Install script for full install of mailwatch including all dependencies #512

Skywalker-11 · 2017-02-11T00:45:08Z

Install script that installs all necessary dependencies and basic configuration of mta, webserver and MailScanner for use with MailWatch.

The current version installs postfix, apache, MailScanner and MailWatch for Debian (tested with Debian 8.7 netinstall) and configures them. Should also work with Ubuntu >= 14.0

TODO:

…es (apache, mariadb, postfix) on debian. nginx, sendmail, exim and other os still to be done (fixes #453 partly)

asuweb · 2017-02-11T07:56:35Z

Great work on this @Skywalker-11 - your script looks very similar to mine, but neater :)

If you need / want any help with it let me know.

stefaweb · 2017-02-11T08:03:10Z

May be install.sh will be better than setup.sh.

I'll will send you later details and files for exim4.

asuweb · 2017-02-11T08:05:10Z

@Skywalker-11 - my unfinished version is here, there might be bits you want to use. It's no where near finished, but it implements checks for existing installs of apache / nginx / php / mysql etc and autodetects the OS.

I'll do any testing of redhat/centos/fedora (and any other OS's that need testing).

https://github.com/asuweb/Mailwatch-1.2.0-asuantispam/blob/install-script/tools/install.sh

stefaweb · 2017-02-11T08:29:30Z

Sorry did a mistake. Again.

For Exim4 on Debian 8.
Files, hierarchy, rights.

With all this, you just needed to to dpkg-reconfigure exim4-config and the Exim config will work.

I've also the default MailScanner config to post and one file missing for Exim4.

stefaweb · 2017-02-11T08:50:05Z

New version with MaiScanner file and missing Exim file in /etc/default/exim4.

installv2.zip

asuweb · 2017-02-11T11:07:49Z

nginx install instead of apache 2.4

Must also support apache 2.2

Skywalker-11 · 2017-02-11T11:08:25Z

@stefaweb can you tell which settings in the mailscanner conf file are necessary for mailscanner install and which are optional?

EDIT: It would be nice if you can tell what configuration changes are needed escpecially to get mailscanner work. The changes that have nothing to do with mailscanner/mailwatch but with getting "default" exim without mailscanner to work shouldn't be part of this configuration process.

…lscanner

stefaweb · 2017-02-11T12:28:27Z

@stefaweb can you tell which settings in the mailscanner conf file are necessary for mailscanner install and which are optional?

The basic idea is to do not modify something in MailScanner.conf. For this reason, I inserted in conf.d all the most needed variables. If the user want to use others variables not included, he can add them after.

I would suggest to use all the variables that I placed in conf.d/mailwatch.conf (was server.conf).
Variables are read in order. First, MailScanner read MailScanner.conf and after the file inside conf.d.

Example: If you setup %org-name% in conf.d/mailwatch.conf but forgot to include all the variables which contains %org-name% inside it, you will not initialise them as they are read before in MailScanner.conf.

For exim, when you install it with apt-get (installed by default in debian). All is fine out of the box. You just have to run dpkg-reconfigure exim4-config to select to use "direct distribution", give the server name and use split config. That all. Exim is working.

When this is done, if you copy all the files I placed in install.zip in the right place, the system will work after an exim restart. You just have to place domains and relay host in relay_domains and hubbed_hosts. You should also create output spool and log folders for exim, copy /etc/default/exim4 and apply rights.

stefaweb · 2017-02-11T12:34:24Z

Another point.
I would suggest you to do not put all inside setup.php. Use external "default" files with placeholder to be parsed by setup.sh during install. Easy maintenance.
Look as Debian do to build .deb.

Skywalker-11 · 2017-02-11T13:46:15Z

Good idea @stefaweb I did that

stefaweb · 2017-02-11T14:07:33Z

Sorry, remove exim.crt and exim.key

stefaweb · 2017-02-11T14:12:15Z

Another error.

I forgot to "empty"

setup.examples/exim/exim-configs/sender_local_deny_exceptions

Just keep the commented lines.

stefaweb

How to activate "review" for a file?

stefaweb · 2017-02-11T14:22:04Z

setup.examples/exim/mailwatch-exim.sh

+chmod 750 /var/spool/exim4/input
+chown Debian-exim:Debian-exim /var/spool/exim4/msglog
+chmod 750 /var/spool/exim4/msglog
+chown Debian-exim:Debian-exim /var/spool/exim4/exim-process.info


Delete exim-process.info, this is not a permanent file.

stefaweb · 2017-02-11T14:23:24Z

setup.examples/exim/mailwatch-exim.sh

+chmod 640 /var/spool/exim4_outgoing/db/retry.lockfile
+chown Debian-exim:Debian-exim /var/spool/exim4_outgoing/db/wait-remote_smtp
+chmod 640 /var/spool/exim4_outgoing/db/wait-remote_smtp
+chown Debian-exim:Debian-exim /var/spool/exim4_outgoing/db/wait-remote_smtp.lockfile


Delete all files inside db, they is not a permanent files.

stefaweb · 2017-02-11T14:28:19Z

Sorry, did mistake when I listed the files.

