debiantutorials.com/installing-and-configuring-vsftpd-for-local-unix-users/) - vsftpd is a secure, fast and stable FTP server. In this tutorial we'll install the server allow local unix to access their home directories. 1. Install vsftpd apt-get install vsftpd 2. Configure (pico /etc/vsftpd.conf) By default, vsftpd only allows anonymous connections. Change the following config variables to enable local users to connect, allow writing and - [Installing Dovecot IMAP and POP3 daemon with MySql backend on squeeze](https://www.debiantutorials.com/installing-dovecot-imap-and-pop3-daemon-with-mysql-backend-on-squeeze/) - Dovecot is an open source IMAP and POP3 server for Linux/UNIX-like systems, written primarily with security in mind. Dovecot primarily aims to be a lightweight, fast and easy to set up open source mailserver. It's assumed that you have already installed and configured Postfix according to this tutorial: Installing Postfix with MySql backend and SASL - [How to install Roundcube on squeeze](https://www.debiantutorials.com/how-to-install-roundcube-on-squeeze/) - Roundcube is a browser-based multilingual IMAP client with an application-like user interface. It provides full functionality you expect from an e-mail client, including MIME support, address book, folder manipulation, message searching and spell checking. Installation is easy in Debian but the application is pretty outdated in the squeeze apt repository so you may want to - [Installing Postfix with MySql backend and SASL for SMTP authentication](https://www.debiantutorials.com/installing-postfix-with-mysql-backend-and-sasl-for-smtp-authentication/) - Postfix is a free and open source mail transfer agent (MTA). It is intended as a fast, easy-to-administer, and secure alternative to the widely-used Sendmail MTA. Install and configure Postfix 1. Install Postfix and SASL apt-get install postfix postfix-mysql libsasl2-modules-sql sasl2-bin libsasl2-2 postfix-tls libpam-mysql > Internet Site > host.domain.com 2. Create database and tables (mysql - [Installing sSMTP MTA (Mail Transfer Agent)](https://www.debiantutorials.com/installing-ssmtp-mta-mail-transfer-agent/) - sSMTP is an extremely simple MTA to get mail off the system to a mail hub. It contains no suid-binaries or other dangerous things - no mail spool to poke around in, and no daemons running in the background. Mail is simply forwarded to the configured mailhost. Extremely easy configuration. This is ideal for web - [Installing and configuring Trac and Subversion on squeeze](https://www.debiantutorials.com/installing-and-configuring-trac-and-subversion-on-squeeze/) - Trac is an enhanced wiki and issue tracking system for software development projects. Trac uses a minimalistic approach to web-based software project management. Trac allows wiki markup in issue descriptions and commit messages, creating links and seamless references between bugs, tasks, changesets, files and wiki pages. A timeline shows all current and past project events - [Installing eAccelerator](https://www.debiantutorials.com/installing-eaccelerator/) - eAccelerator is a free open-source PHP accelerator & optimizer. It increases the performance of PHP scripts by caching them in their compiled state, so that the overhead of compiling is almost completely eliminated. It also optimizes scripts to speed up their execution. eAccelerator typically reduces server load and increases the speed of your PHP code - [Installing ionCube](https://www.debiantutorials.com/installing-ioncube/) - ionCube protects software written using the PHP programming language from being viewed, changed, and run on unlicensed computers. 1. Download ionCube loaders wget http://downloads.ioncube.com/loader_downloads/ioncube_loaders_lin_x86.tar.gz 2. Extract tar zxvf ioncube_loaders_lin_x86.tar.gz 3. Move to a permanent location mv ioncube /usr/local/ 4. Add reference to your php.ini file (pico /etc/php5/apache2/php.ini) zend_extension = /usr/local/ioncube/ioncube_loader_lin_5.2.so There are a few versions - [How to upgrade to PHP 5.3 on Debian Lenny](https://www.debiantutorials.com/how-to-install-upgrade-to-php-5-3-on-debian-lenny/) - Dotdeb provides a repository with PHP 5.3 for lenny and it's easy to upgrade: 1. Add these lines to the apt sources (pico /etc/apt/sources.list) deb http://php53.dotdeb.org stable all deb-src http://php53.dotdeb.org stable all 2. Download and import the dotdeb key wget http://www.dotdeb.org/dotdeb.gpg cat dotdeb.gpg | sudo apt-key add - 3. Update apt and dist-upgrade apt-get update - [Install and configure MailWatch monitoring tool for MailScanner](https://www.debiantutorials.com/install-and-configure-mailwatch-monitoring-tool-for-mailscanner/) - MailWatch for MailScanner is a web-based front-end to MailScanner written in PHP, MySQL and JpGraph. It comes with a CustomConfig module for MailScanner which causes MailScanner to log all message data (excluding body text) to a MySQL database which is then queried by MailWatch for reporting and statistics. 1. Install Apache2, MySql server and PHP5 - [Installing and configuring Unison File Synchronizer](https://www.debiantutorials.com/installing-and-configuring-unison-file-synchronizer/) - Unison is a file-synchronization tool for Unix and Windows. It allows two replicas of a collection of files and directories to be stored on different hosts (or different disks on the same host), modified separately, and then brought up to date by propagating the changes in each replica to the other. 