Virtual domain configuration

Enter the hostname. In this example, my system is called server1.example.com, so I enter server1:

Now you have to partition your hard disk. For simplicity's sake I select Guided - use entire disk
and set up LVM - this will create one volume group with two logical volumes, one for the / file
system and another one for swap (of course, the partitioning is totally up to you - if you know what
you're doing, you can also set up your partitions manually).
Select the disk that you want to partition:
When you're asked Write the changes to disks and configure LVM?, select Yes:

If you have selected Guided - use entire disk and set up LVM, the partitioner will create one big
volume group that uses all the disk space. You can now specify how much of that disk space should be
used by the logical volumes for / and swap. It makes sense to leave some space unused so that you
can later on expand your existing logical volumes or create new ones - this gives you more flexibility.
When you're finished, hit Yes when you're asked Write the changes to disks?:
Afterwards, your new partitions are being created and formatted:

Now the base system is being installed:

Create a user, for example the user Administrator with the user name administrator (don't use the
user name admin as it is a reserved name on Ubuntu 9.10):
I don't need an encrypted private directory, so I choose No here:
Next the package manager apt gets configured. Leave the HTTP proxy line empty unless you're using
a proxy server to connect to the Internet:
I'm a little bit old-fashioned and like to update my servers manually to have more control, therefore I
select No automatic updates. Of course, it's up to you what you select here:
We need a DNS, mail, and LAMP server, but nevertheless I don't select any of them now because I like
to have full control over what gets installed on my system. We will install the needed packages
manually later on. The only item I select here is OpenSSH server so that I can immediately connect to
the system with an SSH client such as PuTTY after the installation has finished:
The installation continues:
The GRUB boot loader gets installed:

The base system installation is now finished. Remove the installation CD from the CD drive and hit
Continue to reboot the system:
sudo su

(You can as well enable the root login by running

sudo passwd root

and giving root a password. You can then directly log in as root, but this is frowned upon by the
Ubuntu developers and community for various reasons. See
http://ubuntuforums.org/showthread.php?t=765414.)

5 Install The SSH Server (Optional)

If you did not install the OpenSSH server during the system installation, you can do it now:

aptitude install ssh openssh-server

From now on you can use an SSH client such as PuTTY and connect from your workstation to your
Ubuntu 9.10 server and follow the remaining steps from this tutorial.
 

6 Install vim-nox (Optional)

I'll use vi as my text editor in this tutorial. The default vi program has some strange behaviour on
Ubuntu and Debian; to fix this, we install vim-nox:

aptitude install vim-nox

(You don't have to do this if you use a different text editor such as joe or nano.)

7 Configure The Network

Because the Ubuntu installer has configured our system to get its network settings via DHCP, we have
to change that now because a server should have a static IP address. Edit /etc/network/interfaces
and adjust it to your needs (in this example setup I will use the IP address 192.168.0.100):

vi /etc/network/interfaces

# This file describes the network interfaces available on

your system
# and how to activate them. For more information, see
interfaces(5).

# The loopback network interface

auto lo
iface lo inet loopback

# The primary network interface

auto eth0
iface eth0 inet static
address 192.168.0.100
netmask 255.255.255.0
network 192.168.0.0
broadcast 192.168.0.255
gateway 192.168.0.1
Then restart your network:

/etc/init.d/networking restart

Then edit /etc/hosts. Make it look like this:

vi /etc/hosts
 127.0.0.1 localhost.localdomain localhost
192.168.0.100 server1.example.com server1

# The following lines are desirable for IPv6 capable hosts

::1 localhost ip6-localhost ip6-loopback
fe00::0 ip6-localnet
ff00::0 ip6-mcastprefix
ff02::1 ip6-allnodes
ff02::2 ip6-allrouters
ff02::3 ip6-allhosts
Now run

echo server1.example.com > /etc/hostname

... and reboot the server:

reboot

Afterwards, run

hostname
hostname -f

Both should show server1.example.com now.

