The document provides instructions for installing and configuring a full-featured Linux server for hosting websites, email, and other services. It includes steps to install and configure an ISPConfig control panel along with associated software like Apache, PHP, MySQL, Postfix, Dovecot, PureFTPd, BIND, Roundcube webmail, and more. The overall process allows you to set up an full-fledged web hosting server on a Linux machine.

1. Install ISPConfig 3 With RoundCube Mail Server
2. Edit /etc/apt/sources.list And Update Your Linux Installation
Disable CD Rom
# nano /etc/apt/sources.list
# apt-get update
# apt-get upgrade
# reboot
3. Change the Default Shell
# dpkg-reconfigure dash
Use dash as the default system shell (/bin/sh)? <-- No
4. Disable AppArmor
# service apparmor stop
# update-rc.d -f apparmor remove
# apt-get remove apparmor apparmor-utils
5. Synchronize the System Clock
# apt-get -y install ntp ntpdate
6. Install Postfix, Dovecot, MariaDB, rkhunter and binutils
# service sendmail stop; update-rc.d -f sendmail remove
# apt-get install postfix postfix-mysql postfix-doc mariadb-client mariadb-server
openssl getmail4 rkhunter binutils dovecot-imapd dovecot-pop3d dovecot-mysql
dovecot-sieve dovecot-lmtpd sudo
General type of mail configuration: <-- Internet Site
System mail name: <-- server1.example.com

2. # nano /etc/postfix/master.cf
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
submission inet n - - - - smtpd
-o syslog_name=postfix/submission
-o smtpd_tls_security_level=encrypt
-o smtpd_sasl_auth_enable=yes
-o smtpd_client_restrictions=permit_sasl_authenticated,reject (NEW LINE)
# -o smtpd_reject_unlisted_recipient=no
# -o smtpd_client_restrictions=$mua_client_restrictions
# -o smtpd_helo_restrictions=$mua_helo_restrictions
# -o smtpd_sender_restrictions=$mua_sender_restrictions
# -o smtpd_recipient_restrictions=permit_sasl_authenticated,reject
# -o milter_macro_daemon_name=ORIGINATING
smtps inet n - - - - smtpd
-o syslog_name=postfix/smtps
-o smtpd_tls_wrappermode=yes
-o smtpd_sasl_auth_enable=yes
-o smtpd_client_restrictions=permit_sasl_authenticated,reject (NEW LINE)
# -o smtpd_reject_unlisted_recipient=no
# -o smtpd_client_restrictions=$mua_client_restrictions
# -o smtpd_helo_restrictions=$mua_helo_restrictions
# -o smtpd_sender_restrictions=$mua_sender_restrictions
# -o smtpd_recipient_restrictions=permit_sasl_authenticated,reject
# -o milter_macro_daemon_name=ORIGINATING
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
# service postfix restart
# nano /etc/mysql/mariadb.conf.d/50-server.cnf
#bind-address = 127.0.0.1
# mysql_secure_installation
Enter current password for root (enter for none): <-- press enter
Set root password? [Y/n] <-- y
New password: <-- Enter the new MariaDB root password here
Re-enter new password: <-- Repeat the password
Remove anonymous users? [Y/n] <-- y
Disallow root login remotely? [Y/n] <-- y
Reload privilege tables now? [Y/n] <-- y
# service mysql restart
# netstat -tap | grep mysql

3. 7. Install Amavisd-new, SpamAssassin, and Clamav
# apt-get install amavisd-new spamassassin clamav clamav-daemon zoo unzip
bzip2 arj nomarch lzop cabextract apt-listchanges libnet-ldap-perl libauthen-sasl-perl
clamav-docs daemon libio-string-perl libio-socket-ssl-perl libnet-ident-perl zip
libnet-dns-perl postgrey
# service spamassassin stop
# update-rc.d -f spamassassin remove
# nano /etc/clamav/clamd.conf
AllowSupplementaryGroups true
# freshclam
# service clamav-daemon start
7.1 Install Metronome XMPP Server (optional)
# apt-get install git lua5.1 liblua5.1-0-dev lua-filesystem libidn11-dev libssl-dev lua-zlib
lua-expat lua-event lua-bitop lua-socket lua-sec luarocks luarocks
# luarocks install lpc
# adduser --no-create-home --disabled-login --gecos 'Metronome' metronome
# cd /opt; git clone https://github.com/maranda/metronome.git metronome
# cd ./metronome; ./configure --ostype=debian --prefix=/usr
# make
# make install

