Zimbra on CentOS

步驟開始

chkconfig sendmail off
service sendmail stop
service zimbra stop
service zimbra start
service zimbra status 

service sendmail stop
yum remove sendmail 

yum install sysstat.x86_64 perl.x86_64 sudo.x86_64 sqlite.x86_64

安裝 ZCS

下載 ZCS：http://www.zimbra.com/downloads/os-downloads.html

cd /usr/src
wget http://files2.zimbra.com/downloads/7.1.4_GA/zcs-7.1.4_GA_2555.RHEL5_64.20120105094627.tgz
tar xzf zcs-7.1.4_GA_2555.RHEL5_64.20120105094627.tgz
cd zcs-7.1.4_GA_2555.RHEL5_64.20120105094627
./install.sh --platform-override

PS: 安裝程式會檢查系統是否為 RHEL，為了要使 CentOS 也能安裝，必須加上 --platform-override。

安裝開始
PS: 如果項目未輸入就是維持預設值。

Do you agree with the terms of the software license agreement? [N]y

Select the packages to install
Install zimbra-ldap [Y]
Install zimbra-logger [Y]
Install zimbra-mta [Y]
Install zimbra-snmp [Y]
Install zimbra-store [Y]
Install zimbra-apache [Y]
Install zimbra-spell [Y]
Install zimbra-memcached [N]
Install zimbra-proxy [N]

You appear to be installing packages on a platform different
than the platform for which they were built.

This platform is CentOS5_64
Packages found: RHEL5_64
This may or may not work.

Using packages for a platform in which they were not designed for
may result in an installation that is NOT usable. Your support
options may be limited if you choose to continue.

Install anyway? [N]y

The system will be modified.  Continue? [N]y

等待安裝程序完成。

設定 domain name

DNS ERROR resolving MX for mail.osslab.co.cc
It is suggested that the domain name have an MX record configured in DNS
Change domain name? [Yes]

Create domain: [mail.osslab.co.cc] osslab.co.cc

Main menu

   1) Common Configuration:
   2) zimbra-ldap:                             Enabled
   3) zimbra-store:                            Enabled
        +Create Admin User:                    yes
        +Admin user to create:                 admin@osslab.co.cc
******* +Admin Password                        UNSET
        +Anti-virus quarantine user:           virus-quarantine.twwwqvc4a@osslab.co.cc
        +Enable automated spam training:       yes
        +Spam training user:                   spam.vhxewghl@osslab.co.cc
        +Non-spam(Ham) training user:          ham.l3r6hp9ro@osslab.co.cc
        +SMTP host:                            mail.osslab.co.cc
        +Web server HTTP port:                 80
        +Web server HTTPS port:                443
        +Web server mode:                      http
        +IMAP server port:                     143
        +IMAP server SSL port:                 993
        +POP server port:                      110
        +POP server SSL port:                  995
        +Use spell check server:               yes
        +Spell server URL:                     http://mail.osslab.co.cc:7780/aspell.php
        +Configure for use with mail proxy:    FALSE
        +Configure for use with web proxy:     FALSE
        +Enable version update checks:         TRUE
        +Enable version update notifications:  TRUE
        +Version update notification email:    admin@osslab.co.cc
        +Version update source email:          admin@osslab.co.cc

   4) zimbra-mta:                              Enabled
   5) zimbra-snmp:                             Enabled
   6) zimbra-logger:                           Enabled
   7) zimbra-spell:                            Enabled
   8) Default Class of Service Configuration:
   r) Start servers after configuration        yes
   s) Save config to file
   x) Expand menu
   q) Quit

Address unconfigured (**) items  (? - help)

• 輸入 3 > 4 設定管理者密碼
• 輸入 r 回主選單
• 輸入 a 套用新設定

...
...

*** CONFIGURATION COMPLETE - press 'a' to apply
Select from menu, or press 'a' to apply config (? - help)a <輸入a 套用新設定>

Save configuration data to a file? [Yes]

Save config in file: [/opt/zimbra/config.14984]

The system will be modified - continue? [No] y

等待安裝程序完成。

TIPs: 預設安裝會新增一個管理員帳號 admin 以及信箱，如果想換其他帳號，必須在安裝時就要作修改。

Notify Zimbra of your installation? [Yes] no

Notification skipped
Starting servers...done.
Installing common zimlets...
        com_zimbra_url...done.
        com_zimbra_adminversioncheck...done.
        com_zimbra_social...done.
        com_zimbra_cert_manager...done.
        com_zimbra_bulkprovision...done.
        com_zimbra_phone...done.
        com_zimbra_linkedin...done.
        com_zimbra_attachcontacts...done.
        com_zimbra_dnd...done.
        com_zimbra_email...done.
        com_zimbra_webex...done.
        com_zimbra_date...done.
        com_zimbra_srchhighlighter...done.
        com_zimbra_attachmail...done.
Finished installing common zimlets.
Restarting mailboxd...done.
Setting up zimbra crontab...done.


Moving /tmp/zmsetup.03212012-064803.log to /opt/zimbra/log


Configuration complete - press return to exit

設定防火牆 (如果需要時)

設定 iptables 規則
編輯 /etc/sysconfig/iptables

...
# enable zimbra ports
-A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 25 -j ACCEPT
-A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 80 -j ACCEPT
-A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 110 -j ACCEPT
-A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 143 -j ACCEPT
-A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 443 -j ACCEPT
-A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 465 -j ACCEPT
-A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 993 -j ACCEPT
-A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 995 -j ACCEPT
-A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 7071 -j ACCEPT
-A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 5480 -j ACCEPT
#
-A RH-Firewall-1-INPUT -j REJECT --reject-with icmp-host-prohibited
COMMIT

NOTE:

插入規則時，要注意順序的問題。

重啟 iptables

service iptables stop
service iptables start 

設定 SELinux

暫時關閉 iptables 及 SELinux
這是為了作網路除錯時用的

service iptables stop
setenforce 0 

登入介面

管理介面(Zimbra Admin Console)：https://123.123.123.123:7071/，admin / <自設的密碼>

用戶介面(Zimbra Web Client)：http://123.123.123.123/，admin / <同上>。

畫面預覽

Admin Console

Web Client

中文版

F.A.Q

以 root 執行
#/opt/zimbra/libexec/zmsyslogsetup
這會產生 /etc/rsyslog.conf 檔

cd /etc
mv syslog.conf syslog.conf.default
mv rsyslog.conf syslog.conf

# Use traditional timestamp format
$ActionFileDefaultTemplate RSYSLOG_TraditionalFileFormat

# Provides kernel logging support (previously done by rklogd)
$ModLoad imklog
# Provides support for local system logging (e.g. via logger command)
$ModLoad imuxsock

# Log all kernel messages to the console.
# Logging much else clutters up the screen.
#kern.*                                                 /dev/console

# Log anything (except mail) of level info or higher.
# Don't log private authentication messages!
*.info;authpriv.none;cron.none                /var/log/messages

# The authpriv file has restricted access.
authpriv.*                                              /var/log/secure

# Log all the mail messages in one place.
mail.*                                                  -/var/log/maillog


# Log cron stuff
cron.*                                                  /var/log/cron

# Everybody gets emergency messages
*.emerg                                                 *

# Save news errors of level crit and higher in a special file.
uucp,news.crit                                          /var/log/spooler

# Save boot messages also to boot.log
local7.*                                                /var/log/boot.log
local0.*                -/var/log/zimbra.log
local1.*                -/var/log/zimbra-stats.log
auth.*                  -/var/log/zimbra.log
mail.*                -/var/log/zimbra.log

service syslog restart
service zimbra restart