Deutsche Sprache

Tastatur nicht erkennen: german -> german

Rechnername: NEUERUBUNTUSERVER

Neuer Benutzer: joe

Passwort: JOEPASSWORT

Ordner nicht verschlüsseln

Zeitzone Berlin bestätigen

Festplatte: geführte Installation LVM

Sicherheitsupdate: automatisch installieren

Softwareauswahl: LAMP
Server

                 Samba File

                 OpenSSH server

MySQL Root
Passwort: ROOTMYSQLPASSWORT

sudo bash

passwd

apt-get install r8168-dkms

PermitRootLogin
yes

PubkeyAuthentication
yes

AuthorizedKeysFile      %h/.ssh/authorized_keys

PasswordAuthentication
no

ssh-keygen
-b 4096

cat
id_rsa.pub >> authorized_keys

chmod 400 <client>

ssh -i <client> Servername

Host BACKUPSERVER

        User root

        Hostname BACKUPSERVER.dyndns.org

        IdentityFile ~/.ssh/BACKUPSERVER.private

ssh BACKUPSERVER

scp test BACKUPSERVER://tmp

apt-get
update

apt-get
upgrade

apt-get
dist-upgrade

service ssh restart

alias df=’df -h’

alias du=’du -h’

alias free=’free
-h’

alias
dmesg=’dmesg -T’

alias ll=’ls
-alFh’

alias la=’ls
-Ah’

alias l=’ls
-CFh’

apt-get
install ntp

rm /etc/network/interfaces

auto lo

iface lo
inet loopback

# The
primary network interface

auto eth0

iface eth0
inet static

address 172.10.10.6

netmask
255.255.255.0

network 172.10.10.0

gateway 172.10.10.5

dns-nameservers
172.10.10.1 8.8.8.8

dns-search DOMÄNE.LAND

127.0.0.1       localhost localhost.DOMÄNE.LAND

172.10.10.6     NEUERUBUNTUSERVER.DOMÄNE.LAND NEUERUBUNTUSERVER

# The
following lines are desirable for IPv6 capable hosts

::1     localhost ip6-localhost ip6-loopback

ff02::1
ip6-allnodes

ff02::2 ip6-allrouters

reboot

apt-get
update

apt-get
upgrade

apt-get
dist-upgrade

apt-get
install -y samba krb5-user winbind libnss-winbind libpam-winbind ldb-tools

rm
/etc/samba/smb.conf

samba-tool
domain join DOMÄNE.LAND DC -Uadministrator –realm=DOMÄNE.LAND

samba-tool
dns add 172.10.10.1 DOMÄNE.LAND NEUERUBUNTUSERVER
a 172.10.10.6 -Uadministrator

host -t A NEUERUBUNTUSERVER.DOMÄNE.LAND

dig NEUERUBUNTUSERVER.DOMÄNE.LAND
@172.10.10.1

ldbsearch
-H /var/lib/samba/private/sam.ldb ‘(invocationid=*)’ –cross-ncs objectguid

samba-tool
dns add 172.10.10.1 _msdcs.DOMÄNE.LAND cee04628-a406-474f-8aee-6a5a104788eb CNAME NEUERUBUNTUSERVER.DOMÄNE.LAND -Uadministrator

passwd:         compat winbind

group:          compat
winbind

# Global
parameters

[global]

   workgroup = DOMÄNE

   realm = DOMÄNE.LAND

   netbios name = NEUERUBUNTUSERVER

   server role = active directory domain
controller

   interfaces=172.10.10.6

   bind interfaces only=yes

   registry shares = yes

   server string = Samba Server Version %v

   socket options = TCP_NODELAY IPTOS_LOWDELAY
SO_RCVBUF=131072 SO_SNDBUF=1310$

   use sendfile = true

   idmap config * : backend = tdb

   idmap config * : range = 100000-299999

   idmap config DOMÄNE : backend = rid

   idmap config DOMÄNE : range = 10000-99999

   winbind enum users = yes

   winbind enum groups = yes

   winbind use default domain = yes

   winbind refresh tickets = yes

   restrict anonymous = 2

   log file = /var/log/samba/log.%m

   max log size = 50

   template shell = /bin/bash

   template homedir = /daten/home/%u

   dns forwarder = 8.8.8.8

   admin users = WINDOWSUSER

   ldap server require strong auth = no

   client ldap sasl wrapping = plain

[netlogon]

