{"id":697,"date":"2018-11-29T06:13:05","date_gmt":"2018-11-29T06:13:05","guid":{"rendered":"http:\/\/acahya.web.id\/?p=697"},"modified":"2018-11-29T06:23:31","modified_gmt":"2018-11-29T06:23:31","slug":"the-perfect-server-centos-7-1-with-apache2-postfix-dovecot-pure-ftpd-bind-and-ispconfig-3","status":"publish","type":"post","link":"https:\/\/acahya.web.id\/?p=697","title":{"rendered":"The Perfect Server \u2013 CentOS 7.1 with Apache2, Postfix, Dovecot, Pure-FTPD, BIND and ISPConfig 3"},"content":{"rendered":"<p>1 Requirements<\/p>\n<p>Untuk membuat server Web dengan ISPConfig 3 kita memerlukan beberapa hal sebagai berikut<\/p>\n<p>Centos 7.1 minimal server system.<\/p>\n<p>Koneksi Internet yang cepat.<\/p>\n<p>Kali ini kita menggunakan Virtual Machine dari proxmox dan ketka kita boot dari ISO maka langkah pertama proses intalasi linux centos 7.1 ini adalah memilih bahasa yang akan gunakan. Pilih bahasa yang anda mengerti saya pilih Bahasa Inggris<\/p>\n<p><img data-recalc-dims=\"1\" decoding=\"async\" src=\"https:\/\/i0.wp.com\/acahya.web.id\/wp-content\/uploads\/2018\/11\/112918_0628_ThePerfectS1.png?w=1080\" alt=\"\" \/><\/p>\n<p>Selanjutnya terdapat menu untuk mengconfigurasi server seperti waktu dan tanggal, media instalas, pilihan paket server, konfigurasi jaringan dll<\/p>\n<p><img data-recalc-dims=\"1\" decoding=\"async\" src=\"https:\/\/i0.wp.com\/acahya.web.id\/wp-content\/uploads\/2018\/11\/112918_0628_ThePerfectS2.png?w=1080\" alt=\"\" \/><\/p>\n<p>Langkah pertama kita konfigurasi terlebih dahulu Localization dengan memilih DATE &amp; TIME kita pilih peta indonesia dengan cara mengklik peta wilayah Indonesia Bagian Barat (Western Indoesian Time) WIB. Atau sesuaikan dengan wilayah anda. Atau dengan cara klik menu region pilih Asia dan City pilh Jakarta.<\/p>\n<p><img data-recalc-dims=\"1\" decoding=\"async\" src=\"https:\/\/i0.wp.com\/acahya.web.id\/wp-content\/uploads\/2018\/11\/112918_0628_ThePerfectS3.png?w=1080\" alt=\"\" \/><\/p>\n<p>Selanjutnya kita masuk ke menu SYSTEM dengan memilih INSTALASION DESTINATION kemuddian muncul menu seperti dibawah lalu kita pilih hardisk dan pada bagian partitioning kita pilih Automaticali Configure Partitioning dan ceklist I would like to make additional space available. Jika selesai maka klik tombol DONE paling atas.<\/p>\n<p><img data-recalc-dims=\"1\" decoding=\"async\" src=\"https:\/\/i0.wp.com\/acahya.web.id\/wp-content\/uploads\/2018\/11\/112918_0628_ThePerfectS4.png?w=1080\" alt=\"\" \/><\/p>\n<p>Kemudian muncul menu untuk Reclaim Disk Space pilih reclaim space, atau jika pernah ada partisi bekas instalasi sebelumnya anda dapat mengklik tombol delete All dan reclaim.<\/p>\n<p><img data-recalc-dims=\"1\" decoding=\"async\" src=\"https:\/\/i0.wp.com\/acahya.web.id\/wp-content\/uploads\/2018\/11\/112918_0628_ThePerfectS5.png?w=1080\" alt=\"\" \/><\/p>\n<p>Selanjutnya kita pilih menu NETWORK AND HOSTNAME, disini kita akan mengkonfigure IP Address dari server kita, kita klik tombol Configure maka akan muncul menu Editing Ethernetnya. Pilih IPV4 Setting, method Manual kemudian tekan tombol Add disini saya menggunakan<\/p>\n<p>IP Address \u00a0\u00a0\u00a0\u00a0: 103.233.147.236<\/p>\n<p>Netmask\u00a0\u00a0\u00a0\u00a0: 255.255.255.224<\/p>\n<p>Gateway\u00a0\u00a0\u00a0\u00a0: 103.233.147.225<\/p>\n<p>DNS Server \u00a0\u00a0\u00a0\u00a0: 27.50.20.21 203.176.183.45<\/p>\n<p>Search Domain\u00a0\u00a0\u00a0\u00a0: Orizasativa.htp.ac.id<\/p>\n<p>Klik Save<\/p>\n<p><img data-recalc-dims=\"1\" decoding=\"async\" src=\"https:\/\/i0.wp.com\/acahya.web.id\/wp-content\/uploads\/2018\/11\/112918_0628_ThePerfectS6.png?w=1080\" alt=\"\" \/><\/p>\n<p>Kemudian ketikan nama host pada hostname disini saya menggunakan hostname : orizasativa.htp.ac.id<\/p>\n<p>Klik tombol OFF supaya menjdi ON lalu pada Ethernet akan muncul konfigurasi IP Address yang telah kita buat tadi. Kemudian tekan tombol BEGIN INSTALATION<\/p>\n<p><img data-recalc-dims=\"1\" decoding=\"async\" src=\"https:\/\/i0.wp.com\/acahya.web.id\/wp-content\/uploads\/2018\/11\/112918_0628_ThePerfectS7.png?w=1080\" alt=\"\" \/><\/p>\n<p>Pada saat proses instalasi akan muncul perintah untuk melakukan konfigurasi User untuk membuat password untuk ROOT atau Adminstrator pada Windows. Klik menu Root Password<\/p>\n<p><img data-recalc-dims=\"1\" decoding=\"async\" src=\"https:\/\/i0.wp.com\/acahya.web.id\/wp-content\/uploads\/2018\/11\/112918_0628_ThePerfectS8.png?w=1080\" alt=\"\" \/><\/p>\n<p>Masukan Password yang anda inginkan usahakan menggunakn kombinais huruf, angka dan karakter sehingga kekuatan password kita akan susah untuk ditebak.<\/p>\n<p><img data-recalc-dims=\"1\" decoding=\"async\" src=\"https:\/\/i0.wp.com\/acahya.web.id\/wp-content\/uploads\/2018\/11\/112918_0628_ThePerfectS9.png?w=1080\" alt=\"\" \/><\/p>\n<p>Jika anda mau anda dapat menambahkan user baru selain root yang tadi. Jika telah selesai tekan tombol dan dan tunggu proses instalasi selesai.<\/p>\n<p><img data-recalc-dims=\"1\" decoding=\"async\" src=\"https:\/\/i0.wp.com\/acahya.web.id\/wp-content\/uploads\/2018\/11\/112918_0628_ThePerfectS10.png?w=1080\" alt=\"\" \/><\/p>\n<p>Jika proses instalasi telah selesai maka kita reboot server dengan menekan tombol REBOOT<\/p>\n<p><img data-recalc-dims=\"1\" decoding=\"async\" src=\"https:\/\/i0.wp.com\/acahya.web.id\/wp-content\/uploads\/2018\/11\/112918_0628_ThePerfectS11.png?w=1080\" alt=\"\" \/><\/p>\n<p>Setelah server boot kembali dan muncul prompt login coba anda login dengan mengetikan root kemudian enter dan masukan password (disini kita tidak melihat asterik ketika mengetikan password) setelah sukses akan masuk ke shell root dengan tanda #<\/p>\n<p><img data-recalc-dims=\"1\" decoding=\"async\" src=\"https:\/\/i0.wp.com\/acahya.web.id\/wp-content\/uploads\/2018\/11\/112918_0628_ThePerfectS12.png?w=1080\" alt=\"\" \/><\/p>\n<p>Jika tadi pada server kita sukses untuk login dengan menggunakan username root, maka langkah selanjutnya adalah dengan meremot server dengan menggunakan putty. Buka putty pada hostname ketikan IP Address lalu tekan tombol OPEN<\/p>\n<p><img data-recalc-dims=\"1\" decoding=\"async\" src=\"https:\/\/i0.wp.com\/acahya.web.id\/wp-content\/uploads\/2018\/11\/112918_0628_ThePerfectS13.png?w=1080\" alt=\"\" \/><\/p>\n<p>Pilih Yes ketika muncul pesan Putty Security Alert<\/p>\n<p><img data-recalc-dims=\"1\" decoding=\"async\" src=\"https:\/\/i0.wp.com\/acahya.web.id\/wp-content\/uploads\/2018\/11\/112918_0628_ThePerfectS14.png?w=1080\" alt=\"\" \/><\/p>\n<p>Login dengan cara yang sama pada server tadi. Ketikan username root dan password anda.<\/p>\n<p>Dari sini kita dapat memulai melakukan konfigurasi dan instalasi server dengan menggunakan putty.<\/p>\n<p>Sedikit tips untuk mengcopy teks yang ada pada putty cukup kita blok tuliasan di putty lalu kita paste pada dokumen lain. Nah untuk paste pada jendela putty kita cukup klik kanan pada jendela putty. Ini memudahkan kita ketika kita malas mengetikan perintah yang panjang. Sepanjang tali baruk ( Kata Orang Minang heheh)<\/p>\n<p><img data-recalc-dims=\"1\" decoding=\"async\" src=\"https:\/\/i0.wp.com\/acahya.web.id\/wp-content\/uploads\/2018\/11\/112918_0628_ThePerfectS15.png?w=1080\" alt=\"\" \/><\/p>\n<p>Lets Beginnnnn.<\/p>\n<p>2 Preliminary Note<\/p>\n<p>Pada tutorial ini kita akan menggunakan hostname dengan nama orizasativa.htp.ac.id dengan menggunakan ip 103.233.147.236 dan gateway\u00a0103.233.147.225. Konfigurasi IP ini mungkin akan berbeda dengan dana jadi sesuaikan dengan konfigurasi yang dana miliki.<\/p>\n<p>3 Set the keyboard layout<\/p>\n<p>Untuk setting keyboard kita boleh skip, karena kita memakai layout keyboard default, jadi kita akan skip dan lewati saja. Namun jika keyboard kita berbeda berikut cara mengganti setting keyboard:<\/p>\n<p>localectl set-keymap de<\/p>\n<p>Untuk mendapatkan semua daftar list keymap dapat mengetikan perintah :<\/p>\n<p>localectl list-keymaps<\/p>\n<p>Pada akhir tutorial ini kita akan menginstal ISPConfig, ISPConfig memiliki firewall bawaan yaitu Bastille firewall script, sehingga kita akan disable firewall bawaan Centos .<\/p>\n<p>yum -y install\u00a0net-tools<br \/>\nsystemctl stop firewalld.service<br \/>\nsystemctl disable firewalld.service<\/p>\n<p>Perintah diatas adalah untuk menghentikan service firewall bawaan CentOS .<\/p>\n<p>Kemudian untuk memeriksa apakah firewall sudah kita matikan perlu kita perikasa denganperintah :<\/p>\n<p>iptables -L<\/p>\n<p>Hasil perintah diatas harus seperti berikut :<\/p>\n<p>[root@server1 ~]# iptables -L<br \/>\nChain INPUT (policy ACCEPT)<br \/>\ntarget prot opt source destination<\/p>\n<p>Chain FORWARD (policy ACCEPT)<br \/>\ntarget prot opt source destination<\/p>\n<p>Chain OUTPUT (policy ACCEPT)<br \/>\ntarget prot opt source destination<\/p>\n<p>Atau gunakan perintah firewall-cmd :<\/p>\n<p>firewall-cmd &#8211;state<\/p>\n<p>[root@server1 ~]# firewall-cmd &#8211;state<br \/>\nnot running<br \/>\n[root@server1 ~]#<\/p>\n<p>Sekarang kita akan menginstall editor konfigurasi jaringan dan editor text &#8220;Nano &#8221; yang akan selalu kita gunakan untuk mengedit file konfigurasi server, ketikan perintah berikut:<\/p>\n<p>yum -y install nano wget NetworkManager-tui<\/p>\n<p>Jika kita telah mengkonfigurasi settingan jaringan pada saat instalasi perintah dibawah dapat kita lewatkan.