Zimbra Installation

[francis]

Installation # Install Perl yum install perl # Disable Postfix systemctl stop postfix systemctl disable postfix.service # File /etc/hosts xx.xx.xx.xx mailserver1.domain.com # Download source (please use updated source, not this example) wget https://files.zimbra.com/downloads/8.7.4_GA/zcs-8.7.4_GA_1730.RHEL7_64.20170227060845.tgz # Ports: https://wiki.zimbra.com/wiki/Ports # Whitelist my IP firewall-cmd --zone=trusted --add-source=xx.xx.xx.xx/32 --permanent firewall-cmd --reload # Whitelist WHMCS (if you use it) firewall-cmd --permanent --zone=public --add-rich-rule='rule family="ipv4" source address="xx.xx.xx.xx/32" port protocol="tcp" port="7071" accept' firewall-cmd --reload # Ports Opening firewall-cmd --zone=public --add-port=443/tcp --permanent firewall-cmd --zone=public --add-port=25/tcp --permanent firewall-cmd --zone=public --add-port=465/tcp --permanent firewall-cmd --zone=public --add-port=993/tcp --permanent firewall-cmd --zone=public --add-port=995/tcp --permanent firewall-cmd --reload # Let's Encrypt installation: https://wiki.zimbra.com/wiki/Installing_a_LetsEncrypt_SSL_Certificate

Usage # Flush cache sudo -u zimbra /opt/zimbra/bin/zmprov flushCache all # List the quotas sudo -u zimbra /opt/zimbra/bin/zmprov getQuotaUsage mx1.domain.com # Usage of DKIM Configuring for DKIM Signing - Zimbra :: Tech Center wiki.zimbra.com

SSL Installation sudo -u zimbra /opt/zimbra/bin/zmproxyctl stop sudo -u zimbra /opt/zimbra/bin/zmmailboxdctl stop cd /root/letsencrypt/ ./letsencrypt-auto certonly --standalone -d mailserver1.domain.com -d webmail.domain.com -d mx1.domain.com cd /etc/letsencrypt/live/mailserver1.domain.com-0001 cp -a /opt/zimbra/ssl/zimbra /opt/zimbra/ssl/zimbra.$(date "+%Y%m%d") cp * /opt/zimbra/ssl/letsencrypt/ chown zimbra:zimbra /opt/zimbra/ssl/letsencrypt/* cd /opt/zimbra/ssl/letsencrypt/ add this after chain.pem: -----BEGIN CERTIFICATE----- MIIDSjCCAjKgAwIBAgIQRK+wgNajJ7qJMDmGLvhAazANBgkqhkiG9w0BAQUFADA/ MSQwIgYDVQQKExtEaWdpdGFsIFNpZ25hdHVyZSBUcnVzdCBDby4xFzAVBgNVBAMT ... ... Ob8VZRzI9neWagqNdwvYkQsEjgfbKbYK7p2CNTUQ -----END CERTIFICATE----- sudo -u zimbra /opt/zimbra/bin/zmcertmgr verifycrt comm privkey.pem cert.pem chain.pem cp /opt/zimbra/ssl/letsencrypt/privkey.pem /opt/zimbra/ssl/zimbra/commercial/commercial.key sudo -u zimbra /opt/zimbra/bin/zmcertmgr deploycrt comm cert.pem chain.pem sudo -u zimbra /opt/zimbra/bin/zmcontrol restart