        path = /var/lib/samba/sysvol/DOMÄNE.LAND/scripts

        read only = No

[sysvol]

        path = /var/lib/samba/sysvol

        read only = No

[logging]

    default = FILE:/var/log/krb5libs.log

    kdc = FILE:/var/log/krb5kdc.log

    admin_server = FILE:/var/log/kadmind.log

[libdefaults]

    default_realm = DOMÄNE.LAND

    ticket_lifetime = 24h

    forwardable = yes

    dns_lookup_realm = true

    dns_lookup_kdc = true

reboot

apt-get install isc-dhcp-server

# option
definitions common to all supported networks…

option
domain-name DOMÄNE.LAND;

option domain-name-servers ALTERWINDOWSSERVER.DOMÄNE.LAND, NEUERUBUNTUSERVER.DOMÄNE.LAND, WEITERUBUNTUSERVER.DOMÄNE.LAND;

subnet 172.10.10.0 netmask 255.255.255.0 {

  range 172.10.10.60
172.10.10.80;

  option routers 172.10.10.5;

  option domain-name DOMÄNE.LAND;

  option domain-name-servers 172.10.10.6, 172.10.10.1;

  option broadcast-address 172.10.10.255;

  default-lease-time 28800;

  max-lease-time 43200;

  authoritative;

}

dhcp-lease-list
–lease /var/lib/dhcp/dhcpd.leases

kinit WINDOWSUSER
-> AN DOMÄNE
ANMELDEN

klist -> ÜBERPRÜFEN

getent passwd -> USER, HIER MÜSSEN DIE DOMÄENN USER
STHEEN

id WINDOWSUSER

DCDIAG /Fix

samba-tool
drs showrepl

samba-tool
drs replicate BACKUPSERVER  NEUERUBUNTUSERVER
dc=DOMÄNE,dc=de

samba_dnsupdate –verbose

fdisk /dev/xvdb

mkfs -t ext4 /dev/xvdb1

mkdir /daten

/dev/xvdb1
/daten  ext4    defaults        0
2

net conf
addshare C$ / writeable=y guest_ok=n System

chmod 700 /daten/home -R

mkdir –m
775 /daten/home

net conf
addshare home /daten/home writeable=yes guest_ok=no Home
Verzeichnisse

net conf
setparm home browsable no

net conf
setparm home create mask 700

net conf
setparm home directory mask 700 

mkdir -m 1770 /daten/profile

chgrp ‘DOMÄNE-benutzer’ /daten/profile

net conf addshare profile /daten/profile writeable=y
guest_ok=n Benutzer Profile

net conf setparm profile browsable
no

net conf
setparm profile profile acls yes

fdisk –l

fdisk /dev/sdc

g

w

fdisk /dev/sdc

n

1

T

28

w

mdadm
–create /dev/md0 –auto md –level=0 –raid-devices=2 /dev/sdb1 /dev/sdc1

mkfs.ext4 -b 4096 -E stride=128,stripe-width=384 /dev/md0

mdadm –detail –scan

ARRAY
/dev/md0 UUID=f5bfac4f-2ca3-475f-ac21-137801c42022

update-initramfs -u

/dev/md0 /daten/tc        ext4     defaults 0        2        nofail

apt-get
install apache2 mysql-server php7.0-mysql libapache2-mod-php7.0

[client]

default-character-set=utf8

[mysql]

default-character-set=utf8

[mysqld]