<\/p>\n<p>nmtui<\/p>\n<p>Untuk mengetahui apakah konfigurasi ip kita telah kita lakukdanengan benar chek dengan perintah :<\/p>\n<p>ifconfig<\/p>\n<p>Sekarang perhatikan sekali lagi konfigruasi Alamat IP dana, yang pada saat instalasi awal telah kita tentukan IP Address, Netmask, Gateway dan DNS Server:<\/p>\n<p>[root@server1 ~]# ifconfig<\/p>\n<p>ens33: flags=4163&lt;UP,BROADCAST,RUNNING,MULTICAST&gt; mtu 1500<\/p>\n<p>inet 192.168.1.100 netmask 255.255.255.0 broadcast 192.168.1.255<\/p>\n<p>inet6 fe80::20c:29ff:fecd:cc52 prefixlen 64 scopeid 0x20<\/p>\n<p>ether 00:0c:29:cd:cc:52 txqueuelen 1000 (Ethernet)<\/p>\n<p>RX packets 55621 bytes 79601094 (75.9 MiB)<\/p>\n<p>RX errors 0 dropped 0 overruns 0 frame 0<\/p>\n<p>TX packets 28115 bytes 2608239 (2.4 MiB)<\/p>\n<p>TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0<\/p>\n<p>lo: flags=73&lt;UP,LOOPBACK,RUNNING&gt; mtu 65536<\/p>\n<p>inet 127.0.0.1 netmask 255.0.0.0<\/p>\n<p>inet6 ::1 prefixlen 128 scopeid 0x10<\/p>\n<p>loop txqueuelen 0 (Local Loopback)<\/p>\n<p>RX packets 0 bytes 0 (0.0 B)<\/p>\n<p>RX errors 0 dropped 0 overruns 0 frame 0<\/p>\n<p>TX packets 0 bytes 0 (0.0 B)<\/p>\n<p>TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0<\/p>\n<p>Jika konfiguras kita ada yang kurang tepat, atau konfigurasi belum kita lakukan pada tahap awal intalasi maka dana perlu melakukan editing file konfigurasi network dengan mengedit file konfigurasi di\u00a0\/etc\/sysconfig\/network-scripts\/ifcfg-ens18<\/p>\n<p>nano \/etc\/sysconfig\/network-scripts\/ifcfg-ens18<\/p>\n<p>dan ubah ONBOOT menjadi yes:<\/p>\n<p>[&#8230;]<br \/>\nONBOOT=yes<br \/>\n[&#8230;]<\/p>\n<p>Kemudian reboot server dengan mengetikan perintah reboot.<\/p>\n<p>Periksa kembali file \/etc\/resolv.conf\u00a0file ini menampung nameserver atau DNS Server agar kita dapat melakukan koneksi internet dengan baik:<\/p>\n<p>cat \/etc\/resolv.conf<\/p>\n<p>Jika nameserver tidak muncul perlu dana tambakah kembali, ketik perintah<\/p>\n<p>Nano \/etc\/resolv.conf<\/p>\n<p>Tambahkan baris:<\/p>\n<p>Search orizasativa.htp.a.id<\/p>\n<p>Nameserver 27.50.20.21<\/p>\n<p>Nemeserver 203.176.183.45 (ini alamat dns server kampus kita)<\/p>\n<p>4 Tambahkan konfigurasi \/etc\/hosts<\/p>\n<p>Selanjutnya kita edit filedi \u00a0\/etc\/hosts. Rubah sebagai berikut:<\/p>\n<p>nano \/etc\/hosts<\/p>\n<p>127.0.0.1 localhost localhost.localdomain localhost4 localhost4.localdomain4<br \/>\n103.233.147.236 orizzasativa.htp.ac.id orizasativa<\/p>\n<p>::1 localhost localhost.localdomain localhost6 localhost6.localdomain6<\/p>\n<p>5 Disable SELinux<\/p>\n<p>SELinux adalah sebuah extensi security CentOS bawaan.dalam hal ini kita tidak memerlukanya dalam konfigurasi malah terkadang sering menimbulkan masalah dari pada memberikan nilai postifi, hal ini terjadi setelah server selesai dan akan muncul masalah dikemudian hari yang kebanyakan berasal dari Selinux . sehingga kita disable dengan mengubah properti SELINUX=disabled pada file \u00a0\/etc\/selinux\/config\u00a0.<\/p>\n<p>nano \/etc\/selinux\/config<\/p>\n<p># This file controls the state of SELinux on the system.<\/p>\n<p># SELINUX= can take one of these three values:<\/p>\n<p># enforcing &#8211; SELinux security policy is enforced.<\/p>\n<p># permissive &#8211; SELinux prints warnings instead of enforcing.<\/p>\n<p># disabled &#8211; No SELinux policy is loaded.<\/p>\n<p>SELINUX=disabled<\/p>\n<p># SELINUXTYPE= can take one of these two values:<\/p>\n<p># targeted &#8211; Targeted processes are protected,<\/p>\n<p># mls &#8211; Multi Level Security protection.<\/p>\n<p>SELINUXTYPE=targeted<\/p>\n<p>Setelah itu Sistem harus kita resstart ulang dengan mengetikan perintah reboot:<\/p>\n<p>reboot<\/p>\n<p>Setelah beberapa saat kita reboot klik kanan pada putty dan pilih restart session sehingga session pada putty dapat kita lanjutkan kembali dengan melakukan login ulang sebagai user root. Login ulang kembali .<\/p>\n<p>6 Enable Repositori Tambahan dan Install Beberapa Aplikasi<\/p>\n<p>Pertama kita kimport file GPG keys untuk paket software :<\/p>\n<p>rpm &#8211;import \/etc\/pki\/rpm-gpg\/RPM-GPG-KEY*<\/p>\n<p>Kemudian kita enable Repositori EPEL pada sistem CentOS yang menyediakan banyak paket software yang pada respositori resmi CentOS tidak tersedia :<\/p>\n<p>yum -y install epel-release<\/p>\n<p>yum -y install yum-priorities<\/p>\n<p>Ubah fie\u00a0\/etc\/yum.repos.d\/epel.repo&#8230;<\/p>\n<p>nano \/etc\/yum.repos.d\/epel.repo<\/p>\n<p>&#8230; Tambahkan baris \u00a0priority=10\u00a0pada bagian \u00a0[epel]\u00a0:<\/p>\n<p>[epel]<\/p>\n<p>name=Extra Packages for Enterprise Linux 7 &#8211; $basearch<\/p>\n<p>#baseurl=http:\/\/download.fedoraproject.org\/pub\/epel\/7\/$basearch<\/p>\n<p>mirrorlist=https:\/\/mirrors.fedoraproject.org\/metalink?repo=epel-7&amp;arch=$basearch<\/p>\n<p>failovermethod=priority<\/p>\n<p>enabled=1<\/p>\n<p>priority=10<\/p>\n<p>gpgcheck=1<\/p>\n<p>gpgkey=file:\/\/\/etc\/pki\/rpm-gpg\/RPM-GPG-KEY-EPEL-7<\/p>\n<p>[&#8230;]<\/p>\n<p>Kemudian kita update semua paket-paket software yang ada pada sistem kita :<\/p>\n<p>yum update<\/p>\n<p>Sekarang kita install beberapa pakaet software penting yang kita butuhkan pada proses konfigurasi nanti:<\/p>\n<p>yum -y groupinstall &#8216;Development Tools&#8217;<\/p>\n<p>7 Quota<\/p>\n<p>Untuk menginstall Quota kita ketikan perintah:<\/p>\n<p>yum -y install quota<\/p>\n<p>Enabling quota on the \/ (root) partition<\/p>\n<p>Secara Normal kita dapat mengenablekan quota pada fle \/etc\/fstab, namun karena partisi yang kita buat pada tutorial ini adalah 1 partisi besar atau satu file sistem root &#8220;\/&#8221;, maka quota harud di dienabel kan pada parameter boot Kernel Linux.<\/p>\n<p>Rubah file konfigurasi Grub:<\/p>\n<p>nano \/etc\/default\/grub<\/p>\n<p>cari pada semua baris konfigurasi yang dimulai dengan \u00a0GRUB_CMDLINE_LINUX\u00a0dan tambahkan\u00a0rootflags=uquota,gquota\u00a0pada baris perintah sehingga tampak sebagai berikut :<\/p>\n<p>GRUB_CMDLINE_LINUX=&#8221;rd.lvm.lv=centos\/swap vconsole.font=latarcyrheb-sun16 rd.lvm.lv=centos\/root crashkernel=auto vconsole.keymap=us rhgb quiet rootflags=uquota,gquota&#8221;<\/p>\n<p>Atau dengan kata lain :<\/p>\n<p>Tekan CTRL+K (cut text pada nano ) enter satu kali kemudian copy baris perintah diatas dan klik kanan pada putty untuk Paste baris perintah diatas. Jalankan perubahan dengan mengetikan perintah :<\/p>\n<p>cp \/boot\/grub2\/grub.cfg \/boot\/grub2\/grub.cfg_bak<br \/>\ngrub2-mkconfig -o \/boot\/grub2\/grub.cfg<\/p>\n<p>kemudian restart server.<\/p>\n<p>reboot<\/p>\n<p>Chek jika quota tersedia :<\/p>\n<p>mount | grep &#8216; \/ &#8216;<\/p>\n<p>[root@server1 ~]# mount | grep &#8216; \/ &#8216;<br \/>\n\/dev\/mapper\/centos-root on \/ type xfs (rw,relatime,attr2,inode64,usrquota,grpquota)<br \/>\n[root@server1 ~]#<\/p>\n<p>Ketika quota aktif maka kita dapat melihat baris &#8220;usrquota,grpquota&#8221; pada daftar mount option.<\/p>\n<p>Enabling quota on a separate \/var partition (SKIP SAJA )<\/p>\n<p>Jika Pada saat instalasi awal kita menentukan partisi yang berbeda dan memisahkan partisi \/var, maka edit\u00a0\/etc\/fstab\u00a0dan tambahkan\u00a0,uquota,gquota\u00a0pada partisi \/ (\/dev\/mapper\/centos-var): ini dilewatkan<\/p>\n<p>nano \/etc\/fstab<\/p>\n<p>#<br \/>\n# \/etc\/fstab<br \/>\n# Created by anaconda on Sun Sep 21 16:33:45 2014<br \/>\n#<br \/>\n# Accessible filesystems, by reference, are maintained under &#8216;\/dev\/disk&#8217;<br \/>\n# See man pages fstab(5), findfs(8), mount(8) dan\/or blkid(8) for more info<br \/>\n#<br \/>\n\/dev\/mapper\/centos-root \/ xfs defaults 1 1<br \/>\n\/dev\/mapper\/centos-var \/var xfs defaults,uquota,gquota 1 2<br \/>\nUUID=9ac06939-7e43-4efd-957a-486775edd7b4 \/boot xfs defaults 1 3<br \/>\n\/dev\/mapper\/centos-swap swap swap defaults 0 0<\/p>\n<p>Kemudian Jalankan<\/p>\n<p>mount -o remount \/var<\/p>\n<p>quotacheck -avugm<br \/>\nquotaon -avug<\/p>\n<p>reboot server.<\/p>\n<p>8 Install Apache, MySQL, phpMyAdmin<\/p>\n<p>Kita dapat menginstall semua paket yang kita perlukan dengan sebuah perintaah :<\/p>\n<p>yum -y install ntp httpd mod_ssl mariadb-server php php-mysql php-mbstring phpmyadmin<\/p>\n<p>9\u00a0Install Dovecot<\/p>\n<p>Ketikan perintah berikut untuk menginstall Dovecot:<\/p>\n<p>yum -y install dovecot dovecot-mysql dovecot-pigeonhole<\/p>\n<p>buat file konfigurasi kosong untuk file dovecot-sql.conf dan symbolik linknya.<\/p>\n<p>touch \/etc\/dovecot\/dovecot-sql.conf<br \/>\nln -s \/etc\/dovecot\/dovecot-sql.conf \/etc\/dovecot-sql.conf<\/p>\n<p>sekarang buat link startup dan jalankan Dovecot:<\/p>\n<p>systemctl enable dovecot<br \/>\nsystemctl start dovecot<\/p>\n<p>10 Install Postfix<\/p>\n<p>Ketikan perintah berikut untuk menginstall Postfix :<\/p>\n<p>yum -y install postfix<\/p>\n<p>Kemudian matikan service Sendmail Kemudian Jalankan Postfix dan Mariadb (MySQL):<\/p>\n<p>systemctl enable mariadb.service<br \/>\nsystemctl start mariadb.service<\/p>\n<p>systemctl stop sendmail.service<br \/>\nsystemctl disable sendmail.service<br \/>\nsystemctl enable postfix.service<br \/>\nsystemctl restart postfix.service<\/p>\n<p>Kita disable sendmail untuk memastikannya tidak jalan jika dia memang terinstall sehingga pesan error &#8220;Failed to issue method call: Unit sendmail.service not loaded.&#8221; Dapat kita lewatkan saja.<\/p>\n<p>11 Install Getmail<\/p>\n<p>Ketikan perintah berikut untuk menginstall Getmail :<\/p>\n<p>yum -y install getmail<\/p>\n<p>12 Set MySQL Passwords Dan Configure phpMyAdmin<\/p>\n<p>Set passwords untuk akun root MySQL :<\/p>\n<p>mysql_secure_installation<\/p>\n<p>[root@server1\u00a0tmp]#\u00a0mysql_secure_installation<\/p>\n<p>NOTE: RUNNING ALL PARTS OF THIS SCRIPT IS RECOMMENDED FOR ALL MariaDB<br \/>\nSERVERS IN PRODUCTION USE! PLEASE READ EACH STEP CAREFULLY!<\/p>\n<p>In order to log into MariaDB to secure it, we&#8217;ll need the current<br \/>\npassword for the root user. If you&#8217;ve just installed MariaDB, dan<br \/>\nyou haven&#8217;t set the root password yet, the password will be blank,<br \/>\nso you should just press enter here.<\/p>\n<p>Enter current password for root (enter for none):<br \/>\nOK, successfully used password, moving on&#8230;<\/p>\n<p>Setting the root password ensures that nobody can log into the MariaDB<br \/>\nroot user without the proper authorisation.<\/p>\n<p>Set\u00a0root\u00a0password?\u00a0[Y\/n]\u00a0&lt;&#8211;\u00a0ENTER<br \/>\nNew\u00a0password:\u00a0&lt;&#8211;\u00a0Ketik Mysqk root password anda<br \/>\nRe-enter\u00a0new\u00a0password:\u00a0&lt;&#8211;\u00a0Ulangi password anda<br \/>\nPassword\u00a0updated\u00a0successfully!