1. Install the Unison - [Installing and configuring Varnish HTTP accelerator](https://www.debiantutorials.com/installing-and-configuring-varnish-http-accelerator/) - Varnish is a state of the art web accelerator. Its mission is to sit in front of a web server an cache the content. It makes your web site go fast. 1. Install Varnish apt-get install varnish 2. Configure the backend (pico /etc/varnish/default.vcl) backend default { set backend.host = "157.166.224.26"; set backend.port = "80"; } - [Blacklisting e-mail addresses using MailScanner](https://www.debiantutorials.com/blacklisting-e-mail-addresses-using-mailscanner/) - 1. Create a new file containing the blacklisted e-mail addresses (pico /etc/MailScanner/rules/spam.blacklist.rules) FromOrTo: user1@domain.com yes FromOrTo: user2@domain.net yes FromOrTo: default no 2. Configure MailScanner to handle all messages in the blacklist as spam (pico /etc/MailScanner/MailScanner.conf) Replace this line: Is Definitely Spam = no with this: Is Definitely Spam = %rules-dir%/spam.blacklist.rules If you want to - [Prevent brute force attacks using fail2ban](https://www.debiantutorials.com/prevent-brute-force-attacks-using-fail2ban/) - fail2ban monitors log files such as /var/log/auth.log and /var/log/apache/access.log and temporarily or persistently bans failure-prone addresses by updating existing firewall rules. Currently, by default, fail2ban supports ssh/apache/vsftpd but configuration can be easily extended for monitoring any other ASCII file. 1. Install fail2ban apt-get install fail2ban 2. Test by connecting via ssh and making three incorrect - [Installing PEAR framework and packages](https://www.debiantutorials.com/installing-pear-framework-and-packages/) - PEAR is a framework and distribution system for reusable PHP components. 1. Install the PEAR framework get install php-pear 2. Restart apache /etc/init.d/apace2 restart 3. Install a PEAR package (optional) pear install Net_Ping-2.4.5 You can install any PEAR package using this command but in this example we'll install the Net_Ping package 4. Here's a sample - [Configuring goldfish autoresponder for Postfix](https://www.debiantutorials.com/configuring-goldfish-autoresponder-for-postfix/) - goldfish is a quite simple autoresponder for Postfix in conjunction with MySQL, written in PHP. It consists of only one PHP file which can be started through a cronjob. In this tutorial, it's assumed that you have already installed Postfix with MySql backend using this tutorial: Installing Postfix with MySql backend and SASL for SMTP - [Install Lighttpd web server with PHP5 support using MySQL backend](https://www.debiantutorials.com/install-lighttpd-web-server-with-php5-support-using-mysql-backend/) - Lighttpd is a web server which is designed to be secure, fast, standards-compliant, and flexible while being optimized for speed-critical environments. Its low memory footprint (compared to other web servers), light CPU load and its speed goals make lighttpd suitable for servers that are suffering load problems, or for serving static media separately from dynamic - [Replacing OpenSSH server with dropbear](https://www.debiantutorials.com/replacing-openssh-server-with-dropbear/) - dropbear is a SSH 2 server and client designed to be small enough to be used in small memory environments, while still being functional and secure enough for general use. It implements most required features of the SSH 2 protocol, and other features such as X11 and authentication agent forwarding. 1. Install dropbear apt-get install - [Setup DomainKeys Identified Mail (DKIM) in Postfix](https://www.debiantutorials.com/setup-domainkeys-identified-mail-dkim-in-postfix/) - DomainKeys Identified Mail (DKIM) is a method for email authentication that allows an organization to take responsibility for a message it has sent in a way that can be validated by a recipient. The technique is based on public-key cryptography: Responsibility is claimed by the signer by adding a digital signature to a message's header, - [Tuning MySql with MySqlTuner to increase efficiency and performance](https://www.debiantutorials.com/tuning-mysql-with-mysqltuner-to-increase-efficiency-and-performance/) - mysqltuner is a high-performance MySQL tuning script written in perl that will provide you with a snapshot of a MySQL server's health. Based on the statistics gathered, specific recommendations will be provided that will increase a MySQL server's efficiency and performance. 1. Install MySqlTuner apt-get install mysqltuner 2. Run MySqlTuner mysqltuner Input your MySql administrative - [Installing PowerDNS Recursor](https://www.debiantutorials.com/installing-powerdns-recursor/) - PowerDNS Recursor is a resolving DNS server, that runs as a separate process. The authoritative pdns_server can be configured to proxy recursive queries to the recursor, and optionally overlay authoritative zone data. The Recursor is used by several of the largest Internet providers of the world, including AOL, Shaw Cable and Neuf Cegetel. 1. Install - [Installing HAVP (HTTP Antivirus Proxy)](https://www.debiantutorials.com/installing-havp-http-antivirus-proxy/) - HAVP (HTTP Antivirus Proxy) is a proxy with a ClamAV anti-virus scanner. The main aims are continuous, non-blocking downloads and smooth scanning of dynamic and password protected HTTP traffic. Havp antivirus proxy has a parent and transparent proxy mode. It can be used with squid or standalone. 1. Install HAVP apt-get install havp 2. Start - [Configuring port forwarding with rinetd](https://www.debiantutorials.com/configuring-port-forwarding-with-rinetd/) - inetd redirects TCP connections from one IP address and port to another. rinetd is a single-process server which handles any number of connections to the address/port pairs specified in the file /etc/rinetd.conf. Since rinetd runs as a single process using nonblocking I/O, it is able to redirect a large number of connections without a severe - [Upgrade from etch to lenny](https://www.debiantutorials.com/upgrade-from-etch-to-lenny/) - Debian has released a stable version of Debian 5.0 (lenny). If you're running previous version of Debian, you can easily upgrade. 