Fast mail server on t2.micro with EC2 running CentOS 7

Work from the administrator account, root, leave for calculations and checking the status of the account, the latter I recommend to do more often, since payment is made for the amount of resources used. Amazon services involved in this haut - as part of a free account, if you don’t independently click on any button in the Amazon control panel.

Ingredients

Major:
1. Amazon Web Services account with AdministratorAccess ( non- root).
2. LAMP .
3. Postfix + Policyd + Amavisd + SpamAssassin + ClamAV.
4. Dovecot + Roundcude (plugins: filesystem_attachments, jqueryui, managesieve, password).
5. iRedAdmin.
Related:
1. Domain
2. ClouDNS account .

Instruments

Legend

=> Next action.
Quote - Answer in the interpreter.
domain.tk - Replace with your domain!
5.175.174.8 - Replace with your Elastic IP!
Next - Next: Configure Instance Details.

Cooking method

In the Amazon control panel we create an instance, section for storing mail data, Elastic IP, security policy:
Open EC2: Instances => Launch Instance button => AWS Marketplace => CentOS 7 (x86_64) with Updates HVM => leave as is (t2.micro) => Next => write yourself the default Network (for example: 172.31.0.0/ 16) => select Subnet (for example: 172.31.32.0/20) => check Protect against accidental termination => Next => Next => Key: EC2 => Value: mailServer => Next => Select an existing security group (default ) => Review and Launch => Launch => Select: Create a new key pair => Key pair name: EC2t2micro-mS => Download Key Pair => Save to a safe place => check box => Launch Instance => View button Instances

Open EC2: Volumes => Create Volume => Size (GiB): 1 => Availability Zone: when creating the instance, choose "... 1a" means again choose "... 1a" => Create => choose the newly created Volume ( size 1GiB) => Actions => Attach Volume => choose an instance with CentOS 7 installed (8GiB) => Attach
')
Open EC2: Elastic IPs => Allocate New Address => Yes, Allocate => Select the created address => Actions => Associate Address => Instance: select your instance => Associate

Open EC2: Security Groups => select a security group (default) => Inbound tab => button Edit => delete All traffic => Add Rule button:

for all: Source: 0.0.0.0/0 (Anywhere)

Custom ICMP Rule: Echo Reply and Echo Request

UDP protocol:
DNS (UDP): 53

TCP protocol:
DNS (TCP): 53
POP3: 110
POP3S: 995
IMAP: 143
IMAPS: 993
SMTP: 25
SMTPS: 465
HTTP: 80
Https: 443
LDAP: 389
MYSQL / Aurora: 3306
SSH: 22
Custom TCP Rule: 24, 111, 387, 587, 2000, 4190, 7777, 9998, 10024, 10025, 10031, 43011, 43200, 43220, 43259, 43325, 43362
Total: 32 rules.
You can check port numbers after installation is complete:
```
sudo netstat -anpe 
```
In the ClouDNS control panel we create DNS records:
domain.tk A 5.175.174.8 1h (TTL)
domain.tk MX 10 mail.domain.tk 1h (TTL)
domain.tk NS ns11.cloudns.net 1h (TTL)
domain.tk NS ns12.cloudns.net 1h (TTL)
domain.tk NS ns13.cloudns.net 1h (TTL)
domain.tk NS ns14.cloudns.net 1h (TTL)
domain.tk TXT v = spf1 a mx ip4: 5.17 ... 1h (TTL)
ftp.domain.tk A 5.175.174.8 1h (TTL)
mail.domain.tk A 5.175.174.8 1h (TTL)
mail._domainkey.domain ... TXT k = rsa; p = fMA0GCSq… 1h (TTL)
pop.domain.tk A 5.175.174.8 1h (TTL)
www.domain.tk CNAME domain.tk 1h (TTL)
_domainkey.domain.tk TXT t = y; o = ~; 1h (TTL)