8 Edit /etc/apt/sources.list And Update Your Linux Installation

Edit /etc/apt/sources.list. Comment out or remove the installation CD from the file and make sure
that the universe and multiverse repositories are enabled. It should look like this:

vi /etc/apt/sources.list

#
# deb cdrom:[Ubuntu-Server 9.10 _Karmic Koala_ - Release
amd64 (20091027.2)]/ karmic main restricted

#deb cdrom:[Ubuntu-Server 9.10 _Karmic Koala_ - Release

amd64 (20091027.2)]/ karmic main restricted
# See http://help.ubuntu.com/community/UpgradeNotes for
how to upgrade to
# newer versions of the distribution.
deb http://de.archive.ubuntu.com/ubuntu/ karmic main
restricted
deb-src http://de.archive.ubuntu.com/ubuntu/ karmic main
restricted

## Major bug fix updates produced after the final release

of the
## distribution.
deb http://de.archive.ubuntu.com/ubuntu/ karmic-updates
main restricted
deb-src http://de.archive.ubuntu.com/ubuntu/ karmic-
updates main restricted

## N.B. software from this repository is ENTIRELY

UNSUPPORTED by the Ubuntu
## team. Also, please note that software in universe WILL
NOT receive any
## review or updates from the Ubuntu security team.
deb http://de.archive.ubuntu.com/ubuntu/ karmic universe
deb-src http://de.archive.ubuntu.com/ubuntu/ karmic
universe
deb http://de.archive.ubuntu.com/ubuntu/ karmic-updates
universe
deb-src http://de.archive.ubuntu.com/ubuntu/ karmic-
updates universe

## N.B. software from this repository is ENTIRELY

UNSUPPORTED by the Ubuntu
## team, and may not be under a free licence. Please
satisfy yourself as to
## your rights to use the software. Also, please note that
software in
## multiverse WILL NOT receive any review or updates from
the Ubuntu
## security team.
deb http://de.archive.ubuntu.com/ubuntu/ karmic multiverse
deb-src http://de.archive.ubuntu.com/ubuntu/ karmic
multiverse
deb http://de.archive.ubuntu.com/ubuntu/ karmic-updates
multiverse
deb-src http://de.archive.ubuntu.com/ubuntu/ karmic-
updates multiverse

## Uncomment the following two lines to add software from

the 'backports'
## repository.
## N.B. software from this repository may not have been
tested as
## extensively as that contained in the main release,
although it includes
## newer versions of some applications which may provide
useful features.
 ## Also, please note that software in backports WILL NOT
receive any review
## or updates from the Ubuntu security team.
# deb http://de.archive.ubuntu.com/ubuntu/ karmic-
backports main restricted universe multiverse
# deb-src http://de.archive.ubuntu.com/ubuntu/ karmic-
backports main restricted universe multiverse

## Uncomment the following two lines to add software from

Canonical's
## 'partner' repository.
## This software is not part of Ubuntu, but is offered by
Canonical and the
## respective vendors as a service to Ubuntu users.
# deb http://archive.canonical.com/ubuntu karmic partner
# deb-src http://archive.canonical.com/ubuntu karmic
partner

deb http://security.ubuntu.com/ubuntu karmic-security main

restricted
deb-src http://security.ubuntu.com/ubuntu karmic-security
main restricted
deb http://security.ubuntu.com/ubuntu karmic-security
universe
deb-src http://security.ubuntu.com/ubuntu karmic-security
universe
deb http://security.ubuntu.com/ubuntu karmic-security
multiverse
deb-src http://security.ubuntu.com/ubuntu karmic-security
multiverse
Then run

aptitude update

to update the apt package database and

aptitude safe-upgrade

to install the latest updates (if there are any). If you see that a new kernel gets installed as part of the
updates, you should reboot the system afterwards:

reboot

9 Change The Default Shell

/bin/sh is a symlink to /bin/dash, however we need /bin/bash, not /bin/dash. Therefore we do
this:

dpkg-reconfigure dash

Install dash as /bin/sh? <-- No

If you don't do this, the ISPConfig installation will fail.