<br \/>\nReloading\u00a0privilege\u00a0tables..<br \/>\n&#8230;\u00a0Success!<\/p>\n<p>By default, a MariaDB installation has an anonymous user, allowing anyone<br \/>\nto log into MariaDB without having to have a user account created for<br \/>\nthem. This is intended only for testing, dan to make the installation<br \/>\ngo a bit smoother. You should remove them before moving into a<br \/>\nproduction environment.<\/p>\n<p>Remove\u00a0anonymous\u00a0users?\u00a0[Y\/n]\u00a0&lt;&#8211;\u00a0ENTER<br \/>\n&#8230;\u00a0Success!<\/p>\n<p>Normally,\u00a0root\u00a0should\u00a0only\u00a0be\u00a0allowed\u00a0to\u00a0connect\u00a0from\u00a0&#8216;localhost&#8217;.\u00a0\u00a0This<br \/>\nensures\u00a0that\u00a0someone\u00a0cannot\u00a0guess\u00a0at\u00a0the\u00a0root\u00a0password\u00a0from\u00a0the\u00a0network.<\/p>\n<p>Disallow\u00a0root\u00a0login\u00a0remotely?\u00a0[Y\/n]\u00a0&lt;&#8211;\u00a0ENTER<br \/>\n&#8230;\u00a0Success!<\/p>\n<p>By default, MariaDB comes with a database named &#8216;test&#8217; that anyone can<br \/>\naccess. This is also intended only for testing, dan should be removed<br \/>\nbefore moving into a production environment.<\/p>\n<p>Remove\u00a0test\u00a0database\u00a0dan\u00a0access\u00a0to\u00a0it?\u00a0[Y\/n]\u00a0&lt;&#8211;\u00a0ENTER<br \/>\n&#8211;\u00a0Dropping\u00a0test\u00a0database&#8230;<br \/>\n&#8230;\u00a0Success!<br \/>\n&#8211;\u00a0Removing\u00a0privileges\u00a0on\u00a0test\u00a0database&#8230;<br \/>\n&#8230;\u00a0Success!<\/p>\n<p>Reloading\u00a0the\u00a0privilege\u00a0tables\u00a0will\u00a0ensure\u00a0that\u00a0all\u00a0changes\u00a0made\u00a0so\u00a0far<br \/>\nwill\u00a0take\u00a0effect\u00a0immediately.<\/p>\n<p>Reload\u00a0privilege\u00a0tables\u00a0now?\u00a0[Y\/n]\u00a0&lt;&#8211;\u00a0ENTER<br \/>\n&#8230;\u00a0Success!<\/p>\n<p>Cleaning\u00a0up&#8230;<\/p>\n<p>All done! If you&#8217;ve completed all of the above steps, your MariaDB<br \/>\ninstallation should now be secure.<\/p>\n<p>Thanks for using MariaDB!<\/p>\n<p>[root@server1\u00a0tmp]#<\/p>\n<p>Sekarang kita setting konfigurasi phpMyAdmin. Kita rubah Konfigurasi Apache sehingga PhpMyAdmin membolehkan koneksi tidak hanya dari localhost saja (dengan menambahakan koment krss &#8220;#&#8221; pada baris &#8220;Require ip&#8221; dan tambahkan baris baru &#8220;Require all granted&#8221; pada \u00a0&lt;Directory \/usr\/share\/phpMyAdmin\/&gt;\u00a0):<\/p>\n<p>nano \/etc\/httpd\/conf.d\/phpMyAdmin.conf<\/p>\n<p># phpMyAdmin &#8211; Web based MySQL browser written in php<\/p>\n<p>#<\/p>\n<p># Allows only localhost by default<\/p>\n<p>#<\/p>\n<p># But allowing phpMyAdmin to anyone other than localhost should be considered<\/p>\n<p># dangerous unless properly secured by SSL<\/p>\n<p>Alias \/phpMyAdmin \/usr\/share\/phpMyAdmin<\/p>\n<p>Alias \/phpmyadmin \/usr\/share\/phpMyAdmin<\/p>\n<p>&lt;Directory \/usr\/share\/phpMyAdmin\/&gt;<\/p>\n<p>&lt;IfModule mod_authz_core.c&gt;<\/p>\n<p># Apache 2.4<\/p>\n<p>&lt;RequireAny&gt;<\/p>\n<p># Require ip 127.0.0.1<\/p>\n<p># Require ip ::1<br \/>\nRequire all granted<\/p>\n<p>&lt;\/RequireAny&gt;<\/p>\n<p>&lt;\/IfModule&gt;<\/p>\n<p>&lt;IfModule !mod_authz_core.c&gt;<\/p>\n<p># Apache 2.2<\/p>\n<p>Order Deny,Allow<\/p>\n<p>Deny from All<\/p>\n<p>Allow from 127.0.0.1<\/p>\n<p>Allow from ::1<\/p>\n<p>&lt;\/IfModule&gt;<\/p>\n<p>&lt;\/Directory&gt;<\/p>\n<p>Selanjutnya kita rubah authentifikasi pada phpMyAdmin dari\u00a0cookie\u00a0ke \u00a0http:<\/p>\n<p>nano \/etc\/phpMyAdmin\/config.inc.php<\/p>\n<p>[&#8230;]<\/p>\n<p>\/* Authentication type *\/<\/p>\n<p>$cfg[&#8216;Servers&#8217;][$i][&#8216;auth_type&#8217;] = &#8216;http&#8217;;<\/p>\n<p>[&#8230;]<\/p>\n<p>Kemudian kita buat startup links untuk Apache dan jalankan service:<\/p>\n<p>systemctl enable\u00a0 httpd.service<br \/>\nsystemctl restart\u00a0 httpd.service<\/p>\n<p>Sekarang buka browser anda dan ketikan alamat berikut : http:\/\/orizasativa.htp.ac.id\/phpmyadmin\/\u00a0atau\u00a0http:\/\/103.23.147.236\/phpmyadmin\/\u00a0dan log in dengan username\u00a0root\u00a0dan password yang telah anda setting sebelumnya.<\/p>\n<p>13 Install Amavisd-new, SpamAssassin Dan ClamAV<\/p>\n<p>Ketikan perintah berikut untuk menginstall amavisd-new, spamassassin dan clamav:<\/p>\n<p>yum -y install amavisd-new spamassassin clamav clamav-update unzip bzip2 perl-DBD-mysql<\/p>\n<p>Rubah file configuration freshclam di \/etc\/freshclam.conf<\/p>\n<p>nano \/etc\/freshclam.conf<\/p>\n<p>dan berikan comment pada baris &#8220;Example&#8221;<\/p>\n<p>[&#8230;.]<br \/>\n# Example<br \/>\n[&#8230;.]<\/p>\n<p>Kemudian kita jalankan freshclam, amavisd, dan clamd.amavisd:<\/p>\n<p>sa-update<br \/>\nfreshclam<br \/>\nsystemctl enable amavisd.service<\/p>\n<p>14 Instalasi Apache2 With mod_php, mod_fcgi\/PHP5, PHP-FPM Dan suPHP<\/p>\n<p>ISPConfig 3 membolehkan kita menggunakan mod_php, mod_fcgi\/PHP5, cgi\/PHP5, dan suPHP pada setiap website.<\/p>\n<p>Ketikan perintah berikut untuk menginstall Apache2 with mod_php5, mod_fcgid, dan PHP5 :<\/p>\n<p>yum -y install php php-devel php-gd php-imap php-ldap php-mysql php-odbc php-pear php-xml php-xmlrpc php-pecl-apc php-mbstring php-mcrypt php-mssql php-snmp php-soap php-tidy curl curl-devel perl-libwww-perl ImageMagick libxml2 libxml2-devel mod_fcgid php-cli httpd-devel php-fpm<\/p>\n<p>selanjutnya buka file\u00a0\/etc\/php.ini&#8230;<\/p>\n<p>nano \/etc\/php.ini<\/p>\n<p>&#8230; dan yang perlu kita sesuaikan adalah<\/p>\n<p>error reporting (supaya error pada halaman web tidak muncul)<\/p>\n<p>Sesuaikan timezone<\/p>\n<p>Buang comment\u00a0cgi.fix_pathinfo=1:<\/p>\n<p>Cara paling mudah adalah dengan melakukan pencarian dengan cara CTR+W ketikan keywoard dan enter jika belum menemukan baris yang sesuai ulangi CTR+W tekan enter<\/p>\n<p>[&#8230;]<\/p>\n<p>;error_reporting = E_ALL &amp; ~E_DEPRECATED<\/p>\n<p>error_reporting = E_ALL &amp; ~E_NOTICE &amp; ~E_DEPRECATED<\/p>\n<p>[&#8230;]<\/p>\n<p>; cgi.fix_pathinfo provides *real* PATH_INFO\/PATH_TRANSLATED support for CGI. PHP&#8217;s<\/p>\n<p>; previous behaviour was to set PATH_TRANSLATED to SCRIPT_FILENAME, dan to not grok<\/p>\n<p>; what PATH_INFO is. For more information on PAppp.tldTH_INFO, see the cgi specs. Setting<\/p>\n<p>; this to 1 will cause PHP CGI to fix its paths to conform to the spec. A setting<\/p>\n<p>; of zero causes PHP to behave as before. Default is 1. You should fix your scripts<\/p>\n<p>; to use SCRIPT_FILENAME rather than PATH_TRANSLATED.<\/p>\n<p>; http:\/\/www.php.net\/manual\/en\/ini.core.php#ini.cgi.fix-pathinfo<\/p>\n<p>cgi.fix_pathinfo=1<br \/>\n[&#8230;]<br \/>\ndate.timezone = &#8216;Asia\/Jakarta&#8217;<\/p>\n<p>[&#8230;]<\/p>\n<p>Selanjutnaya kita install suPHP (ada paket mod_suphp\u00a0tersedia pada repositori namun tidak compatibel dengan ISPConfig, sehingga kita perlu untuk membangun sendiri suPHP ):<\/p>\n<p>cd \/usr\/local\/src<br \/>\nwget http:\/\/suphp.org\/download\/suphp-0.7.2.tar.gz<br \/>\ntar zxvf suphp-0.7.2.tar.gz<\/p>\n<p>CentOS 7.1 menggunakan apache-2.4, jadi kita perlu patch suphp sebelum mengcompilasi . Ketikan perintah berikut untuk menginstall patch:<\/p>\n<p>wget -O suphp.patch https:\/\/lists.marsching.com\/pipermail\/suphp\/attachments\/20130520\/74f3ac02\/attachment.patch<br \/>\npatch -Np1 -d suphp-0.7.2 &lt; suphp.patch<br \/>\ncd suphp-0.7.2<br \/>\nautoreconf -if<\/p>\n<p>[root@server1 suphp-0.7.2]# autoreconf -if<br \/>\nlibtoolize: putting auxiliary files in AC_CONFIG_AUX_DIR, `config&#8217;.<br \/>\nlibtoolize: copying file `config\/ltmain.sh&#8217;<br \/>\nlibtoolize: Consider adding `AC_CONFIG_MACRO_DIR([m4])&#8217; to configure.ac dan<br \/>\nlibtoolize: rerunning libtoolize, to keep the correct libtool macros in-tree.<br \/>\nlibtoolize: Consider adding `-I m4&#8242; to ACLOCAL_AMFLAGS in Makefile.am.<br \/>\nconfigure.ac:9: warning: AM_INIT_AUTOMAKE: two- dan three-arguments forms are deprecated.\u00a0 For more info, see:<br \/>\nconfigure.ac:9: http:\/\/www.gnu.org\/software\/automake\/manual\/automake.html#Modernize-AM_005fINIT_005fAUTOMAKE-invocation<br \/>\nconfigure.ac:24: installing &#8216;config\/config.guess&#8217;<br \/>\nconfigure.ac:24: installing &#8216;config\/config.sub&#8217;<br \/>\nconfigure.ac:9: installing &#8216;config\/install-sh&#8217;<br \/>\nconfigure.ac:9: installing &#8216;config\/missing&#8217;<br \/>\nsrc\/Makefile.am: installing &#8216;config\/depcomp&#8217;<br \/>\n[root@server1 suphp-0.7.2]#<\/p>\n<p>Perintah tadi akan menjalankan patch, Nah sekarang baru bisa kitta compile source code yang diownload sebagai berikut :<\/p>\n<p>.\/configure &#8211;prefix=\/usr\/ &#8211;sysconfdir=\/etc\/ &#8211;with-apr=\/usr\/bin\/apr-1-config &#8211;with-apache-user=apache &#8211;with-setid-mode=owner &#8211;with-logfile=\/var\/log\/httpd\/suphp_log<br \/>\nmake<br \/>\nmake install<\/p>\n<p>Tambahkan suPHP module konfigurasi Apache &#8230;<\/p>\n<p>nano \/etc\/httpd\/conf.d\/suphp.conf<\/p>\n<p>LoadModule suphp_module modules\/mod_suphp.so<\/p>\n<p>&#8230; dan buatlah file \u00a0\/etc\/suphp.conf\u00a0sebagai berikut:<\/p>\n<p>nano \/etc\/suphp.conf<\/p>\n<p>[global]<\/p>\n<p>;Path to logfile<\/p>\n<p>logfile=\/var\/log\/httpd\/suphp.log<\/p>\n<p>;Loglevel<\/p>\n<p>loglevel=info<\/p>\n<p>;User Apache is running as<\/p>\n<p>webserver_user=apache<\/p>\n<p>;Path all scripts have to be in<\/p>\n<p>docroot=\/<\/p>\n<p>;Path to chroot() to before executing script<\/p>\n<p>;chroot=\/mychroot<\/p>\n<p>; Security options<\/p>\n<p>allow_file_group_writeable=true<\/p>\n<p>allow_file_others_writeable=false<\/p>\n<p>allow_directory_group_writeable=true<\/p>\n<p>allow_directory_others_writeable=false<\/p>\n<p>;Check wheter script is within DOCUMENT_ROOT<\/p>\n<p>check_vhost_docroot=true<\/p>\n<p>;Send minor error messages to browser<\/p>\n<p>errors_to_browser=false<\/p>\n<p>;PATH environment variable<\/p>\n<p>env_path=\/bin:\/usr\/bin<\/p>\n<p>;Umask to set, specify in octal notation<\/p>\n<p>umask=0077<\/p>\n<p>; Minimum UID<\/p>\n<p>min_uid=100<\/p>\n<p>; Minimum GID<\/p>\n<p>min_gid=100<\/p>\n<p>[hdanlers]<\/p>\n<p>;Hdanler for php-scripts<\/p>\n<p>x-httpd-suphp=&#8221;php:\/usr\/bin\/php-cgi&#8221;<\/p>\n<p>;Hdanler for CGI-scripts<\/p>\n<p>x-suphp-cgi=&#8221;execute:!self&#8221;<\/p>\n<p>Edit file \/etc\/httpd\/conf.d\/php.conf untuk mengenable php parsing hanya untuk phpmyadmin, roundcube dan system packages lain di \/usr\/share namun bukan untuk websites di \/var\/www sebagaimana ISPConfig akan mengaktifkan PHP pada masing-masing website.