1. Update all packages currently installed to the latest etch versions apt-get update apt-get upgrade 2. Replace all occurrences of etch with lenny in the apt sources file (pico /etc/apt/sources.list). Here's an example of - [OpenID authentication with the mod_auth_openid Apache module](https://www.debiantutorials.com/openid-authentication-with-the-mod_auth_openid-apache-module/) - mod_auth_openid is an authentication module for the Apache 2 webserver. It handles the functions of an OpenID consumer as specified in the OpenID 2.0 specification. After a user authenticates themselves, the user's identity will be available in the REMOTE_USER variable. A cookie named open_id_session_id is saved to maintain each user's session. 1. Install the module - [Install mod_spamhaus Apache module to fight comment spam](https://www.debiantutorials.com/install-modspamhaus-apache-module-to-fight-comment-spam/) - mod_spamhaus is an Apache module for DNS Block Listing that protects web services by denying access to particular IP addresses. It can stop spam relaying via web form URL injection, and block HTTP DDoS attacks from bot-nets. It queries sbl-xbl.spamhaus.org, taking advantage of the Spamhaus Block List (SBL) and the Exploits Block List (XBL). 1. - [Installing and configuring MailScanner for virus and spam filtering (Postfix, ClamAV, SpamAssassin, Razor)](https://www.debiantutorials.com/installing-and-configuring-mailscanner-for-virus-and-spam-filtering-postfix-clamav-spamassassin-razor/) - MailScanner is an e-mail security and anti-spam package for e-mail gateway systems. MailScanner is highly configurable using a very easy-to-use system of rulesets. Virtually every configuration option can, for example, be controlled on a per-user, per-domain or per-IP basis. It's assumed that you have already installed and configured Postfix according to this tutorial: Installing Postfix - [Installing the Hobbit monitor on lenny](https://www.debiantutorials.com/installing-the-hobbit-monitor-on-lenny/) - Hobbit monitors your hosts, your network services, and anything else you configure it to do via extensions. Hobbit can periodically generate requests to network services - http, ftp, smtp and so on - and record if the service is responding as expected. You can also monitor local disk utilisation, logfiles and processes through the use - [Configuring IPv6 tunneling with AICCU](https://www.debiantutorials.com/configuring-ipv6-tunneling-with-aiccu/) - AICCU (Automatic IPv6 Connectivity Client Utility) makes it easy for users to get IPv6 connectivity over IPv4 network. 1. Request a tunnel from a tunnel broker: SixXS gogo6/Freenet6 List of IPv6 tunnel brokers 2. Install AICCU apt-get install aiccu When configuring aiccu you are asked to select a tunnel broker, input username and password and - [Installing Cacti - RRDTool-based Graphing Solution](https://www.debiantutorials.com/installing-cacti-rrdtool-based-graphing-solution/) - Cacti is a complete frontend to RRDTool, it stores all of the necessary information to create graphs and populate them with data in a MySQL database. The frontend is completely PHP driven. Along with being able to maintain Graphs, Data Sources, and Round Robin Archives in a database, cacti handles the data gathering. There is - [Installing EHCP (Easy Hosting Control Panel)](https://www.debiantutorials.com/installing-ehcp-easy-hosting-control-panel/) - EHCP is a powerful, yet easy to install control panel that allows the user to manage services such as Web, FTP, Database and DNS servers. The install script handles the installation and configuration of the required services. I recommend starting with a clean Debian system to avoid conflicts. 1. Download required EHCP files wget http://www.ehcp.net/download - [Transfer mailboxes between IMAP servers with imapsync](https://www.debiantutorials.com/transfer-mailboxes-between-imap-servers-with-imapsync/) - imapsync is a tool for facilitating incremental recursive IMAP transfers from one mailbox to another. It is useful for mailbox migration, and reduces the amount of data transferred by only copying messages that are not present on both servers. Read, unread, and deleted flags are preserved, and the process can be stopped and resumed. The - [Pure-FTPd with MySQL backend](https://www.debiantutorials.com/pure-ftpd-with-mysql-backend/) - Pure-FTPd is a free, secure, production-quality and standard-conformant FTP server. It doesn't provide useless bells and whistles, but focuses on efficiency and ease of use. It provides simple answers to common needs, plus unique useful features for personal users as well as hosting providers. In this tutorial we'll install Pure-FTPd with MySQL backend. Install Pure-FTPd - [Installing nginx from source with mail support](https://www.debiantutorials.com/installing-nginx-from-source-with-mail-support/) - nginx is a lightweight, high performance web server/reverse proxy and e-mail (SMTP/IMAP/POP3) proxy. 