10 Disable AppArmor
AppArmor is a security extension (similar to SELinux) that should provide extended security. In my
opinion you don't need it to configure a secure system, and it usually causes more problems than
advantages (think of it after you have done a week of trouble-shooting because some service wasn't
working as expected, and then you find out that everything was ok, only AppArmor was causing the
problem). Therefore I disable it (this is a must if you want to install ISPConfig later on).

We can disable it like this:

/etc/init.d/apparmor stop
update-rc.d -f apparmor remove
aptitude remove apparmor apparmor-utils

11 Synchronize the System Clock

It is a good idea to synchronize the system clock with an NTP (network time protocol) server over the
Internet. Simply run

aptitude install ntp ntpdate

and your system time will always be in sync.

We can install Postfix, Courier, Saslauthd, MySQL, rkhunter, and binutils with a single command:

aptitude install postfix postfix-mysql postfix-doc mysql-client mysql-server courier-

authdaemon courier-authlib-mysql courier-pop courier-pop-ssl courier-imap courier-
imap-ssl libsasl2-2 libsasl2-modules libsasl2-modules-sql sasl2-bin libpam-mysql
openssl getmail4 rkhunter binutils
You will be asked the following questions:

New password for the MySQL "root" user: <-- yourrootsqlpassword

Repeat password for the MySQL "root" user: <-- yourrootsqlpassword
Create directories for web-based administration? <-- No
General type of mail configuration: <-- Internet Site
System mail name: <-- server1.example.com
SSL certificate required <-- Ok

Next we install maildrop as follows:

update-alternatives --remove-all maildir.5

update-alternatives --remove-all maildirquota.7

aptitude install maildrop

You will ask yourself why we didn't install maildrop together with all the other packages. The reason
for this is a bug in the courier-base package - if you install maildrop together with courier-pop,
courier-pop-ssl, courier-imap, and courier-imap-ssl, you will get the following error:

update-alternatives: error: alternative link /usr/share/man/man5/maildir.5.gz is

already managed by maildir.5.gz.

We want MySQL to listen on all interfaces, not just localhost, therefore we edit /etc/mysql/my.cnf
and comment out the line bind-address = 127.0.0.1:

vi /etc/mysql/my.cnf

[...]
# Instead of skip-networking the default is now to listen
only on
# localhost which is more compatible and is not less
secure.
#bind-address = 127.0.0.1
[...]
Then we restart MySQL:

/etc/init.d/mysql restart

Now check that networking is enabled. Run

netstat -tap | grep mysql

The output should look like this:

root@server1:~#  netstat -tap  | grep  mysql
tcp         0         0  *:mysql                       *:*                     LISTEN    
   6267/mysqld
root@server1:~#

During the installation, the SSL certificates for IMAP-SSL and POP3-SSL are created with the
hostname localhost. To change this to the correct hostname (server1.example.com in this tutorial),
delete the certificates...

cd /etc/courier
rm -f /etc/courier/imapd.pem
rm -f /etc/courier/pop3d.pem

... and modify the following two files; replace CN=localhost with CN=server1.example.com (you can
also modify the other values, if necessary):

vi /etc/courier/imapd.cnf

[...]
CN=server1.example.com
[...]

vi /etc/courier/pop3d.cnf

[...]
CN=server1.example.com
[...]
Then recreate the certificates...

mkimapdcert
mkpop3dcert

... and restart Courier-IMAP-SSL and Courier-POP3-SSL:

/etc/init.d/courier-imap-ssl restart
/etc/init.d/courier-pop-ssl restart

13 Install Amavisd-new, SpamAssassin, And Clamav

To install amavisd-new, SpamAssassin, and ClamAV, we run
aptitude install amavisd-new spamassassin clamav clamav-daemon zoo unzip bzip2 arj
nomarch lzop cabextract apt-listchanges libnet-ldap-perl libauthen-sasl-perl clamav-
docs daemon libio-string-perl libio-socket-ssl-perl libnet-ident-perl zip libnet-dns-
perl