<\/p>\n<p>nano \/etc\/httpd\/conf.d\/php.conf<\/p>\n<p>rubah baris berikut ini :<\/p>\n<p>&lt;FilesMatch \\.php$&gt;<br \/>\nSetHdanler application\/x-httpd-php<br \/>\n&lt;\/FilesMatch&gt;<\/p>\n<p>Menjadi :<\/p>\n<p>&lt;Directory \/usr\/share&gt;<br \/>\n&lt;FilesMatch \\.php$&gt;<br \/>\nSetHdanler application\/x-httpd-php<br \/>\n&lt;\/FilesMatch&gt;<br \/>\n&lt;\/Directory&gt;<\/p>\n<p>Enable httpd dan PHP-FPM agar dapat berjalan saat booting dan jalankan the PHP-FPM service.<\/p>\n<p>systemctl start php-fpm.service<br \/>\nsystemctl enable php-fpm.service<br \/>\nsystemctl enable httpd.service<\/p>\n<p>jalankan perintah berikut untuk memulai service Apache:<\/p>\n<p>systemctl restart httpd.service<\/p>\n<p>15 Installation of mod_python<\/p>\n<p>Modul apache: mod_python tidak terdapat pada paket RPM, untuk itu kita perlu mengkompilasi dari sumber yang tersedia. Langkah pertama adalah menginstall file python development dan download file mod_python version versi tar.gz<\/p>\n<p>yum -y install python-devel<\/p>\n<p>cd \/usr\/local\/src\/<br \/>\nwget http:\/\/dist.modpython.org\/dist\/mod_python-3.5.0.tgz<br \/>\ntar xfz mod_python-3.5.0.tgz<br \/>\ncd mod_python-3.5.0<\/p>\n<p>Kemudian kita konfigurasi dan mengkompilasi source code tadi<\/p>\n<p>.\/configure<br \/>\nmake<br \/>\nmake install<\/p>\n<p>dan enable module pada apache<\/p>\n<p>echo &#8216;LoadModule python_module modules\/mod_python.so&#8217; &gt; \/etc\/httpd\/conf.modules.d\/10-python.conf<br \/>\nsystemctl restart httpd.service<\/p>\n<p>16 Install PureFTPd<\/p>\n<p>Ketikan perintah berikut untuk menginstall PureFTPd :<\/p>\n<p>yum -y install pure-ftpd<\/p>\n<p>kemudian buat link startup sistem dan jalankan PureFTPd:<\/p>\n<p>systemctl enable pure-ftpd.service<br \/>\nsystemctl start pure-ftpd.service<\/p>\n<p>sekarang kita configure PureFTPd untuk menjalan FTP dan TLS sessions. FTP menggunakan protocol yang kurang aman karena semua password dan data akan dikirimkan dalam mode tesks murni. Dengan menggunakan TLS, semua komunikasi dapat dienkrips , hal ini memungkinkan FTP berjalan lebih aman.<\/p>\n<p>OpenSSL dibutuhkan untuk menjalankan TLS; Ketikan perintah berikut untuk menginstall OpenSSL :<\/p>\n<p>yum install openssl<\/p>\n<p>buka \u00a0\/etc\/pure-ftpd\/pure-ftpd.conf&#8230;<\/p>\n<p>nano \/etc\/pure-ftpd\/pure-ftpd.conf<\/p>\n<p>hapus komen pada file konfigurasi , jadikan \u00a0TLS\u00a0menjadi \u00a01:<\/p>\n<p>[&#8230;]<\/p>\n<p># This option can accept three values :<\/p>\n<p># 0 : disable SSL\/TLS encryption layer (default).<\/p>\n<p># 1 : accept both traditional dan encrypted sessions.<\/p>\n<p># 2 : refuse connections that don&#8217;t use SSL\/TLS security mechanisms,<\/p>\n<p># including anonymous sessions.<\/p>\n<p># Do _not_ uncomment this blindly. Be sure that :<\/p>\n<p># 1) Your server has been compiled with SSL\/TLS support (&#8211;with-tls),<\/p>\n<p># 2) A valid certificate is in place,<\/p>\n<p># 3) Only compatible clients will log in.<\/p>\n<p>TLS 1<\/p>\n<p>[&#8230;]<\/p>\n<p>Untuk dapat menjalankan TLS, kita harus membuat sertifikat SSL. Kita buat pada direktori\u00a0\/etc\/ssl\/private\/, untuk itu kita buat terlebih dahulu diektori tersebut dengan perintah :<\/p>\n<p>mkdir -p \/etc\/ssl\/private\/<\/p>\n<p>setelah itu kita dapat menGenerate sertifikat SSL dengan perintah berikut :<\/p>\n<p>openssl req -x509 -nodes -days 7300 -newkey rsa:2048 -keyout \/etc\/ssl\/private\/pure-ftpd.pem -out \/etc\/ssl\/private\/pure-ftpd.pem<\/p>\n<p>Country Name (2 letter code) [XX]:\u00a0ID<br \/>\nState or Province Name (full name) []:\u00a0RIAU<br \/>\nLocality Name (eg, city) [Default City]:\u00a0Pekanbaru<br \/>\nOrganization Name (eg, company) [Default Company Ltd]:\u00a0OrizaSativa<br \/>\nOrganizational Unit Name (eg, section) []:\u00a0Oriza<br \/>\nCommon Name (eg, your name or your server&#8217;s hostname) []:\u00a0orizasativa.htp.ac.id<br \/>\nEmail Address []:\u00a0ngadimin@htp.ac.id<\/p>\n<p>Rubah file permissions sertifikat SSL :<\/p>\n<p>chmod 600 \/etc\/ssl\/private\/pure-ftpd.pem<\/p>\n<p>terakhir restart servive PureFTPd:<\/p>\n<p>systemctl restart pure-ftpd.service<\/p>\n<p>Itu Sajat. Kita sekarang dapat mencoba untuk konek ke server menggunakan FTP client; gunakan aplikasi FTP Client misalnya Filezilla-Client.<\/p>\n<p>17 Install BIND<\/p>\n<p>Ketikan perintah berikut untuk menginstall BIND :<\/p>\n<p>yum -y install bind bind-utils<\/p>\n<p>buat backup file \u00a0\/etc\/named.conf\u00a0yang telah ada dan buat file konfigurasi yang baru sebagai berikut :<\/p>\n<p>cp \/etc\/named.conf \/etc\/named.conf_bak<br \/>\ncat \/dev\/null &gt; \/etc\/named.conf<br \/>\nnano \/etc\/named.conf<\/p>\n<p>\/\/<\/p>\n<p>\/\/ named.conf<\/p>\n<p>\/\/<\/p>\n<p>\/\/ Provided by Red Hat bind package to configure the ISC BIND named(8) DNS<\/p>\n<p>\/\/ server as a caching only nameserver (as a localhost DNS resolver only).<\/p>\n<p>\/\/<\/p>\n<p>\/\/ See \/usr\/share\/doc\/bind*\/sample\/ for example named configuration files.<\/p>\n<p>\/\/<\/p>\n<p>options {<\/p>\n<p>listen-on port 53 { any; };<\/p>\n<p>listen-on-v6 port 53 { any; };<\/p>\n<p>directory &#8220;\/var\/named&#8221;;<\/p>\n<p>dump-file &#8220;\/var\/named\/data\/cache_dump.db&#8221;;<\/p>\n<p>statistics-file &#8220;\/var\/named\/data\/named_stats.txt&#8221;;<\/p>\n<p>memstatistics-file &#8220;\/var\/named\/data\/named_mem_stats.txt&#8221;;<\/p>\n<p>allow-query { any; };<\/p>\n<p>allow-recursion {&#8220;none&#8221;;};<\/p>\n<p>recursion no;<\/p>\n<p>};<\/p>\n<p>logging {<\/p>\n<p>channel default_debug {<\/p>\n<p>file &#8220;data\/named.run&#8221;;<\/p>\n<p>severity dynamic;<\/p>\n<p>};<\/p>\n<p>};<\/p>\n<p>zone &#8220;.&#8221; IN {<\/p>\n<p>type hint;<\/p>\n<p>file &#8220;named.ca&#8221;;<\/p>\n<p>};<\/p>\n<p>include &#8220;\/etc\/named.conf.local&#8221;;<\/p>\n<p>buat file konfigurasi\u00a0\/etc\/named.conf.local\u00a0yang telah kita masukan pada akhir konfigurasi pada \u00a0\/etc\/named.conf\u00a0(\/etc\/named.conf.local\u00a0akan digunakan oleh ISPConfig untuk menyimpan file konfigurasi jika kita membuat DNS zones pada ISPConfig):<\/p>\n<p>touch \/etc\/named.conf.local<\/p>\n<p>kemudian kita buat link startup BIND dan jalankan BIND:<\/p>\n<p>systemctl enable named.service<br \/>\nsystemctl start named.service<\/p>\n<p>18 Install Webalizer, Dan AWStats<\/p>\n<p>Ketikan perintah berikut untuk menginstall Webalizer dan AWStats:<\/p>\n<p>yum -y install webalizer awstats perl-DateTime-Format-HTTP perl-DateTime-Format-Builder<\/p>\n<p>19 Install Jailkit<\/p>\n<p>Jailkit digunakan sebagai chroot user2 SSH dan cronjobs. Ketikan perintah berikut untuk menginstall (Penting: Jailkit Harus diinstall sebelum ISPConfig \u2013 dan tidak bisa diinstall kemudian setelah ISPconfig!):<\/p>\n<p>cd \/tmp<br \/>\nwget http:\/\/olivier.sessink.nl\/jailkit\/jailkit-2.17.tar.gz<br \/>\ntar xvfz jailkit-2.17.tar.gz<br \/>\ncd jailkit-2.17<br \/>\n.\/configure<br \/>\nmake<br \/>\nmake install<br \/>\ncd ..<br \/>\nrm -rf jailkit-2.17*<\/p>\n<p>20 Install fail2ban<\/p>\n<p>Pilihan namun disarankan untuk menginstall, karena ISPConfig memonitor dan akan menampilkan log.<\/p>\n<p>yum -y install iptables-services fail2ban fail2ban-systemd<br \/>\nsystemctl mask firewalld.service<br \/>\nsystemctl enable iptables.service<br \/>\nsystemctl enable ip6tables.service<br \/>\nsystemctl stop firewalld.service<br \/>\nsystemctl start iptables.service<br \/>\nsystemctl start ip6tables.service<\/p>\n<p>selanjutnya kita buat file \u00a0\/etc\/fail2ban\/jail.local dan enable monitoring untuk ssh, email dan ftp service.<\/p>\n<p>nano\u00a0\/etc\/fail2ban\/jail.local<\/p>\n<p>tambahkan konfigurasi berikut pada file jail.local :<\/p>\n<p>[sshd]<br \/>\nenabled = true<br \/>\naction = iptables[name=sshd, port=ssh, protocol=tcp]<\/p>\n<p>[pure-ftpd]<br \/>\nenabled = true<br \/>\naction = iptables[name=FTP, port=ftp, protocol=tcp]<br \/>\nmaxretry = 3<\/p>\n<p>[dovecot]<br \/>\nenabled = true<br \/>\naction = iptables-multiport[name=dovecot, port=&#8221;pop3,pop3s,imap,imaps&#8221;, protocol=tcp]<br \/>\nmaxretry = 5<\/p>\n<p>[postfix-sasl]<br \/>\nenabled = true<br \/>\naction = iptables-multiport[name=postfix-sasl, port=&#8221;smtp,smtps,submission&#8221;, protocol=tcp]<br \/>\nmaxretry = 3<\/p>\n<p>Kemudian buat file startup sistem untuk fail2ban dan jalankan :<\/p>\n<p>Yum remove iptables-services<\/p>\n<p>systemctl enable fail2ban.service<br \/>\nsystemctl start fail2ban.service<\/p>\n<p>21 Install rkhunter<\/p>\n<p>Ketikan perintah berikut untuk menginstall Rkhunter :<\/p>\n<p>yum -y install rkhunter<\/p>\n<p>22 Install Mailman (SKIP SAJA)<\/p>\n<p>Jika kita ingin mengelola mailinglists menggunakan Mailman pada server, maka install mailman. Mailman sangat didukung oleh ISPConfig, jadi kita dapat membuat mailling list baru melalui ISPConfig kemudian.