collation-server
= utf8_unicode_ci

init-connect=’SET
NAMES utf8′

character-set-server
= utf8

bind-address
= 0.0.0.0

service mysql restart

Mkdir /daten/webs

<Directory
/daten/webs/>

        Options Indexes FollowSymLinks

        AllowOverride All

        Require all granted

</Directory>

ServerSignature Off

ServerTokens Prod

<VirtualHost
*:80>

        ServerName homepage.DOMÄNE.LAND

         ServerAlias  HOMEPAGE.blogdns.com

        ServerAdmin WINDOWSUSER@DOMÄNE.LAND

        DocumentRoot /daten/webs/homepage

        <Directory /daten/webs/homepage/>

                Options -Indexes +FollowSymLinks
+MultiViews

                AllowOverride All

                Order allow,deny

                allow from all

        </Directory>

        ErrorLog /var/log/apache2/error.log

        LogLevel warn

        CustomLog /var/log/apache2/access.log
combined

        ServerSignature On

</VirtualHost>

mkdir
/daten/webs

mkdir
/daten/webs/homepage

touch
/daten/webs/homepage/.htaccess

chmod 664
/daten/webs/homepage/.htaccess

chown
www-data:www-data /daten/webs –R

a2enmod
rewrite

a2ensite
homepage.conf

a2enmod
headers

service apache2 restart

apt-get install ddclient

apt-get install php7.0

apt install php7.0-gd

apt-get install php7.0-ldap

upload_max_filesize
= 64M

post_max_size
= 64M

max_execution_time
= 300

define(‘DB_HOST‘, ‚‘172.10.10.6‘);

define(‘WP_SITEURL‘,‘http://HOMEPAGE.blogdns.com‘);

define(‘WP_HOME‘,‘http://HOMEPAGE.blogdns.com‘);

…

/** Ermöglicht ein Update ohne FTP Account. */

define(‘FS_METHOD’,’direct’);

define(‘WP_MEMORY_LIMIT’,
’64M’);

mysql -u root -p

use mysql;

update user
set host=’%’ where user=’root’;

update db
set host=’%’ where user=’root’;

CREATE
DATABASE wp_ball;

CREATE USER
wp_balluser IDENTIFIED BY ‘password’;

GRANT ALL
PRIVILEGES ON wp_ball.* TO wp_balluser;

FLUSH
PRIVILEGES;

exit

SET
SQL_SAFE_UPDATES=0;

set @alt=’GEHOSTETEWEBSITE2.dyndns.org/GEHOSTETEWEBSITE2‘;

set @neu=’GEHOSTETEWEBSITE2.blogdns.com’;

UPDATE
wp_posts SET post_content =

replace(post_content,

        @alt,

        @neu);

UPDATE
wp_comments SET comment_content =

replace(comment_content,       

        @alt,

        @neu);

UPDATE
wp_comments SET comment_author_email =

replace(comment_author_email,

                 @alt,

        @neu);

UPDATE
wp_options SET option_value =

replace(option_value,

                 @alt,

        @neu);

UPDATE
wp_postmeta SET meta_value =

replace(meta_value,

                 @alt,

        @neu);

SET SQL_SAFE_UPDATES=1;

pecl install zip

apt-install php-pear

apt
install php7.0-dev

extension=zip.so

du * -hs 2>/tmp/x

apt-get
install pptpd

localip 172.10.10.1

remoteip 172.10.10.234-238,172.10.10.245

ms-dns 172.10.10.6

ms-dns 8.8.8.8

#
client        server  secret                  IP addresses

VPN     *
asdf    *

ip route add 172.10.10.8
dev ppp0

route add
-net 192.168.10.0 netmask 255.255.255.0 gw 172.10.10.6

route add
192.168.10.1 172.10.10.6

route add
192.168.10.2 172.10.10.6

apt-get
install openvpn easy-rsa

cp
/usr/share/doc/openvpn/examples/sample-config-files/server.conf.gz /etc/openvpn/

gunzip
/etc/openvpn/server.conf.gz

cp -r
/usr/share/easy-rsa /etc/openvpn/easy-rsa2

export
KEY_COUNTRY=DE

export
KEY_PROVINCE=Berlin

export
KEY_CITY=Berlin

export KEY_ORG=FIRMA

export KEY_EMAIL=info@webmaster

export KEY_EMAIL=info@webmaster

export KEY_CN=WEITERUBUNTUSERVER

export
KEY_NAME=WEITERUBUNTUSERVER

export
KEY_OU=IT

export
PKCS11_MODULE_PATH=hallo

export
PKCS11_PIN=1234

export
KEY_ALTNAMES=Irgendwas

cd
/etc/openvpn/easy-rsa2

cp
openssl-x.x.x.cnf openssl.cnf

source
./vars

sudo -E
./clean-all

sudo -E ./build-ca

sudo -E ./build-key-server server

sudo -E ./build-key ersterclient

sudo -E ./build-key ersterclient

sudo -E
./build-dh

cd
/etc/openvpn/easy-rsa2/keys

tar -cf
client1.tar client1.key client1.crt ca.crt

ca
./easy-rsa2/keys/ca.crt

cert
./easy-rsa2/keys/server.crt

key ./easy-rsa2/keys/server.key    # Diese Datei geheim halten.