14 Install Apache2, PHP5, phpMyAdmin, FCGI, suExec, Pear, And mcrypt

Apache2, PHP5, phpMyAdmin, FCGI, suExec, Pear, and mcrypt can be installed as follows:

aptitude install apache2 apache2.2-common apache2-doc apache2-mpm-prefork apache2-

utils libexpat1 ssl-cert libapache2-mod-php5 php5 php5-common php5-gd php5-mysql php5-
imap phpmyadmin php5-cli php5-cgi libapache2-mod-fcgid apache2-suexec php-pear php-
auth php5-mcrypt mcrypt php5-imagick imagemagick libapache2-mod-suphp

You will see the following question:

Web server to reconfigure automatically: <-- apache2

Configure database for phpmyadmin with dbconfig-common? <-- No

Then run the following command to enable the Apache modules suexec, rewrite, ssl, actions, and
include:

a2enmod suexec rewrite ssl actions include

Restart Apache afterwards:

/etc/init.d/apache2 restart

15 Install PureFTPd And Quota

PureFTPd and quota can be installed with the following command:

aptitude install pure-ftpd-common pure-ftpd-mysql quota quotatool

Edit the file /etc/default/pure-ftpd-common...

vi /etc/default/pure-ftpd-common

... and make sure that the start mode is set to standalone and set VIRTUALCHROOT=true:
 [...]
STANDALONE_OR_INETD=standalone
[...]
VIRTUALCHROOT=true
[...]
Then restart PureFTPd:

/etc/init.d/pure-ftpd-mysql restart

Edit /etc/fstab. Mine looks like this (I added

,usrjquota=aquota.user,grpjquota=aquota.group,jqfmt=vfsv0 to the partition with the mount
point /):

vi /etc/fstab

# /etc/fstab: static file system information.

#
# Use 'blkid -o value -s UUID' to print the universally
unique identifier
# for a device; this may be used with UUID= as a more
robust way to name
# devices that works even if disks are added and removed.
See fstab(5).
#
# <file system> <mount point> <type> <options>
<dump> <pass>
proc /proc proc defaults 0
0
/dev/mapper/server1-root / ext4
errors=remount-
ro,usrjquota=aquota.user,grpjquota=aquota.group,jqfmt=vfsv
0 0 1
# /boot was on /dev/sda5 during installation
UUID=9ea34148-31b7-4d5c-baee-c2e2022562ea /boot
ext2 defaults 0 2
/dev/mapper/server1-swap_1 none swap sw
0 0
/dev/scd0 /media/cdrom0 udf,iso9660
user,noauto,exec,utf8 0 0
/dev/fd0 /media/floppy0 auto
rw,user,noauto,exec,utf8 0 0
To enable quota, run these commands:
touch /aquota.user /aquota.group
chmod 600 /aquota.*
mount -o remount /

quotacheck -avugm
quotaon -avug

16 Install MyDNS
Before we install MyDNS, we need to install a few prerequisites:

aptitude install g++ libc6 gcc gawk make texinfo libmysqlclient15-dev

MyDNS is not available in the Ubuntu 9.10 repositories, therefore we have to build it ourselves as
follows:

cd /tmp
wget http://heanet.dl.sourceforge.net/sourceforge/mydns-ng/mydns-1.2.8.27.tar.gz
tar xvfz mydns-1.2.8.27.tar.gz
cd mydns-1.2.8
./configure
make
make install

Next we create the start/stop script for MyDNS:

vi /etc/init.d/mydns

#! /bin/sh
#
# mydns Start the MyDNS server
#
# Author: Philipp Kern <[email protected]>.
# Based upon skeleton 1.9.4 by Miquel van
Smoorenburg
# <[email protected]> and Ian Murdock
<[email protected]>.
#

set -e

PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/
usr/bin
DAEMON=/usr/local/sbin/mydns
NAME=mydns
 DESC="DNS server"

