Translations by Dmitriy Goroshko

#exec /sbin/shutdown -r now "Control-Alt-Delete pressed"

grub-md5-crypt

To open a port (ssh in this example):

Similarly, to close an opened port:

Using AppArmor

# Sample /etc/dhcpd.conf # (add your comments here) default-lease-time 600; max-lease-time 7200; option subnet-mask 255.255.255.0; option broadcast-address 192.168.1.255; option routers 192.168.1.254; option domain-name-servers 192.168.1.1, 192.168.1.2; option domain-name "mydomain.example"; subnet 192.168.1.0 netmask 255.255.255.0 { range 192.168.1.10 192.168.1.100; range 192.168.1.150 192.168.1.200; }

sudo apt-get install ntp

sudo apt-get install slapd ldap-utils

sudo dpkg-reconfigure slapd

sudo dpkg-reconfigure postfix

sudo /etc/init.d/postfix restart

telnet mail.example.com 25

Log Files

tail -f /var/log/mail.err

sudo postconf -e 'smtpd_tls_loglevel = 4'

sudo postconf -e 'debug_peer_list = problem.domain'

smtp unix - - - - - smtp -v

auth_debug=yes auth_debug_passwords=yes

sudo dpkg-reconfigure exim4-config

sudo update-exim4.conf

sudo /etc/init.d/exim4 start

sudo /usr/share/doc/exim4-base/examples/exim-gencert

MAIN_TLS_ENABLE = yes

plain_saslauthd_server: driver = plaintext public_name = PLAIN server_condition = ${if saslauthd{{$auth2}{$auth3}}{1}{0}} server_set_id = $auth2 server_prompts = : .ifndef AUTH_SERVER_ALLOW_NOTLS_PASSWORDS server_advertise_condition = ${if eq{$tls_cipher}{}{}{*}} .endif # login_saslauthd_server: driver = plaintext public_name = LOGIN server_prompts = "Username:: : Password::" # don't send system passwords over unencrypted connections server_condition = ${if saslauthd{{$auth1}{$auth2}}{1}{0}} server_set_id = $auth1 .ifndef AUTH_SERVER_ALLOW_NOTLS_PASSWORDS server_advertise_condition = ${if eq{$tls_cipher}{}{}{*}} .endif

sudo /etc/init.d/exim4 restart

sudo apt-get install sasl2-bin

START=yes

sudo adduser Debian-exim sasl

sudo /etc/init.d/dovecot restart

ssl_cert_file = /etc/ssl/certs/ssl-cert-snakeoil.pem ssl_key_file = /etc/ssl/private/ssl-cert-snakeoil.key ssl_disable = no disable_plaintext_auth = no

sudo apt-get install mailman

sudo cp /etc/mailman/apache.conf /etc/apache2/sites-available/mailman.conf

sudo a2ensite mailman.conf

sudo postconf -e 'relay_domains = lists.example.com'

sudo postconf -e 'transport_maps = hash:/etc/postfix/transport'

sudo postconf -e 'mailman_destination_recipient_limit = 1'

mailman unix - n n - - pipe flags=FR user=list argv=/usr/lib/mailman/bin/postfix-to-mailman.py ${nexthop} ${user}

sudo postmap -v /etc/postfix/transport

sudo /etc/init.d/mailman start

sudo /usr/sbin/newlist mailman

sudo apt-get install amavisd-new spamassassin clamav-daemon

sudo apt-get install pyzor razor

sudo /etc/init.d/spamassassin start

$final_spam_destiny = D_DISCARD;

sudo /etc/init.d/amavis restart

sudo postconf -e 'content_filter = smtp-amavis:[127.0.0.1]:10024'

smtp-amavis unix - - - - 2 smtp -o smtp_data_done_timeout=1200 -o smtp_send_xforward_command=yes -o disable_dns_lookups=yes -o max_use=20 127.0.0.1:10025 inet n - - - - smtpd -o content_filter= -o local_recipient_maps= -o relay_recipient_maps= -o smtpd_restriction_classes= -o smtpd_delay_reject=no -o smtpd_client_restrictions=permit_mynetworks,reject -o smtpd_helo_restrictions= -o smtpd_sender_restrictions= -o smtpd_recipient_restrictions=permit_mynetworks,reject -o smtpd_data_restrictions=reject_unauth_pipelining -o smtpd_end_of_data_restrictions= -o mynetworks=127.0.0.0/8 -o smtpd_error_sleep_time=0 -o smtpd_soft_error_limit=1001 -o smtpd_hard_error_limit=1000 -o smtpd_client_connection_count_limit=0 -o smtpd_client_connection_rate_limit=0 -o receive_override_options=no_header_body_checks,no_unknown_recipient_checks

-o content_filter= -o receive_override_options=no_header_body_checks

sudo bash backup.sh

sudo crontab -e