{"id":1853,"date":"2018-08-16T10:39:29","date_gmt":"2018-08-16T09:39:29","guid":{"rendered":"http:\/\/www.itayemi.com\/blog\/?p=1853"},"modified":"2020-06-18T15:48:55","modified_gmt":"2020-06-18T21:48:55","slug":"setup-roundcube-webmail-on-centos-linux","status":"publish","type":"post","link":"https:\/\/www.itayemi.com\/blog\/2018\/08\/16\/setup-roundcube-webmail-on-centos-linux\/","title":{"rendered":"Setup Roundcube Webmail on CentOS Linux"},"content":{"rendered":"

Setup Roundcube Webmail on CentOS Linux<\/strong>
– Install Centos 7
– Configure networking
– Disable selinux
– Uninstall sendmail<\/p>\n

systemctl stop sendmail\nsystemctl disable sendmail\nyum remove -y sendmail<\/pre>\n
– Install php<\/p>\n
yum install -y php<\/pre>\n
– Enable EPEL repository:<\/p>\n
cd \/tmp\nwget wget http:\/\/dl.fedoraproject.org\/pub\/epel\/epel-release-latest-7.noarch.rpm\nrpm -ivh epel-release-latest-7.noarch.rpm<\/pre>\n
– Enable the REMI repository (for ImageMagick, etc):<\/p>\n
cd \/tmp\nwget http:\/\/rpms.famillecollet.com\/enterprise\/remi-release-7.rpm\nrpm -ivh remi-release-7.rpm\nvi \/etc\/yum.repos.d\/remi-php54.repo (set \"enabled=1\" - because the current system has PHP version 5.4 installed. There are repo files for other PHP versions in the same directory)<\/pre>\n
– Add both the email domain name and the server’s FQDN as aliases to the “127.0.0.1” entry in file \/etc\/hosts
– Add another line to \/etc\/hosts for the server’s primary IP address mapping it to its short name and its FQDN
# cat \/etc\/hosts<\/p>\n
127.0.0.1 localhost localhost.localdomain localhost4 localhost4.localdomain4 itayemi.com myserver1.itayemi.com\n192.168.109.10 myserver1.itayemi.com myserver1<\/pre>\n
– Allow incoming\/outgoing connections through the firewall for apps:<\/p>\n
firewall-cmd --permanent --zone=public --add-service=http\nfirewall-cmd --permanent --zone=public --add-service=https\nfirewall-cmd --permanent --zone=public --add-service=imap\nfirewall-cmd --permanent --zone=public --add-service=imaps\nfirewall-cmd --permanent --zone=public --add-service=pop3s\nfirewall-cmd --permanent --zone=public --add-service=smtp\nfirewall-cmd --permanent --zone=public --add-service=smtps\nfirewall-cmd --permanent --zone=public --add-service=dns\nfirewall-cmd --reload<\/pre>\n
– Configure Postfix<\/p>\n
yum install -y postfix\nsystemctl enable postfix\nyum update postfix\nsystemctl start postfix\nsystemctl status postfix<\/pre>\n
– Configure Postfix<\/p>\n
cd \/tmp\nopenssl req -x509 -nodes -newkey rsa:2048 -keyout mailserver.key -out mailserver.crt -nodes -days 730\nmkdir \/etc\/postfix\/ssl\nmv mailserver.key \/etc\/postfix\/ssl\nmv mailserver.crt \/etc\/postfix\/ssl\nchmod -R 660 \/etc\/postfix\/ssl<\/pre>\n
vi \/etc\/postfix\/master.cf (uncomment the following lines)\n#submission inet n - n - - smtpd\n# -o syslog_name=postfix\/submission\n# -o smtpd_tls_security_level=encrypt\n# -o smtpd_sasl_auth_enable=yes\n# -o smtpd_recipient_restrictions=permit_sasl_authenticated,reject\n# -o milter_macro_daemon_name=ORIGINATING<\/pre>\n