SCRIPTNAME=/etc/init.d/$NAME

# Gracefully exit if the package has been removed.

test -x $DAEMON || exit 0

case "$1" in
start)
echo -n "Starting $DESC: $NAME"
start-stop-daemon --start --quiet \
--exec $DAEMON -- -b
echo "."
;;
stop)
echo -n "Stopping $DESC: $NAME"
start-stop-daemon --stop --oknodo --quiet \
--exec $DAEMON
echo "."
;;
reload|force-reload)
echo -n "Reloading $DESC configuration..."
start-stop-daemon --stop --signal HUP --quiet \
--exec $DAEMON
echo "done."
;;
restart)
echo -n "Restarting $DESC: $NAME"
start-stop-daemon --stop --quiet --oknodo \
--exec $DAEMON
sleep 1
start-stop-daemon --start --quiet \
--exec $DAEMON -- -b
echo "."
;;
*)
echo "Usage: $SCRIPTNAME {start|stop|restart|
reload|force-reload}" >&2
exit 1
;;
esac

exit 0
Then we make the script executable and create the system startup links for it:

chmod +x /etc/init.d/mydns
update-rc.d mydns defaults

 
17 Install Vlogger And Webalizer
Vlogger and webalizer can be installed as follows:

aptitude install vlogger webalizer

18 Install Jailkit
Jailkit is needed only if you want to chroot SSH users. It can be installed as follows (important: Jailkit
must be installed before ISPConfig - it cannot be installed afterwards!):

aptitude install build-essential autoconf automake1.9 libtool flex bison

cd /tmp
wget http://olivier.sessink.nl/jailkit/jailkit-2.10.tar.gz
tar xvfz jailkit-2.10.tar.gz
cd jailkit-2.10
./configure
make
make install
cd ..
rm -rf jailkit-2.10*

19 Install fail2ban
This is optional but recommended, because the ISPConfig monitor tries to show the fail2ban log:

aptitude install fail2ban

Submitted by falko (Contact Author) (Forums) on Thu, 2009-10-29 18:40. ::

20 Install SquirrelMail
 
To install the SquirrelMail webmail client, run

aptitude install squirrelmail

Then create the following symlink...

ln -s /usr/share/squirrelmail/ /var/www/webmail

... and configure SquirrelMail:

squirrelmail-configure

We must tell SquirrelMail that we are using Courier-IMAP/-POP3:

SquirrelMail Configuration :  Read: config.php  (1.4.0)

---------------------------------------------------------
Main Menu --
1.  Organization  Preferences
2.  Server  Settings
3.  Folder  Defaults
4.  General  Options
5.  Themes
6.  Address  Books
7.  Message  of the  Day (MOTD)
8.  Plugins
9.  Database
10. Languages

D.  Set  pre-defined settings  for specific IMAP servers

C   Turn color  on
S   Save data
Q   Quit

Command >> <-- D

SquirrelMail Configuration :  Read: config.php
---------------------------------------------------------
While  we have  been building SquirrelMail, we  have discovered  some
preferences  that work  better with  some servers that don't  work so
well with others.   If you select  your IMAP  server, this option will
set some pre-defined settings for  that server.

Please note that  you will  still need to go  through and  make sure

everything  is correct.   This  does not  change everything.   There  are
only a few  settings that  this will  change.

Please select your  IMAP server:
      bincimap    =  Binc IMAP server
      courier     = Courier  IMAP server
      cyrus           = Cyrus  IMAP server
      dovecot     = Dovecot  Secure IMAP server
      exchange    =  Microsoft Exchange  IMAP server
      hmailserver  = hMailServer
      macosx         = Mac OS X Mailserver
      mercury32     = Mercury/32
      uw          = University of Washington's IMAP  server

      quit           =  Do not  change anything

Command >> <-- courier

SquirrelMail Configuration :  Read: config.php
---------------------------------------------------------
While  we have  been building SquirrelMail, we  have discovered  some
preferences  that work  better with  some servers that don't  work so
well with others.   If you select  your IMAP  server, this option will
set some pre-defined settings for  that server.

Please note that  you will  still need to go  through and  make sure

everything  is correct.   This  does not  change everything.   There  are
only a few  settings that  this will  change.

