jueves, 3 de octubre de 2019

Como instalar server de correo con Zimbra 8.8.15



1) Antes de iniciar con el proceso de la descarga de Zimbra y su configuracion, vamos actualizar nuestro sistema operativo Ubuntu Server 18.04 LTS.

root@mail:/# apt-get update && apt-get upgrade -y

2) Ahora validamos que el servicio de OpenSSH esta ejecutandose.

root@mail:/home/zimbra/zcs-8.8.15_GA# systemctl status ssh
● ssh.service - OpenBSD Secure Shell server
   Loaded: loaded (/lib/systemd/system/ssh.service; enabled; vendor preset: enabled)
   Active: active (running) since Thu 2019-10-03 13:38:16 UTC; 2h 46min ago
 Main PID: 1041 (sshd)
    Tasks: 1 (limit: 2319)
   CGroup: /system.slice/ssh.service
           └─1041 /usr/sbin/sshd -D

root@mail:/home/zimbra/zcs-8.8.15_GA#


3) Ahora instalamos el escaner NMAP para auditar nuestro server.

root@mail:/home/zimbra/zcs-8.8.15_GA# apt install nmap -y



4) Corremos NMAP para validar los puertos abiertos en nuestro Ubuntu.


root@mail:/home/zimbra/zcs-8.8.15_GA# nmap localhost

Starting Nmap 7.60 ( https://nmap.org ) at 2019-10-03 16:21 UTC
Nmap scan report for localhost (127.0.0.1)
Host is up (0.000023s latency).
Other addresses for localhost (not scanned): ::1
Not shown: 999 closed ports
PORT   STATE SERVICE
22/tcp open  ssh

Nmap done: 1 IP address (1 host up) scanned in 1.79 seconds
root@mail:/home/zimbra/zcs-8.8.15_GA#



5) Validamos que IPTABLES no esta activo con ninguna política.


root@mail:/home/zimbra/zcs-8.8.15_GA# iptables -L
Chain INPUT (policy ACCEPT)
target     prot opt source               destination

Chain FORWARD (policy ACCEPT)
target     prot opt source               destination

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination
root@mail:/home/zimbra/zcs-8.8.15_GA#

6) creamos una carpeta donde vamos a descargar el software de Zimbra estando en /home

root@mail:/home#mkdir zimbra



7) revisamos que directorios tenemos creados en la carpeta /home

root@mail:/home# ls -l
total 8
drwxr-xr-x 4 soporte soporte 4096 Oct  3 13:40 soporte
drwxr-xr-x 2 root    root         4096 Oct  3 16:27 zimbra


8) Ahora accedemos a la carpeta "zimbra" donde descargaremos el software


root@mail:/home# cd zimbra/

root@mail:/home/zimbra# pwd
/home/zimbra


9) Procedemos con la descarga de Zimbra para nuestra version de Ubuntu 18.04 LTS.


IMPORTANTE: les recomiendo por temas de seguridad que instalemos la ultima version que este disponible de Zimbra, en este momento de la creacion de este Post la version disponible para Ubuntu 18.04 LTS es Zimbra 8.8.15.


root@mail:/home/zimbra# wget https://files.zimbra.com/downloads/
8.8.15_GA/zcs-8.8.15_GA_3869.UBUNTU18_64.20190917004220.tgz
--2019-10-03 16:35:58--  https://files.zimbra.com/downloads/8.8.15_GA/zcs-8.8.15_GA_3869.UBUNTU18_64.20190917004220.tgz
Resolving files.zimbra.com (files.zimbra.com)... 54.230.54.214
Connecting to files.zimbra.com (files.zimbra.com)|54.230.54.214|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 244120584 (233M) [binary/octet-stream]
Saving to: ‘zcs-8.8.15_GA_3869.UBUNTU18_64.20190917004220.tgz’

zcs-8.8.15_GA_3869.UBUN 100%[==============================>] 232.81M  2.24MB/s    in 1m 51s