=> Checking: http://intodns.com/domain.tk .
Open the PuTTY Key Generator => Load => All files => Save private key => Yes => File name: EC2t2micro-mS => close the PuTTY Key Generator
Open PuTTY => SSH => Auth => Browse ... => Select EC2t2micro-mS.ppk => Open => Session => HostName (or IP address): your Elastic IP => Saved Sessions: EC2t2micro-mS => Save = > Open => Yes => centos => Enter =>
```
 cat /etc/redhat-release 
```
CentOS Linux release 7.0.1406 (Core)
```
 sudo yum -y update 
```
```
 lsblk 
```
NAME MAJ: MIN RM SIZE RO TYPE MOUNTPOINT
xvda 202: 0 0 8G 0 disk
L-xvda1 202: 1 0 8G 0 part /
xvdf 202: 80 0 1G 0 disk

We look:
```
 sudo file -s /dev/xvda1 
```
SGI XFS filesystem data (blksz 4096, inosz 256, v2 dirs)
```
 sudo mkfs -t xfs /dev/xvdf 
```
meta-data = / dev / xvdf isize = 256 agcount = 4, agsize = 65536 blks
= sectsz = 512 attr = 2, projid32bit = 1
= crc = 0 finobt = 0
data = bsize = 4096 blocks = 262144, imaxpct = 25
= sunit = 0 swidth = 0 blks
naming = version 2 bsize = 4096 ascii-ci = 0 ftype = 0
log = internal log bsize = 4096 blocks = 2560, version = 2
= sectsz = 512 sunit = 0 blks, lazy-count = 1
realtime = none extsz = 4096 blocks = 0, rtextents = 0

Checking:
```
 sudo file -s /dev/xvdf 
```
/ dev / xvdf: SGI XFS filesystem data (blksz 4096, inosz 256, v2 dirs)
```
 sudo mkdir -p /data/mail/ 
```
```
 sudo mount /dev/xvdf /data/mail/ 
```
Checking:
```
 lsblk 
```
NAME MAJ: MIN RM SIZE RO TYPE MOUNTPOINT
xvda 202: 0 0 8G 0 disk
L-xvda1 202: 1 0 8G 0 part /
xvdf 202: 80 0 1G 0 disk / data / mail
```
 sudo cp /etc/fstab /etc/fstab.orig 
```
```
 sudo vi /etc/fstab 
```
[Insert]

For your volume using the following format.
# device_name mount_point file_system_type fs_mntops fs_freq fs_passno
/ dev / xvdf / data / mail xfs defaults, nofail 0 2

[Esc]: wq [Enter]
```
 sudo mount -a 
```
If there are errors, you can not reboot until you fix it. More information .
```
 sudo vi /etc/hosts 
```
[Insert]

127.0.0.1 mail.domain.tk mail localhost localhost.localdomain

[Esc]: wq [Enter]

Checking:
```
 sudo cat /etc/hosts 
```
127.0.0.1 mail.citr.tk mail localhost localhost.localdomain
# 127.0.0.1 localhost localhost.localdomain localhost4 localhost4.localdomain4
:: 1 localhost localhost.localdomain localhost6 localhost6.localdomain6
```
 yum repolist all 
```
C7.0.1406-base / x86_64 CentOS-7.0.1406 - Base disabled
C7.0.1406-centosplus / x86_64 CentOS-7.0.1406 - CentOSPlus disabled
C7.0.1406-extras / x86_64 CentOS-7.0.1406 - Extras disabled
C7.0.1406-fasttrack / x86_64 CentOS-7.0.1406 - CentOSPlus disabled
C7.0.1406-updates / x86_64 CentOS-7.0.1406 - Updates disabled
base / 7 / x86_64 CentOS-7 - Base enabled: 8,652
base-debuginfo / x86_64 CentOS-7 - Debuginfo disabled
base-source / 7 CentOS-7 - Base Sources disabled
centosplus / 7 / x86_64 CentOS-7 - Plus disabled
centosplus-source / 7 CentOS-7 - Plus Sources disabled
cr / 7 / x86_64 CentOS-7 - cr disabled
extras / 7 / x86_64 CentOS-7 - Extras enabled: 149
extras-source / 7 CentOS-7 - Extras Sources disabled
fasttrack / 7 / x86_64 CentOS-7 - fasttrack disabled
updates / 7 / x86_64 CentOS-7 - Updates enabled: 1,198
updates-source / 7 CentOS-7 - Updates Sources disabled

Nothing extra!
```
 sudo yum install php php-mysql 
```
... 5.4.16-36.e17_1 ...