vi \/etc\/postfix\/main.cf (uncomment the myhostname variable and set its value to the server's hostname)\n\nvi \/etc\/postfix\/main.cf (uncomment the mydomain variable and set it to the domain to receive emails for)\n\nvi \/etc\/postfix\/main.cf (uncomment the following lines)\n#inet_interfaces = all\n#inet_protocols = all\n#mydestination = $myhostname, localhost.$mydomain, localhost\n#home_mailbox = Maildir\/\n\nvi \/etc\/postfix\/main.cf (add the following lines to the end of the file)\nsmtpd_tls_key_file = \/etc\/postfix\/ssl\/mailserver.key\nsmtpd_tls_cert_file = \/etc\/postfix\/ssl\/mailserver.crt\nsmtpd_use_tls=yes\nsmtpd_tls_session_cache_database = btree:${data_directory}\/smtpd_scache\nsmtp_tls_session_cache_database = btree:${data_directory}\/smtp_scache\nsmtpd_tls_security_level=may<\/pre>\n
– Change the home_mailbox parameter for Postfix in file \/etc\/postfix\/main.cf to match the dovecot config as follows (uncomment if necessary):<\/p>\n
home_mailbox = Maildir\/<\/pre>\n
– Add the hostname and domainname to mydestination parameter in the Postfix configuration file \/etc\/postfix\/main.cf or you will get the “mail loops back to myself” error when attempting to send to local users.<\/p>\n
mydestination = $myhostname, localhost.$mydomain, localhost, $mydomain<\/pre>\n
– Restart postfix:<\/p>\n
systemctl restart postfix\nsystemctl status postfix<\/pre>\n
– Test Postfix with telnet (send a test mail to another local user then check that user’s \/home\/username\/Maildir\/new\/ directory for the mail file)<\/p>\n
yum install -y telnet\ntelnet localhost 25\nquit<\/pre>\n
– Install and Configure Dovecot<\/p>\n
yum install -y dovecot\nsystemctl enable dovecot\nsystemctl start dovecot\nsystemctl status dovecot<\/pre>\n
Edit config file \/etc\/dovecot\/dovecot.conf and uncomment the line below:<\/p>\n
protocols = imap pop3 lmtp<\/pre>\n
– Edit the file \/etc\/dovecot\/conf.d\/10-auth.conf and set the following parameters (also uncomment them as well):<\/p>\n
disable_plaintext_auth = no\nauth_mechanisms = plain login<\/pre>\n
– Edit the file \/etc\/dovecot\/conf.d\/10-master.conf and set the following section to:<\/p>\n
unix_listener auth-userdb {\n#mode = 0666\nuser = postfix\ngroup = postfix\n}<\/pre>\n
– Set the dovecot mail_location parameter in the file \/etc\/dovecot\/conf.d\/10-mail.conf\u00a0 (Uncomment the line and change the value).<\/p>\n
mail_location = maildir:~\/Maildir<\/pre>\n
– Configure dovecot for pop3 via the file \/etc\/dovecot\/conf.d\/20-pop3.conf (Uncomment or add the following lines):<\/p>\n
pop3_uidl_format = %08Xu%08Xv\npop3_client_workarounds = outlook-no-nuls oe-ns-eoh<\/pre>\n
– Restart dovecot to activate all the configuration changes:<\/p>\n
systemctl restart dovecot<\/pre>\n
– Create the Maildir folder in the skeletons folder so that future users are created with the folder automatically (manually create it for all existing users and change the ownership accordingly)<\/p>\n
mkdir -p \/etc\/skel\/Maildir\/{cur,new,tmp}<\/pre>\n
– Install and configure fetchmail and procmail (if required)<\/p>\n
yum install -y fetchmail\nyum install -y procmail\nwhich procmail<\/pre>\n
– Install and Configure Apache webserver<\/p>\n
yum install -y httpd\nsystemctl enable httpd\nsystemctl start httpd\nsystemctl status httpd<\/pre>\n
– Install Roundcube<\/p>\n
yum install -y mysql mariadb-server php php-common php-json php-xml php-mbstring\nsystemctl enable mariadb\nsystemctl start mariadb\nsystemctl status mariadb\nmysql -u root -p (Just press ENTER when prompted for the password)\nMariaDB [(none)]> create database roundcube_db;\nMariaDB [(none)]> grant all on roundcube_db.* to roundcube_user@localhost identified by 'roundcube_db_password';\nMariaDB [(none)]> select user from  mysql.user;\nMariaDB [(none)]> quit<\/pre>\n