<\/p>\n<p>yum -y install mailman<\/p>\n<p>sebelum memulai mailman, sebuah mailing list dengan nama\u00a0mailman\u00a0harus dibuat :<\/p>\n<p>touch \/var\/lib\/mailman\/data\/aliases<br \/>\npostmap\u00a0\/var\/lib\/mailman\/data\/aliases<br \/>\n\/usr\/lib\/mailman\/bin\/newlist mailman<\/p>\n<p>[root@server1\u00a0tmp]#\u00a0\/usr\/lib\/mailman\/bin\/newlist\u00a0mailman<br \/>\nEnter\u00a0the\u00a0email\u00a0of\u00a0the\u00a0person\u00a0running\u00a0the\u00a0list:\u00a0ngadimin@htp.ac.id<br \/>\nInitial\u00a0mailman\u00a0password:\u00a0ketik password anda<br \/>\nTo\u00a0finish\u00a0creating\u00a0your\u00a0mailing\u00a0list,\u00a0you\u00a0must\u00a0edit\u00a0your\u00a0\/etc\/aliases\u00a0(or<br \/>\nequivalent)\u00a0file\u00a0by\u00a0adding\u00a0the\u00a0following\u00a0lines,\u00a0dan\u00a0possibly\u00a0running\u00a0the<br \/>\n`newaliases&#8217;\u00a0program:<\/p>\n<p>##\u00a0mailman\u00a0mailing\u00a0list<br \/>\nmailman:\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0&#8220;|\/usr\/lib\/mailman\/mail\/mailman\u00a0post\u00a0mailman&#8221;<br \/>\nmailman-admin:\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0&#8220;|\/usr\/lib\/mailman\/mail\/mailman\u00a0admin\u00a0mailman&#8221;<br \/>\nmailman-bounces:\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0&#8220;|\/usr\/lib\/mailman\/mail\/mailman\u00a0bounces\u00a0mailman&#8221;<br \/>\nmailman-confirm:\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0&#8220;|\/usr\/lib\/mailman\/mail\/mailman\u00a0confirm\u00a0mailman&#8221;<br \/>\nmailman-join:\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0&#8220;|\/usr\/lib\/mailman\/mail\/mailman\u00a0join\u00a0mailman&#8221;<br \/>\nmailman-leave:\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0&#8220;|\/usr\/lib\/mailman\/mail\/mailman\u00a0leave\u00a0mailman&#8221;<br \/>\nmailman-owner:\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0&#8220;|\/usr\/lib\/mailman\/mail\/mailman\u00a0owner\u00a0mailman&#8221;<br \/>\nmailman-request:\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0&#8220;|\/usr\/lib\/mailman\/mail\/mailman\u00a0request\u00a0mailman&#8221;<br \/>\nmailman-subscribe:\u00a0\u00a0\u00a0\u00a0&#8220;|\/usr\/lib\/mailman\/mail\/mailman\u00a0subscribe\u00a0mailman&#8221;<br \/>\nmailman-unsubscribe:\u00a0\u00a0&#8220;|\/usr\/lib\/mailman\/mail\/mailman\u00a0unsubscribe\u00a0mailman&#8221;<\/p>\n<p>Hit\u00a0enter\u00a0to\u00a0notify\u00a0mailman\u00a0owner&#8230;\u00a0&lt;&#8211;\u00a0ENTER<\/p>\n<p>[root@server1\u00a0tmp]#<\/p>\n<p>Buka\u00a0\/etc\/aliases\u00a0setelahnya&#8230;<\/p>\n<p>vi \/etc\/aliases<\/p>\n<p>&#8230; dan tambahkan baris berikut :<\/p>\n<p>[&#8230;]<\/p>\n<p>mailman: &#8220;|\/usr\/lib\/mailman\/mail\/mailman post mailman&#8221;<\/p>\n<p>mailman-admin: &#8220;|\/usr\/lib\/mailman\/mail\/mailman admin mailman&#8221;<\/p>\n<p>mailman-bounces: &#8220;|\/usr\/lib\/mailman\/mail\/mailman bounces mailman&#8221;<\/p>\n<p>mailman-confirm: &#8220;|\/usr\/lib\/mailman\/mail\/mailman confirm mailman&#8221;<\/p>\n<p>mailman-join: &#8220;|\/usr\/lib\/mailman\/mail\/mailman join mailman&#8221;<\/p>\n<p>mailman-leave: &#8220;|\/usr\/lib\/mailman\/mail\/mailman leave mailman&#8221;<\/p>\n<p>mailman-owner: &#8220;|\/usr\/lib\/mailman\/mail\/mailman owner mailman&#8221;<\/p>\n<p>mailman-request: &#8220;|\/usr\/lib\/mailman\/mail\/mailman request mailman&#8221;<\/p>\n<p>mailman-subscribe: &#8220;|\/usr\/lib\/mailman\/mail\/mailman subscribe mailman&#8221;<\/p>\n<p>mailman-unsubscribe: &#8220;|\/usr\/lib\/mailman\/mail\/mailman unsubscribe mailman&#8221;<\/p>\n<p>Run<\/p>\n<p>newaliases<\/p>\n<p>restat Postfix:<\/p>\n<p>systemctl restart postfix.service<\/p>\n<p>sekarang buka file konfigurasi Apache Mailman<\/p>\n<p>\/etc\/httpd\/conf.d\/mailman.conf&#8230;<\/p>\n<p>nano \/etc\/httpd\/conf.d\/mailman.conf<\/p>\n<p>&#8230; dan tambahkan baris\u00a0ScriptAlias \/cgi-bin\/mailman\/ \/usr\/lib\/mailman\/cgi-bin\/. Tambakan komen (#) pada \u00a0Alias \/pipermail\/ \/var\/lib\/mailman\/archives\/public\/\u00a0dan tambahkan baris\u00a0Alias \/pipermail \/var\/lib\/mailman\/archives\/public\/:<\/p>\n<p>#<\/p>\n<p># httpd configuration settings for use with mailman.<\/p>\n<p>#<\/p>\n<p>ScriptAlias \/mailman\/ \/usr\/lib\/mailman\/cgi-bin\/<\/p>\n<p>ScriptAlias \/cgi-bin\/mailman\/ \/usr\/lib\/mailman\/cgi-bin\/<\/p>\n<p>&lt;Directory \/usr\/lib\/mailman\/cgi-bin\/&gt;<\/p>\n<p>AllowOverride None<\/p>\n<p>Options ExecCGI<\/p>\n<p>Order allow,deny<\/p>\n<p>Allow from all<\/p>\n<p>&lt;\/Directory&gt;<\/p>\n<p>#Alias \/pipermail\/ \/var\/lib\/mailman\/archives\/public\/<\/p>\n<p>Alias \/pipermail \/var\/lib\/mailman\/archives\/public\/<\/p>\n<p>&lt;Directory \/var\/lib\/mailman\/archives\/public&gt;<\/p>\n<p>Options Indexes MultiViews FollowSymLinks<\/p>\n<p>AllowOverride None<\/p>\n<p>Order allow,deny<\/p>\n<p>Allow from all<\/p>\n<p>AddDefaultCharset Off<\/p>\n<p>&lt;\/Directory&gt;<\/p>\n<p># Uncomment the following line, to redirect queries to \/mailman to the<\/p>\n<p># listinfo page (recommended).<\/p>\n<p># RedirectMatch ^\/mailman[\/]*$ \/mailman\/listinfo<\/p>\n<p>Restart Apache:<\/p>\n<p>systemctl restart httpd.service<\/p>\n<p>buat sistem startup untuk Mailman dan Jalankan:<\/p>\n<p>systemctl enable mailman.service<br \/>\nsystemctl start mailman.service<\/p>\n<p>Setelah kita berhasil mengistall ISPConfig 3, kita dapat mengakses Mailman sebagai berikut :<\/p>\n<p>Kita dapat menggunakan alias \u00a0\/cgi-bin\/mailman\u00a0untuk semua Vhost Apache (Dengan catatan bahwa \u00a0suExec dan CGI harus di disabled\u00a0agar virtualhost dapat mengakases Mailman!), yang berarti anda dapat mengakses admin Mailman interface pada http:\/\/&lt;vhost&gt;\/cgi-bin\/mailman\/admin\/&lt;listname&gt;, dan halaman web untuk user dapat diakases pada \u00a0http:\/\/&lt;vhost&gt;\/cgi-bin\/mailman\/listinfo\/&lt;listname&gt;.<\/p>\n<p>Dibawah \u00a0http:\/\/&lt;vhost&gt;\/pipermail\/&lt;listname&gt;\u00a0anda dapat menemukan arsip mailing list.<\/p>\n<p>23 Install Roundcube webmail<\/p>\n<p>Ketikan perintah berikut untuk menginstall Roundcube webmail client, &#8230;<\/p>\n<p>yum -y install roundcubemail<\/p>\n<p>Rubah konfigurasi roundcubemail dengan perintah :<\/p>\n<p>nano \/etc\/httpd\/conf.d\/roundcubemail.conf<\/p>\n<p>#<\/p>\n<p># Round Cube Webmail is a browser-based multilingual IMAP client<\/p>\n<p>#<\/p>\n<p>Alias \/roundcubemail \/usr\/share\/roundcubemail<br \/>\nAlias \/webmail \/usr\/share\/roundcubemail<\/p>\n<p># Define who can access the Webmail<\/p>\n<p># You can enlarge permissions once configured<\/p>\n<p>#&lt;Directory \/usr\/share\/roundcubemail\/&gt;<\/p>\n<p># &lt;IfModule mod_authz_core.c&gt;<\/p>\n<p># # Apache 2.4<\/p>\n<p># Require local<\/p>\n<p># &lt;\/IfModule&gt;<\/p>\n<p># &lt;IfModule !mod_authz_core.c&gt;<\/p>\n<p># # Apache 2.2<\/p>\n<p># Order Deny,Allow<\/p>\n<p># Deny from all<\/p>\n<p># Allow from 127.0.0.1<\/p>\n<p># Allow from ::1<\/p>\n<p># &lt;\/IfModule&gt;<\/p>\n<p>#&lt;\/Directory&gt;<\/p>\n<p>&lt;Directory \/usr\/share\/roundcubemail\/&gt;<\/p>\n<p>Options none<\/p>\n<p>AllowOverride Limit<\/p>\n<p>Require all granted<\/p>\n<p>&lt;\/Directory&gt;<\/p>\n<p># Define who can access the installer<\/p>\n<p># keep this secured once configured<\/p>\n<p>#&lt;Directory \/usr\/share\/roundcubemail\/installer\/&gt;<\/p>\n<p># &lt;IfModule mod_authz_core.c&gt;<\/p>\n<p># # Apache 2.4<\/p>\n<p># Require local<\/p>\n<p># &lt;\/IfModule&gt;<\/p>\n<p># &lt;IfModule !mod_authz_core.c&gt;<\/p>\n<p># # Apache 2.2<\/p>\n<p># Order Deny,Allow<\/p>\n<p># Deny from all<\/p>\n<p># Allow from 127.0.0.1<\/p>\n<p># Allow from ::1<\/p>\n<p># &lt;\/IfModule&gt;<\/p>\n<p>#&lt;\/Directory&gt;<\/p>\n<p>&lt;Directory \/usr\/share\/roundcubemail\/installer&gt;<\/p>\n<p>Options none<\/p>\n<p>AllowOverride Limit<\/p>\n<p>Require all granted<\/p>\n<p>&lt;\/Directory&gt;<\/p>\n<p># Those directories should not be viewed by Web clients.<\/p>\n<p>&lt;Directory \/usr\/share\/roundcubemail\/bin\/&gt;<\/p>\n<p>Order Allow,Deny<\/p>\n<p>Deny from all<\/p>\n<p>&lt;\/Directory&gt;<\/p>\n<p>&lt;Directory \/usr\/share\/roundcubemail\/plugins\/enigma\/home\/&gt;<\/p>\n<p>Order Allow,Deny<\/p>\n<p>Deny from all<\/p>\n<p>&lt;\/Directory&gt;<\/p>\n<p>Restart Apache:<\/p>\n<p>systemctl restart httpd.service<\/p>\n<p>sekarang kita buat database untuk roundcube mail, dengan perintah sebagai berikut:<\/p>\n<p>mysql -u root -p<\/p>\n<p>pada mariadb prompt gunakan :<\/p>\n<p>CREATE DATABASE roundcubedb;<br \/>\nCREATE USER\u00a0roundcubeuser@localhost IDENTIFIED BY &#8217;roundcubepassword&#8217;;<br \/>\nGRANT ALL PRIVILEGES on roundcubedb.* to\u00a0roundcubeuser@localhost ;<br \/>\nFLUSH PRIVILEGES;<br \/>\nexit<\/p>\n<p>Rubah tanda tuisan meraha sesuai dengan keinginan anda. Sekarang kita akan menginstall melalui web brosere pada alamat \u00a0http:\/\/103.233.147.236\/webmail\/installer<\/p>\n<p><a href=\"https:\/\/i0.wp.com\/www.howtoforge.com\/images\/perfect_server_centos_7_1_x86_64_apache2_dovecot_ispconfig3\/big\/roundcubemail.png?ssl=1\"><img data-recalc-dims=\"1\" decoding=\"async\" src=\"https:\/\/i0.wp.com\/acahya.web.id\/wp-content\/uploads\/2018\/11\/112918_0628_ThePerfectS16.png?w=1080\" alt=\"\" border=\"0\" \/><\/a><\/p>\n<p>Jalankan perintah berikut dan copy konfigurasi filenya kedalam putty :<\/p>\n<p>nano \/etc\/roundcubemail\/config.inc.php<\/p>\n<p>&lt;?php<\/p>\n<p>\/* Local configuration for Roundcube Webmail *\/<\/p>\n<p>\/\/ &#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;-<\/p>\n<p>\/\/ SQL DATABASE<\/p>\n<p>\/\/ &#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;-<\/p>\n<p>\/\/ Database connection string (DSN) for read+write operations<\/p>\n<p>\/\/ Format (compatible with PEAR MDB2): db_provider:\/\/user:password@host\/database<\/p>\n<p>\/\/ Currently supported db_providers: mysql, pgsql, sqlite, mssql or sqlsrv<\/p>\n<p>\/\/ For examples see http:\/\/pear.php.net\/manual\/en\/package.database.mdb2.intro-dsn.php<\/p>\n<p>\/\/ NOTE: for SQLite use absolute path: &#8216;sqlite:\/\/\/\/full\/path\/to\/sqlite.db?mode=0646&#8217;<\/p>\n<p>$config[&#8216;db_dsnw&#8217;] = &#8216;mysql:\/\/roundcubeuser:roundcubepassword@localhost\/roundcubedb&#8217;;<\/p>\n<p>\/\/ &#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;-<\/p>\n<p>\/\/ IMAP<\/p>\n<p>\/\/ &#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;-<\/p>\n<p>\/\/ The mail host chosen to perform the log-in.