2019-10-03 16:37:50 (2.09 MB/s) - ‘zcs-8.8.15_GA_3869.UBUNTU18_64.20190917004220.tgz’ saved [244120584/244120584]

root@mail:/home/zimbra#

10) Validamos que se descargo el fichero comprimido de Zimbra

root@mail:/home/zimbra# ls
zcs-8.8.15_GA_3869.UBUNTU18_64.20190917004220.tgz
root@mail:/home/zimbra#

11) Descomprimimos el fichero de zimbra 

root@mail:/home/zimbra# tar -xzvf zcs-8.8.15_GA_64.20190917004220.tgz

12) Listamos para validar que el fichero de zimbra se descomprimio y que nos creo una carpeta con el software a instalar.

root@mail:/home/zimbra# ls -l
total 238404
drwxr-xr-x 8  503  503    4096 Sep 17 06:34 zcs-8.8.15_GA_3869.UBUNTU18_64.20190917004220
-rw-r--r-- 1 root root 244120584 Sep 27 12:30 zcs-8.8.15_GA_3869.UBUNTU18_64.20190917004220.tgz
root@mail:/home/zimbra#

13) Ahora vamos a cambiarle ese nombre extenso a la carpeta donde esta el software de zimbra dejandola con el nombre de zcs-8.8.15_GA .


root@mail:/home/zimbra# mv zcs-8.8.15_GA_64.20190917004220 zcs-8.8.15_GA
root@mail:/home/zimbra#

14) Listamos nuevamente para validar que los cambios que hicimos se realizaron .

root@mail:/home/zimbra# ls
zcs-8.8.15_GA  zcs-8.8.15_GA_3869.UBUNTU18_64.20190917004220.tgz
root@mail:/home/zimbra#


15) Ahora ejecutamos el script de instalacion de Zimbra .


IMPORTANTE: la primera vez que tratemos de instalar zimbra nos va a dar un error, ya que es importante que tengamos asociado en el fichero "hosts" la direccion IP al FQDN de nuestro dominio, adicionalmente debemos configurar en el fichero "resolv.conf" el DNS Server que resolvera nuestro dominio.

root@mail:/home/zimbra/zcs-8.8.15_GA# ./install.sh

Operations logged to /tmp/install.log.fm7oJvLb
Checking for existing installation...
    zimbra-drive...NOT FOUND
    zimbra-imapd...NOT FOUND
    zimbra-patch...NOT FOUND
    zimbra-mta-patch...NOT FOUND
    zimbra-proxy-patch...NOT FOUND
    zimbra-license-tools...NOT FOUND
    zimbra-license-extension...NOT FOUND
    zimbra-network-store...NOT FOUND
    zimbra-network-modules-ng...NOT FOUND
    zimbra-chat...NOT FOUND
    zimbra-talk...NOT FOUND
    zimbra-ldap...NOT FOUND
    zimbra-logger...NOT FOUND
    zimbra-mta...NOT FOUND
    zimbra-dnscache...NOT FOUND
    zimbra-snmp...NOT FOUND
    zimbra-store...NOT FOUND
    zimbra-apache...NOT FOUND
    zimbra-spell...NOT FOUND
    zimbra-convertd...NOT FOUND
    zimbra-memcached...NOT FOUND
    zimbra-proxy...NOT FOUND
    zimbra-archiving...NOT FOUND
    zimbra-core...NOT FOUND


----------------------------------------------------------------------
PLEASE READ THIS AGREEMENT CAREFULLY BEFORE USING THE SOFTWARE.
SYNACOR, INC. ("SYNACOR") WILL ONLY LICENSE THIS SOFTWARE TO YOU IF YOU
FIRST ACCEPT THE TERMS OF THIS AGREEMENT. BY DOWNLOADING OR INSTALLING
THE SOFTWARE, OR USING THE PRODUCT, YOU ARE CONSENTING TO BE BOUND BY
THIS AGREEMENT. IF YOU DO NOT AGREE TO ALL OF THE TERMS OF THIS
AGREEMENT, THEN DO NOT DOWNLOAD, INSTALL OR USE THE PRODUCT.