/var/spool/exim4 exist after deb install. Just check right.
Directories in /var/spool/exim4 exist after deb install. Just check right.
/var/spool/exim4_outgoing to be created and right applied.
Directories in /var/spool/exim4_outgoing need to be created and right applied.
db, input and msglog should be empty.
/etc/default/exim4 exist after deb install. You replace it by the new one.

In /var/spool/exim4
drwxr-x--- 2 Debian-exim Debian-exim 4096 janv.  7 12:06 db
drwxr-x--- 2 Debian-exim Debian-exim 4096 févr. 11 07:14 input
drwxr-x--- 2 Debian-exim Debian-exim 4096 févr. 11 07:14 msglog

exim4_outgoing should be created and the 3 directories inside and right applied.

In /var/spool/exim4_outgoing
drwxr-x--- 2 Debian-exim Debian-exim 4096 févr. 10 09:41 db
drwxr-x--- 2 Debian-exim Debian-exim 4096 févr. 11 07:14 input
drwxr-x--- 2 Debian-exim Debian-exim 4096 févr. 11 07:14 msglog

stefaweb · 2017-02-11T14:42:40Z

Verify that in /etc/aliases you have these or install them.

mailer-daemon: postmaster
postmaster: root
hostmaster: root
webmaster: root
www: root
clamav: root
root: myaddress@domain.tld

stefaweb

new comments

stefaweb · 2017-02-11T16:27:11Z

setup.examples/exim/etc/exim/conf.d/main/000_localmacros

+#helo_verify_hosts      = !*
+#helo_try_verify_hosts  = !*
+#helo_accept_junk_hosts = !*
+#helo_allow_chars = _


Cab ve removed

+#helo_verify_hosts = !*
+#helo_try_verify_hosts = !*
+#helo_accept_junk_hosts = !*
+#helo_allow_chars = _

too "specialized"
can be dangerous for "novice" user

stefaweb · 2017-02-11T16:28:29Z

setup.examples/exim/mailwatch-exim.sh

+chmod -R 644 /etc/exim4
+chmod 755 /etc/exim4/conf.d/
+chmod 755 /etc/exim4/eximconfig/
+chown root:Debian-exim /etc/exim4/exim.key


+chown root:Debian-exim /etc/exim4/exim.key

remove

stefaweb · 2017-02-11T16:29:24Z

setup.examples/exim/mailwatch-exim.sh

+chmod 755 /etc/exim4/conf.d/
+chmod 755 /etc/exim4/eximconfig/
+chown root:Debian-exim /etc/exim4/exim.key
+chmod 640 /etc/exim4/exim.key


+chmod 640 /etc/exim4/exim.key

remove

stefaweb · 2017-02-11T16:31:33Z

setup.examples/exim/mailwatch-exim.sh

+#!/bin/bash
+# Script to apply adjustments for exim
+DIR="$( cd "$( dirname "${BASH_SOURCE[0]}" )" && pwd )"
+


not sure if done somewhere
stop exim before mods

stefaweb · 2017-02-11T16:33:07Z

setup.examples/exim/mailwatch-exim.sh

+if [ -z $(grep -r "root: $rootAddress" /etc/aliases) ]; then
+    read -p "To which mail address shall mails for root user relayed to?: " rootMail
+    echo "root: $rootMail" >> /etc/aliases
+fi


I think that exim reconfigure ask now to create root=mymail

I need to check

Yes,

with Debian 8 and dpkg-reconfigure exim4-config

if root=mymail do not exist reconfigure ask to create one and ask for one email

done is removed

stefaweb · 2017-02-11T16:34:16Z

setup.examples/postfix/mailwatch-postfix.sh

+#!/bin/bash
+# Configuration script for mailwatch with postfix
+DIR="$( cd "$( dirname "${BASH_SOURCE[0]}" )" && pwd )"
+


do you stop postfix before?

mailwatch-postfix.sh
Only this to do in main.cf to have Postfix running "out of box"?

yes. only header_checks and file permissions

This will work on RH systems

stefaweb · 2017-02-11T16:38:34Z

setup.examples/apache/mailwatch-apache.sh

+    sed -i -e "s/ALLGRANTED/Order allow,deny\n  Allow from all/" "$DIR/etc/apache2/conf-enabled/mailwatch.conf"
+fi
+
+sed -i -e "s/WEBFOLDER/$WebFolder/" "$DIR/etc/apache2/conf-enabled/mailwatch.conf"


+sed -i -e "s/WEBFOLDER/$WebFolder/" "$DIR/etc/apache2/conf-enabled/mailwatch.conf"
+cp "$DIR/etc/apache2/conf-enabled/mailwatch.conf" /etc/apache2/conf-enabled/mailwatch.conf

For Debian 8 and Apache 2.4

in conf-available

a2enconf mailwatch.conf

using ln in case a2enconf is not available

asuweb · 2017-02-11T16:24:56Z

setup.sh

+fi
+
+EndNotice=""
+Webuser="www-data"


This should be set when we check for installed web servers or select the web server we want.