<\/p>\n<p>\/\/ Leave blank to show a textbox at login, give a list of hosts<\/p>\n<p>\/\/ to display a pulldown menu or set one host as string.<\/p>\n<p>\/\/ To use SSL\/TLS connection, enter hostname with prefix ssl:\/\/ or tls:\/\/<\/p>\n<p>\/\/ Supported replacement variables:<\/p>\n<p>\/\/ %n &#8211; hostname ($_SERVER[&#8216;SERVER_NAME&#8217;])<\/p>\n<p>\/\/ %t &#8211; hostname without the first part<\/p>\n<p>\/\/ %d &#8211; domain (http hostname $_SERVER[&#8216;HTTP_HOST&#8217;] without the first part)<\/p>\n<p>\/\/ %s &#8211; domain name after the &#8216;@&#8217; from e-mail address provided at login screen<\/p>\n<p>\/\/ For example %n = mail.domain.tld, %t = domain.tld<\/p>\n<p>\/\/ WARNING: After hostname change update of mail_host column in users table is<\/p>\n<p>\/\/ required to match old user data records with the new host.<\/p>\n<p>$config[&#8216;default_host&#8217;] = &#8216;localhost&#8217;;<\/p>\n<p>\/\/ provide an URL where a user can get support for this Roundcube installation<\/p>\n<p>\/\/ PLEASE DO NOT LINK TO THE ROUNDCUBE.NET WEBSITE HERE!<\/p>\n<p>$config[&#8216;support_url&#8217;] = &#8221;;<\/p>\n<p>\/\/ this key is used to encrypt the users imap password which is stored<\/p>\n<p>\/\/ in the session record (dan the client cookie if remember password is enabled).<\/p>\n<p>\/\/ please provide a string of exactly 24 chars.<\/p>\n<p>$config[&#8216;des_key&#8217;] = &#8216;FHgaM7ihtMkM1cBwckOcxPdT&#8217;;<\/p>\n<p>\/\/ &#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;-<\/p>\n<p>\/\/ PLUGINS<\/p>\n<p>\/\/ &#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;-<\/p>\n<p>\/\/ List of active plugins (in plugins\/ directory)<\/p>\n<p>$config[&#8216;plugins&#8217;] = array();<\/p>\n<p>\/\/ Set the spell checking engine. Possible values:<\/p>\n<p>\/\/ &#8211; &#8216;googie&#8217; &#8211; the default<\/p>\n<p>\/\/ &#8211; &#8216;pspell&#8217; &#8211; requires the PHP Pspell module dan aspell installed<\/p>\n<p>\/\/ &#8211; &#8216;enchant&#8217; &#8211; requires the PHP Enchant module<\/p>\n<p>\/\/ &#8211; &#8216;atd&#8217; &#8211; install your own After the Deadline server or check with the people at http:\/\/www.afterthedeadline.com before using their API<\/p>\n<p>\/\/ Since Google shut down their public spell checking service, you need to<\/p>\n<p>\/\/ connect to a Nox Spell Server when using &#8216;googie&#8217; here. Therefore specify the &#8216;spellcheck_uri&#8217;<\/p>\n<p>$config[&#8216;spellcheck_engine&#8217;] = &#8216;pspell&#8217;;<\/p>\n<p>Kemudain tekan tombol &#8220;continue&#8221; pada halaman web installer. Pada halaman selanjutnya , tekan tombol &#8220;Initialize database&#8221;.<\/p>\n<p>Terakhir , disable installer Roundecubemail. Rubah file konfigurasi apacheroundcubemail:<\/p>\n<p>nano \/etc\/httpd\/conf.d\/roundcubemail.conf<\/p>\n<p>#<\/p>\n<p># Round Cube Webmail is a browser-based multilingual IMAP client<\/p>\n<p>#<\/p>\n<p>Alias \/roundcubemail \/usr\/share\/roundcubemail<br \/>\nAlias \/webmail \/usr\/share\/roundcubemail<\/p>\n<p># Define who can access the Webmail<\/p>\n<p># You can enlarge permissions once configured<\/p>\n<p>#&lt;Directory \/usr\/share\/roundcubemail\/&gt;<\/p>\n<p># &lt;IfModule mod_authz_core.c&gt;<\/p>\n<p># # Apache 2.4<\/p>\n<p># Require local<\/p>\n<p># &lt;\/IfModule&gt;<\/p>\n<p># &lt;IfModule !mod_authz_core.c&gt;<\/p>\n<p># # Apache 2.2<\/p>\n<p># Order Deny,Allow<\/p>\n<p># Deny from all<\/p>\n<p># Allow from 127.0.0.1<\/p>\n<p># Allow from ::1<\/p>\n<p># &lt;\/IfModule&gt;<\/p>\n<p>#&lt;\/Directory&gt;<\/p>\n<p>&lt;Directory \/usr\/share\/roundcubemail\/&gt;<\/p>\n<p>Options none<\/p>\n<p>AllowOverride Limit<\/p>\n<p>Require all granted<\/p>\n<p>&lt;\/Directory&gt;<\/p>\n<p># Define who can access the installer<\/p>\n<p># keep this secured once configured<\/p>\n<p>&lt;Directory \/usr\/share\/roundcubemail\/installer\/&gt;<\/p>\n<p>&lt;IfModule mod_authz_core.c&gt;<\/p>\n<p># Apache 2.4<\/p>\n<p>Require local<\/p>\n<p>&lt;\/IfModule&gt;<\/p>\n<p>&lt;IfModule !mod_authz_core.c&gt;<\/p>\n<p># Apache 2.2<\/p>\n<p>Order Deny,Allow<\/p>\n<p>Deny from all<\/p>\n<p>Allow from 127.0.0.1<\/p>\n<p>Allow from ::1<\/p>\n<p>&lt;\/IfModule&gt;<\/p>\n<p>&lt;\/Directory&gt;<\/p>\n<p># Those directories should not be viewed by Web clients.<\/p>\n<p>&lt;Directory \/usr\/share\/roundcubemail\/bin\/&gt;<\/p>\n<p>Order Allow,Deny<\/p>\n<p>Deny from all<\/p>\n<p>&lt;\/Directory&gt;<\/p>\n<p>&lt;Directory \/usr\/share\/roundcubemail\/plugins\/enigma\/home\/&gt;<\/p>\n<p>Order Allow,Deny<\/p>\n<p>Deny from all<\/p>\n<p>&lt;\/Directory&gt;<\/p>\n<p>~<\/p>\n<p>Restart Apache:<\/p>\n<p>systemctl restart httpd.service<\/p>\n<p>24 Instalasi ISPConfig 3<\/p>\n<p>Download ISPConfig 3 \u00a0dan install . Installer dari ISPConfig akan melakukan proses konfigurasi semua services seperti Postfix, Dovecot, dll. Kita sekarang juga memungkinkan installer membuat SSL vhost untuk control panel ISPConfig , sehingga pada akhirnya ISPConfig diakses menggunakan https:\/\/\u00a0ataupun\u00a0http:\/\/.<\/p>\n<p>Untuk menginstall ISPConfig 3 dari versi termutakhir ketikan perintah beikut:<\/p>\n<p>cd \/tmp<br \/>\nwget http:\/\/www.ispconfig.org\/downloads\/ISPConfig-3-stable.tar.gz<br \/>\ntar xfz ISPConfig-3-stable.tar.gz<br \/>\ncd ispconfig3_install\/install\/<\/p>\n<p>selanjutnya ketikan perintah berikut :<\/p>\n<p>php -q install.php<\/p>\n<p>perintah diatas akan memulai proses instalaasi ISPConfig 3 :<\/p>\n<p>[root@server1\u00a0install]#\u00a0php\u00a0-q\u00a0install.php<\/p>\n<p>&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8211;<br \/>\n_____\u00a0___________\u00a0\u00a0\u00a0_____\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0__\u00a0_\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0____<br \/>\n|_\u00a0\u00a0\u00a0_\/\u00a0\u00a0___|\u00a0___\u00a0\\\u00a0\/\u00a0\u00a0__\u00a0\\\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\/\u00a0_(_)\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\/__\u00a0\u00a0\\<br \/>\n|\u00a0|\u00a0\\\u00a0`&#8211;.|\u00a0|_\/\u00a0\/\u00a0|\u00a0\/\u00a0\u00a0\\\/\u00a0___\u00a0\u00a0_\u00a0__\u00a0|\u00a0|_\u00a0_\u00a0\u00a0__\u00a0_\u00a0\u00a0\u00a0\u00a0_\/\u00a0\/<br \/>\n|\u00a0|\u00a0\u00a0`&#8211;.\u00a0\\\u00a0\u00a0__\/\u00a0\u00a0|\u00a0|\u00a0\u00a0\u00a0\u00a0\/\u00a0_\u00a0\\|\u00a0&#8216;_\u00a0\\|\u00a0\u00a0_|\u00a0|\/\u00a0_`\u00a0|\u00a0\u00a0|_\u00a0|<br \/>\n_|\u00a0|_\/\\__\/\u00a0\/\u00a0|\u00a0\u00a0\u00a0\u00a0\u00a0|\u00a0\\__\/\\\u00a0(_)\u00a0|\u00a0|\u00a0|\u00a0|\u00a0|\u00a0|\u00a0|\u00a0(_|\u00a0|\u00a0___\\\u00a0\\<br \/>\n\\___\/\\____\/\\_|\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\\____\/\\___\/|_|\u00a0|_|_|\u00a0|_|\\__,\u00a0|\u00a0\\____\/<br \/>\n__\/\u00a0|<br \/>\n|___\/<br \/>\n&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8211;<\/p>\n<p>&gt;&gt;\u00a0Initial\u00a0configuration<\/p>\n<p>Operating\u00a0System:\u00a0Redhat\u00a0or\u00a0compatible,\u00a0unknown\u00a0version.<\/p>\n<p>Following\u00a0will\u00a0be\u00a0a\u00a0few\u00a0questions\u00a0for\u00a0primary\u00a0configuration\u00a0so\u00a0be\u00a0careful.<br \/>\nDefault\u00a0values\u00a0are\u00a0in\u00a0[brackets]\u00a0dan\u00a0can\u00a0be\u00a0accepted\u00a0with\u00a0&lt;ENTER&gt;.<br \/>\nTap\u00a0in\u00a0&#8220;quit&#8221;\u00a0(without\u00a0the\u00a0quotes)\u00a0to\u00a0stop\u00a0the\u00a0installer.<\/p>\n<p>Select\u00a0language\u00a0(en,de)\u00a0[en]:\u00a0&lt;&#8211;\u00a0ENTER<\/p>\n<p>Installation\u00a0mode\u00a0(stdanard,expert)\u00a0[stdanard]:\u00a0&lt;&#8211;\u00a0ENTER<\/p>\n<p>Full\u00a0qualified\u00a0hostname\u00a0(FQDN)\u00a0of\u00a0the\u00a0server,\u00a0eg\u00a0server1.domain.tld\u00a0\u00a0[server1.example.com]:\u00a0&lt;&#8211;\u00a0ENTER<\/p>\n<p>MySQL\u00a0server\u00a0hostname\u00a0[localhost]:\u00a0&lt;&#8211;\u00a0ENTER<\/p>\n<p>MySQL\u00a0root\u00a0username\u00a0[root]:\u00a0&lt;&#8211;\u00a0ENTER<\/p>\n<p>MySQL\u00a0root\u00a0password\u00a0[]:\u00a0Pasword root MySQL Anda<\/p>\n<p>MySQL\u00a0database\u00a0to\u00a0create\u00a0[dbispconfig]:\u00a0&lt;&#8211;\u00a0ENTER<\/p>\n<p>MySQL\u00a0charset\u00a0[utf8]:\u00a0&lt;&#8211;\u00a0ENTER<\/p>\n<p>Generating\u00a0a\u00a02048\u00a0bit\u00a0RSA\u00a0private\u00a0key<br \/>\n&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;.+++<br \/>\n&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;..+++<br \/>\nwriting\u00a0new\u00a0private\u00a0key\u00a0to\u00a0&#8216;smtpd.key&#8217;<br \/>\n&#8212;&#8211;<br \/>\nYou\u00a0are\u00a0about\u00a0to\u00a0be\u00a0asked\u00a0to\u00a0enter\u00a0information\u00a0that\u00a0will\u00a0be\u00a0incorporated<br \/>\ninto\u00a0your\u00a0certificate\u00a0request.<br \/>\nWhat\u00a0you\u00a0are\u00a0about\u00a0to\u00a0enter\u00a0is\u00a0what\u00a0is\u00a0called\u00a0a\u00a0Distinguished\u00a0Name\u00a0or\u00a0a\u00a0DN.<br \/>\nThere\u00a0are\u00a0quite\u00a0a\u00a0few\u00a0fields\u00a0but\u00a0you\u00a0can\u00a0leave\u00a0some\u00a0blank<br \/>\nFor\u00a0some\u00a0fields\u00a0there\u00a0will\u00a0be\u00a0a\u00a0default\u00a0value,<br \/>\nIf\u00a0you\u00a0enter\u00a0&#8216;.&#8217;,\u00a0the\u00a0field\u00a0will\u00a0be\u00a0left\u00a0blank.