NOTE: substitute your own username and password for “roundcube_user” and “roundcube_db_password” in the “grant” command above.<\/p>\n
cd \/var\/www\/html\/\nwget https:\/\/github.com\/roundcube\/roundcubemail\/releases\/download\/1.3.7\/roundcubemail-1.3.7-complete.tar.gz\ntar -zxvf roundcubemail-1.3.7-complete.tar.gz\nmv roundcubemail-1.3.7 roundcube\nchown -R apache:apache roundcube<\/pre>\n
– Install various PHP extensions (that are not installed by default)<\/p>\n
yum install -y php-pdo\nyum install -y php-intl\nyum install -y php-gd\nyum install -y php-pear\nyum install -y php-pecl-imagick\nyum install -y php-mysql\nyum install -y php-ldap<\/pre>\n
– Set your timezone in \/etc\/php.ini (e.g., add the following line to the file)<\/p>\n
date.timezone=Africa\/Lagos<\/pre>\n
– Restart Apache webserver to detect the changes:<\/p>\n
systemctl restart httpd<\/pre>\n
– Complete the install by using the URL http:\/\/servername-or-ip\/roundcube\/installer
– 1. Check environment – install any missing but required PHP extensions, DB, etc
– 2. Create config – make changes as required to various config options including the database parameters (name, user, user password – created earlier). At the end, click the “Create Config” button which creates and stores the config file defaults.inc.php in the roundcube config directory (\/var\/www\/html\/roundcube\/config\/). Click the “CONTINUE” button.
– 3. Test config – test that roundcube can connect login to the IMAP (dovecot) and SMTP (Postfix) servers successfully
– Click the “Initialize database” button
– Scroll down and “Test SMTP config” by supplying sender\/recipient email addresses
– Then “Test IMAP config” by supplying the username and password of a local user account<\/p>\n
– 4. Delete the installer directory (or move the directory outside \/var\/www\/html\/) to prevent reconfiguration and\/or unauthorized access:<\/p>\n
rm -rf \/var\/www\/html\/roundcube\/installer<\/pre>\n
– 5. Enable Roundcube\u2019s automatic cache-cleaning (optional but recommended):<\/p>\n
sudo crontab -u apache -l | { cat; echo \"18 11 * * * \/var\/www\/html\/roundcube\/bin\/cleandb.sh\"; } | sudo crontab -u apache -<\/pre>\n
– 6. Confirm that the parameter default_host in the Roundcube config file \/var\/www\/html\/roundcube\/config\/config.inc.php is set to the email domain name.<\/p>\n
$config['default_host'] = 'itayemi.com';<\/pre>\n
– 7. Optional:\u00a0 there are 2 parameters in file \/etc\/php.ini that controls the maximum attachment size in a single mail:\u00a0 upload_max_filesize and\u00a0 post_max_size. I believe upload_max_filesize\u00a0 is the maximum file size of a single attached file while post_max_size is the combined maximum total of all files attached to a single mail.\u00a0 The smaller of upload_max_filesize and post_max_size takes precedence. upload_max_filesize is set to 2MB by default. You likely want to increase the value of both parameters e.g., to 10MB (means the mail will accept a single file of 10MB size or a collect of smaller files totaling 10MB max).\u00a0 To increase these values, edit file \/etc\/php.ini and increase the value of the parameters to your desired size then restart the Apache webserver:<\/p>\n