Also need to make sure this is passed to the other scripts that currently use "www-data"

asuweb · 2017-02-11T16:28:20Z

setup.sh

+    elif [ $response == 1 ]; then
+        #Apache
+        logprint "Installing apache"
+        $PM install apache2


if [[ $PM == "yum" ]]; then $PM install httpd Webuser="apache" else $PM install apache2 Webuser="www-data" fi

asuweb · 2017-02-11T16:31:17Z

setup.sh

+logprint "Clearing temp dir"
+rm -rf /tmp/mailwatchinstall/*
+
+


Need to check that wget is installed before we call it below

if ! ( type "wget" > /dev/null 2>&1 ) ; then $PM install wget fi

asuweb · 2017-02-11T16:40:55Z

setup.sh

+        #Nginx
+        logprint "Installing nginx"
+        $PM install nginx
+        WebServer="nginx"


need Webuser as above

stefaweb · 2017-02-12T06:56:03Z

setup.examples/exim/etc/exim/conf.d/main/000_localmacros

+# Use specific "local" routine:
+# conf.d/main/000_localmacros
+# conf.d/main/01_mailscanner_config
+# conf.d/acl/30_exim4-config_check_callback_relay


# conf.d/acl/30_exim4-config_check_callback_relay

replace by

# acl_check_recipient_relay

stefaweb · 2017-02-12T07:01:19Z

setup.examples/exim/etc/exim/conf.d/main/000_localmacros

+#smtp_accept_max = 100
+#smtp_accept_reserve = 15
+#queue_run_max = 6
+#deliver_queue_load_max


#smtp_load_reserve = 5 #deliver_queue_load_max = 10

stefaweb · 2017-02-12T07:03:45Z

setup.sh

+##ask directory for web files
+read -p "In what location should MailWatch be installed?[/var/www/mailscanner/]:" WebFolder
+if [ -z $WebFolder ]; then
+    WebFolder="/var/www/mailscanner/"


WebFolder="/var/www/html/mailscanner/"

stefaweb · 2017-02-12T07:09:20Z

setup.examples/exim/etc/exim/conf.d/main/000_localmacros

+# Exim deamon listening port
+daemon_smtp_ports = 25 : 587
+
+# Activate TLS/SSL configuration for exim as an SMTP server 


Add # exim.crt and exim.key files needed before activating the feature.

stefaweb · 2017-02-12T07:10:13Z

setup.examples/exim/etc/exim/hubbed_hosts

@@ -0,0 +1,5 @@
+# Domain routing list for relayed domain names (domains/relay)  -  Mail sent
+# to these domains will be routed via the specified mail server(s).
+#


+#

remove

stefaweb · 2017-02-12T07:12:06Z

setup.examples/exim/mailwatch-exim.sh

+DIR="$( cd "$( dirname "${BASH_SOURCE[0]}" )" && pwd )"
+Webuser="$1"
+
+/etc/init.d/exim4 stop


Or better.

service exim4 stop service exim4 start

does the service binary exist for suse/redhat/centos/fedora?

Not sure at 100% but more "independent" from type of init systems installed.

service may run scripts from either upstart, System V or systemd.

select automatically between systemV, upstart or systemd

service runs scripts in a predictable environment

@asuweb does this apply for redhat etc?

Fedora / RHEL / CentOS Linux

In fact RedHad started to use "service" many years before Debian.

https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/System_Administrators_Guide/sect-Managing_Services_with_systemd-Services.html

stefaweb · 2017-02-12T07:17:52Z

setup.examples/exim/etc/exim/conf.d/main/000_localmacros

+
+# Various Debian's variables
+MAIN_TIMEOUT_FROZEN_AFTER = 2d
+MAIN_FREEZE_TELL =


MAIN_FREEZE_TELL = postmaster

stefaweb · 2017-02-12T12:30:07Z

Hello!

In my opinion, a working mailwatch setup need a complete working mta install too.

If you don't do this, the support will be very high. I prefer to think setup.sh for a "standard" user first not for a power user with special needs or the knowledge to install all these stuff manually. If you look on Google for mailscanner/mailwatch, 80% of support is about the mta part in fact.