<br \/>\n&#8212;&#8211;<br \/>\nCountry\u00a0Name\u00a0(2\u00a0letter\u00a0code)\u00a0[XX]:\u00a0&lt;&#8211;\u00a0ENTER<br \/>\nState\u00a0or\u00a0Province\u00a0Name\u00a0(full\u00a0name)\u00a0[]:\u00a0&lt;&#8211;\u00a0ENTER<br \/>\nLocality\u00a0Name\u00a0(eg,\u00a0city)\u00a0[Default\u00a0City]:\u00a0&lt;&#8211;\u00a0ENTER<br \/>\nOrganization\u00a0Name\u00a0(eg,\u00a0company)\u00a0[Default\u00a0Company\u00a0Ltd]:\u00a0&lt;&#8211;\u00a0ENTER<br \/>\nOrganizational\u00a0Unit\u00a0Name\u00a0(eg,\u00a0section)\u00a0[]:\u00a0&lt;&#8211;\u00a0ENTER<br \/>\nCommon\u00a0Name\u00a0(eg,\u00a0your\u00a0name\u00a0or\u00a0your\u00a0server&#8217;s\u00a0hostname)\u00a0[]:\u00a0&lt;&#8211;\u00a0ENTER<br \/>\nEmail\u00a0Address\u00a0[]:\u00a0&lt;&#8211;\u00a0ENTER<br \/>\nConfiguring\u00a0Jailkit<br \/>\nConfiguring\u00a0Dovecot<br \/>\nConfiguring\u00a0Spamassassin<br \/>\nConfiguring\u00a0Amavisd<br \/>\nConfiguring\u00a0Getmail<br \/>\nConfiguring\u00a0Pureftpd<br \/>\nConfiguring\u00a0BIND<br \/>\nConfiguring\u00a0Apache<br \/>\nConfiguring\u00a0Vlogger<br \/>\nConfiguring\u00a0Apps\u00a0vhost<br \/>\nConfiguring\u00a0Bastille\u00a0Firewall<br \/>\nConfiguring\u00a0Fail2ban<br \/>\nInstalling\u00a0ISPConfig<br \/>\nISPConfig\u00a0Port\u00a0[8080]:\u00a0&lt;&#8211;\u00a0ENTER<\/p>\n<p>Do\u00a0you\u00a0want\u00a0a\u00a0secure\u00a0(SSL)\u00a0connection\u00a0to\u00a0the\u00a0ISPConfig\u00a0web\u00a0interface\u00a0(y,n)\u00a0[y]:\u00a0&lt;&#8211;\u00a0ENTER<\/p>\n<p>Generating\u00a0RSA\u00a0private\u00a0key,\u00a04096\u00a0bit\u00a0long\u00a0modulus<br \/>\n&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;++<br \/>\n&#8230;&#8230;.++<br \/>\ne\u00a0is\u00a065537\u00a0(0x10001)<br \/>\nYou\u00a0are\u00a0about\u00a0to\u00a0be\u00a0asked\u00a0to\u00a0enter\u00a0information\u00a0that\u00a0will\u00a0be\u00a0incorporated<br \/>\ninto\u00a0your\u00a0certificate\u00a0request.<br \/>\nWhat\u00a0you\u00a0are\u00a0about\u00a0to\u00a0enter\u00a0is\u00a0what\u00a0is\u00a0called\u00a0a\u00a0Distinguished\u00a0Name\u00a0or\u00a0a\u00a0DN.<br \/>\nThere\u00a0are\u00a0quite\u00a0a\u00a0few\u00a0fields\u00a0but\u00a0you\u00a0can\u00a0leave\u00a0some\u00a0blank<br \/>\nFor\u00a0some\u00a0fields\u00a0there\u00a0will\u00a0be\u00a0a\u00a0default\u00a0value,<br \/>\nIf\u00a0you\u00a0enter\u00a0&#8216;.&#8217;,\u00a0the\u00a0field\u00a0will\u00a0be\u00a0left\u00a0blank.<br \/>\n&#8212;&#8211;<br \/>\nCountry\u00a0Name\u00a0(2\u00a0letter\u00a0code)\u00a0[XX]:\u00a0&lt;&#8211;\u00a0ENTER<br \/>\nState\u00a0or\u00a0Province\u00a0Name\u00a0(full\u00a0name)\u00a0[]:\u00a0&lt;&#8211;\u00a0ENTER<br \/>\nLocality\u00a0Name\u00a0(eg,\u00a0city)\u00a0[Default\u00a0City]:\u00a0&lt;&#8211;\u00a0ENTER<br \/>\nOrganization\u00a0Name\u00a0(eg,\u00a0company)\u00a0[Default\u00a0Company\u00a0Ltd]:\u00a0&lt;&#8211;\u00a0ENTER<br \/>\nOrganizational\u00a0Unit\u00a0Name\u00a0(eg,\u00a0section)\u00a0[]:\u00a0&lt;&#8211;\u00a0ENTER<br \/>\nCommon\u00a0Name\u00a0(eg,\u00a0your\u00a0name\u00a0or\u00a0your\u00a0server&#8217;s\u00a0hostname)\u00a0[]:\u00a0&lt;&#8211;\u00a0ENTER<br \/>\nEmail\u00a0Address\u00a0[]:\u00a0&lt;&#8211;\u00a0ENTER<\/p>\n<p>Please\u00a0enter\u00a0the\u00a0following\u00a0&#8216;extra&#8217;\u00a0attributes<br \/>\nto\u00a0be\u00a0sent\u00a0with\u00a0your\u00a0certificate\u00a0request<br \/>\nA\u00a0challenge\u00a0password\u00a0[]:\u00a0&lt;&#8211;\u00a0ENTER<br \/>\nAn\u00a0optional\u00a0company\u00a0name\u00a0[]:\u00a0&lt;&#8211;\u00a0ENTER<br \/>\nwriting\u00a0RSA\u00a0key<br \/>\nConfiguring\u00a0DBServer<br \/>\nInstalling\u00a0ISPConfig\u00a0crontab<br \/>\nno\u00a0crontab\u00a0for\u00a0root<br \/>\nno\u00a0crontab\u00a0for\u00a0getmail<br \/>\nRestarting\u00a0services\u00a0&#8230;<br \/>\nStopping\u00a0mysqld:\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0[\u00a0\u00a0OK\u00a0\u00a0]<br \/>\nStarting\u00a0mysqld:\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0[\u00a0\u00a0OK\u00a0\u00a0]<br \/>\nShutting\u00a0down\u00a0postfix:\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0[\u00a0\u00a0OK\u00a0\u00a0]<br \/>\nStarting\u00a0postfix:\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0[\u00a0\u00a0OK\u00a0\u00a0]<br \/>\nStopping\u00a0saslauthd:\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0[FAILED]<br \/>\nStarting\u00a0saslauthd:\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0[\u00a0\u00a0OK\u00a0\u00a0]<br \/>\nWaiting\u00a0for\u00a0the\u00a0process\u00a0[1424]\u00a0to\u00a0terminate<br \/>\nShutting\u00a0down\u00a0amavisd:\u00a0Daemon\u00a0[1424]\u00a0terminated\u00a0by\u00a0SIGTERM<br \/>\n[\u00a0\u00a0OK\u00a0\u00a0]<br \/>\namavisd\u00a0stopped<br \/>\nStarting\u00a0amavisd:\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0[\u00a0\u00a0OK\u00a0\u00a0]<\/p>\n<p>Stopping\u00a0clamd.amavisd:\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0[\u00a0\u00a0OK\u00a0\u00a0]<br \/>\nStarting\u00a0clamd.amavisd:\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0[\u00a0\u00a0OK\u00a0\u00a0]<br \/>\nStopping\u00a0Dovecot\u00a0Imap:\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0[\u00a0\u00a0OK\u00a0\u00a0]<br \/>\nStarting\u00a0Dovecot\u00a0Imap:\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0[\u00a0\u00a0OK\u00a0\u00a0]<br \/>\nStopping\u00a0httpd:\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0[\u00a0\u00a0OK\u00a0\u00a0]<br \/>\n[Thu Mar 14 14:12:32 2013] [warn] NameVirtualHost *:80 has no VirtualHosts<br \/>\nStarting\u00a0httpd:\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0[\u00a0\u00a0OK\u00a0\u00a0]<br \/>\nStopping\u00a0pure-ftpd:\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0[\u00a0\u00a0OK\u00a0\u00a0]<br \/>\nStarting\u00a0pure-ftpd:\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0[\u00a0\u00a0OK\u00a0\u00a0]<br \/>\nInstallation\u00a0completed.<br \/>\n[root@server1\u00a0install]#<\/p>\n<p>Pesan error &#8220;usage: doveadm [-Dv] [-f &lt;formatter&gt;] &lt;commdan&gt; [&lt;args&gt;]&#8221; kita biarkan saja, jika pada saat instalasi muncul.<\/p>\n<p>Untuk memperbaiki Mailman errors saat instalasi ISPConfig , Buka \u00a0\/usr\/lib\/mailman\/Mailman\/mm_cfg.py&#8230;<\/p>\n<p>vi \/usr\/lib\/mailman\/Mailman\/mm_cfg.py<\/p>\n<p>&#8230; dan set\u00a0DEFAULT_SERVER_LANGUAGE = &#8216;en&#8217;:<\/p>\n<p>[&#8230;]<\/p>\n<p>#&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;-<\/p>\n<p># The default language for this server.<\/p>\n<p>DEFAULT_SERVER_LANGUAGE = &#8216;en&#8217;<\/p>\n<p>[&#8230;]<\/p>\n<p>Restart Mailman:<\/p>\n<p>systemctl restart mailman.service<\/p>\n<p>Setelah itu kita dapat mengakses ISPConfig 3 melalui alamat :\u00a0http(s):\/\/orizasativa.htp.ac.id:8080\/\u00a0atau\u00a0http(s):\/\/103.233.147.236:8080\u00a0(http\u00a0atau\u00a0https tergantung apa yang kita pilih saat proses instalasi ). Log in dengan menggunakan username\u00a0admin\u00a0dan password\u00a0admin\u00a0(Kita perlu merubahnya pada halaman ISPConfig sesaat setelah kita berhasil login ):<\/p>\n<p>Tampilan saat kita mengakses halaman login ISPConfig 3 :<\/p>\n<p><a href=\"https:\/\/i0.wp.com\/www.howtoforge.com\/images\/perfect_server_centos_7_1_x86_64_apache2_dovecot_ispconfig3\/big\/30.png?ssl=1\"><img data-recalc-dims=\"1\" decoding=\"async\" src=\"https:\/\/i0.wp.com\/acahya.web.id\/wp-content\/uploads\/2018\/11\/112918_0628_ThePerfectS17.png?w=1080\" alt=\"\" border=\"0\" \/><\/a><\/p>\n<p><a href=\"https:\/\/i0.wp.com\/www.howtoforge.com\/images\/perfect_server_centos_7_1_x86_64_apache2_dovecot_ispconfig3\/big\/31.png?ssl=1\"><img data-recalc-dims=\"1\" decoding=\"async\" src=\"https:\/\/i0.wp.com\/acahya.web.id\/wp-content\/uploads\/2018\/11\/112918_0628_ThePerfectS18.png?w=1080\" alt=\"\" border=\"0\" \/><\/a><\/p>\n<p>25 First ISPConfig Login<\/p>\n<p>Setelah itu kita dapat mengakses ISPConfig 3 melalui alamat :\u00a0http(s):\/\/orizasativa.htp.ac.id:8080\/\u00a0atau\u00a0http(s):\/\/103.233.147.236:8080\u00a0(http\u00a0atau\u00a0https tergantung apa yang kita pilih saat proses instalasi ). Log in dengan menggunakan username\u00a0admin\u00a0dan password\u00a0admin\u00a0(Kita perlu merubahnya pada halaman ISPConfig sesaat setelah kita berhasil login ):<\/p>\n<p><a href=\"https:\/\/i0.wp.com\/www.howtoforge.com\/images\/perfect-server-centos-7.0-x86_64-nginx-dovecot-ispconfig-3\/big\/1.png?ssl=1\"><img data-recalc-dims=\"1\" decoding=\"async\" src=\"https:\/\/i0.wp.com\/acahya.web.id\/wp-content\/uploads\/2018\/11\/112918_0628_ThePerfectS19.png?w=1080\" alt=\"\" border=\"0\" \/><\/a><\/p>\n<p><a href=\"https:\/\/i0.wp.com\/www.howtoforge.com\/images\/perfect-server-centos-7.0-x86_64-nginx-dovecot-ispconfig-3\/big\/2.png?ssl=1\"><img data-recalc-dims=\"1\" decoding=\"async\" src=\"https:\/\/i0.wp.com\/acahya.web.id\/wp-content\/uploads\/2018\/11\/112918_0628_ThePerfectS20.png?w=1080\" alt=\"\" border=\"0\" \/><\/a><\/p>\n<p>Selannjutnya kita harus menyesuaikan konfigurasi BIND pada ISPConfig. Click pada &#8220;System&#8221; menu utama atas , pada &#8220;Server config&#8221; klick pada servername.<\/p>\n<p><a href=\"https:\/\/i0.wp.com\/www.howtoforge.com\/images\/perfect-server-centos-7.0-x86_64-nginx-dovecot-ispconfig-3\/big\/8.png?ssl=1\"><img data-recalc-dims=\"1\" decoding=\"async\" src=\"https:\/\/i0.wp.com\/acahya.web.id\/wp-content\/uploads\/2018\/11\/112918_0628_ThePerfectS21.png?w=1080\" alt=\"\" border=\"0\" \/><\/a><\/p>\n<p>Pilih tab DNS pada menu tabulasi diatas :<\/p>\n<p><a href=\"https:\/\/i0.wp.com\/www.howtoforge.com\/images\/perfect-server-centos-7.0-x86_64-nginx-dovecot-ispconfig-3\/big\/9.png?ssl=1\"><img data-recalc-dims=\"1\" decoding=\"async\" src=\"https:\/\/i0.wp.com\/acahya.web.id\/wp-content\/uploads\/2018\/11\/112918_0628_ThePerfectS22.png?w=1080\" alt=\"\" border=\"0\" \/><\/a><\/p>\n<p>dan sesuaikan path DNS dengan konfigurasi sebagai berikut :<\/p>\n<p>BIND zonefiles directory: \/var\/named<br \/>\nBIND named.conf path: \/etc\/named.conf<br \/>\nBIND named.conf.local path: \/etc\/named.conf.local<\/p>\n<p>System sekarang telah siap untuk digunakan.