License Terms for this Zimbra Collaboration Suite Software:
https://www.zimbra.com/license/zimbra-public-eula-2-6.html
----------------------------------------------------------------------



Do you agree with the terms of the software license agreement? [N] y Acepta temrinos de licencia




  ERROR: Installation can not proceeed.  Please fix your /etc/hosts file
  to contain:

  <ip> <FQHN> <HN>

  Where <IP> is the ip address of the host,
  <FQHN> is the FULLY QUALIFIED host name, and
  <HN> is the (optional) hostname-only portion

root@mail:/home/zimbra/zcs-8.8.15_GA#

16) Revisemos antes de hacer cambios el fichero "host".

root@mail:/home/zimbra/zcs-8.8.15_GA# more /etc/hosts
127.0.0.1 localhost
127.0.1.1 mail


17) con el editor de nuestra preferencia editamos el fichero "host" y agregamos el FQDN para las 2 IP como se muestra acontinuacion.

root@mail:/home/zimbra/zcs-8.8.15_GA# vi /etc/hosts
127.0.1.1 mail.itsecurity-hn.com
192.168.5.21 mail.itsecurity-hn.com



18) Revisemos antes de hacer cambios el fichero "resolv.conf" donde se definen los server DNS.


root@mail:/home/zimbra/zcs-8.8.15_GA# more /etc/resolv.conf
nameserver 192.6.1.1
search itsecurity-hn.com
options edns0
root@mail:/home/zimbra/zcs-8.8.15_GA#

19) con el editor de nuestra preferencia editamos el fichero "resolv.conf" y agregamos la IP de nuestro DNS que resolvera nuestro dominio de correo.


root@mail:/home/zimbra/zcs-8.8.15_GA# vi /etc/resolv.conf
nameserver 192.168.5.19
search itsecurity-hn.com
options edns0
root@mail:/home/zimbra/zcs-8.8.15_GA#

20) Ahora ya tenemos nuestro server Ubuntu listo para instalar nuestro server de correo electronico con Zimbra, ejecutamos nuevamente el script "install.sh".

Nota: se remarca en negrita los valores que debemos configurar.

root@mail:/home/zimbra/zcs-8.8.15_GA# ./install.sh

Operations logged to /tmp/install.log.4EsusTBu
Checking for existing installation...
    zimbra-drive...NOT FOUND
    zimbra-imapd...NOT FOUND
    zimbra-patch...NOT FOUND
    zimbra-mta-patch...NOT FOUND
    zimbra-proxy-patch...NOT FOUND
    zimbra-license-tools...NOT FOUND
    zimbra-license-extension...NOT FOUND
    zimbra-network-store...NOT FOUND
    zimbra-network-modules-ng...NOT FOUND
    zimbra-chat...NOT FOUND
    zimbra-talk...NOT FOUND
    zimbra-ldap...NOT FOUND
    zimbra-logger...NOT FOUND
    zimbra-mta...NOT FOUND
    zimbra-dnscache...NOT FOUND
    zimbra-snmp...NOT FOUND
    zimbra-store...NOT FOUND
    zimbra-apache...NOT FOUND
    zimbra-spell...NOT FOUND
    zimbra-convertd...NOT FOUND
    zimbra-memcached...NOT FOUND
    zimbra-proxy...NOT FOUND
    zimbra-archiving...NOT FOUND
    zimbra-core...NOT FOUND


----------------------------------------------------------------------
PLEASE READ THIS AGREEMENT CAREFULLY BEFORE USING THE SOFTWARE.
SYNACOR, INC. ("SYNACOR") WILL ONLY LICENSE THIS SOFTWARE TO YOU IF YOU
FIRST ACCEPT THE TERMS OF THIS AGREEMENT. BY DOWNLOADING OR INSTALLING
THE SOFTWARE, OR USING THE PRODUCT, YOU ARE CONSENTING TO BE BOUND BY
THIS AGREEMENT. IF YOU DO NOT AGREE TO ALL OF THE TERMS OF THIS
AGREEMENT, THEN DO NOT DOWNLOAD, INSTALL OR USE THE PRODUCT.