1. Install required packages apt-get install build-essential autotools-dev debhelper libpcre3-dev zlib1g-dev libssl-dev 2. Receive the nginx source apt-get source nginx 3. Enable the mail modules cd nginx-x.x.x pico debian/rules Replace nginx-x.x.x with the correct folder created. Add "--with-mail --with-mail_ssl_module" to the line - [Installing VMware server 2.x on Debian lenny](https://www.debiantutorials.com/installing-vmware-server-2-x-on-debian-lenny/) - VMware Server can create, edit, and play virtual machines. It uses a client-server model, allowing remote access to virtual machines, at the cost of some graphical performance (and 3D support). In addition to the ability to run virtual machines created by other VMware products, it can also run virtual machines created by Microsoft Virtual PC. - [Installing the GeoIP Apache module](https://www.debiantutorials.com/installing-the-geoip-apache-module/) - This module allows you to determine which country, region, city, postal code, area code the visitor is coming from. 1. Install the module apt-get install libapache2-mod-geoip 2. Restart Apache /etc/init.d/apache2 restart 3. Create a new PHP file to test the module (pico /var/www/test.php or any file you can access on your server) - [Installing and configuring Squid proxy server](https://www.debiantutorials.com/installing-and-configuring-squid-proxy-server/) - Squid is a caching proxy supporting HTTP, HTTPS, FTP, and more. It reduces bandwidth and improves response times by caching and reusing frequently-requested web pages. Squid has extensive access controls and makes a great server accelerator. 1. Install the Squid package apt-get install squid 2. Allow your ip network to use the proxy server (pico - [Installing and configuring PPTP VPN server on lenny](https://www.debiantutorials.com/installing-and-configuring-pptp-vpn-server-on-lenny/) - If you would like to setup a Virtual Private Network (VPN) for Windows clients, PPTP is a great choice. It's easy to set up on the server and you don't need any additional software for the Windows clients to connect. 1. Install the required packages apt-get install pptpd 2. Configure the IP range assigned to - [Install XCache](https://www.debiantutorials.com/install-xcache/) - XCache is a fast, stable PHP opcode cacher that has been tested and is now running on production servers under high load. It overcomes a lot of problems that has been with other competing opcachers such as being able to be used with new PHP versions. 1. Installing the XCache package apt-get install php5-xcache 2. - [Installing suPHP](https://www.debiantutorials.com/installing-suphp/) - suPHP is a tool for executing PHP scripts with the permissions of their owners. It consists of an Apache module (mod_suphp) and a setuid root binary (suphp) that is called by the Apache module to change the uid of the process executing the PHP interpreter. 1. Install suPHP apt-get install libapache2-mod-suphp 2. Disable the php5 - [Scan your web server for vulnerabilities with Nikto](https://www.debiantutorials.com/scan-your-web-server-for-vulnerabilities-with-nikto/) - Nikto is a web server scanner which performs comprehensive tests against web servers for multiple items, including over 3500 potentially dangerous files/CGIs, versions on over 900 servers, and version specific problems on over 250 servers. 1. Install Nikto apt-get install nikto 2. Test the local web server nikto -h localhost Nikto also supports testing on - [Simple load balancing using Pound](https://www.debiantutorials.com/simple-load-balancing-using-pound/) - The Pound program is a reverse proxy, load balancer and HTTPS front-end for Web server(s). Pound was developed to enable distributing the load among several Web-servers and to allow for a convenient SSL wrapper for those Web servers that do not offer it natively. 1. Install the pound package apt-get install pound 2. Configure the - [Installing the DSPAM web frontend on lenny](https://www.debiantutorials.com/installing-the-dspam-web-frontend-on-lenny/) - This tutorial covers installing and configuring the DSPAM web frontend. Using the web frontend, the mail users can configure the sensitivity of the spam filter, see statistics and more. I assume you already have the Apache2 web server and DSPAM daemon installed. 1. Install the dspam-webfrontend package and suexec module for the Apache2 web server. - [Disable root login to SSH](https://www.debiantutorials.com/disable-root-login-to-ssh/) - Allowing root logins to your SSH damon is a big security threat. If the SSH port is open, hackers will probably at some time attempt to brute force your root password. It's a good idea to disable root logins to SSH and instead use a normal user to login and type "su -" to enter - [Adding a sudoer to use sudo on Debian](https://www.debiantutorials.com/adding-a-sudoer-to-use-sudo-on-debian/) - Sudo allows a system administrator to delegate authority to give certain users (or groups of users) the ability to run some (or all) commands as root or another user while providing an audit trail of the commands and their arguments. 1. Create a new user (optional) adduser user1 2. Make sure sudo is install (installed - [Installing Dovecot IMAP and POP daemon with MySql backend](https://www.debiantutorials.com/installing-dovecot-imap-and-pop-daemon-with-mysql-backend/) - Dovecot is an open source IMAP and POP3 server for Linux/UNIX-like systems, written primarily with security in mind. Dovecot primarily aims to be a lightweight, fast and easy to set up open source mailserver. It's assumed that you have already installed and configured Postfix according to this tutorial: Installing Postfix with MySql backend and SASL - [Installing Courier POP3 and IMAP daemon with MySql backend](https://www.debiantutorials.com/installing-courier-pop3-and-imap-daemon-with-mysql-backend-install-courier/) - The Courier mail transfer agent (MTA) is an integrated mail/groupware server based on open commodity protocols, such as ESMTP, IMAP, POP3, LDAP, SSL, and HTTP. Courier