CentOS 7 QMT Host - Install and Updates
(Tested install 15 MAY 2017)
1) Install CentOS 7 minimal install
A) Network & Hostname
1) Turn on the ethernet interface
2) IPv6 settings (leave as is)
3) IPv4 settings (either options a or b)
a) Leave as is (DHCP) continue with install, and run qmt_host.sh after reboot and before QMT install.
b) Configure hostname and interface settings: IP address, DNS, gateway, search domain.
2) # curl -O https://raw.githubusercontent.com/qmtoaster/scripts/master/qt_prep.sh
3) # chmod 755 qt_prep.sh
4) # ./qt_prep.sh
--- automatic reboot ---
5) # ./qt_install.sh
6) # toaststat
Status of toaster services
send: up (pid 1323) 1517 seconds
smtp: up (pid 1324) 1517 seconds
submission: up (pid 1325) 1517 seconds
send/log: up (pid 1316) 1517 seconds
smtp/log: up (pid 1311) 1517 seconds
submission/log: up (pid 1314) 1517 seconds
systemd service: clamav-daemon.service: [ OK ]
systemd service: clamav-daemon.socket: [ OK ]
systemd service: clamav-freshclam: [ OK ]
systemd service: spamd: [ OK ]
systemd service: dovecot: [ OK ]
systemd service: mariadb: [ OK ]
systemd service: httpd: [ OK ]
systemd service: named: [ OK ]
systemd service: vsftpd: [ OK ]
systemd service: network: [ OK ]
systemd service: acpid: [ OK ]
systemd service: atd: [ OK ]
systemd service: autofs: [ OK ]
systemd service: crond: [ OK ]
systemd service: ntpd: [ OK ]
systemd service: smartd: [ OK ]
systemd service: sshd: [ OK ]
systemd service: irqbalance: [ OK ] ( Multiple processors only )
* Update CentOS 7/QMT
1) # yum update
2) # yum --enablerepo=qmt-testing update
* Use chg_dns.sh to switch between djbdns-localcache, pdns-recursor, or bind DNS server.
* During the ClamAV install the virus databases are downloaded. The download time
is unpredictable. The download may be well under 5 minutes but may take as long
as 30 minutes...or more. Please be patient with the ClamAV installation, the databases
will eventually download, and ClamAV, and the Toaster packages, will ultimately install.
* After a recent CentOS 7 install I discovered that eM Client email client caused a segmentation
fault on the QMT host. After increasing the submission softlimit from 64000000 to 1280000000 all
problems were resolved. The error was absent in Thuderbird. 1280000000 may be overkill, I didn't
drop the memory allotment after the segmentation fault desisted. A lower softlimit may work for
eM Client.
* Fixed Dspam install. The database tables were not being loaded. 17 NOV 2016
* Fixed permanent delay in install script during vpopmail db installation. 17 NOV 2016
* Fixed Dspam install. The configuration file was not being moved to the config directory. 2 DEC 2016
* Dspam install and training. 2 DEC 2016
* DKIM install. 4 DEC 2016
* Fixed mailman logrotate file. 6 FEB 2017
* SSL/TLS SSL Certificates. 10 FEB 2017
* Qmail-1.03-2.1 and 1.03-1 are in the testing repository for CentOS 7 and 6 respectively with the following 2 patches applied. 20-APR-2017
1) STARTTLS plaintext command injection vulnerability.
2) Any to CNAME DNS patch
* Qmail-1.03-3 is ready for testing on CentOS 7. Guinea pigs needed. Will be available in the repository after testing satisfactorily. See below. 20 APR 2017
1) The latest Qmail-TLS patch from Frederik Vermeulen's Qmail-TLS site.
2) Secure SMTP (Port 465) available by default.
3) 2048 bit RSA keys and DH params (default).
4) This patch fixes the STARTTLS plaintext command injection vulnerability. Here.
*Thanks to Frederik Vermeulen and others who made these fixes and features available to the Qmail community.
* N-DJBDNS (New djbdns) Added to QMT/CentOS 6 and 7 repositories as an alternative to djbdns,
pdns-recursor, and bind. Removed tcprules from RPM as it conflicts with those of ucspi-tcp. 20-APR-2017
1) Applied patches
2) Documentation
* To view the qmailtoaster man pages on CentOS 7 simply execute the below command at the CLI. This will be automatic upon completion of the next qmail RPM:
# echo "MANDATORY_MANPATH /var/qmail/man" >> /etc/man_db.conf
* qmt-plus is available for install (YUM) in the repository for CentOS 7
1) yum install qmt-plus
2) Includes mansfor, qmHandle, qmlog, qmqtool, queue_repair.py, and documentation (/opt/qmt-util). Run any at the CLI.
a) # qmHandle
b) # qmqtool
c) # qmlog
d) # mansfor
e) # queue_repair.py --help
CentOS 6 QMT Host - Install and Updates
(Tested install and upgrades 17 MAY 2017)
1) CentOS 6 Minimal Install
2) QMT Install
a) # curl https://raw.githubusercontent.com/QMailToaster/qmailtoaster-util/master/qt-bootstrap-1 >qt-bootstrap-1
b) # sh qt-bootstrap-1 (system will reboot)
c) # curl https://raw.githubusercontent.com/QMailToaster/qmailtoaster-util/master/qt-bootstrap-2 >qt-bootstrap-2
d) # sh qt-bootstrap-2
e) # mv /opt/qmailtoaster-util/bin/qt-install /opt/qmailtoaster-util/bin/qt-install.bak
f) # curl -o /opt/qmailtoaster-util/bin/qt-install https://raw.githubusercontent.com/qmtoaster/cos6/master/qt-install
g) # chmod 755 /opt/qmailtoaster-util/bin/qt-install
h) # qt-install
3) Upgrade CentOS 6/QMT (Dovecot upgrades require MySQL libraries unavailable in the CentOS 6 repositories, Remi repositories must be installed and enabled)
a) # rpm -Uvh https://raw.githubusercontent.com/qmtoaster/cos6/master/qmt-release-1-4.qt.el6.noarch.rpm
b) # yum-config-manager --disable qmailtoaster-current qmailtoaster-current-nodist
c) # yum install yum-utils
d) # yum install http://rpms.remirepo.net/enterprise/remi-release-6.rpm
e) # yum-config-manager --enable remi remi-php56
f) # yum update
g) # yum --enablerepo=qmt-testing update
CentOS 5 QMT Host - Updates
* Update CentOS 5/QMT*
1) rpm -Uvh ftp://ftp.qmailtoaster.com/pub/repo/qmt/CentOS/5/current/noarch/whtc-qmt-1-1.qt.el5.noarch.rpm
2) yum update
3) yum --enablerepo=whtc-qmt-testing update
*If you still have a Courier IMAP/POP3 installation, update at your own risk. Updating will delete Courier and replace it with Dovecot.
QMT Wiki
Qmailtoaster Plus
Repos
Extras
Notes
Z-push for ActiveSync clients