License Terms for this Zimbra Collaboration Suite Software:
https://www.zimbra.com/license/zimbra-public-eula-2-6.html
----------------------------------------------------------------------



Do you agree with the terms of the software license agreement? [N] y





Use Zimbra's package repository [Y] y

Warning: apt-key output should not be parsed (stdout is not a terminal)
Importing Zimbra GPG key

Configuring package repository

Checking for installable packages

Found zimbra-core (local)
Found zimbra-ldap (local)
Found zimbra-logger (local)
Found zimbra-mta (local)
Found zimbra-dnscache (local)
Found zimbra-snmp (local)
Found zimbra-store (local)
Found zimbra-apache (local)
Found zimbra-spell (local)
Found zimbra-memcached (repo)
Found zimbra-proxy (local)
Found zimbra-drive (repo)
Found zimbra-imapd (local)
Found zimbra-patch (repo)
Found zimbra-mta-patch (repo)
Found zimbra-proxy-patch (repo)


Select the packages to install

Install zimbra-ldap [Y] y

Install zimbra-logger [Y] y

Install zimbra-mta [Y] y           Los paquetes que no instalare no es obligatorio instarlos

Install zimbra-dnscache [Y] En mi caso no instalare el paquete zimbra-snmp

Install zimbra-snmp [Y] n        En mi caso no instalare el paquete zimbra-snmp

Install zimbra-store [Y] y

Install zimbra-apache [Y] y

Install zimbra-spell [Y] y

Install zimbra-memcached [Y] y

Install zimbra-proxy [Y] y

Install zimbra-drive [Y] y

Install zimbra-imapd (BETA - for evaluation only) [N] n

Install zimbra-chat [Y] y
Checking required space for zimbra-core
Checking space for zimbra-store
Checking required packages for zimbra-store
zimbra-store package check complete.

Installing:
    zimbra-core
    zimbra-ldap
    zimbra-logger
    zimbra-mta
    zimbra-store
    zimbra-apache
    zimbra-spell
    zimbra-memcached
    zimbra-proxy
    zimbra-drive
    zimbra-patch
    zimbra-mta-patch
    zimbra-proxy-patch
    zimbra-chat

The system will be modified.  Continue? [N] y (El sistema se modifico damos que si)

Beginning Installation - see /tmp/install.log.4EsusTBu for details...

                          zimbra-core-components will be downloaded and installed.
                            zimbra-timezone-data will be downloaded and installed.
                           zimbra-common-mbox-db will be installed.
                         zimbra-common-mbox-docs will be installed.
                          zimbra-common-core-jar will be installed.
                         zimbra-common-mbox-conf will be installed.
                    zimbra-common-mbox-conf-msgs will be installed.
                   zimbra-common-mbox-conf-attrs will be installed.
                   zimbra-common-mbox-native-lib will be installed.
                  zimbra-common-mbox-conf-rights will be installed.
                         zimbra-common-core-libs will be installed.
                                     zimbra-core will be installed.
                          zimbra-ldap-components will be downloaded and installed.
                                     zimbra-ldap will be installed.
                                   zimbra-logger will be installed.
                           zimbra-mta-components will be downloaded and installed.
                                      zimbra-mta will be installed.
                         zimbra-store-components will be downloaded and installed.
                       zimbra-jetty-distribution will be downloaded and installed.
                                 zimbra-mbox-war will be installed.
                                zimbra-mbox-conf will be installed.
                             zimbra-mbox-service will be installed.
                       zimbra-mbox-webclient-war will be installed.
                          zimbra-mbox-store-libs will be installed.
                   zimbra-mbox-admin-console-war will be installed.
                                    zimbra-store will be installed.
                        zimbra-apache-components will be downloaded and installed.
                                   zimbra-apache will be installed.
                         zimbra-spell-components will be downloaded and installed.
                                    zimbra-spell will be installed.
                                zimbra-memcached will be downloaded and installed.
                         zimbra-proxy-components will be downloaded and installed.
                                    zimbra-proxy will be installed.
                                    zimbra-drive will be downloaded and installed (later).
                                    zimbra-patch will be downloaded and installed (later).
                                zimbra-mta-patch will be downloaded and installed (later).
                              zimbra-proxy-patch will be downloaded and installed (later).
                                     zimbra-chat will be downloaded and installed (later).