dh
./easy-rsa2/keys/dh2048.pem     #
Diffie-Hellman-Parameter

apt-get install automysqlbackup

mkdir
/daten/backup

USERNAME auskommentieren

PASSWORD auskommentieren

BACKUPDIR=”/daten/backup/automysqlbackup”

crontab –e

10       1        *        *        *        /usr/sbin/automysqlbackup

apt-get install duplicity

crontab –e

15       1        *        *        0        rm /daten/backup/etc/*

16       1        *        *        0        /usr/bin/duplicity full –-no-encryption
/etc file:///daten/backup/duplicity/etc

15       1        *        *        1-6      /usr/bin/duplicity –-no-encryption /etc file:///daten/backup/duplicity/etc

duplicity –-list-current-files file:///daten/backup/duplicity/etc
|grep „gesuchte Datei“

duplicity
–file-to-restore „DATEI“ file:///daten/backup/duplicity/etc ZIELNAME

duplicity file:///daten/backup/etc
ZIELORDNER

#
Hiermit wird die installierte Basis gesichert.

dpkg –get-selections | awk
‘!/deinstall|purge|hold/ {print $1}’ >
/daten/backup/system/packages.list.save

apt-mark showauto   >
/daten/backup/system/package-states-auto

apt-mark showmanual >
/daten/backup/system/package-states-manual

find /etc/apt/sources.list* -type f -name
‘*.list’ -exec bash -c ‘echo -e \n## $1 ;grep
^[[:space:]]*[^#[:space:]] ${1}’ _ {} \; >
/daten/backup/system/sources.list.save

#
Hier die Befehle zum Wiederherstellen

#xargs
-a packages.list.save sudo apt-get install

#xargs -a package-states-auto sudo
apt-mark auto

#xargs -a package-states-manual sudo
apt-mark manual

#Hier
zum Runterladen vom anderen Rechner

#apt-get -q -y –print-uris install PAKETNAME |
grep ^\’ | awk ‘{print $1}’ | tr -d ‘ > wget.list

#wget
-i wget.list

mount -t cifs //pc34/e /mnt -o username=WINDOWSUSER,password=PASSWORT

cd /tmp

wget https://www.truecrypt71a.com/dl/truecrypt-7.1a-linux-console-x64.tar.gz

tar xvfz truecrypt-7.1a-linux-console-x64.tar.gz

./truecrypt-7.1a-setup-console-x64

a2enmod dav

a2enmod dav_fs

a2enmod ldap

a2enmod
authnz_ldap

<VirtualHost
*:80>

        ServerName WEBDAVADRESSE.DOMÄNE.LAND

         ServerAlias WEBDAVADRESSE.simple-url.com

        ServerAdmin WINDOWSUSER@DOMÄNE.LAND

        DocumentRoot /daten

        <Directory /daten/>

                DAV on

                DirectoryIndex disabled

                Options Indexes FollowSymLinks

                 AllowOverride
None

                AuthName AD
Anmeldung

                AuthBasicProvider ldap

                AuthType Basic

                AuthLDAPGroupAttribute member

                AuthLDAPGroupAttributeIsDN On

                AuthLDAPURL ldap://ALTERWINDOWSSERVER.DOMÄNE.LAND:389/ou=LOKATION,dc=DOMÄNE,dc=de?sAMAccountName?sub?(objectClass=*)