Except the use of razor and pyzor, others points I posted are for me needed and respect default packaged binary configs and guideline. No problem to forget these points.

But this detect old install and perform needed updates while keeping old data is really needed for dedicated power user install or for upgrade from previous version.

This is only my personal opinion too. ;)

stefaweb · 2017-02-12T12:38:38Z

setup.examples/exim/etc/exim/conf.d/main/000_localmacros

+CHECK_RCPT_VERIFY_SENDER = true
+CHECK_RCPT_LOCAL_LOCALPARTS = true
+CHECK_RCPT_REMOTE_LOCALPARTS = true
+#CHECK_RCPT_VERIFY_SENDER = true


+#CHECK_RCPT_VERIFY_SENDER = true

double

shawniverson · 2017-02-12T14:06:27Z

I'm going to echo @asuweb here. Be careful trying to be everything for everybody. Although you may be trying to help out those who don't necessarily know how to configure their systems, you are probably going to set yourself up for a support nightmare of your own when you realize just how much you are trying to tackle. What you are doing is a similar thing that I do just on CentOS, and I can tell you that trying to expand what I do to multiple distros and MTA combinations would be a mountainous task.

stefaweb · 2017-02-12T16:10:44Z

setup.examples/exim/etc/exim4/conf.d/00_mailscanner_listmacrosdefs

@@ -0,0 +1,82 @@
+# General config for MailScanner Gateway


Error, the file should be in /etc/exim4/conf.d/main/

EDIT:

New version for conf.d/main/00_mailscanner_listmacrosdefs
I reduced options to the minimum and added some comments.

# General Exim config for MailScanner Gateway # conf.d/main/00_mailscanner_listmacrosdefs # Use these specific config files: # conf.d/main/01_mailscanner_config # mailscanner_acldefs # If you have your own Exim setup remove this file # and mailscanner_acldefs # Exim deamon listening port daemon_smtp_ports = 25 : 587 # Activate TLS/SSL configuration for Exim # exim.crt and exim.key files needed before activating the feature #MAIN_TLS_ENABLE = Yes # Do a reverse DNS lookup on all incoming IP calls MAIN_HOST_LOOKUP = Yes # Access list of domains to relay # Domains to route are in /etc/exim4/hubbed_hosts MAIN_RELAY_TO_DOMAINS = /etc/exim4/relay_domains # Link to specific ACLs CHECK_RCPT_LOCAL_ACL_FILE = CONFDIR/mailscanner_acldefs # To activate sender callback on remote host (mailhub) # Useful to avoid bad bounce (do verify at SMTP time) #RECIPIENT_VERIFY_CALLBACK_RELAY = true # Deny if the sender host does not have valid reverse DNS. #CHECK_RCPT_REVERSE_DNS_DENY = true # Various Debian's ACL check CHECK_MAIL_HELO_ISSUED = true CHECK_RCPT_VERIFY_SENDER = true CHECK_RCPT_LOCAL_LOCALPARTS = true CHECK_RCPT_REMOTE_LOCALPARTS = true # Various Debian's variables MAIN_TIMEOUT_FROZEN_AFTER = 2d MAIN_FREEZE_TELL = postmaster MESSAGE_SIZE_LIMIT = 50M MAIN_IGNORE_BOUNCE_ERRORS_AFTER = 3h # Various Exim variables rfc1413_hosts = * rfc1413_query_timeout = 0s smtp_banner = $smtp_active_hostname ESMTP $tod_full # To activate logging MAIN_LOG_SELECTOR = +address_rewrite \ +all_parents \ -arguments \ +connection_reject \ +delay_delivery \ +delivery_size \ +dnslist_defer \ +incoming_interface \ +incoming_port \ +lost_incoming_connection \ +queue_run \ +received_sender \ +received_recipients \ -retry_defer \ +sender_on_delivery \ +size_reject \ -skip_delivery \ +smtp_confirmation \ +smtp_connection \ +smtp_protocol_error \ +subject \ +tls_cipher \ +tls_peerdn

stefaweb · 2017-02-12T16:17:40Z

setup.examples/exim/etc/exim4/acl_check_recipient_relay

@@ -0,0 +1,12 @@
+# Config for MailScanner Gateway


Changed the filename from acl_check_recipient_relay to mailscanner_acldefs

EDIT:
Updated content.