provides ESMTP, IMAP, POP3, webmail, and mailing list services within a single, consistent, framework. In this tutorial we'll only use the Courier POP3 and IMAP services. It's assumed that - [Installing VMware server on Debian etch](https://www.debiantutorials.com/installing-vmware-server-on-debian-etch/) - VMware Server installs on any existing server hardware and partitions a physical server into multiple virtual machines by abstracting processor, memory, storage and networking resources, giving you greater hardware utilization and flexibility. Streamline software development and testing and simplify server provisioning as you utilize the ability to "build once, deploy many times." In this tutorial - [Create your private certificate authority (CA)](https://www.debiantutorials.com/create-your-private-certificate-authority-ca/) - Creating a private CA can be useful if you have a lot of services encrypting data for internal use but don't need the domain to be verified by a public CA like Verisign, Thawte etc. By importing the CA to all computers that will use these services users won't get the a popup in IE - [Monitoring PowerDNS with MRTG](https://www.debiantutorials.com/monitoring-powerdns-with-mrtg/) - Monitoring PowerDNS is easy with MRTG, just install these two packages and create a config file and you're good to go! apt-get install libsnmp-session-perl mrtg Add this to a config file, for example /etc/mrtg.cfg (pico /etc/mrtg.cfg) Interval: 5 WorkDir: /var/www/mrtg WriteExpires: yes Options[_]: growright,nopercent XSize[_]: 600 Target[udp-queries]: `/etc/init.d/pdns mrtg udp-queries udp-answers` Options[udp-queries]: growright,nopercent,perminute MaxBytes[udp-queries]: - [Loading iptables rules on startup](https://www.debiantutorials.com/loading-iptables-rules-on-startup/) - By default iptables is setup on Debian etch but there are no rules configured. In this tutorial we'll configure some rules and load them into iptables on startup. 1. Rules file Create a new file that will contain a shell script to insert rules into iptables (pico /etc/firewall-rules.sh) and add this content as template: #!/bin/sh - [Increasing screen resolution in VNC on X](https://www.debiantutorials.com/increasing-screen-resolution-in-vnc-on-x/) - When connecting to a server without a monitor by VNC, X won't allow you to select screen resolution higher than 640x480 on next restart. This can be easily fixed: Open /etx/X11/xorg.conf using a text editor (pico /etx/X11/xorg.conf) and add these two lines in the Monitor section of the config file: HorizSync 31-95 VertRefresh 50-60 Now - [Setup PostgreSQL database system](https://www.debiantutorials.com/setup-postgresql-database-system/) - PostgreSQL is a powerful, open source object-relational database system. It has more than 15 years of active development and a proven architecture that has earned it a strong reputation for reliability, data integrity, and correctness. 1. Install packages apt-get install postgresql postgresql-client 2. Create a user // Change to the postgres linux user and create - [Remote backups using rsync](https://www.debiantutorials.com/remote-backups-using-rsync/) - rsync is a software application for Unix systems which synchronizes files and directories from one location to another while minimizing data transfer using delta encoding when appropriate. An important feature of rsync not found in most similar programs/protocols is that the mirroring takes place with only one transmission in each direction. rsync can copy or - [Installing Zenoss monitoring system](https://www.debiantutorials.com/installing-zenoss-monitoring-system/) - Zenoss is an award-winning open source IT monitoring product that effectively manages the configuration, health and performance of networks, servers and applications through a single, integrated software package. Start by adding a zenoss entry to your apt sources (pico /etc/apt/sources.list): deb http://dev.zenoss.org/deb main stable Update apt repository apt-get update Install Zenoss and depending packages apt-get - [Installing PowerDNS on etch/lenny](https://www.debiantutorials.com/installing-powerdns-on-eth-lenny/) - The PowerDNS Nameserver is a modern, advanced and high performance authoritative-only nameserver. It is written from scratch and conforms to all relevant DNS standards documents. Furthermore, PowerDNS interfaces with almost any database. This tutorial has been tested and is working on Debian etch and lenny 1. Install the PowerDNS server and MySql backend using apt - [Installing Postfix with MySql backend and TLS](https://www.debiantutorials.com/installing-postfix-with-mysql-backend-and-tls/) - In this tutorial we'll install a ready to use Postfix mail server with MySql backend for virtual users. Notice that this tutorial only covers installing the SMTP server (not POP3 and IMAP). Click here for a tutorial on installing Courier POP3 and IMAp services. Once installed and configured, you can easily create your own admin - [Installing Courier POP3 and IMAP services with MySql backend](https://www.debiantutorials.com/installing-courier-pop3-and-imap-services-with-mysql-backend/) - This tutorial assumes you already have Postfix installed with MySql backend as described in this tutorial: Installing Postfix with MySql backend and TLS 1. Install required packages apt-get install courier-authdaemon courier-authlib-mysql courier-pop courier-pop-ssl courier-imap courier-imap-ssl 2. Make the auth daemon support MySql virtual users (pico /etc/courier/authdaemonrc) authmodulelist="authmysql" 3. Configure courier to use MySql backend (pico - [Monitoring multiple servers with