2023-07

1.Obtaining a certificate for the mail server Obtain a certificate for the mail server to convert the mail server to SSL/TLS. Use the certbot that was used when the web server was converted to SSL. Stop the web server and execute the following command 2.2 procmail Install Mail is sorted by procmail. 2.3 cyrus-sasl2 , cyrus-sasl2-saslauthd Install Use SASL for SMTP authentication; install Cyrus SASL2 library 3. Postfix Install 3.1 Install 4. Dovecot Install 4.1 Install 5.Create user mail directory ①Create mail directory for existing users (existing user is assumed to be huong)

1. FTP Server(Vsftpd) 1.1 advance preparation ①Private Key C...

1. Apache2 1.1 Install 2. MySQL Install Install MySQL before installing PHP 3. apache24 - PHP 8.0 3.1 PHP Install

Initial setting (Update binaries, Packages and Ports Collection) After installing FreeBSD, we will start building the server, but it is difficult to work on the console screen, so we will change the SSH connection settings for now in order to operate the server from Windows using TeraTerm or other software. Enter the following command on the FreeBSD console screen # vi /etc/ssh/sshd_config Line 61. #PasswordAuthentication no →　PasswordAuthentication yes Make the changes and reflect the settings with the following command # service sshd restart Now you can connect via SSH from TeraTerm on Windows (see the default settings for other operating systems for settings in TeraTerm).

1. Vim Install Install Vim, which you are familiar with as an editor, as follows 2. SSH Connection Security Measures 2.1 SSH port changed, root user login disabled 3. Firewall Settings FreeBSD has the following firewalls ・pf ・ipfw ・ipf In this case, we will use ipfw to configure the firewall。 4. NTP Server Settings 4.1 Rewrite the referenced NTP server in /etc/ntp.conf. Add an appropriate server in Japan.

1.Web server (Apache) SSL conversion The ports can be further updated with FreeBSD's periodic job settings. Install certbot via pkg, and include a plugin for apache to update in webroot mode. 1.1 Installing the Certbot tool for Let's Encrypt Run the following command to install the Certbot package and the Apache HTTP plug-in 2. Webmin Install Webmin is a web browser-based tool for configuring Unix-like operating systems (OS) such as Linux. It allows users to make numerous changes to internal OS settings such as user and disk usage limits, services, configuration files, etc., and to modify and control many open source applications such as Apache, PHP, MySQL, and others. Webmin is built primarily in Perl and runs as its own process and web server. By default, it communicates on TCP port 10000.