# Config for MailScanner Gateway # /etc/exim4/mailscanner_acldefs # Use with CHECK_RCPT_LOCAL_ACL_FILE = CONFDIR/mailscanner_acldefs # To activate sender callback on remote host (mailhub) at SMTP time # Useful to avoid bad bounce (do verify at SMTP time) .ifdef RECIPIENT_VERIFY_CALLBACK_RELAY # Recipient verification for relay domains with callback deny !acl = acl_local_deny_exceptions log_message = 550 Unknown user ${local_part}@${domain} (Recipient relay callback verification failed) message = 550 Unknown user ! verify = recipient/defer_ok/callout=10s,defer_ok .endif # Deny if the sender host does not have valid reverse DNS. # # If your system can do DNS lookups without delay or cost, you might want # to enable this. # If sender_host_address is defined, it's a remote call. If # sender_host_name is not defined, then reverse lookup failed. Use # this instead of !verify = reverse_host_lookup to catch deferrals # as well as outright failures. .ifdef CHECK_RCPT_REVERSE_DNS_DENY deny condition = ${if and{{def:sender_host_address}{!def:sender_host_name}}\ {yes}{no}} add_header = X-Host-Lookup-Failed: Reverse DNS lookup failed for $sender_host_address (${if eq{$host_lookup_failed}{1}{failed}{deferred}}) .endif

stefaweb · 2017-02-12T16:30:47Z

setup.examples/exim/mailwatch-exim.sh

+DIR="$( cd "$( dirname "${BASH_SOURCE[0]}" )" && pwd )"
+Webuser="$1"
+
+/etc/init.d/exim4 stop


Not sure at 100% but more "independent" from type of init systems installed.

service may run scripts from either upstart, System V or systemd.

select automatically between systemV, upstart or systemd

service runs scripts in a predictable environment

stefaweb · 2017-02-12T16:48:15Z

@shawniverson

I agree. Difficult and painful to support all distributions. Start with Debian - Ubuntu / RedHat - CentOS will be enough.

http://distrowatch.com/dwres.php?resource=popularity

stefaweb · 2017-02-12T20:04:19Z

setup.examples/exim/mailwatch-exim.sh

+/etc/init.d/exim4 stop
+
+cp -f "$DIR/etc/default/exim4" /etc/default/exim4
+cp -R "$DIR"/etc/exim4/* /etc/exim4/


Remove cp -R "$DIR"/etc/exim4/* /etc/exim4/

Should be:

cp -f "$DIR"/etc/exim4/mailscanner_acldefs /etc/exim4/. cp -f "$DIR"/etc/exim4/hubbed_hosts /etc/exim4/. cp -f "$DIR"/etc/exim4/relay_domains /etc/exim4/. cp -f "$DIR"/etc/exim4/conf.d/main/00_mailscanner_listmacrosdefs /etc/exim4/conf.d/main/. cp -f "$DIR"/etc/exim4/conf.d/main/01_mailscanner_config /etc/exim4/conf.d/main/.

And to simplify again, remove all these not essential files:

host_local_deny_exceptions local_host_blacklist local_rcpt_callout local_sender_blacklist local_sender_callout sender_local_deny_exceptions

Should be over now.

stefaweb · 2017-02-12T20:14:23Z

setup.examples/exim/mailwatch-exim.sh

+chown -R root:root /etc/exim4
+chmod -R 644 /etc/exim4
+chmod 755 /etc/exim4/conf.d/
+chmod 755 /etc/exim4/eximconfig/


Delete chmod 755 /etc/exim4/eximconfig/

stefaweb · 2017-02-12T21:46:21Z

setup.sh

+cp "$InstallFilesFolder"/MailScanner_perl_scripts/* /etc/MailScanner/custom/
+
+logprint "Restart mailscanner service"
+/etc/init.d/mailscanner restart


Add before restart:

check if run_mailscanner=1 in /etc/MailScanner/defaults, if not add it

If mailscanner is installed by the script at the end the user gets a message that he has to configure needed settings in mailscanner.conf and the defaults file. And because the user should at least look at mailscanner configuration he should set this himself I think

ok, I understand.

stefaweb · 2017-02-13T07:20:18Z

setup.examples/exim/etc/MailScanner/conf.d/mailwatch.conf

@@ -0,0 +1,29 @@
+# Example config for exim  /etc/MailScanner/conf.d/mailwatch.conf


%org-name% and all occurrence missing.

In fact, I'm wrong to try to put in /etc/MailScanner/conf.d/mailwatch.conf "personal" informations.

We just need to have in mailwatch.conf the essential values needed by MailWatch and say to the user to define another file as /etc/MailScanner/conf.d/server.conf where he will put is own personal informations.

If we do this, may be this is not needed in mailwatch.conf:

Max Unscanned Messages Per Scan = 50 Max Unsafe Messages Per Scan = 50 Max Normal Queue Size = 2000 Deliver Unparsable TNEF = yes Find UU-Encoded Files = yes Max Children = 10

To check.

I tried to split in 2 files in conf.d. Work fine.

