Dev {Tricks}

You are here: Home / Archives for Server and Hosting / Mail Server Solusion / iRedMain

by

Move files in the Linux terminal

The mv command moves file(s) from one location to another.

To move a file from one directory to another with mv, remember the syntax below

mv <source> <destination>

For example,

mv example.zip /home

Check whether, it moves example.zip

ls /home

Rename the file as you move it

mv example.zip /home/newexample.zip

Rename a file without moving it to another location

mv example.zip renameexample.zip

Moving a directory

mv exampledir /home

Moving a file safely

mv --interactive example.zip /home

This will ask

mv: overwrite '/home/example.zip'?

If you do not want to manually intervene, use –no-clobber or -n instead.

mv --no-clobber example.zip /home

 

 

by

iRedmail/nginx adding website to home server

Two easy steps

  1. Just add a new config with the full “server {}” block in /etc/nginx/sites-available/
    For example, /etc/nginx/sites-available/gene.jinabs.com.conf

    server {
  listen 443;
  listen [::]:443;

    root /var/www/gene.jinabs.com/html;
    index index.html index.htm index.nginx-debian.html;

    server_name gene.jinabs.com www.gene.jinabs.com;

    location / {
    try_files $uri $uri/ =404;
    }
}
  2. Create symbol link for gene.jinabs.com and restart/reload Nginx as follows. 
    ln -s /etc/nginx/sites-available/gene.jinabs.com.conf /etc/nginx/sites-enabled/
nginx -t
systemctl restart nginx

That’s it.

by

Unblock iRedMail IP

Find out the banned IP.

vi /var/log/fail2ban.log

Unblock the IP

fail2ban-client set roundcube unbanip 123.200.16.218
fail2ban-client set recidive unbanip 123.200.16.218
fail2ban-client set postfix unbanip 123.200.16.218
fail2ban-client set dovecot unbanip 123.200.16.218
fail2ban-client set pregreet unbanip 123.200.16.218

That’s All!

by

Fail2Ban on iRedMail

  • How To Protect SSH with Fail2Ban on Debian 11

Check whether installed.

systemctl status fail2ban

Installed, but fail2ban not active or running

systemctl start fail2ban
systemctl enable fail2ban

To fail2ban error fix

fail2ban-client start

Installing Fail2ban, if not installed

sudo apt update
sudo apt install fail2ban

Check installation status

systemctl status fail2ban.service

Configuring Fail2ban

Configuration files of fail2ban service is in the /etc/fail2ban directory. There is a file with defaults called jail.conf. In this tutorial, you’ll create jail.local by copying jail.conf

cd /etc/fail2ban
sudo cp jail.conf jail.local

Now you can configure as per requirements

sudo vi jail.local

You can set bantime, findtime, maxretry and you can set destemail to receive email alert.

Individual Jail Settings

vi /etc/fail2ban/jail.local

By default, the SSH service is enabled and all others are disabled.

enabled = true

After configuring all restart

sudo systemctl restart fail2ban

Sample jail.local

#
# The fail2ban local definition file for the default settings.
#

[DEFAULT]
# Destination email for action that send you an email
destemail = hostbriz@gmail.com

# Sender email. Warning: not all actions take this into account. Make sure to test if you rely on this
sender = fail2ban@imail.hostbriz.com

# Default action. Will block user and send you an email with whois content and log lines.
action = %(action_mwl)s

# ignoreip can be a list of IP addresses, CIDR masks, or DNs hosts. Fail2ban
# # will not ban a host which matches an address in this list.
ignoreip = 127.0.0.1/8 ::1/128 27.147.130.62 123.200.16.218 203.4.187.252 157.119.236.11

# configure nftables
banaction = nftables-multiport
chain = input

# regular banning
bantime = 24h
findtime = 600
maxretry = 5

# "bantime.increment" allows to use database for searching of previously banned ip's to increase a
# default ban time using special formula, default it is banTime * 1, 2, 4, 8, 16, 32...
bantime.increment = true

# "bantime.rndtime" is the max number of seconds using for mixing with random time
# to prevent "clever" botnets calculate exact time IP can be unbanned again:
bantime.rndtime = 30m

# "bantime.maxtime" is the max number of seconds using the ban time can reach (don't grows further)
bantime.maxtime = 60d

# "bantime.factor" is a coefficient to calculate exponent growing of the formula or common multiplier,
# default value of factor is 1 and with default value of formula, the ban time
# grows by 1, 2, 4, 8, 16 ...
bantime.factor = 2

# purge database entries after
dbpurgeage = 30d

[sshd]
enabled = true
port = ssh
filter = sshd
logpath = /var/log/auth.log
maxretry = 6
mode = aggressive

[postfix]
enabled = true
port = smtp,ssmtp
filter = postfix
logpath = /var/log/mail.log
ignoreip = 127.0.0.1/8 ::1/128 91.229.0.0/24 27.147.130.62 123.200.16.218 203.4.187.252 157.119.236.11

 

 

by

Request a free cert from Let’s Encrypt

  • Secure iRedMail Server with Let’s Encrypt SSL Certificate

Before requesting a cert

The full hostname of your mail server.

hostname -f

Make sure you have correct DNS record for the host names

To check the DNS record, you can use dig command like below:

dig +short -t a mail.domainname.com

It should return the (public) IP address of your server.

Request a free cert from Let’s Encrypt

Check cert status

certbot certificates

If certbot not installed Install certbot tool that will be used to obtain a Let’s Encrypt SSL certificate or follow Let’s Encrypt official tutorial to install required certbot package: https://certbot.eff.org. it’s used to request cert.