<\/p>\n<p><span style=\"color: #474b51; font-family: Tahoma; font-size: 10pt;\">\u00a0<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"<p>1 Requirements Untuk membuat server Web dengan ISPConfig 3 kita memerlukan beberapa hal sebagai berikut Centos 7.1 minimal server system. Koneksi Internet yang cepat. Kali ini kita menggunakan Virtual Machine dari proxmox dan ketka kita boot dari ISO maka langkah pertama proses intalasi linux centos 7.1 ini adalah memilih bahasa yang akan gunakan. Pilih bahasa [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":682,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_et_pb_use_builder":"","_et_pb_old_content":"","_et_gb_content_width":"","_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2},"jetpack_post_was_ever_published":false},"categories":[3],"tags":[47,46,12,14],"class_list":["post-697","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-linux","tag-apache","tag-centos","tag-linux","tag-server","et-has-post-format-content","et_post_format-et-post-format-standard"],"jetpack_publicize_connections":[],"jetpack_featured_media_url":"https:\/\/i0.wp.com\/acahya.web.id\/wp-content\/uploads\/2018\/11\/112918_0628_ThePerfectS8.png?fit=602%2C455&ssl=1","jetpack_sharing_enabled":true,"jetpack_shortlink":"https:\/\/wp.me\/p9RKEz-bf","jetpack-related-posts":[{"id":301,"url":"https:\/\/acahya.web.id\/?p=301","url_meta":{"origin":697,"position":0},"title":"Instalasi Ubuntu Server 18.04 LTS (Bionic Beaver) Minimal Server","author":"Ade Cahya,S.Kom","date":"May 29, 2018","format":false,"excerpt":"Pada tutorial ini akan dibahas bagaimana langkah instalasi untuk minimal server dengan Ubuntu Server 18.04 LTS. Tutorial ini bertujuan untuk memberikan tuntunan dasar dalam proses intalasi Ubuntu 18.04 LTS. Dalam tutorial ini kita akan menggunakan ubuntu LTS terbaru yang akan mendapatkan dukungan selama 5 tahun, yang mana sangat bagus untuk\u2026","rel":"","context":"In &quot;Linux&quot;","block_context":{"text":"Linux","link":"https:\/\/acahya.web.id\/?cat=3"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/acahya.web.id\/wp-content\/uploads\/2018\/05\/ubuntu.jpg?fit=1200%2C669&ssl=1&resize=350%2C200","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/acahya.web.id\/wp-content\/uploads\/2018\/05\/ubuntu.jpg?fit=1200%2C669&ssl=1&resize=350%2C200 1x, https:\/\/i0.wp.com\/acahya.web.id\/wp-content\/uploads\/2018\/05\/ubuntu.jpg?fit=1200%2C669&ssl=1&resize=525%2C300 1.5x, https:\/\/i0.wp.com\/acahya.web.id\/wp-content\/uploads\/2018\/05\/ubuntu.jpg?fit=1200%2C669&ssl=1&resize=700%2C400 2x, https:\/\/i0.wp.com\/acahya.web.id\/wp-content\/uploads\/2018\/05\/ubuntu.jpg?fit=1200%2C669&ssl=1&resize=1050%2C600 3x"},"classes":[]},{"id":638,"url":"https:\/\/acahya.web.id\/?p=638","url_meta":{"origin":697,"position":1},"title":"Perintah Dasar Linux","author":"Ade Cahya,S.Kom","date":"November 19, 2018","format":false,"excerpt":"Artikel ini akan memberikan pengenalan terhadap beberapa perintah dasar yang dapat anda manfaatkan untuk mengelola server linux anda melalui Shell. Untuk semua perintah linux,\u00a0 kita dapat menekan tombol <tab> sebanyak dua kali untuk melihat kemungkinan perintah yang dapat digunakan. Misalnya apabila ingin mengetahui command apa saja yang dimulai dengan huruf\u2026","rel":"","context":"In &quot;Linux&quot;","block_context":{"text":"Linux","link":"https:\/\/acahya.web.id\/?cat=3"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/acahya.web.id\/wp-content\/uploads\/2018\/11\/cli-wallpaper.png?fit=676%2C467&ssl=1&resize=350%2C200","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/acahya.web.id\/wp-content\/uploads\/2018\/11\/cli-wallpaper.png?fit=676%2C467&ssl=1&resize=350%2C200 1x, https:\/\/i0.wp.com\/acahya.web.id\/wp-content\/uploads\/2018\/11\/cli-wallpaper.png?fit=676%2C467&ssl=1&resize=525%2C300 1.5x"},"classes":[]},{"id":564,"url":"https:\/\/acahya.web.id\/?p=564","url_meta":{"origin":697,"position":2},"title":"Menggunakan Elearning dengan Chamilo","author":"Ade Cahya,S.Kom","date":"September 20, 2018","format":false,"excerpt":"Login dan Registrasi Untuk memulai penggunaan elearning anda harus memiliki beberapa hal yang dibutuhkan yaitu : Browser atau Penjelajah Internet anda dapat menggunakan Google Chrome \u2122, Mozilla Firefox \u2122, atau Safari. Kemudian ketik pada kolom URL : http:\/\/elearning.htp.ac.id Gambar 1 Addressbar pada halaman browser. Maka pada halaman browser akan muncul\u2026","rel":"","context":"In &quot;Software&quot;","block_context":{"text":"Software","link":"https:\/\/acahya.web.id\/?cat=24"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/acahya.web.id\/wp-content\/uploads\/2018\/09\/092018_0107_Menggunakan2.png?fit=602%2C290&ssl=1&resize=350%2C200","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/acahya.web.id\/wp-content\/uploads\/2018\/09\/092018_0107_Menggunakan2.png?fit=602%2C290&ssl=1&resize=350%2C200 1x, https:\/\/i0.wp.com\/acahya.web.id\/wp-content\/uploads\/2018\/09\/092018_0107_Menggunakan2.png?fit=602%2C290&ssl=1&resize=525%2C300 1.5x"},"classes":[]},{"id":68,"url":"https:\/\/acahya.web.id\/?p=68","url_meta":{"origin":697,"position":3},"title":"ISPConfig 3.1 Beta Sudah direlease","author":"Ade Cahya,S.Kom","date":"April 23, 2018","format":false,"excerpt":"Apa yang baru di ISPConfig 3.1 ISPConfig 3.1 adalah ISPConfig kontrol panel generasi terbaru yang telah di desain ulang antar muka dan featur, berikut beberapa pembaharuan yang ada : Antar buka baru yang lebih responsif menggunakan framewok bootstrap. Antar muka menjadi lebih mudah digunakan terutama menggunakan memlalui smartphone atau tablet.\u2026","rel":"","context":"In &quot;Linux&quot;","block_context":{"text":"Linux","link":"https:\/\/acahya.web.id\/?cat=3"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/acahya.web.id\/wp-content\/uploads\/2018\/04\/billing_dashboard.png?fit=1068%2C739&ssl=1&resize=350%2C200","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/acahya.web.id\/wp-content\/uploads\/2018\/04\/billing_dashboard.png?fit=1068%2C739&ssl=1&resize=350%2C200 1x, https:\/\/i0.wp.com\/acahya.web.id\/wp-content\/uploads\/2018\/04\/billing_dashboard.png?fit=1068%2C739&ssl=1&resize=525%2C300 1.5x, https:\/\/i0.wp.com\/acahya.web.id\/wp-content\/uploads\/2018\/04\/billing_dashboard.png?fit=1068%2C739&ssl=1&resize=700%2C400 2x, https:\/\/i0.wp.com\/acahya.web.id\/wp-content\/uploads\/2018\/04\/billing_dashboard.png?fit=1068%2C739&ssl=1&resize=1050%2C600 3x"},"classes":[]},{"id":893,"url":"https:\/\/acahya.web.id\/?p=893","url_meta":{"origin":697,"position":4},"title":"Ubuntu 20.04 Tanggal Rilis &#038; Fitur Terbaru","author":"Ade Cahya,S.Kom","date":"March 5, 2020","format":false,"excerpt":"Dengan di Rilisnya Ubuntu 19.10 , perhatian segera teralihkan kepada Update Utama : Ubuntu 20.04 LTS yang mana akan segera di rilis pada 23 April 2020. Nah kita sudah mengetahui kapan Ubuntu 20.04 akan di rilis, dan berapa lama dukungan yang akan diberikan, bahkan beberapa fitur unggulan juga telah diketahui\u2026","rel":"","context":"In &quot;Linux&quot;","block_context":{"text":"Linux","link":"https:\/\/acahya.web.id\/?cat=3"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/acahya.web.id\/wp-content\/uploads\/2020\/03\/030520_0211_Ubuntu2004T1.jpg?fit=1050%2C600&ssl=1&resize=350%2C200","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/acahya.web.id\/wp-content\/uploads\/2020\/03\/030520_0211_Ubuntu2004T1.jpg?fit=1050%2C600&ssl=1&resize=350%2C200 1x, https:\/\/i0.wp.com\/acahya.web.id\/wp-content\/uploads\/2020\/03\/030520_0211_Ubuntu2004T1.jpg?fit=1050%2C600&ssl=1&resize=525%2C300 1.5x, https:\/\/i0.wp.com\/acahya.web.id\/wp-content\/uploads\/2020\/03\/030520_0211_Ubuntu2004T1.jpg?fit=1050%2C600&ssl=1&resize=700%2C400 2x, https:\/\/i0.wp.com\/acahya.web.id\/wp-content\/uploads\/2020\/03\/030520_0211_Ubuntu2004T1.jpg?fit=1050%2C600&ssl=1&resize=1050%2C600 3x"},"classes":[]},{"id":779,"url":"https:\/\/acahya.web.id\/?p=779","url_meta":{"origin":697,"position":5},"title":"Aplikasi Stok Obat pada Apotik dengan Ms Access 2013","author":"Ade Cahya,S.Kom","date":"January 11, 2019","format":false,"excerpt":"aplikasi stok obat pada apotik Untuk membuat Aplikasi penjualan dan pembelian obat maka ada beberapa tabel yang perlu kita buat sebagai berikut : membuat design tabel Tabel Obat Tabel Suplier Tabel Pelanggan Tabel Penjualan Tabel Penjualan_detail Pada penjualan detail kita tidak menggunakan primary Key Tabel Pembelian Tabel Pembelian_detail membuat relasi\u2026","rel":"","context":"In &quot;RMIK&quot;","block_context":{"text":"RMIK","link":"https:\/\/acahya.web.id\/?cat=5"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/acahya.web.id\/wp-content\/uploads\/2019\/01\/011119_0055_AplikasiSto1.png?fit=864%2C677&ssl=1&resize=350%2C200","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/acahya.web.id\/wp-content\/uploads\/2019\/01\/011119_0055_AplikasiSto1.png?fit=864%2C677&ssl=1&resize=350%2C200 1x, https:\/\/i0.wp.com\/acahya.web.id\/wp-content\/uploads\/2019\/01\/011119_0055_AplikasiSto1.png?fit=864%2C677&ssl=1&resize=525%2C300 1.5x, https:\/\/i0.wp.com\/acahya.web.id\/wp-content\/uploads\/2019\/01\/011119_0055_AplikasiSto1.png?fit=864%2C677&ssl=1&resize=700%2C400 2x"},"classes":[]}],"_links":{"self":[{"href":"https:\/\/acahya.web.id\/index.php?rest_route=\/wp\/v2\/posts\/697","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/acahya.web.id\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/acahya.web.id\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/acahya.web.id\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/acahya.web.id\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=697"}],"version-history":[{"count":2,"href":"https:\/\/acahya.web.id\/index.php?rest_route=\/wp\/v2\/posts\/697\/revisions"}],"predecessor-version":[{"id":699,"href":"https:\/\/acahya.web.id\/index.php?rest_route=\/wp\/v2\/posts\/697\/revisions\/699"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/acahya.web.id\/index.php?rest_route=\/wp\/v2\/media\/682"}],"wp:attachment":[{"href":"https:\/\/acahya.web.id\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=697"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/acahya.web.id\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=697"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/acahya.web.id\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=697"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}