                AuthLDAPBindDN
cn=apache,cn=users,DC=DOMÄNE,DC=de

                AuthLDAPBindPassword APACHEPASSWORT

                require valid-user

        </Directory>

        ErrorLog /var/log/apache2/error.log

        LogLevel debug

        CustomLog /var/log/apache2/access.log
combined

        ServerSignature On

</VirtualHost>

a2ensite WEBDAVADRESSE.conf

http://wpad/wpad.dat

apt
install sysstat

ldap_servers: ldap://NEUERUBUNTUSERVER.DOMÄNE.LAND:389

       ldap_search_base: OU=LOKATION,DC=DOMÄNE,DC=de

       ldap_filter: sAMAccountName=%u

       ldap_bind_dn:
cn=sogo,cn=Users,DC=DOMÄNE,DC=de

       ldap_password:
asdfsdöhew34ersadlfjksdflösaf

hosts = NEUERUBUNTUSERVER.DOMÄNE.LAND:389

dn = cn=sogo,cn=Users,DC=DOMÄNE,DC=de

dnpass =
asdfsdöhew34ersadlfjksdflösaf

base = OU=LOKATION,DC=DOMÄNE,DC=de

auth_bind =
yes

scope =
subtree

user_attrs
= sAMAccountName=home=/home/mailboxes/%$,=uid=501,=gid=501

pass_attrs
= sAMAccountName=user

user_filter
= (&(objectclass=person)(|(sAMAccountName=%n)(mail=%n@DOMÄNE.LAND)(otherMailbox=%n@DOMÄNE.LAND)))

pass_filter
= (&(objectclass=person)(|(sAMAccountName=%n)(mail=%n@DOMÄNE.LAND)(othermailbox=%n@DOMÄNE.LAND)))