Downloading packages (10):
   zimbra-core-components
   zimbra-timezone-data
   zimbra-ldap-components
   zimbra-mta-components
   zimbra-store-components
   zimbra-jetty-distribution
   zimbra-apache-components
   zimbra-spell-components
   zimbra-memcached
   zimbra-proxy-components
      ...done

Removing /opt/zimbra
Removing zimbra crontab entry...done.
Cleaning up zimbra init scripts...done.
Cleaning up /etc/security/limits.conf...done.

Finished removing Zimbra Collaboration Server.


Installing repo packages (10):
   zimbra-core-components
   zimbra-timezone-data
   zimbra-ldap-components
   zimbra-mta-components
   zimbra-store-components
   zimbra-jetty-distribution
   zimbra-apache-components
   zimbra-spell-components
   zimbra-memcached
   zimbra-proxy-components
      ...done

Installing local packages (23):
   zimbra-common-mbox-db
   zimbra-common-mbox-docs
   zimbra-common-core-jar
   zimbra-common-mbox-conf
   zimbra-common-mbox-conf-msgs
   zimbra-common-mbox-conf-attrs
   zimbra-common-mbox-native-lib
   zimbra-common-mbox-conf-rights
   zimbra-common-core-libs
   zimbra-core
   zimbra-ldap
   zimbra-logger
   zimbra-mta
   zimbra-mbox-war
   zimbra-mbox-conf
   zimbra-mbox-service
   zimbra-mbox-webclient-war
   zimbra-mbox-store-libs
   zimbra-mbox-admin-console-war
   zimbra-store
   zimbra-apache
   zimbra-spell
   zimbra-proxy
      ...done

Installing extra packages (5):
   zimbra-drive
   zimbra-patch
   zimbra-mta-patch
   zimbra-proxy-patch
   zimbra-chat
      ...done

Running Post Installation Configuration:
Operations logged to /tmp/zmsetup.20191003-170444.log
Installing LDAP configuration database...done.
Setting defaults...

Nota: Este error pasa por que el FQDN mail.itsecurity-hn.com lo resolvera el DNS, asi que solo definamos el nombre de nuestro dominio en mi caso es itsecurity-hn.com.


DNS ERROR resolving MX for mail.itsecurity-hn.com
It is suggested that the domain name have an MX record configured in DNS
Change domain name? [Yes] yes  (Aceptamos cambiar el dominio)
Create domain: [mail.itsecurity-hn.com] itsecurity-hn.com
        MX: mail.itsecurity-hn.com (192.168.5.21)

        Interface: 127.0.0.1
        Interface: ::1
        Interface: 192.168.5.21
done.
Checking for port conflicts

Main menu

   1) Common Configuration:
   2) zimbra-ldap:                             Enabled
   3) zimbra-logger:                          Enabled
   4) zimbra-mta:                              Enabled
   5) zimbra-store:                            Enabled
        +Create Admin User:                    yes
        +Admin user to create:                 admin@itsecurity-hn.com
******* +Admin Password                 UNSET
        +Anti-virus quarantine user:        virus-quarantine.02v2yfdvo4@itsecurity-hn.com
        +Enable automated spam training:       yes
        +Spam training user:                        spam.mqsky5xifh@itsecurity-hn.com
        +Non-spam(Ham) training user:       ham.0dklc9ncs@itsecurity-hn.com
        +SMTP host:                                   mail.itsecurity-hn.com
        +Web server HTTP port:                 8080
        +Web server HTTPS port:               8443
        +Web server mode:                          https
        +IMAP server port:                         7143
        +IMAP server SSL port:                 7993
        +POP server port:                            7110
        +POP server SSL port:                    7995
        +Use spell check server:                  yes
        +Spell server URL:                     http://mail.itsecurity-hn.com:7780/aspell.php
        +Enable version update checks:           TRUE
        +Enable version update notifications:  TRUE
        +Version update notification email:    admin@itsecurity-hn.com
        +Version update source email:            admin@itsecurity-hn.com
        +Install mailstore (service webapp):   yes
        +Install UI (zimbra,zimbraAdmin webapps): yes

   6) zimbra-spell:                            Enabled
   7) zimbra-proxy:                            Enabled
   8) Default Class of Service Configuration:
   s) Save config to file
   x) Expand menu
   q) Quit

Address unconfigured (**) items  (? - help) 5 (Seleccionamos la opcion 5 para ir a cambiar la clave del user admin de Zimbra.)