Clean up to be as postfix version (same variable order).

# Example config for Exim /etc/MailScanner/conf.d/mailwatch.conf Run As User = Debian-exim Run As Group = Debian-exim MTA = exim Incoming Work User = Debian-exim Incoming Work Group = mtagroup Incoming Work Permissions = 0660 Detailed Spam Report = yes Quarantine Whole Message = yes Quarantine Whole Messages As Queue Files = no Include Scores In SpamAssassin Report = yes Quarantine User = Debian-exim Quarantine Group = mtagroup Quarantine Permissions = 0644 Always Looked Up Last = &MailWatchLogging Is Definitely Not Spam = &SQLWhitelist Is Definitely Spam = &SQLBlacklist Incoming Queue Dir = /var/spool/exim4/input Outgoing Queue Dir = /var/spool/exim4_outgoing/input Sendmail = /usr/sbin/exim4 Sendmail2 = /usr/sbin/exim4 -DOUTGOING SpamAssassin Local State Dir = /var/lib/spamassassin

asuweb · 2017-02-13T10:31:48Z

setup.examples/apache/etc/apache2/conf-enabled/mailwatch.conf

@@ -0,0 +1,5 @@
+# Example config for apache /etc/apache2/conf-enabled/mailwatch.conf


The path for RH based systems is:

/etc/httpd/conf.d/

asuweb · 2017-02-13T10:33:01Z

setup.examples/apache/mailwatch-apache.sh

+  apacheBin="httpd"
+fi
+if [ -z $("$apacheBin" -v | grep "Apache/2.4") ]
+    sed -i -e "s/ALLGRANTED/Require all granted/" "$DIR/etc/apache2/conf-available/mailwatch.conf"


need to pass OS specific directories (/etc/httpd/conf.d/ for RH based systems)

asuweb · 2017-02-13T10:33:23Z

setup.examples/apache/mailwatch-apache.sh

+    sed -i -e "s/ALLGRANTED/Order allow,deny\n  Allow from all/" "$DIR/etc/apache2/conf-available/mailwatch.conf"
+fi
+# a2enconf mailwatch.conf
+ln -r -s /etc/apache2/conf-enabled/mailwatch.conf /etc/apache2/conf-available/mailwatch.conf


No symbolic links required for RH

asuweb · 2017-02-13T10:34:23Z

setup.examples/apache/mailwatch-apache.sh

+sed -i -e "s/WEBFOLDER/$WebFolder/" "$DIR/etc/apache2/conf-enabled/mailwatch.conf"
+cp "$DIR/etc/apache2/conf-enabled/mailwatch.conf" /etc/apache2/conf-enabled/mailwatch.conf
+
+a2enmod ssl


Debian specific, no "a2" commands on RH

asuweb · 2017-02-13T10:34:40Z

setup.examples/apache/mailwatch-apache.sh

+cp "$DIR/etc/apache2/conf-enabled/mailwatch.conf" /etc/apache2/conf-enabled/mailwatch.conf
+
+a2enmod ssl
+service apache2 reload


service httpd reload for RH

asuweb · 2017-02-13T10:44:59Z

setup.examples/exim/etc/exim4/conf.d/main/01_mailscanner_config

@@ -0,0 +1,16 @@
+# Config for MailScanner Gateway


No conf.d on RH for exim

asuweb · 2017-02-13T10:45:32Z

setup.examples/exim/mailwatch-exim.sh

+DIR="$( cd "$( dirname "${BASH_SOURCE[0]}" )" && pwd )"
+Webuser="$1"
+
+service exim4 stop


service exim stop for RH

Probably better if this is separated as not compatible with RH - probably better to use separate exim setup script for RH if we decide we want it.

Probably better if this is separated as not compatible with RH - probably better to use separate exim setup script for RH if we decide we want it.

Not only for exim, for all. rpm and deb distributions are too differents.

asuweb · 2017-02-13T10:48:30Z

setup.examples/postfix/mailwatch-postfix.sh

+#!/bin/bash
+# Configuration script for mailwatch with postfix
+DIR="$( cd "$( dirname "${BASH_SOURCE[0]}" )" && pwd )"
+


This will work on RH systems

asuweb · 2017-02-13T11:05:26Z

setup.sh

+#copy web files
+logprint "Moving MailWatch web files to new folder and setting permissions"
+mv "$InstallFilesFolder/mailscanner/" $WebFolder
+chown root:mtagroup $WebFolder/images


need to check that mtagroup exists before we run the chown - it exists by default in centos 7.