default_pass_scheme
= plain

ldap_version
= 3

# Enable installed protocols

!include_try /usr/share/dovecot/protocols.d/*.protocol

postmaster_address=WINDOWSUSER@DOMÄNE.LAND

# AUTH

disable_plaintext_auth
= no

#no
damit auch unverschlüsselte zugänge gehen

auth_master_user_separator = *

auth_mechanisms = plain

# master users

passdb {

driver = passwd-file

master = yes

args = /etc/dovecot/master-users

# Unless you’re using PAM, you probably still want the destination user
to

# be looked up from passdb that it really exists. pass=yes does that.

#pass = yes

}

# ldap users

passdb {

driver = ldap

args = /etc/dovecot/dovecot-ldap-ZEG.conf.ext

}

userdb {

driver = ldap

args = /etc/dovecot/dovecot-ldap-ZEG.conf.ext

}

# trust on 127.0.0.1

passdb {

 driver = static

 args = nopassword=y allow_nets=127.0.0.1/32

}

# LOGGING

auth_verbose = yes

mail_debug = no

plugin {

# Events to log. Also available: flag_change append

#mail_log_events = delete undelete expunge copy mailbox_delete
mailbox_rename

# Available fields: uid, box, msgid, from, subject, size, vsize, flags

# size and vsize are available only for expunge and copy events.

#mail_log_fields = uid box msgid size

}

# MAIL and NAMESPACES

#mail_location = maildir:~/maildir

mail_home = /home/mailboxes/home/

# HOMEPAGE 161017: hier den Usernamen (%n)
eintragen, damit ein Home Ordner angelegt wird

mail_location =
maildir:/home/mailboxes/%n/

mail_uid = vmail

mail_gid = vmail

mail_plugins = acl quota

namespace {

type = private

separator = /

prefix =

inbox = yes

mailbox INBOX {

auto = create

}

}

namespace {

type = shared

separator = /

prefix = shared/%%u/

location = maildir:%%h/maildir:INDEX=~/maildir/shared/%%u

subscriptions = no

list = children

}

# MASTER

service imap-login {

inet_listener imap {

#port = 143

}

inet_listener imaps {

#port = 993

#ssl = yes

}

# this is suboptimal since imap and imaps will also accept nopass

inet_listener imap-nopass {

port = 144

}

}

service pop3-login {

inet_listener pop3 {

#port = 110

}

inet_listener pop3s {

#port = 995

#ssl = yes

}

}

service lmtp {

unix_listener lmtp {

#mode = 0666

}

# Create inet listener only if you can’t use the above UNIX socket

inet_listener lmtp {

# Avoid making LMTP visible for the entire internet

address = 127.0.0.1

port = 24

}

}

service imap {

executable = imap postlogin

}

service auth {

# auth_socket_path points to this userdb socket by default. It’s
typically

# used by dovecot-lda, doveadm, possibly imap process, etc. Its default

# permissions make it readable only by root, but you may need to relax
these

# permissions. Users that have access to this socket are able to get a
list

unix_listener auth-userdb {

mode = 0660

user = root

group = vmail

}

}

service postlogin {

executable = script-login -d rawlog

unix_listener postlogin {

}

}

# SSL/TLS support: yes, no,
required. <doc/wiki/SSL.txt>

ssl = no

#ssl_cert =
</etc/ssl/certs/dovecot.pem

#ssl_key =
</etc/ssl/private/dovecot.pem

# LDA

quota_full_tempfail = yes

protocol lda {

# Space separated list of plugins to load (default is global
mail_plugins).

#mail_plugins = $mail_plugins sieve

}

# PROTOCOLS

protocol imap {

mail_plugins = $mail_plugins autocreate imap_acl imap_quota

}

protocol lmtp {

mail_plugins = $mail_plugins sieve

}

service managesieve-login {

inet_listener sieve {

port = 4190

address = 127.0.0.1

}

}

service managesieve {

}

protocol sieve {

}

plugin {

acl = vfile

acl_shared_dict = file:/var/spool/dovecot/shared-mailboxes.db

quota_rule = *:storage=5G

quota_rule2 = Trash:storage=+100M

quota = dict:::file:%h/dovecot-quota

sieve = /etc/dovecot/sieve/default.sieve

sieve_dir = /etc/dovecot/sieve

autocreate = Trash

autosubscribe = Trash

autocreate2 = Drafts

autosubscribe2 = Drafts

autocreate3 = Sent

}

mkdir
/home/mailboxes

chmod a+rwx
/home/mailboxes

apt-get install postfix libsasl2-modules bsd-mailx

dpkg-reconfigure
postfix

myhostname =
postamt.DOMÄNE.LAND

mydomain = DOMÄNE.LAND

relay_domains = $mydomain

relayhost = HOSTPOSTAUSGANG.webpack.hosteurope.de

smtp_sasl_auth_enable = yes

# noplaintext
weglassen, wenn Passwörter im Klartext übertragen werden müssen:

# (nicht
empfohlen, nur wenn’s anders nicht funktioniert)

smtp_sasl_security_options = noanonymous

smtp_sasl_password_maps =
hash:/etc/postfix/sasl_password

# nächste
zeile damit mail von den clients geschickt warden kann

mynetworks = 172.10.10.0/24

HOSTPOSTAUSGANG.webpack.hosteurope.de
HOSTEUROPEUSER:HOSTEUROPEPASSWORT

chmod 600 /etc/postfix/sasl_password

postmap
hash:/etc/postfix/sasl_password

service
postfix restart

# Global
parameters

[global]

  server role = active directory domain
controller

  workgroup = DOMÄNE

  realm = DOMÄNE.LAND

  netbios name = postamt

  passdb backend = samba4

  dns forwarder = 172.10.10.6

  ### Configuration required by OpenChange
server ###

  dsdb:schema update allowed = true

  dcerpc endpoint servers = epmapper,
mapiproxy, dnsserver

  dcerpc_mapiproxy:server = true

  dcerpc_mapiproxy:interfaces =
exchange_emsmdb, exchange_nsp, exchange_ds_rfr

  mapistore:namedproperties = mysql

  namedproperties:mysql_user = openchange-user

  namedproperties:mysql_pass = openchange123

  namedproperties:mysql_host = localhost

  namedproperties:mysql_db = openchange

  mapistore:indexing_backend =
mysql://openchange-user:openchange123@localhost/$

  mapiproxy:openchangedb =
mysql://openchange-user:openchange123@localhost/open$

  ### Configuration required by OpenChange
server ###

[netlogon]

  path =
/var/lib/samba/sysvol/example.com/scripts

  read only = No

[sysvol]

  path = /var/lib/samba/sysvol

  read only = No

samba-tool
domain join DOMÄNE.LAND DC -UDOMÄNE\administrator

samba-tool dns add NEUERUBUNTUSERVER DOMÄNE.LAND
postamt A 172.10.10.7
-Uadministrator

samba-tool
domain provision –realm=DOMÄNE.LAND
\

          –domain=DOMÄNE \

          –adminpass=’ letmein!23456′ \

          –server-role=’domain controller’

