完璧なサーバーの拡張 - Debian Squeeze [ISPConfig 3] - ページ 2

apt-get remove squirrelmail

rm /etc/apache2/conf.d/squirrelmail.conf

apt-get install roundcube roundcube-mysql

dpkg-reconfigure roundcube-core

nano /etc/apache2/conf.d/roundcube

# これらのエイリアスは、apacheサーバー上の複数のホストで正しく機能しません  
# 使用するにはコメントを外すか、設定に適応させてください  
#    Alias /roundcube/program/js/tiny_mce/ /usr/share/tinymce/www/  
    Alias /roundcube /var/lib/roundcube  
    Alias /webmail /var/lib/roundcube  
  
# tinymceファイルへのアクセス  
  
      Options Indexes MultiViews FollowSymLinks  
      AllowOverride None  
      Order allow,deny  
      allow from all  
  
  
  
  Options +FollowSymLinks  
  # これは/var/lib/roundcube/.htaccessを解析するために必要です。  
  # AllowOverrideをNoneに設定する前にその内容を確認してください。  
  AllowOverride All  
  order allow,deny  
  allow from all  
  
  
# 基本ディレクトリの保護：  
  
        Options -FollowSymLinks  
        AllowOverride None  
  
  
  
        Options -FollowSymLinks  
        AllowOverride None  
        Order allow,deny  
        Deny from all  
  
  
  
        Options -FollowSymLinks  
        AllowOverride None  
        Order allow,deny  
        Deny from all  
  
  
  
    
      
      RewriteEngine on  
      RewriteCond %{HTTPS} !^on$ [NC]  
      RewriteRule . https://%{HTTP_HOST}:50443%{REQUEST_URI}  [L]  
      
    
  
  
  
    
      
      RewriteEngine on  
      RewriteCond %{HTTPS} !^on$ [NC]  
      RewriteRule . https://%{HTTP_HOST}:50443%{REQUEST_URI}  [L]  
      
    
  
  
  
# ISPConfig 3.0.5.1以上の場合、次の内容も追加してください  
  
AddType application/x-httpd-php .php  
php_flag magic_quotes_gpc Off  
php_flag track_vars On  
php_admin_flag allow_url_fopen Off  
php_value include_path .:/usr/share/php:/usr/share/pear  
php_admin_value upload_tmp_dir /var/lib/roundcube/temp  
php_admin_value open_basedir /usr/share/php:/usr/lib/roundcube:/etc/roundcube:/usr/share/roundcube:/var/lib/roundcube:/var/log/roundcube  
php_flag register_globals off  
   

nano /var/lib/roundcube/config/main.inc.php

auto_create_user = TRUE;  
$rcmail_config['default_host'] = 'localhost';

$rcmail_config['plugins'] = array('fail2ban'); 

/etc/init.d/apache2 restart

nano /etc/fail2ban/jail.local

[roundcube]  
enabled  = true  
port     = http,50443  
filter   = roundcube  
logpath  = /var/log/roundcube/userlogins  
maxretry = 5  
  
[webmin-auth]  
enabled = true  
port    = 50000  
filter  = webmin-auth  
logpath  = /var/log/auth.log  
maxretry = 3   
  
[ssh]  
enabled = true  
port    = 50022  
filter  = sshd  
logpath  = /var/log/auth.log  
maxretry = 6

nano /etc/fail2ban/filter.d/roundcube.conf

[Definition]
failregex = FAILED login for .*. from 
ignoreregex =

/etc/init.d/fail2ban restart

iptables -L -n 

nano /usr/bin/fail2ban-client

[...]  
def __processCmd(self, cmd, showRet = True):  
                beautifier = Beautifier()  
                for c in cmd:  
                        beautifier.setInputCmd(c)  
                        try:  
[...]  

[...]  
def __processCmd(self, cmd, showRet = True):  
                beautifier = Beautifier()  
                for c in cmd:  
                        time.sleep(0.05)  
                        beautifier.setInputCmd(c)  
                        try:  
[...]  

/etc/init.d/fail2ban restart

iptables -L -n