Doesn't appear to exist by default in in debian 8, centos 6, Ubuntu 14.04 / 16.04

Will be create if not existant but I think mailscanner setup would do this too

Yes, you are correct, mailscanner install creates the group :)

asuweb · 2017-02-13T11:14:10Z

setup.sh

+    fi
+fi
+
+read -p "MailWatch requires the php packages php5 php5-gd and php5-mysqlnd. Do you want to install them if missing?(y/n)[y]: " installPhp


Should probably check is PHP is already installed, and what version.

On debian based systems the below will install php5 regardless of any other versions of php.

On RH systems, only 1 version of PHP can be installed by yum - and packages are defined as php php-gd etc default version is v5.

stefaweb · 2017-02-13T13:28:32Z

If useful, I propose some ideas for the hierarchy and scripts for rpm and deb based distributions. May be complex but can manage all cases. Its modular and easy to maintain.

Bash script can be called as this (example with exim):

exim.sh (--help, without param do nothing)
exim.sh -- create (first clean install)
exim.sh --upgrade (existing install)

We can add more -- parameters as --db, --webroot, --debian, --ubuntu, and others.

We have a branch/directory only when we have a "template" to place inside it.

mailwatch/
├── setup
│   ├── deb
│   │   ├── apache.sh
│   │   ├── apache2
│   │   │   └── conf-available
│   │   │       └── mailwatch.conf
│   │   ├── cron_crontab.sh
│   │   ├── exim
│   │   │   └── etc
│   │   │       ├── default
│   │   │       │   └── exim
│   │   │       └── exim
│   │   │           ├── conf.d
│   │   │           │   └── main
│   │   │           │       ├── 00_mailscanner_listmacrosdefs
│   │   │           │       └── 01_mailscanner_config
│   │   │           ├── hubbed_hosts
│   │   │           ├── mailscanner_acldefs
│   │   │           └── relay_domains
│   │   ├── exim.sh
│   │   ├── mailscanner
│   │   │   └── etc
│   │   │       └── MailScanner
│   │   │           └── conf.d
│   │   │               └── mailwatch.conf
│   │   ├── mailscanner.sh
│   │   ├── postfix
│   │   │   └── etc
│   │   │       └── postfix
│   │   │           └── header_checks
│   │   └── postfix.sh
│   └── rpm
│       ├── apache
│       │   └── conf.d
│       │       └── mailwatch.conf
│       ├── apache.sh
│       ├── cron_crontab.sh
│       ├── exim
│       │   └── etc
│       │       └── exim
│       │           └── ?
│       ├── exim.sh
│       ├── mailscanner
│       │   └── etc
│       │       └── MailScanner
│       │           └── conf.d
│       │               └── mailwatch.conf
│       ├── mailscanner.sh
│       └── postfix
│           └── etc
│               └── postfix
│                   └── header_checks
└── setup.sh

mailwatchV2.zip

And others branches if some missing.

If you like, I can complete with the 'template" files inside the directories.

Skywalker-11 · 2017-02-13T15:38:03Z

@stefaweb the downside on that is that large parts are equal on deb and rpm and when doing maintenance you always have to check two files if both need the changes

stefaweb · 2017-02-13T15:49:34Z

@Skywalker-11

No problem. I propose. ;)

And you have a tree for free!

stefaweb · 2017-02-13T15:50:00Z

Seems @endelwar is back!

endelwar · 2017-02-13T19:18:07Z

Good work guys!
I've created a new repository https://github.com/mailwatch/mailwatch-install-script where you can work on this.
I prefer to keep this work separated from MailWatch code, also look out for @shawniverson advices, he is maintaining E.F.A. (https://efa-project.org/) and known A LOT about this kind of automatic setups.

stefaweb · 2017-02-14T09:01:28Z

Is it possible to have a "debug simulation" feature?

We see "action", but nothing is done...

asuweb · 2017-02-14T09:04:00Z

@Skywalker-11 - can you push this branch to the new install repo please?

Skywalker-11 · 2017-02-14T10:09:12Z

pr is now in that develop branch

Skywalker-11 · 2017-02-14T10:15:25Z

@endelwar is it on purpose that we have GPL-3 in that new repo and GPL-2 here?

Install script for full install of mailwatch including all dependenci…

fc53956

…es (apache, mariadb, postfix) on debian. nginx, sendmail, exim and other os still to be done (fixes #453 partly)