4. 8. Install Apache, PHP, phpMyAdmin, FCGI, SuExec, Pear, and mcrypt
# apt-get install apache2 apache2-doc apache2-utils libapache2-mod-php php7.0
php7.0-common php7.0-gd php7.0-mysql php7.0-imap phpmyadmin php7.0-cli
php7.0-cgi libapache2-mod-fcgid apache2-suexec-pristine php-pear php-auth
php7.0-mcrypt mcrypt imagemagick libruby libapache2-mod-python php7.0-curl
php7.0-intl php7.0-pspell php7.0-recode php7.0-sqlite3 php7.0-tidy php7.0-xmlrpc
php7.0-xsl memcached php-memcache php-imagick php-gettext php7.0-zip
php7.0-mbstring
Web server to reconfigure automatically: <-- apache2
Configure database for phpmyadmin with dbconfig-common? <-- Yes
MySQL application password for phpmyadmin: <-- Press enter
# a2enmod suexec rewrite ssl actions include cgi
# a2enmod dav_fs dav auth_digest headers
# sudo nano /etc/apache2/conf-available/httpoxy.conf
<IfModule mod_headers.c>
RequestHeader unset Proxy early
</IfModule>
# a2enconf httpoxy
# service apache2 restart
# nano /etc/mime.types
#application/x-ruby rb
# service apache2 restart
8.1 PHP Opcode cache
# apt-get install php7.0-opcache php-apcu
# service apache2 restart
8.2 PHP-FPM
# apt-get install libapache2-mod-fastcgi php7.0-fpm
# a2enmod actions fastcgi alias
# service apache2 restart

5. 9. Install Let's Encrypt
# mkdir /opt/certbot
# cd /opt/certbot
# wget https://dl.eff.org/certbot-auto
# chmod a+x ./certbot-auto
# ./certbot-auto
No names were found in your configuration files. Etc... <-- No
10. Install Mailman
# apt-get install mailman
Languages to support: <-- en (English)
Missing site list <-- Ok
# newlist mailman
Enter the email of the person running the list: <-- admin email addressInitial
mailman password: <-- admin password for the mailman list
# nano /etc/aliases
## mailman mailing list
mailman: "|/var/lib/mailman/mail/mailman post mailman"
mailman-admin: "|/var/lib/mailman/mail/mailman admin mailman"
mailman-bounces: "|/var/lib/mailman/mail/mailman bounces mailman"
mailman-confirm: "|/var/lib/mailman/mail/mailman confirm mailman"
mailman-join: "|/var/lib/mailman/mail/mailman join mailman"
mailman-leave: "|/var/lib/mailman/mail/mailman leave mailman"
mailman-owner: "|/var/lib/mailman/mail/mailman owner mailman"
mailman-request: "|/var/lib/mailman/mail/mailman request mailman"
mailman-subscribe: "|/var/lib/mailman/mail/mailman subscribe mailman"
mailman-unsubscribe: "|/var/lib/mailman/mail/mailman unsubscribe mailman"
# newaliases
# service postfix restart
# ln -s /etc/mailman/apache.conf /etc/apache2/conf-available/mailman.conf
# service apache2 restart
# service mailman start

