완벽한 서버 확장 - 데비안 스퀴즈 [ISPConfig 3] - 페이지 2

apt-get remove squirrelmail

rm /etc/apache2/conf.d/squirrelmail.conf

apt-get install roundcube roundcube-mysql

dpkg-reconfigure roundcube-core

nano /etc/apache2/conf.d/roundcube

# 이러한 별칭은 apache 서버에서 여러 호스트와 함께 제대로 작동하지 않습니다  
# 사용하려면 주석을 제거하거나 구성에 맞게 조정하십시오  
#    Alias /roundcube/program/js/tiny_mce/ /usr/share/tinymce/www/  
    Alias /roundcube /var/lib/roundcube  
    Alias /webmail /var/lib/roundcube  
  
# tinymce 파일에 대한 접근  
  
      Options Indexes MultiViews FollowSymLinks  
      AllowOverride None  
      Order allow,deny  
      allow from all  
  
  
  
  Options +FollowSymLinks  
  # 이것은 /var/lib/roundcube/.htaccess를 구문 분석하는 데 필요합니다.  
  # AllowOverride를 None으로 설정하기 전에 내용을 확인하십시오.  
  AllowOverride All  
  order allow,deny  
  allow from all  
  
  
# 기본 디렉토리 보호:  
  
        Options -FollowSymLinks  
        AllowOverride None  
  
  
  
        Options -FollowSymLinks  
        AllowOverride None  
        Order allow,deny  
        Deny from all  
  
  
  
        Options -FollowSymLinks  
        AllowOverride None  
        Order allow,deny  
        Deny from all  
  
  
  
    
      
      RewriteEngine on  
      RewriteCond %{HTTPS} !^on$ [NC]  
      RewriteRule . https://%{HTTP_HOST}:50443%{REQUEST_URI}  [L]  
      
    
  
  
  
    
      
      RewriteEngine on  
      RewriteCond %{HTTPS} !^on$ [NC]  
      RewriteRule . https://%{HTTP_HOST}:50443%{REQUEST_URI}  [L]  
      
    
  
  
  
# ISPConfig 3.0.5.1 이상에 대해서도 다음을 추가하십시오  
  
AddType application/x-httpd-php .php  
php_flag magic_quotes_gpc Off  
php_flag track_vars On  
php_admin_flag allow_url_fopen Off  
php_value include_path .:/usr/share/php:/usr/share/pear  
php_admin_value upload_tmp_dir /var/lib/roundcube/temp  
php_admin_value open_basedir /usr/share/php:/usr/lib/roundcube:/etc/roundcube:/usr/share/roundcube:/var/lib/roundcube:/var/log/roundcube  
php_flag register_globals off  
   

nano /var/lib/roundcube/config/main.inc.php

auto_create_user = TRUE;  
$rcmail_config['default_host'] = 'localhost';

$rcmail_config['plugins'] = array('fail2ban'); 

/etc/init.d/apache2 restart

nano /etc/fail2ban/jail.local

[roundcube]  
enabled  = true  
port     = http,50443  
filter   = roundcube  
logpath  = /var/log/roundcube/userlogins  
maxretry = 5  
  
[webmin-auth]  
enabled = true  
port    = 50000  
filter  = webmin-auth  
logpath  = /var/log/auth.log  
maxretry = 3   
  
[ssh]  
enabled = true  
port    = 50022  
filter  = sshd  
logpath  = /var/log/auth.log  
maxretry = 6

nano /etc/fail2ban/filter.d/roundcube.conf

[Definition]
failregex = FAILED login for .*. from 
ignoreregex =

/etc/init.d/fail2ban restart

iptables -L -n 

nano /usr/bin/fail2ban-client

[...]  
def __processCmd(self, cmd, showRet = True):  
                beautifier = Beautifier()  
                for c in cmd:  
                        beautifier.setInputCmd(c)  
                        try:  
[...]  

[...]  
def __processCmd(self, cmd, showRet = True):  
                beautifier = Beautifier()  
                for c in cmd:  
                        time.sleep(0.05)  
                        beautifier.setInputCmd(c)  
                        try:  
[...]  

/etc/init.d/fail2ban restart

iptables -L -n