samba-tool
user setexpiry administrator –noexpiry

echo Nachricht | mutt -s Betreff
empfaenger@domain.tld -a datei.jpeg

cd
/home/mailboxes

mv WINDOWSUSER WINDOWSUSER.alt

ln -s WINDOWSUSER WINDOWSUSER

chown
501:501 WINDOWSUSER

apt-get
install spamassassin spamc

groupadd
spamd

useradd -g spamd -s /bin/false -d
/var/log/spamassassin spamd

mkdir /var/log/spamassassin

chown spamd:spamd /var/log/spamassassin

ENABLED=1

CRON=1

SAHOME=/var/log/spamassassin/

OPTIONS=–create-prefs
–max-children 2 –username spamd \

-H ${SAHOME}
-s ${SAHOME}spamd.log

service
spamassassin start

smtp      inet
n       –       –
–       –       smtpd

-o
content_filter=spamassassin

spamassassin unix –
n       n –  pipe user=spamd argv=/usr/bin/spamc -f -e  /usr/sbin/sendmail -oi -f ${sender}
${recipient}

#https://wiki.apache.org/spamassassin/WritingRules

body
LOCAL_DEMONSTRATION_RULE   /Krankenkasse/

score
LOCAL_DEMONSTRATION_RULE 10

describe
LOCAL_DEMONSTRATION_RULE       This is a
simple test rule

body LOCAL_DEMONSTRATION_RULE   /hat nach Dir eine Bildnachricht gesendet/

score
LOCAL_DEMONSTRATION_RULE 10

describe
LOCAL_DEMONSTRATION_RULE       This is a
simple test rule

body LOCAL_DEMONSTRATION_RULE   /hat nach Dir eine Bildnachricht gesendet/

score
LOCAL_DEMONSTRATION_RULE 10

describe
LOCAL_DEMONSTRATION_RULE       This is a
simple test rule

sa-learn
–spam  /home/mailboxes/HOMEPAGEV/.INBOX.0\ spam/

sa-learn
–spam  /home/mailboxes/WINDOWSUSER/.Junk-E-Mail/

mkdir
/etc/dovecot/sieve

nano  /etc/dovecot/sieve/default.sieve

openssl
genrsa -out /etc/ssl/private/apache.key 2048

openssl req
-new -x509 -key /etc/ssl/private/apache.key -days 365 -sha256 -out
/etc/ssl/certs/apache.crt

-> Fragen beantworten

Country Name (2 letter code) [AU]:DE

State or
Province Name (full name) [Some-State]:Berlin

Locality
Name (eg, city) []:Berlin

Organization
Name (eg, company) [Internet Widgits Pty Ltd]:FIRMA

Organizational
Unit Name (eg, section) []:

Common Name
(e.g. server FQDN or YOUR name) []:postamt.DOMÄNE.LAND

Email
Address []:WINDOWSUSER@DOMÄNE.LAND

<IfModule
mod_ssl.c>

    Listen 443

</IfModule>

apt-get
install virtualbox

modprobe vboxnetflt

VBoxManage internalcommands sethduuid ALTERWINDOWSSERVER.DOMÄNE.LAND.vmdk

VBoxManage
createvm –name ALTERWINDOWSSERVER
–register

VBoxManage
modifyvm ALTERWINDOWSSERVER –memory
8000 –acpi on –nic1 bridged –bridgeadapter1 enp3s0

VBoxManage
storagectl ALTERWINDOWSSERVER –add
sata –controller IntelAHCI –name SATA

VBoxManage
modifyvm  ALTERWINDOWSSERVER –sataport1 ALTERWINDOWSSERVER.DOMÄNE.LAND.vmdk

VBoxManage showvminfo ALTERWINDOWSSERVER

VBoxManage startvm ALTERWINDOWSSERVER
–type headless

kill -STOP <PID>

cd /etc

find . -mtime -1

find . -mtime -1 -delete

find . -mtime -5 -name S0* -delete

cd cron.hourly/

ll

cat ZUFÄLLIGER NAME.sh

die da enthaltete Datei löschen

rm PFAD und ZUFÄLLIGER NAME.sh

\\ALTERWINDOWSSERVER\c$\windows\system32\netdom
resetpwd /server:ALTERWINDOWSSERVER /userd:DOMÄNE\ADMINISTRATOR /passwordD:

rsync -avz -e ssh /daten/webs/ BACKUPSERVER:/daten/webs/ –exclude=wp-config.php

rsync -avze
ssh -i /root/.ssh/BACKUPSERVER.private
/daten/webs/ root@BACKUPSERVER.dyndns.org:/daten/webs/
–exclude=wp-config.php