Skywalker-11 and others added 2 commits February 11, 2017 12:34

introcuded more checks from for web, sql and mta, exim config for mai…

93b7035

…lscanner

fixes syntax errors

a3e89eb

Skywalker-11 added 2 commits February 11, 2017 13:50

move configs to extra files

e57d2df

added exim config files

e02ca01

stefaweb reviewed Feb 11, 2017

View reviewed changes

refactoring

84ddb65

stefaweb approved these changes Feb 11, 2017

View reviewed changes

fix typo

088faef

remove unnecessary exim files

b78bb92

Skywalker-11 added 2 commits February 11, 2017 16:13

more adjustments for exim

320bf8f

add support for apache2.2

1e90d3a

stefaweb reviewed Feb 11, 2017

View reviewed changes

asuweb requested changes Feb 11, 2017

View reviewed changes

more adjustments

560ce20

stefaweb reviewed Feb 12, 2017

View reviewed changes

Skywalker-11 added 2 commits February 12, 2017 15:11

more adjustments for exim

8915a90

fix mailwatch web folder

81f5d98

stefaweb reviewed Feb 12, 2017

View reviewed changes

more exim

c5424a3

stefaweb reviewed Feb 12, 2017

View reviewed changes

stefaweb reviewed Feb 13, 2017

View reviewed changes

more exim

306ad57

asuweb reviewed Feb 13, 2017

View reviewed changes

Skywalker-11 added 2 commits February 13, 2017 13:09

fix apache configuration

d7515b4

rh user for exim, create mtagroup, typos in exim setup

0ca5be0

Skywalker-11 added 2 commits February 13, 2017 16:32

later creation of mtagroup; exim spool dir

a00f3ed

fix typo

0e26262

fix syntax error

78ae1e1

Skywalker-11 mentioned this pull request Feb 14, 2017

TODO mailwatch/mailwatch-install-script#2

Open

30 tasks

Skywalker-11 closed this Feb 14, 2017

Skywalker-11 deleted the feature/installScript branch March 18, 2017 11:52

		@@ -0,0 +1,29 @@
		# Example config for exim /etc/MailScanner/conf.d/mailwatch.conf

		@@ -0,0 +1,5 @@
		# Example config for apache /etc/apache2/conf-enabled/mailwatch.conf

Install script for full install of mailwatch including all dependencies #512

Install script for full install of mailwatch including all dependencies #512

Conversation

Skywalker-11 commented Feb 11, 2017 • edited Loading

asuweb commented Feb 11, 2017

stefaweb commented Feb 11, 2017

asuweb commented Feb 11, 2017 • edited Loading

stefaweb commented Feb 11, 2017 • edited Loading

stefaweb commented Feb 11, 2017

asuweb commented Feb 11, 2017

Skywalker-11 commented Feb 11, 2017 • edited Loading

stefaweb commented Feb 11, 2017 • edited Loading

stefaweb commented Feb 11, 2017 • edited Loading

Skywalker-11 commented Feb 11, 2017

stefaweb commented Feb 11, 2017

stefaweb commented Feb 11, 2017 • edited Loading

stefaweb left a comment • edited Loading

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

stefaweb commented Feb 11, 2017 • edited Loading

stefaweb commented Feb 11, 2017 • edited Loading

stefaweb left a comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

stefaweb Feb 12, 2017 • edited Loading

Choose a reason for hiding this comment

stefaweb Feb 12, 2017 • edited Loading

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

stefaweb Feb 12, 2017 • edited Loading

Choose a reason for hiding this comment

Choose a reason for hiding this comment

stefaweb Feb 12, 2017 • edited Loading

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

stefaweb Feb 12, 2017 • edited Loading

Choose a reason for hiding this comment

stefaweb commented Feb 12, 2017 • edited Loading

Choose a reason for hiding this comment

shawniverson commented Feb 12, 2017

stefaweb Feb 12, 2017 • edited Loading

Choose a reason for hiding this comment

Choose a reason for hiding this comment

stefaweb Feb 12, 2017 • edited Loading

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Skywalker-11 commented Feb 11, 2017 •

edited

Loading

asuweb commented Feb 11, 2017 •

edited

Loading

stefaweb commented Feb 11, 2017 •

edited

Loading

Skywalker-11 commented Feb 11, 2017 •

edited

Loading

stefaweb commented Feb 11, 2017 •

edited

Loading

stefaweb commented Feb 11, 2017 •

edited

Loading

stefaweb commented Feb 11, 2017 •

edited

Loading

stefaweb left a comment •

edited

Loading

stefaweb commented Feb 11, 2017 •

edited

Loading

stefaweb commented Feb 11, 2017 •

edited

Loading

stefaweb Feb 12, 2017 •

edited

Loading

stefaweb Feb 12, 2017 •

edited

Loading

stefaweb Feb 12, 2017 •

edited

Loading

stefaweb Feb 12, 2017 •

edited

Loading

stefaweb Feb 12, 2017 •

edited

Loading

stefaweb commented Feb 12, 2017 •

edited

Loading

stefaweb Feb 12, 2017 •

edited

Loading

stefaweb Feb 12, 2017 •

edited

Loading

stefaweb commented Feb 12, 2017 •

edited

Loading

stefaweb Feb 12, 2017 •

edited

Loading