Munin](https://www.debiantutorials.com/monitoring-multiple-servers-with-munin/) - Munin is a network/system monitoring application that presents output in graphs through a web interface. Its emphasis is on simple plug and play capabilities. A large number of monitoring plugins are available. Using Munin you can easily monitor the performance of your computers, networks, SANs, and quite possibly applications as well. It makes it easy - [Installing DSPAM with ClamAV for Postfix on lenny](https://www.debiantutorials.com/installing-dspam-with-clamav-for-postfix-on-lenny/) - DSPAM is a scalable and open-source content-based spam filter designed for multi-user enterprise systems. On a properly configured system, many users experience results between 99.5% - 99.95%, or one error for every 200 to 2000 messages. Install and configure the DSPAM daemon 1. Install DSPAM daemon with MySql storage driver and ClamAV. The installer will - [Add an additional IP address to your server](https://www.debiantutorials.com/add-an-additional-ip-address-to-your-server/) - 1. Open the network configuration file (pico /etc/network/interfaces) Check the name of your network interface. You should see a line similar to this one: "iface eth0 inet static". In my case the name is eth0. Add these lines to the end of the file: auto eth0:1 iface eth0:1 inet static address 192.168.1.3 netmask 255.255.255.0 broadcast - [Port forwarding with iptables](https://www.debiantutorials.com/port-forwarding-with-iptables/) - In this tutorial we'll set up a simple port forwarding (NAT) using iptables. 1. Enable ip forward echo "1" > /proc/sys/net/ipv4/ip_forward 2. Append routing rules to the nat table iptables -t nat -A PREROUTING -p tcp -s 0/0 -d {local_ip} --dport {local_port} -j DNAT --to {destination_ip}:{destination_port} iptables -t nat -A POSTROUTING -o eth0 -d {destination_ip} - [MySql database replication (master/slave)](https://www.debiantutorials.com/mysql-database-replication-masterslave/) - In this tutorial we'll create a simple one-way master/slave database replication. You must have at least one master and one slave but you can use multiple slaves. Master 1. Configure master to listen on all ip addresses (pico /etc/mysql/my.cnf) #bind-address = 127.0.0.1 Comment out this line or remove it 2. Configure server id, log file - [Using Debian Volatile to keep your packages updated](https://www.debiantutorials.com/using-debian-volatile-to-keep-your-packages-updated/) - Some packages aim at fast moving targets, such as spam filtering and virus scanning, and even when using updated data patterns, they do not really work for the full time of a stable release. The main goal of volatile is allowing system administrators to update their systems in a nice, consistent way, without getting the - [Installing vsftpd with MySql backend](https://www.debiantutorials.com/installing-vsftpd-with-mysql-backend/) - vsftpd is a secure, fast and stable FTP server. In this tutorial we'll install the server and make create a user database in MySql for virtual users. 1. Install required packages (make sure you have installed MySql) apt-get install vsftpd libpam-mysql 2. Create database and insert the first user (mysql -u root -p) CREATE DATABASE - [Moving databases from one MySql server to another](https://www.debiantutorials.com/moving-databases-from-one-mysql-server-to-another/) - 1. On the source database server run the following command to export all databases: mysqldump -h localhost -u {username} -p --all-databases > database_dump.sql Replace {username} with your MySql username. You can also export a single database using this command: mysqldump -h localhost -u {username} -p {database} > database_dump.sql Replace {username} with your MySql username and - [Installing ntop network monitoring tool](https://www.debiantutorials.com/installing-ntop-network-monitoring-tool/) - ntop is a network traffic probe that shows the network usage, similar to what the popular top Unix command does. ntop is based on libpcap and it has been written in a portable way in order to virtually run on every Unix platform and on Win32 as well. ntop users can use a a web - [Securing unencrypted traffic with stunnel](https://www.debiantutorials.com/securing-unencrypted-traffic-with-stunnel/) - Stunnel can be used to provide secure encrypted connections for clients or servers that do not speak TLS or SSL natively. In this tutorial we'll secure Samba connection but you could use this for other services like SMTP, IMAP, POP3 etc. If you are securing a service where the client supports encrypting like SMTP, IMAP - [Automated backups to FTP server using rsync and curlftpfs](https://www.debiantutorials.com/automated-backups-to-ftp-server-using-rsync-and-curlftpfs/) - Using curlftpfs and FUSE, a ftp site is mapped to the local file system and rsync will backup files to the ftp server automatically. 