Koratsuki

Samba4 + DLZ, o Samba4 con delegación de zona

Instalar un PDC con delegación de zona con Samba4 es tan fácil como seguir el siguiente procedimiento:

Nota: Asumimos que usted posee una máquina virtual/contenedor de proxmox actualizado con dist-upgrade, si no es así, por favor hágalo antes de comenzar.

Nota2: En este entorno se utilizará como ejemplo el dominio: "INUTIL.CU", y el password de administración será: "Admin*123"

0 → Instalar utilitarios necesarios

Koratsuki

** Docker on Raspberri Pi/Orange Pi **

--

You will need:

• Raspberry Pi 3/Orange Pi
• 8GB Class 10 MicroSD card, the higher, the better, but with 8GB works!
• Internet connection
• Raspberry Pi connection to the Internet, wired or via Wifi

Koratsuki

Samba4 + DLZ, o Samba4 con delegación de zona

Instalar un PDC con delegación de zona con Samba4 es tan fácil como seguir el siguiente procedimiento:

Nota: Asumimos que usted posee una máquina virtual/contenedor de proxmox actualizado con dist-upgrade, si no es así, por favor hágalo antes de comenzar.

Nota2: En este entorno se utilizará como ejemplo el dominio: "INUTIL.CU", y el password de administración será: "Admin*123"

Nota3: Si usted usa el CT de Debian 10 para Proxmox, active en CT_ID -> Options -> Features -> Nesting. Si no activa la opción Nesting tendrá problemas al iniciar algunos procesos como NTP, entre otros.

Koratsuki

Instalamos lo requerido:

apt install -y nginx openssl php php-{pear,common,curl,mbstring,gd,gettext,bcmath,json,xml,fpm,zip}

systemctl enable nginx

Listamos mediante openssl y revisamos los cifrados, en este caso, ECC para seguridad usa prime256v1, secp384r1 o secp521r1:

openssl ecparam -list_curves | grep -E "prime256v1|secp384r1|secp521r1"

Koratsuki

Access Point dentro de una VM en Proxmox

Ejecutar este procedimiento en una VM con Debian/Ubuntu con el dongle WiFi attached/passthrough.

systemctl stop systemd-resolved
systemctl disable systemd-resolved
systemctl mask systemd-resolved

Koratsuki

List of notes:

[1] https://barredowlweb.com/2016/10/25/fighting-spam-block-entire-ttld-with-postfix/

[2] https://www.linuxbabe.com/mail-server/block-email-spam-postfix

[3] https://www.exratione.com/2019/02/a-mailserver-on-ubuntu-18-04-postfix-dovecot-mysql/

[4] https://krebsonsecurity.com/2018/06/bad-men-at-work-please-dont-click/

Koratsuki

iRedmail and OpenARC

Coming this february, Google/Yahoo/Outlook[1] and [2], are/were "enforcing", to some point, the usage of SPF/DKIM/DMARC to email servers in order to protect emails/users from spam and malware. And now they add ARC protocol to validate forwarded emails signing.

I tried with iRedmail, cause it comes out-of-the-box with SPF/DKIM/DMARC, with some minor touches on the config. All what I'am about to test here is my entire experience on this subject, due to limited documentation by OpenARC[3].

Test environment:

• Linode VPS with 4 cores/4GB of RAM
• OS: Ubuntu 22.04
• iRedmail 1.6.3. It was already installed

Koratsuki

First of all, I must say that I'am not a fan or user of Ubuntu. This is just a guide for newcomers, and colleagues that are struggling after the new release with the system changes.

Repositories configurations and system upgrade

Right after fresh install, you must do a system update. Don't delay it, but first, let's configure repositories. Delete the new config for repositories, this can cause problems or new users can get lost configuring it, have friends reporting me that:

sudo rm /etc/apt/sources.list.d/ubuntu.sources