Store configuration

   1) Status:                                             Enabled
   2) Create Admin User:                        yes
   3) Admin user to create:                     admin@itsecurity-hn.com
** 4) Admin Password                           UNSET
   5) Anti-virus quarantine user:              virus-quarantine.02v2yfdvo4@itsecurity-hn.com
   6) Enable automated spam training:     yes
   7) Spam training user:                          spam.mqsky5xifh@itsecurity-hn.com
   8) Non-spam(Ham) training user:        ham.0dklc9ncs@itsecurity-hn.com
   9) SMTP host:                                      mail.itsecurity-hn.com
  10) Web server HTTP port:                   8080
  11) Web server HTTPS port:                 8443
  12) Web server mode:                            https
  13) IMAP server port:                           7143
  14) IMAP server SSL port:                   7993
  15) POP server port:                              7110
  16) POP server SSL port:                      7995
  17) Use spell check server:                    yes
  18) Spell server URL:                            http://mail.itsecurity-hn.com:7780/aspell.php
  19) Enable version update checks:              TRUE
  20) Enable version update notifications:     TRUE
  21) Version update notification email:         admin@itsecurity-hn.com
  22) Version update source email:                 admin@itsecurity-hn.com
  23) Install mailstore (service webapp):      yes
  24) Install UI (zimbra,zimbraAdmin webapps): yes

Select, or 'r' for previous menu [r] 4 (Seleccionamos opcion 4 asigne un clave segura)

En esta sentencia asignaremos nuestra clave para el user Admin.

Password for admin@itsecurity-hn.com (min 6 characters): [5CNlTYd5] lab2019

Store configuration

   1) Status:                                            Enabled
   2) Create Admin User:                       yes
   3) Admin user to create:                    admin@itsecurity-hn.com
   4) Admin Password                           set
   5) Anti-virus quarantine user:            virus-quarantine.02v2yfdvo4@itsecurity-hn.com
   6) Enable automated spam training:   yes
   7) Spam training user:                       spam.mqsky5xifh@itsecurity-hn.com
   8) Non-spam(Ham) training user:     ham.0dklc9ncs@itsecurity-hn.com
   9) SMTP host:                                   mail.itsecurity-hn.com
  10) Web server HTTP port:                8080
  11) Web server HTTPS port:              8443
  12) Web server mode:                         https
  13) IMAP server port:                         7143
  14) IMAP server SSL port:                 7993
  15) POP server port:                           7110
  16) POP server SSL port:                   7995
  17) Use spell check server:                 yes
  18) Spell server URL:                         http://mail.itsecurity-hn.com:7780/aspell.php
  19) Enable version update checks:             TRUE
  20) Enable version update notifications:     TRUE
  21) Version update notification email:        admin@itsecurity-hn.com
  22) Version update source email:                admin@itsecurity-hn.com
  23) Install mailstore (service webapp):        yes
  24) Install UI (zimbra,zimbraAdmin webapps): yes

Select, or 'r' for previous menu [r] r (para regresar a la pantalla anterior)

Main menu

   1) Common Configuration:
   2) zimbra-ldap:                             Enabled
   3) zimbra-logger:                          Enabled
   4) zimbra-mta:                              Enabled
   5) zimbra-store:                            Enabled
   6) zimbra-spell:                            Enabled
   7) zimbra-proxy:                          Enabled
   8) Default Class of Service Configuration:
   s) Save config to file
   x) Expand menu
   q) Quit