6. 11. Install PureFTPd and Quota
# apt-get install pure-ftpd-common pure-ftpd-mysql quota quotatool
# nano /etc/default/pure-ftpd-common
STANDALONE_OR_INETD=standalone
VIRTUALCHROOT=true
# echo 1 > /etc/pure-ftpd/conf/TLS
# mkdir -p /etc/ssl/private/
# openssl req -x509 -nodes -days 7300 -newkey rsa:2048 -keyout
/etc/ssl/private/pure-ftpd.pem -out /etc/ssl/private/pure-ftpd.pem
Country Name (2 letter code) [AU]: <-- Enter your Country Name
State or Province Name (full name) [Some-State]:<-- Enter your State or Province Name.
Locality Name (eg, city) []:<-- Enter your City.
Organization Name (eg, company) [Internet Widgits Pty Ltd]:<-- Enter your Organization Name
Organizational Unit Name (eg, section) []:<-- Enter your Organizational Unit Name
Common Name (eg, YOUR name) []:<-- Enter the Fully Qualified Domain Name of the system
Email Address []:<-- Enter your Email Address.
# chmod 600 /etc/ssl/private/pure-ftpd.pem
# service pure-ftpd-mysql restart
# nano /etc/fstab
/dev/mapper/server1--vg-root / ext4
errors=remount-ro,usrjquota=quota.user,grpjquota=quota.group,jqfmt=vfsv0 0 1
# mount -o remount /
# quotacheck -avugm
# quotaon -avug
12. Install BIND DNS Server
# apt-get install bind9 dnsutils haveged

7. 13. Install Vlogger, Webalizer, and AWstats
# apt-get install vlogger webalizer awstats geoip-database libclass-dbi-mysql-perl
# nano /etc/cron.d/awstats
#MAILTO=root
#*/10 * * * * www-data [ -x /usr/share/awstats/tools/update.sh ] && /usr/share/awstats/tools/update.sh
# Generate static reports:
#10 03 * * * www-data [ -x /usr/share/awstats/tools/buildstatic.sh ] && /usr/share/awstats/tools/buildstatic.sh
14. Install Jailkit
# apt-get install build-essential autoconf automake1.11 libtool flex bison debhelper
binutils
# cd /tmp
# wget http://olivier.sessink.nl/jailkit/jailkit-2.19.tar.gz
# tar xvfz jailkit-2.19.tar.gz
# cd jailkit-2.19
# ./debian/rules binary
# cd ..
# dpkg -i jailkit_2.19-1_*.deb
# rm -rf jailkit-2.19*

8. 15. Install fail2ban and UFW
# apt-get install fail2ban
# nano /etc/fail2ban/jail.local
[pureftpd]
enabled = true
port = ftp
filter = pureftpd
logpath = /var/log/syslog
maxretry = 3
[dovecot-pop3imap]
enabled = true
filter = dovecot-pop3imap
action = iptables-multiport[name=dovecot-pop3imap, port="pop3,pop3s,imap,imaps", protocol=tcp]
logpath = /var/log/mail.log
maxretry = 5
[postfix-sasl]
enabled = true
port = smtp
filter = postfix-sasl
logpath = /var/log/mail.log
maxretry = 3
# nano /etc/fail2ban/filter.d/pureftpd.conf
[Definition]
failregex = .*pure-ftpd: (.*@<HOST>) [WARNING] Authentication failed for user.*
ignoreregex =
# nano /etc/fail2ban/filter.d/dovecot-pop3imap.conf
[Definition]
failregex = (?: pop3-login|imap-login): .*(?:Authentication failure|Aborted login
(auth failed|Aborted login (tried to use disabled|Disconnected (auth failed|Aborted
login (d+ authentication attempts).*rip=(?P<host>S*),.*
ignoreregex =
# echo "ignoreregex =" >> /etc/fail2ban/filter.d/postfix-sasl.conf
# service fail2ban restart
# apt-get install ufw

9. 16. Install Roundcube Webmail
# apt-get install roundcube roundcube-core roundcube-mysql roundcube-plugins
roundcube-plugins-extra javascript-common libjs-jquery-mousewheel php-net-sieve
tinymce
Configure database for roundcube with dbconfig-common? <-- Yes
MySQL application password for roundcube: <-- Press enter
# nano /etc/apache2/conf-enabled/roundcube.conf
Alias /roundcube /var/lib/roundcube (Remove the # at front)
AddType application/x-httpd-php .php (right after the "<Directory
/var/lib/roundcube>" line)
# service apache2 restart
# nano /etc/roundcube/config.inc.php
$config['default_host'] = 'localhost';
17. Install ISPConfig 3
# cd /tmp
# wget -O ispconfig.tar.gz
https://git.ispconfig.org/ispconfig/ispconfig3/repository/archive.tar.gz?ref=stable-3.1
# tar xfz ispconfig.tar.gz
# cd ispconfig3*/install/
# php -q install.php
ENJOY ;)