Spamassassin

Installation First thing first: DON’T EVEN THINK ABOUT DOING THIS UNTIL YOU HAVE AN OPERATIONAL MAIL SERVER RUNNING DOVECOT, POSTFIX AND POSTFIXADMIN! You need to get it working on it’s own; If it has gone tits up already this won’t fix it. Did I mention not to do this until you had a working server?  […]

Dovecot

While postfix provides SMTP outgoing mail services dovecot manages the inbound traffic and the mail boxes. In the previous parts of this guide we configured postfixadmin so that we can add domains and mailboxes to the database. This information is also useful to dovecot so as part of our configuration of dovecot we are going […]

SSH Notes

  Root Login While it may not be recommended there are times when you may wish to enable root login remotely (at least temporarily while you are setting up a remote system) Debian stretch no longer automatically permits root login remotely so you have to enable it by editing the config file sshd_config The line […]

Postfixadmin

Pre Installation If for no other reason that to make sure that your DBMS is working as it should, prior to installing postfixadmin you are advised to manually create the database and user that it will use in postgresql. First you need to su to the postgres user and create a postgresql user that postfixadmin […]

Postfix

Installation Now that we have postfixadmin and the database set up we can install postfix. #apt-get install postfix-pgsql NOTE: At this point there is a chance that Debian has pre-empted you and automatically installed a number of packages that you do not want and that conflict with the packages that you intend to use (I […]

BIND dns

Getting bind right can be a bit if a bind (if you pardon the pun) so in this example we are going to start be outlining what our zones actually do. servicedomain.com is the domain name that we purchased from our domain name supplier. mail.zone1.servicedomain.com will be the public name of our mail server (The […]

SSL Certificates

Since this page was originally written certbot has improved significantly to the point where you should be able to use it straight out of the box.  Information below the warning has been left here to help troubleshoot if you run into difficulties rather than anything but if you install certbot with the apt then you […]

Email Validation (DMARC, SPF etc.)

Reverse proxy This is not something that you can configure on your own server because it needs to be done by your isp.  In order to be compliant you can only have one reverse lookup so this is the fqdn of your mail server rather than any of the domains that you host mail for, […]

Routing

Rather than configuring a separate router, if your server has 2 or more Ethernet ports then it is possible to use it as a router. In order to do so you need to set up your isp supplied router in modem mode (which you can do easy enough by just assigning the address of your […]

Postgresql

As it does; Debian will bastardise the installation of postgresql in the usual manner, but it does offer a reasonable way to remove the bastardisation and configure it yourself so that you can have the data directory exactly where you want it. The idea behind having a separate logical volume for the data is that […]