1. Install required packages apt-get install curlftpfs rsync 2. Create directory to mount the ftp site mkdir /mnt/ftpbackup 3. Add the curlftpfs mount into fstab to make it mount everytime the - [Password protecting a directory with Apache and .htaccess](https://www.debiantutorials.com/password-protecting-a-directory-with-apache-and-htaccess/) - The Apache web server can read .htaccess files located anywhere in your document root to perform different tasks and control settings without changing the configuration files. This may be useful where you don't have access to change the configuration files or don't want to mangle with the configuration files to perform easy tasks. In this - [Enable greylisting in Postfix using Postgrey](https://www.debiantutorials.com/enable-greylisting-in-postfix-using-postgrey/) - Greylisting is a new weapon to use against spam in this great war being waged upon it. With this new shielding method, by which you may block out huge amounts of spam, you are sure to please your email clients! In name, as well as operation, greylisting is related to whitelisting and blacklisting. What happen ## Pages - [Download Debian ISO](https://www.debiantutorials.com/download-debian-iso/) - Here you can download latest Debian net install iso images. Debian Stretch (9.x) Debian 9.4.0 Debian Jessie (8.x) Debian 8.10.0 Debian wheezy (7.x) Debian 7.11.0 ## Categories - [Mail](https://www.debiantutorials.com/category/mail/) - [Security](https://www.debiantutorials.com/category/security/) - [DNS](https://www.debiantutorials.com/category/dns/) - [Monitoring](https://www.debiantutorials.com/category/monitoring/) - [MySQL](https://www.debiantutorials.com/category/mysql/) - [Virtualization](https://www.debiantutorials.com/category/virtualization/) - [Web](https://www.debiantutorials.com/category/web/) - [X](https://www.debiantutorials.com/category/x/) - [PostgreSQL](https://www.debiantutorials.com/category/postgresql/) - [Backup](https://www.debiantutorials.com/category/backup/) - [General](https://www.debiantutorials.com/category/general/) - [FTP](https://www.debiantutorials.com/category/ftp/) - [Release](https://www.debiantutorials.com/category/release/) - [Control Panel](https://www.debiantutorials.com/category/control-panel/) - [Networking](https://www.debiantutorials.com/category/networking/) - [Media](https://www.debiantutorials.com/category/media/) - [Wheezy (7)](https://www.debiantutorials.com/category/release/wheezy/) ## Tags - [subversion](https://www.debiantutorials.com/tag/subversion/) - [trac](https://www.debiantutorials.com/tag/trac/) - [apache](https://www.debiantutorials.com/tag/apache/) - [postfix](https://www.debiantutorials.com/tag/postfix/) - [postgrey](https://www.debiantutorials.com/tag/postgrey/) - [spam](https://www.debiantutorials.com/tag/spam/) - [php](https://www.debiantutorials.com/tag/php/) - [lighttpd](https://www.debiantutorials.com/tag/lighttpd/) - [vmware](https://www.debiantutorials.com/tag/vmware/) - [pure-ftpd](https://www.debiantutorials.com/tag/pure-ftpd/) - [openssl](https://www.debiantutorials.com/tag/openssl/) - [mrtg](https://www.debiantutorials.com/tag/mrtg/) - [powerdns](https://www.debiantutorials.com/tag/powerdns/) - [nfs](https://www.debiantutorials.com/tag/nfs/) - [upgrade](https://www.debiantutorials.com/tag/upgrade/) - [lenny](https://www.debiantutorials.com/tag/lenny/) - [zenoss](https://www.debiantutorials.com/tag/zenoss/) - [rsync](https://www.debiantutorials.com/tag/rsync/) - [vnc](https://www.debiantutorials.com/tag/vnc/) - [iptables](https://www.debiantutorials.com/tag/iptables/) - [firewall](https://www.debiantutorials.com/tag/firewall/) - [apt](https://www.debiantutorials.com/tag/apt/) - [ioncube](https://www.debiantutorials.com/tag/ioncube/) - [tls](https://www.debiantutorials.com/tag/tls/) - [sasl](https://www.debiantutorials.com/tag/sasl/) - [hobbit](https://www.debiantutorials.com/tag/hobbit/) - [dspam](https://www.debiantutorials.com/tag/dspam/) - [clamav](https://www.debiantutorials.com/tag/clamav/) - [frontend](https://www.debiantutorials.com/tag/frontend/) - [network](https://www.debiantutorials.com/tag/network/) - [etch](https://www.debiantutorials.com/tag/etch/) - [volatile](https://www.debiantutorials.com/tag/volatile/) - [vsftpd](https://www.debiantutorials.com/tag/vsftpd/) - [zend](https://www.debiantutorials.com/tag/zend/) - [courier](https://www.debiantutorials.com/tag/courier/) - [pop3](https://www.debiantutorials.com/tag/pop3/) - [imap](https://www.debiantutorials.com/tag/imap/) - [munin](https://www.debiantutorials.com/tag/munin/) - [ntop](https://www.debiantutorials.com/tag/ntop/) - [routing](https://www.debiantutorials.com/tag/routing/) - [replication](https://www.debiantutorials.com/tag/replication/) - [samba](https://www.debiantutorials.com/tag/samba/) - [stunnel](https://www.debiantutorials.com/tag/stunnel/) - [ssl](https://www.debiantutorials.com/tag/ssl/) - [curlftpfs](https://www.debiantutorials.com/tag/curlftpfs/) - [database](https://www.debiantutorials.com/tag/database/) - [jaunty](https://www.debiantutorials.com/tag/jaunty/) - [java](https://www.debiantutorials.com/tag/java/) - [smtp](https://www.debiantutorials.com/tag/smtp/) - [dovecot](https://www.debiantutorials.com/tag/dovecot/) - [sudo](https://www.debiantutorials.com/tag/sudo/) - [ssh](https://www.debiantutorials.com/tag/ssh/) - [mailscanner](https://www.debiantutorials.com/tag/mailscanner/) - [spamassassin](https://www.debiantutorials.com/tag/spamassassin/) - [razor](https://www.debiantutorials.com/tag/razor/) - [pound](https://www.debiantutorials.com/tag/pound/) - [proxy](https://www.debiantutorials.com/tag/proxy/) - [load balancing](https://www.debiantutorials.com/tag/load-balancing/) - [squid](https://www.debiantutorials.com/tag/squid/) - [nikto](https://www.debiantutorials.com/tag/nikto/) - [php5](https://www.debiantutorials.com/tag/php5/) - [suphp](https://www.debiantutorials.com/tag/suphp/) - [xcache](https://www.debiantutorials.com/tag/xcache/) - [pptp](https://www.debiantutorials.com/tag/pptp/) - [vpn](https://www.debiantutorials.com/tag/vpn/) - [geoip](https://www.debiantutorials.com/tag/geoip/) - [nginx](https://www.debiantutorials.com/tag/nginx/) - [sync](https://www.debiantutorials.com/tag/sync/) - [ehcp](https://www.debiantutorials.com/tag/ehcp/) - [nagios](https://www.debiantutorials.com/tag/nagios/) - [cacti](https://www.debiantutorials.com/tag/cacti/) - [rrdtool](https://www.debiantutorials.com/tag/rrdtool/) - [IPv6](https://www.debiantutorials.com/tag/ipv6/) - [aiccu](https://www.debiantutorials.com/tag/aiccu/) - [spf](https://www.debiantutorials.com/tag/spf/) - [spamhaus](https://www.debiantutorials.com/tag/spamhaus/) - [OpenID](https://www.debiantutorials.com/tag/openid/) - [rinetd](https://www.debiantutorials.com/tag/rinetd/) - [havp](https://www.debiantutorials.com/tag/havp/) - [recursor](https://www.debiantutorials.com/tag/recursor/) - [resolving