*** CONFIGURATION COMPLETE - press 'a' to apply
Select from menu, or press 'a' to apply config (? - help) a (con la letra se aplican los cambios)
Save configuration data to a file? [Yes] yes (salvamos el proceso de configuracion)
Save config in file: [/opt/zimbra/config.31792]
Saving config in /opt/zimbra/config.31792...done.
The system will be modified - continue? [No] yes (el sistema se modifico, aceptamos)
Operations logged to /tmp/zmsetup.20191003-170444.log
Setting local config values...done.
Initializing core config...Setting up CA...done.
Deploying CA to /opt/zimbra/conf/ca ...done.
Creating SSL zimbra-store certificate...done.
Creating new zimbra-ldap SSL certificate...done.
Creating new zimbra-mta SSL certificate...done.
Creating new zimbra-proxy SSL certificate...done.
Installing mailboxd SSL certificates...done.
Installing MTA SSL certificates...done.
Installing LDAP SSL certificate...done.
Installing Proxy SSL certificate...done.
Initializing ldap...done.
Setting replication password...done.
Setting Postfix password...done.
Setting amavis password...done.
Setting nginx password...done.
Setting BES searcher password...done.
Creating server entry for mail.itsecurity-hn.com...done.
Setting Zimbra IP Mode...done.
Saving CA in ldap...done.
Saving SSL Certificate in ldap...done.
Setting spell check URL...done.
Setting service ports on mail.itsecurity-hn.com...done.
Setting zimbraFeatureTasksEnabled=TRUE...done.
Setting zimbraFeatureBriefcasesEnabled=TRUE...done.
Checking current setting of zimbraReverseProxyAvailableLookupTargets
Querying LDAP for other mailstores
Searching LDAP for reverseProxyLookupTargets...done.
Adding mail.itsecurity-hn.com to zimbraReverseProxyAvailableLookupTargets
Updating zimbraLDAPSchemaVersion to version '1557224584'
Setting TimeZone Preference...done.
Disabling strict server name enforcement on mail.itsecurity-hn.com...done.
Initializing mta config...done.
Setting services on mail.itsecurity-hn.com...done.
Adding mail.itsecurity-hn.com to zimbraMailHostPool in default COS...done.
Creating domain itsecurity-hn.com...done.
Setting default domain name...done.
Creating domain itsecurity-hn.com...already exists.
Creating admin account admin@itsecurity-hn.com...done.
Creating root alias...done.
Creating postmaster alias...done.
Creating user spam.mqsky5xifh@itsecurity-hn.com...done.
Creating user ham.0dklc9ncs@itsecurity-hn.com...done.
Creating user virus-quarantine.02v2yfdvo4@itsecurity-hn.com...done.
Setting spam training and Anti-virus quarantine accounts...done.
Initializing store sql database...done.
Setting zimbraSmtpHostname for mail.itsecurity-hn.com...done.
Setting up syslog.conf...done.
Starting servers...done.
Installing common zimlets...
        com_zimbra_attachcontacts...done.
        com_zextras_chat_open...done.
        com_zimbra_webex...done.
        com_zimbra_bulkprovision...done.
        com_zimbra_cert_manager...done.
        com_zimbra_ymemoticons...done.
        com_zimbra_srchhighlighter...done.
        com_zimbra_clientuploader...done.
        com_zimbra_adminversioncheck...done.
        com_zimbra_phone...done.
        com_zimbra_proxy_config...done.
        com_zimbra_attachmail...done.
        com_zimbra_mailarchive...done.
        com_zimbra_date...done.
        com_zextras_drive_open...done.
        com_zimbra_url...done.
        com_zimbra_viewmail...done.
        com_zimbra_tooltip...done.
        com_zimbra_email...done.
Finished installing common zimlets.
Restarting mailboxd...done.


You have the option of notifying Zimbra of your installation.
This helps us to track the uptake of the Zimbra Collaboration Server.
The only information that will be transmitted is:
        The VERSION of zcs installed (8.8.15_GA_3869_UBUNTU18_64)
        The ADMIN EMAIL ADDRESS created (admin@itsecurity-hn.com)

Notify Zimbra of your installation? [Yes] n  (Si ustedes gustan pueden notificar a Zimbra)
Notification skipped
Checking if the NG started running...done.
Setting up zimbra crontab...done.