Please select your  IMAP server:
      bincimap    =  Binc IMAP server
      courier     = Courier  IMAP server
      cyrus           = Cyrus  IMAP server
      dovecot     = Dovecot  Secure IMAP server
      exchange    =  Microsoft Exchange  IMAP server
      hmailserver  = hMailServer
      macosx         = Mac OS X Mailserver
      mercury32     = Mercury/32
      uw          = University of Washington's IMAP  server

      quit           =  Do not  change anything

Command >> courier

                     imap_server_type  = courier
              default_folder_prefix = INBOX.
                           trash_folder = Trash
                             sent_folder =  Sent
                           draft_folder = Drafts
                  show_prefix_option = false
               default_sub_of_inbox  = false
show_contain_subfolders_option  = false
                  optional_delimiter = .
                          delete_folder =  true
Press  any key  to continue... <-- ENTER

SquirrelMail Configuration :  Read: config.php  (1.4.0)

---------------------------------------------------------
Main Menu --
1.  Organization  Preferences
2.  Server  Settings
3.  Folder  Defaults
4.  General  Options
5.  Themes
6.  Address  Books
7.  Message  of the  Day (MOTD)
8.  Plugins
9.  Database
10. Languages

D.  Set  pre-defined settings  for specific IMAP servers

C   Turn color  on
S   Save data
Q   Quit

Command >> <-- S

SquirrelMail Configuration :  Read: config.php  (1.4.0)

---------------------------------------------------------
Main Menu --
1.  Organization  Preferences
2.  Server  Settings
3.  Folder  Defaults
4.  General  Options
5.  Themes
6.  Address  Books
7.  Message  of the  Day (MOTD)
8.  Plugins
9.  Database
10. Languages

D.  Set  pre-defined settings  for specific IMAP servers

C   Turn color  on
S   Save data
Q   Quit

Command >> S
Data saved in  config.php
Press  enter to continue... <-- ENTER

SquirrelMail Configuration :  Read: config.php  (1.4.0)

---------------------------------------------------------
Main Menu --
1.  Organization  Preferences
2.  Server  Settings
3.  Folder  Defaults
4.  General  Options
5.  Themes
6.  Address  Books
7.  Message  of the  Day (MOTD)
8.  Plugins
9.  Database
10. Languages

D.  Set  pre-defined settings  for specific IMAP servers

C   Turn color  on
S   Save data
Q   Quit

Command >> <-- Q

Afterwards you can access SquirrelMail under http://server1.example.com/webmail or

http://192.168.0.100/webmail:
 

21 Install ISPConfig 3
To install ISPConfig 3 from the latest released version, do this:

cd /tmp
wget http://downloads.sourceforge.net/ispconfig/ISPConfig-3.0.1.6.tar.gz?use_mirror=
tar xvfz ISPConfig-3.0.1.6.tar.gz
cd ispconfig3_install/install/

(Replace ISPConfig-3.0.1.6.tar.gz with the latest version.)

The next step is to run

php -q install.php

This will start the ISPConfig 3 installer:

root@server1:/tmp/ispconfig3_install/install# php -q install.php

--------------------------------------------------------------------------------
  _____ ___________     _____                     __ _
|_   _/  ___| ___  \ /  __  \                  / _(_)
   | | \ `--.| |_/  / | /   \/ ___   _ __ |  |_ _   __  _
   | |  `--. \  __/   |  |    / _  \| '_  \|  _| |/  _` |
  _| |_/\__/  / |        | \__/\ (_) |  | |  | | | |  (_| |
  \___/\____/\_|         \____/\___/|_| |_|_|  |_|\__, |
                                                             __/  |
                                                            |___/
--------------------------------------------------------------------------------

>> Initial configuration

Operating System: Debian or compatible, unknown version.

      Following  will be  a few  questions for  primary configuration  so be careful.

      Default values are  in [brackets]  and can  be accepted  with <ENTER>.
      Tap in "quit"  (without the quotes) to  stop the  installer.

