nuy

FreeBSDFreeBSD is UNIX-like open source OS software. In particular, its performance as a network operating system exceeds that of Linux-based systems, and it maintains stable performance even under high loads.FreeBSD is designed to be robust and sturdy with an emphasis on practicality, making it suitable for operating FTP, WWW, and e-mail servers for major companies and services.In this project, we will install FreeBSD 13.2, released on April 11, 2023, and build the server.FeaturesHigh-speed, high-performance multi-platform capable of withstanding high workloadsAdopted by many major companiesNetwork security measures can be applied by restricting accessCapable of operating small to large serversMore than 33,000 dedicated software applications from commercial to personal useInstall1.Download Installation ImageGo to the FreeBSD distribution site (https://www.freebsd.org/where/) and select amd64

Install ClamAV on FreeBSD 13 and link it with Amavis against Postfix.ClamAV is anti-virus software.We will proceed on the assumption that you have already implemented Postfix.Before proceeding, update the Ports Collection.

1.Obtaining a certificate for the mail serverObtain a certificate for the mail server to convert the mail server to SSL/TLS.Use the certbot that was used when the web server was converted to SSL.Stop the web server and execute the following command2.2 procmail InstallMail is sorted by procmail.2.3 cyrus-sasl2 , cyrus-sasl2-saslauthd InstallUse SASL for SMTP authentication; install Cyrus SASL2 library3. Postfix Install3.1 Install4. Dovecot Install4.1 Install5.Create user mail directory①Create mail directory for existing users (existing user is assumed to be huong)

1.Web server (Apache) SSL conversionThe ports can be further updated with FreeBSD's periodic job settings.Install certbot via pkg, and include a plugin for apache to update in webroot mode.1.1 Installing the Certbot tool for Let's EncryptRun the following command to install the Certbot package and the Apache HTTP plug-in2. Webmin InstallWebmin is a web browser-based tool for configuring Unix-like operating systems (OS) such as Linux. It allows users to make numerous changes to internal OS settings such as user and disk usage limits, services, configuration files, etc., and to modify and control many open source applications such as Apache, PHP, MySQL, and others.Webmin is built primarily in Perl and runs as its own process and web server. By default, it communicates on TCP port 10000.

1. FTP Server(Vsftpd)1.1 advance preparation①Private Key Cre...

1. Vim InstallInstall Vim, which you are familiar with as an editor, as follows2. SSH Connection Security Measures2.1 SSH port changed, root user login disabled3. Firewall SettingsFreeBSD has the following firewalls・pf・ipfw・ipfIn this case, we will use ipfw to configure the firewall。4. NTP Server Settings4.1 Rewrite the referenced NTP server in /etc/ntp.conf. Add an appropriate server in Japan.

Initial setting (Update binaries, Packages and Ports Collection)After installing FreeBSD, we will start building the server, but it is difficult to work on the console screen, so we will change the SSH connection settings for now in order to operate the server from Windows using TeraTerm or other software.Enter the following command on the FreeBSD console screen# vi /etc/ssh/sshd_configLine 61.#PasswordAuthentication no →　PasswordAuthentication yes Make the changes and reflect the settings with the following command# service sshd restartNow you can connect via SSH from TeraTerm on Windows (see the default settings for other operating systems for settings in TeraTerm).

Install ClamAV on FreeBSD 13 and link it with Amavis against Postfix.ClamAV is anti-virus software.We will proceed on the assumption that you have already implemented Postfix.Before proceeding, update the Ports Collection.2. AmavisInstall Amavis, which links ClamAV and Postfix3. Anti-Spam with SpamAssassin3.1 SpamAssassin InstallIf you did not select spamassassin as an option when you installed Amavis, install it as follows

1. Obtaining a certificate for the mail serverObtain a certificate for the mail server to convert the mail server to SSL/TLS.Use the certbot that was used when the web server was converted to SSL.Stop the web server and execute the following command

1. FreeBSD13.2 ; Web Server SSL、Webmin1.1 Installing the Certbot tool for Let's EncryptRun the following command to install the Certbot package# pkg install py39-certbot2. Webmin InstallWebmin is a web browser-based tool for configuring Unix-like operating systems (OS) such as Linux. It allows users to make numerous changes to internal OS settings such as user and disk usage limits, services, configuration files, etc., and to modify and control many open source applications such as Apache, PHP, MySQL, and others.Webmin is built primarily in Perl and runs as its own process and web server. By default, it communicates on TCP port 10000.

1. FTP Sever (Vsftpd)1.1 advance preparation①Private Key Creation2. File Server with SambaUse Samba to build a file server for Windows and Mac file sharing2.1 Samba Install# cd /usr/ports/net/samba413/# makeRemove the active directory relationships for ADS and AD_DC, as they will not be used this time.LDAP is also removed because account management is not done through LDAP.