Moving /tmp/zmsetup.20191003-170444.log to /opt/zimbra/log


Configuration complete - press return to exit


root@mail:/home/zimbra/zcs-8.8.15_GA#


21) Validamos que todos los servicios esten corriendo, accediendo a la consola de Zimbra, para ello nos logueamos con el usuario de Zimbra en la consola de Ubuntu.


root@mail:/home/zimbra/zcs-8.8.15_GA# su - zimbra

22) ahora con el comando "zmcontrol" podemos parar, iniciar, reiniciar, y ver los servicios que tenemos corriendo.

zmcontrol stop
zmcontrol start
zmcontrol restart
zmcontrol status 

zimbra@mail:~$ zmcontrol status
Host mail.itsecurity-hn.com
        amavis                                      Running
        antispam                                   Running
        antivirus                                    Running
        ldap                                           Running
        logger                                        Running
        mailbox                                     Running
        memcached                               Running
        mta                                             Running
        opendkim                                   Running
        proxy                                          Running
        service webapp                           Running
        spell                                             Running
        stats                                             Running
        zimbra webapp                            Running
        zimbraAdmin webapp                 Running
        zimlet webapp                              Running
        zmconfigd                                    Running
zimbra@mail:~$ exit


23) Ahora validamos que puertos estan abiertos, por tema de seguridad mas adelante, dejaremos abiertos solo los servicios que sean necesarios como son 443, 22, 25, 110, 7071, aqui levantaremos el firewall IPTABLES, para no permitir acceso a servicios que solo don de uso local de Zimbra.

root@mail:/home/zimbra/zcs-8.8.15_GA# nmap localhost

Starting Nmap 7.60 ( https://nmap.org ) at 2019-10-03 18:34 UTC
Nmap scan report for localhost (127.0.0.1)
Host is up (0.000010s latency).
Other addresses for localhost (not scanned): ::1
Not shown: 984 closed ports
PORT      STATE SERVICE
22/tcp    open  ssh
25/tcp    open  smtp
110/tcp   open  pop3
143/tcp   open  imap
443/tcp   open  https
465/tcp   open  smtps
587/tcp   open  submission
993/tcp   open  imaps
995/tcp   open  pop3s
5222/tcp  open  xmpp-client
5269/tcp  open  xmpp-server
7025/tcp  open  vmsvc-2
8080/tcp  open  http-proxy
8443/tcp  open  https-alt
10024/tcp open  unknown
10025/tcp open  unknown

Nmap done: 1 IP address (1 host up) scanned in 2.07 seconds
root@mail:/home/zimbra/zcs-8.8.15_GA#


24) Ahora accedemos mediante "https" al puerto "7071" a la consola via web para administrar, configurar  nuestro server de correo con Zimbra.

https://mail.itsecurity-hn.com:7071
user:  admin@itsecurity-hn.com
clave: lab2019  
 


La primer apantalla que nos muestra cuando accedemos a Zimbra es el "Resumen" podemos visualizar datos de la version que corremos y otros datos mas.




En esta pantalla ya cree una cuenta de correo electronico que se llama "lab2019@itsecurity-hn.com", mas adelante creare un Post donde les mostrare como crear las cuentas de mail, o listas de correo.




25) En las siguientes imagen ya para concluir les muestro la interfaz web para la administracion de los correo de los usuarios.


user:  lab2019
clave: lab2019  



Esta sera la patanlla para gestionar nuestros correos electronicos via web, todos los usuarios de la compañia donde instalemos el server de Mail podran comunicarse mediante esa ventana de chat que se muestra.




IMPORTANTE: Para concluir solo les recuerdo que en su DNS Server deben de crear un registro "TXT SPF"  y tener "Zona Inversa" ya que al no tener Zona Inversa y el registro TXT SPF, su server podra ser catalogado como generador de SPAM y les rechazen los correos de su servidor de correo electronico.

Mi registro seria  "itsecurity-hn.com.  IN TXT "v=spf1 mx a ip4:192.168.5.0/24"

Aqui les dejo un sitio web donde pueden crear el registro "TXT SPF".





Espero que este artículo les sea de su utilidad, pueden colaborar con el simple gesto de compartirlo ya sea en sus páginas Web, Foros o Redes Sociales.

Si tiene dudas o consultas no duden en hacérmelas saber, que para mí será un placer responderlas.

2 comentarios:

Instalando Kali Linux 2020.4 en Windows 10 (Parte 1)

  En este curso ustedes aprenderán lo siguiente   • Cómo instalar Kali Linux en Windows 10 mediante WSL1 y WSL2 . • Cómo actualizar Kali L...