Select language (en,de)  [en]: <-- ENTER

Installation mode (standard,expert)  [standard]: <-- ENTER

Full qualified hostname  (FQDN) of  the server,  eg server1.domain.tld   [server1.exampl

e.com]: <-- ENTER

MySQL  server hostname  [localhost]: <-- ENTER

MySQL  root username [root]: <-- ENTER

MySQL  root password []: <-- yourrootsqlpassword

MySQL  database to  create [dbispconfig]: <-- ENTER

MySQL  charset [utf8]: <-- ENTER

Generating  a 2048  bit RSA  private key

.......+++
...+++
writing new private key to 'smtpd.key'
-----
You are about  to be  asked to enter information  that will  be incorporated
into your certificate  request.
What you are  about to enter is  what is called a  Distinguished Name  or a  DN.
There  are quite a few fields but  you can  leave some  blank
For some fields there will be a  default value,
If you enter  '.', the field will  be left  blank.
-----
Country Name (2 letter code)  [AU]: <-- ENTER
State  or Province  Name (full  name) [Some-State]: <-- ENTER
Locality Name (eg,  city) []: <-- ENTER
Organization Name (eg,  company) [Internet  Widgits Pty  Ltd]: <-- ENTER
Organizational  Unit Name (eg, section)  []: <-- ENTER
Common Name (eg,  YOUR name) []: <-- ENTER
Email  Address []: <-- ENTER
Configuring  Jailkit
Configuring  SASL
Configuring  PAM
Configuring  Courier
Configuring  Spamassassin
Configuring  Amavisd
Configuring  Getmail
Configuring  Pureftpd
Configuring  MyDNS
Configuring  Apache
Configuring  vlogger
Configuring  Firewall
Installing  ISPConfig
ISPConfig Port [8080]: <-- ENTER

Configuring  DBServer
Installing  Crontab
no crontab for root
no crontab for getmail
Restarting  services ...
  * Stopping  MySQL database server mysqld
     ...done.
  * Starting  MySQL database server mysqld
     ...done.
  * Checking  for corrupt,  not cleanly closed and  upgrade needing  tables.
  * Stopping  Postfix Mail  Transport Agent  postfix
     ...done.
  * Starting  Postfix Mail  Transport Agent  postfix
     ...done.
  * Stopping  SASL Authentication Daemon saslauthd
     ...done.
  * Starting  SASL Authentication Daemon saslauthd
     ...done.
Stopping amavisd: amavisd-new.
Starting amavisd: amavisd-new.
  * Stopping  ClamAV daemon  clamd
     ...done.
  * Starting  ClamAV daemon  clamd
LibClamAV Warning: ***********************************************************
LibClamAV Warning: ***   This  version of  the ClamAV  engine is outdated.       ***
LibClamAV Warning: ***  DON'T PANIC!  Read http://www.clamav.net/support/faq  ***
LibClamAV Warning: ***********************************************************
     ...done.
  * Stopping  Courier authentication services authdaemond
     ...done.
  * Starting  Courier authentication services authdaemond
     ...done.
  * Stopping  Courier IMAP  server...
     ...done.
  * Starting  Courier IMAP  server...
     ...done.
  * Stopping  Courier IMAP-SSL  server...
     ...done.
  * Starting  Courier IMAP-SSL  server...
     ...done.
  * Stopping  Courier POP3  server...
     ...done.
  * Starting  Courier POP3  server...
     ...done.
  * Stopping  Courier POP3-SSL  server...
     ...done.
  * Starting  Courier POP3-SSL  server...
     ...done.
  * Restarting  web server  apache2
  ... waiting      ...done.
Restarting  ftp server:  Running: /usr/sbin/pure-ftpd-mysql-virtualchroot  -l mysql:/etc
/pure-ftpd/db/mysql.conf  -l pam  -A -b  -O clf:/var/log/pure-ftpd/transfer.log -8 UTF-8 
-u 1000 -E  -B
Installation completed.
root@server1:/tmp/ispconfig3_install/install#

The installer automatically configures all underlying services, so no manual configuration is needed.

Afterwards you can access ISPConfig 3 under http://server1.example.com:8080/ or

http://192.168.0.100:8080/. Log in with the username admin and the password admin (you should
change the default password after your first login):
The system is now ready to be used.