=> y => Download to hard drive and unpack .
Fill up the iRedMail-0.9.2 folder with FileZilla (Edit => Settings => SFTP => Add Key File (EC2t2micro-mS.ppk) ip - your Elastic IP => Connect). Make sure all files are transferred successfully.
```
 sudo cp -r /home/centos/iRedMail-0.9.2 /root 
```
Checking:
```
 sudo ls /root 
```
iRedMail-0.9.2
```
 rm -rf /home/centos/iRedMail-0.9.2 
```
Disable and no longer turn on:
```
 sudo vi /etc/selinux/config 
```
[Insert]

SELINUX = disabled

[Esc]: wq [Enter]

Checking:
```
 sudo cat /etc/selinux/config 
```
# This file controls the state of SELinux on the system.
# SELINUX = can take one of these three values:
# enforcing - SELinux security policy is enforced.
# permissive - SELinux prints warnings instead of enforcing.
# disabled - No SELinux policy is loaded.
# SELINUX = enforcing
SELINUX = disabled
# SELINUXTYPE = can be one of these two values:
# targeted - Targeted processes are protected,
# minimum - Modification of the targeted policy. Only selected processes are protected.
# mls - Multi Level Security protection.
SELINUXTYPE = targeted
```
 sudo reboot 
```
Checking:
```
 getenforce 
```
Disabled
```
 sudo su - 
```
```
 vi /etc/hostname 
```
[Insert]

# Delete the old value [D] [D] on the line under the cursor
mail.domain.tk

[Esc]: wq [Enter]

Checking:
```
 sudo cat /etc/hostname 
```
mail.domain.tk
```
 hostname mail.domain.tk 
```
Checking:
```
 hostname 
```
mail.domain.tk
```
 cd /root/iRedMail-0.9.2 
```
```
 bash iRedMail.sh 
```
=> Yes
=> / data / mail
=> Apache
=> MariaDB
=> Create a root database password
=>
=> postmaster password
=> DKIM signing / verification
iRadAdmin
Roundcubemail
Awstats
=> y except use firewall rules - n
=> We update the ClamAV database, though not the first time ...
************************************************= ******************
* Congratulations, mail server setup completed successfully. Please
* read below file for more information:
*
* - /root/iRedMail-0.9.2/iRedMail.tips
*
* And send it to your mail account postmaster@citr.tk.
*
********************* WARNING **************************** **********
*
* Rebooting your system is required to enable mail services.
*
************************************************= ******************

Exit from root:
```
 exit 
```
```
 sudo reboot 
```
Check if everything is correct, then the links will link to your domain:
```
 sudo cat /root/iRedMail-0.9.2/iRedMail.tips 
```
Move to a safe place:
```
 sudo cat /root/iRedMail-0.9.2/config 
```
```
 sudo rm -f /root/iRedMail-0.9.2/config 
```
Since after rebooting the system, the hostname crashes:
```
 sudo hostname mail.domain.tk 
```
```
 sudo rm -f /var/www/html/index.html 
```
```
 sudo chmod 777 /var/www/html 
```
=> using FileZilla upload your index file here: / var / www / html
```
 sudo chmod 755 /var/www/html 
```
```
 sudo yum -y update 
```
```
 sudo openssl passwd -1  postmaster- 
```
# Values will be different.
$ 1 $ 2dQ48hyz $ .mCLeDSdPkP3fxVmARsB.0
```
 mysql -u root -p 
```
=> Enter the root password of the database.
```
 USE vmail; 
```
Table and column names
You can turn off this feature to get a quicker startup with -A

Database changed
```
 UPDATE mailbox SET password='$1$2dQ48hyz$.mCLeDSdPkP3fxVmARsB.0' WHERE username='postmaster@domain.tk'; 
```
Query OK, 1 row affected (0.00 sec)
Rows matched: 1 Changed: 1 Warnings: 0
```
 exit 
```
```
 exit 
```
We try the finished product

domain.tk/iredadmin
mail.domain.tk/mail
mail.domain.tk/cluebringer
mail.domain.tk/awstats/awstats.pl?config=web
mail.domain.tk/awstats/awstats.pl?config=smtp
Mozilla thunderbird

Information sources:

Source: https://habr.com/ru/post/264685/

All Articles