DNS](https://www.debiantutorials.com/tag/resolving-dns/) - [performance](https://www.debiantutorials.com/tag/performance/) - [mysqltuner](https://www.debiantutorials.com/tag/mysqltuner/) - [dkim](https://www.debiantutorials.com/tag/dkim/) - [DomainKeys](https://www.debiantutorials.com/tag/domainkeys/) - [milter](https://www.debiantutorials.com/tag/milter/) - [fail2ban](https://www.debiantutorials.com/tag/fail2ban/) - [dropbear](https://www.debiantutorials.com/tag/dropbear/) - [openssh](https://www.debiantutorials.com/tag/openssh/) - [goldfish](https://www.debiantutorials.com/tag/goldfish/) - [autoresponder](https://www.debiantutorials.com/tag/autoresponder/) - [pear](https://www.debiantutorials.com/tag/pear/) - [mailwatch](https://www.debiantutorials.com/tag/mailwatch/) - [varnish](https://www.debiantutorials.com/tag/varnish/) - [http](https://www.debiantutorials.com/tag/http/) - [accelerator](https://www.debiantutorials.com/tag/accelerator/) - [unison](https://www.debiantutorials.com/tag/unison/) - [synchronize](https://www.debiantutorials.com/tag/synchronize/) - [mpm](https://www.debiantutorials.com/tag/mpm/) - [itk](https://www.debiantutorials.com/tag/itk/) - [karmic](https://www.debiantutorials.com/tag/karmic/) - [eAccelerator](https://www.debiantutorials.com/tag/eaccelerator/) - [svn](https://www.debiantutorials.com/tag/svn/) - [python](https://www.debiantutorials.com/tag/python/) - [phpmyadmin](https://www.debiantutorials.com/tag/phpmyadmin/) - [ssmtp](https://www.debiantutorials.com/tag/ssmtp/) - [roundcube](https://www.debiantutorials.com/tag/roundcube/) - [pop](https://www.debiantutorials.com/tag/pop/) - [ipmi](https://www.debiantutorials.com/tag/ipmi/) - [bmc](https://www.debiantutorials.com/tag/bmc/) - [rootkit](https://www.debiantutorials.com/tag/rootkit/) - [pdns](https://www.debiantutorials.com/tag/pdns/) - [ad](https://www.debiantutorials.com/tag/ad/) - [ldap](https://www.debiantutorials.com/tag/ldap/) - [active directory](https://www.debiantutorials.com/tag/active-directory/) - [authnz_ldap](https://www.debiantutorials.com/tag/authnz_ldap/) - [cfgmaker](https://www.debiantutorials.com/tag/cfgmaker/) - [snmp](https://www.debiantutorials.com/tag/snmp/) - [jre](https://www.debiantutorials.com/tag/jre/) - [ffmpeg](https://www.debiantutorials.com/tag/ffmpeg/) - [video](https://www.debiantutorials.com/tag/video-2/) - [h.264](https://www.debiantutorials.com/tag/h-264/) - [codec](https://www.debiantutorials.com/tag/codec/) - [deb-multimedia](https://www.debiantutorials.com/tag/deb-multimedia/) - [Wowza](https://www.debiantutorials.com/tag/wowza/) - [RTSP](https://www.debiantutorials.com/tag/rtsp/) - [stream](https://www.debiantutorials.com/tag/stream/) - [mailgraph](https://www.debiantutorials.com/tag/mailgraph/) - [couriergraph](https://www.debiantutorials.com/tag/couriergraph/) - [Percona Server](https://www.debiantutorials.com/tag/percona-server/) - [wheezy](https://www.debiantutorials.com/tag/wheezy-2/) - [nodejs](https://www.debiantutorials.com/tag/nodejs/) - [webmin](https://www.debiantutorials.com/tag/webmin/) - [node.js](https://www.debiantutorials.com/tag/node-js/) - [vmware tools](https://www.debiantutorials.com/tag/vmware-tools/) - [virtualization](https://www.debiantutorials.com/tag/virtualization-2/) - [DirectAdmin](https://www.debiantutorials.com/tag/directadmin/) - [owncloud](https://www.debiantutorials.com/tag/owncloud/) - [hard disk](https://www.debiantutorials.com/tag/hard-disk/) - [fdisk](https://www.debiantutorials.com/tag/fdisk/) - [fstab](https://www.debiantutorials.com/tag/fstab/) - [uuid](https://www.debiantutorials.com/tag/uuid/) - [mount](https://www.debiantutorials.com/tag/mount/) - [heartbleed](https://www.debiantutorials.com/tag/heartbleed/) - [shellshock](https://www.debiantutorials.com/tag/shellshock/) - [bash](https://www.debiantutorials.com/tag/bash/) - [geo](https://www.debiantutorials.com/tag/geo/) - [backend](https://www.debiantutorials.com/tag/backend/) - [cdn](https://www.debiantutorials.com/tag/cdn/) - [pagespeed](https://www.debiantutorials.com/tag/pagespeed/) - [jessie](https://www.debiantutorials.com/tag/jessie-2/) - [Mail](https://www.debiantutorials.com/tag/mail/) - [Security](https://www.debiantutorials.com/tag/security/) - [DNS](https://www.debiantutorials.com/tag/dns/) - [Monitoring](https://www.debiantutorials.com/tag/monitoring/) - [MySQL](https://www.debiantutorials.com/tag/mysql/) - [Web](https://www.debiantutorials.com/tag/web/) - [Kernel](https://www.debiantutorials.com/tag/kernel/) - [X](https://www.debiantutorials.com/tag/x/) - [PostgreSQL](https://www.debiantutorials.com/tag/postgresql/) - [Backup](https://www.debiantutorials.com/tag/backup/) - [FTP](https://www.debiantutorials.com/tag/ftp/) - [Ubuntu](https://www.debiantutorials.com/tag/ubuntu/) - [Squeeze](https://www.debiantutorials.com/tag/squeeze-release/) - [Control Panel](https://www.debiantutorials.com/tag/control-panel/) - [Media](https://www.debiantutorials.com/tag/media/) - [letsencrypt](https://www.debiantutorials.com/tag/letsencrypt/) - [open-vm-tools](https://www.debiantutorials.com/tag/open-vm-tools/) - [stretch](https://www.debiantutorials.com/tag/stretch/) - [php7](https://www.debiantutorials.com/tag/php7/)