upload_max_filesize = 10M
post_max_size = 10M<\/pre>\n
– 8. Restart Apache webserver:<\/p>\n
systemctl restart httpd<\/pre>\n
——————————————————————————————————–<\/p>\n
– Enable SSL for extra security<\/p>\n
yum install mod_ssl\nmkdir \/etc\/httpd\/ssl\nopenssl req -x509 -nodes -days 1095 -newkey rsa:2048 -out \/etc\/httpd\/ssl\/server.crt -keyout \/etc\/httpd\/ssl\/server.key\nopenssl dhparam -out \/etc\/httpd\/ssl\/dhparam.pem 2048\ncat \/etc\/httpd\/ssl\/dhparam.pem | tee -a \/etc\/httpd\/ssl\/server.crt\nchmod -R 660 \/etc\/httpd\/ssl<\/pre>\n
– Edit mod_ssl config file \/etc\/httpd\/conf.d\/ssl.conf
vi \/etc\/httpd\/conf.d\/ssl.conf<\/p>\n
– Find the section that begins with “<VirtualHost _default_:443>” and uncomment the 2 lines below. Also change the ServerName parameter to your server’s name\/IP
DocumentRoot “\/var\/www\/html”
ServerName itayemi.com:443<\/p>\n
– Find the SSLProtocol and SSLCipherSuite lines and either delete them or comment them out.<\/p>\n
– Find the SSLCertificateFile and SSLCertificateKeyFile lines and change them to the paths to the SSL keys we created earlier:<\/p>\n
SSLCertificateFile \/etc\/httpd\/ssl\/server.crt
SSLCertificateKeyFile \/etc\/httpd\/ssl\/server.key<\/p>\n
– Edit the file \/etc\/{nginx,apache2,httpd}\/etc\/httpd\/conf.d\/ssl.conf and change X-Frame-Options to SAMEORIGIN. For example, the line \u201cHeader always set X-Frame-Options DENY\u201d becomes \u201cHeader always set X-Frame-Options SAMEORIGIN\u201d
Note that without this change sending appears to hang (spins but a refresh shows the mail in the Sent folder, AND more importantly, attempts to attach files to the mail throws an error and fails). Without this change, Roundcube will fail to upload attachments throwing “An error occurred! file upload failed!”.\u00a0 Paste in the lines below AFTER the end of the VirtualHost block – at the end of the file:<\/p>\n
SSLCipherSuite EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH\nSSLProtocol All -SSLv2 -SSLv3\nSSLHonorCipherOrder On\nHeader always set Strict-Transport-Security \"max-age=63072000; includeSubdomains\"\nHeader always set X-Frame-Options SAMEORIGIN\nHeader always set X-Content-Type-Options nosniff\nSSLCompression off\nSSLUseStapling on\nSSLStaplingCache \"shmcb:logs\/stapling-cache(150000)\"<\/pre>\n
– For additional security, redirect all traffic to be SSL encrypted. Create the file \/etc\/httpd\/conf.d\/non-ssl.conf with the content below (use your own servername or IP-address):<\/p>\n
vi \/etc\/httpd\/conf.d\/non-ssl.conf<\/p>\n
<VirtualHost *:80>\n     ServerName mailserver.example.com\n     Redirect \"\/\" \"https:\/\/mailserver.example.com\/\"\n<\/VirtualHost><\/pre>\n
– Restart Apache webserver:
systemctl restart httpd<\/p>\n
– Access the Rouncube email client login page at:\u00a0 https:\/\/<server-ip>\/roundcube\/\u00a0 or https:\/\/<server-name>\/roundcube\/<\/p>\n
——————————————————————————————————<\/p>\n
References:
https:\/\/nolabnoparty.com\/en\/setup-mail-server-postfix-dovecot-roundcube-centos\/
https:\/\/firewalld.org\/documentation\/howto\/open-a-port-or-service.html
https:\/\/firewalld.org\/documentation\/howto\/add-a-service.html
https:\/\/www.fastwebhost.in\/blog\/mysql-list-users-how-to-list-mysql-user-accounts-via-command-line\/
https:\/\/www.1and1.com\/cloud-community\/learn\/application\/e-mail\/set-up-a-postfix-mail-server-with-dovecot-and-roundcube-on-centos-7\/
