Set the proper ipv4 address.

  1. yum -y install nano

nano /etc/sysconfig/network-scripts/ifcfg-eth0

DEVICE=ens32
ONBOOT=yes
NM_CONTROLLED=NO
IPADDR=192.168.1.74
NETMASK=255.255.255.0
GATEWAY=192.168.1.1
DNS1=192.168.1.1
USERCTIL=no

service network restart

chkconfig network on

make sure you can ping google.com


nano /etc/sysconfig/selinux

Change SELINUX=enforcing » SELINUX=disabled


Killing firewalls time!

setenforce 0

systemctl stop firewalld
systemctl stop iptables
systemctl stop ip6tables
systemctl disable firewalld
systemctl disable iptables
systemctl disable ip6tables

OR setup ports you don't need to do both!.

firewall-cmd --zone=public --permanent --add-port=443/tcp 
firewall-cmd --zone=public --permanent --add-port=80/tcp 
firewall-cmd --zone=public --permanent --add-port=7071/tcp 
firewall-cmd --zone=public --permanent --add-port=25/tcp  
firewall-cmd --zone=public --permanent --add-port=110/tcp 
firewall-cmd --zone=public --permanent --add-port=143/tcp
firewall-cmd --zone=public --permanent --add-port=587/tcp
firewall-cmd --zone=public --permanent --add-port=993/tcp
firewall-cmd --zone=public --permanent --add-port=995/tcp
firewall-cmd --zone=public --permanent --add-port=587/tcp

firewall-cmd --reload

Time to set hosts

edit hosts file make it look like mine below.

nano /etc/hosts

127.0.0.1   localhost
192.168.XXX.XXX email.example.org email

Time to edit resolv.conf

edit resolv file make it look like mine below.

nano /etc/resolv.conf

search sshosting.org
nameserver 192.168.20.50
nameserver 192.168.20.1
nameserver 8.8.8.8

update hostnames

hostname=email.example.org

echo "HOSTNAME=email.example.org" >> /etc/sysconfig/network

Stop some items.

  • systemctl stop sendmail
  • systemctl stop postfix
  • systemctl disable sendmail
  • systemctl disable postfix

update the system

yum update


install pre prqes

yum -y install perl perl-core wget screen w3m elinks bind bind-utils unzip nmap sed nc sysstat libaio rsync telnet aspell nmap-ncat

edit named

nano /etc/named.conf

add any to the following listen-on port 53 { 127.0.0.1; }; |»| listen-on port 53 { 127.0.0.1;any; };

allow-query { localhost; }; |»| allow-query { localhost; any; };

then add the following line at the bottom.

zone "example.org" IN {
type master;
file "db.example.org";
allow-update {none; };
};

touch /var/named/db.example.org

chgrp named /var/named/db.example.org

nano /var/named/db.example.org

$TTL 1D
@       IN       SOA    NS1.sshosting.org. root.sshosting.org. (
                                        0       ;serial
                                        1       ;refresh
                                        1H      ;retry
                                        1W      ;expire
                                        3H)     ;minimum
@       IN      NS      ns1.sshosting.org.
@       IN      MX      0 email.sshosting.org.
ns1     IN      A       192.168.20.50
email   IN      A       192.168.20.50

systemctl restart named systemctl enable named


co /opt

https://www.zimbra.com/downloads/zimbra-collaboration/

wget https://files.zimbra.com/downloads/8.7.11_GA/zcs-8.7.11_GA_1854.RHEL7_64.20170531151956.tgz

tar xzvf [zcsfullfilename.tgz], to unpack the file.
cd [zcsfullfilename] to change to the correct directory.
./install.sh to begin the installation.

Extras

https://wiki.zimbra.com/wiki/Sending_mail_through_an_external_relay


Secure SSL zimbra server. https://wiki.zimbra.com/wiki/How_to_obtain_an_A%2B_in_the_Qualys_SSL_Labs_Security_Test