https:\/\/www.howtoforge.com\/tutorial\/perfect-server-centos-7-apache-mysql-php-pureftpd-postfix-dovecot-and-ispconfig\/
https:\/\/www.tecmint.com\/how-to-enable-epel-repository-for-rhel-centos-6-5\/
https:\/\/www.vultr.com\/docs\/install-imagemagick-on-centos-6
https:\/\/tecadmin.net\/install-imagemagick-on-centos-rhel\/
https:\/\/forums.fedoraforum.org\/archive\/index.php\/t-262200.html
https:\/\/www.digitalocean.com\/community\/tutorials\/how-to-create-a-ssl-certificate-on-apache-for-centos-6
https:\/\/www.digitalocean.com\/community\/tutorials\/how-to-create-an-ssl-certificate-on-apache-for-centos-7
https:\/\/hallard.me\/enable-ssl-for-apache-server-in-5-minutes\/
https:\/\/wiki.centos.org\/HowTos\/Https
https:\/\/www.linode.com\/docs\/email\/clients\/using-fetchmail-to-retrieve-email\/https:\/\/support.rackspace.com\/how-to\/dovecot-installation-and-configuration-on-centos\/https:\/\/support.plesk.com\/hc\/en-us\/articles\/115002060625-Roundcube-Attachment-and-settings-do-not-work-File-Upload-Failed
https:\/\/support.rackspace.com\/how-to\/dovecot-installation-and-configuration-on-centos\/<\/p>\n
For nginx (webserver):
https:\/\/linuxize.com\/series\/setting-up-and-configuring-a-mail-server\/
https:\/\/linuxize.com\/post\/install-and-configure-roundcube-webmail\/<\/p>\n
OTHER USEFUL NOTES
————————————————————————
– Fetchmail does not seem to come with control scripts, but if you create them yourself (under \/etc\/init.d and links to \/etc\/rc.d\/rcX.d\/), systemd will pick them up<\/p>\n
– Sample Fetchmail config that downloads mails for 3 users (5 minutes interval) from a remote mail server (IP n.n.n.n or FQDN)<\/p>\n
# cat \/root\/.fetchmailrc\nset syslog\nset no bouncemail\nset no spambounce\nset daemon 300\npoll n.n.n.n\nwith proto pop3\n    username user1@mydomain.com password Password@123 is localuser1 mda \"\/bin\/procmail -d %T\"\n    username anotheruser@mydomain.com password my-Password@123 is localanotheruser mda \"\/bin\/procmail -d %T\"\n    username thirduser@mydomain.com password justaPassword is localeusername mda \"\/bin\/procmail -d %T\"<\/pre>\n
– Fetchmail knows to use \/root\/.fetchmailrc because it is defined in its startup script:
# grep fetchmailrc \/etc\/init.d\/fetchmail
FRC=\/root\/.fetchmailrc
FRC=\/root\/.fetchmailrc<\/p>\n
————————————————-
– If you use a relayhost (i.e., your mail server can’t send mails directly), uncomment and set the relayhost variable to your service provider’s SMTP server (and port e.g., 587) – especially necessary if they are blocking TCP port 25.
See link for sample steps for postfix: https:\/\/www.linode.com\/docs\/email\/postfix\/postfix-smtp-debian7\/
————————————————-
The default postfix\/fetchmail\/dovecot log on CentOS\/RedHat\/Oracle_Linux is \/var\/log\/maillog (look in the file for troubleshooting)
————————————————-<\/p>\n
– If you have mails in \/var\/mail\/ (e.g., because you were using Sendmail before) and you want that mail to be accessible in Roundcube or other email clients such as Outlook, you may need to use the mbox format instead of the Maildir folder, i.e., change the mail_location in file \/etc\/dovecot\/conf.d\/10-mail.conf as follows.<\/p>\n
NOTE: If you switch to the mbox format, make sure the permission on INBOX files in \/var\/mail\/ is 0600<\/p>\n