Showing posts with label Mail Server. Show all posts
Showing posts with label Mail Server. Show all posts

Saturday, May 27, 2017

Migrasi Mailbox Cpanel ke Zimbra

Kalau di tutorial sebelumnya kita melakukan migrasi account Cpanel ke Zimbra kali ini catatan saya akan membahas bagaimana memindahkan mailbox Cpanel ke Zimbra. Mailbox yang dimaksud sendiri ialah isi dari email atau surat elektronik yang dimiliki masing2 account di POP3/IMAP Server di Cpanel. 
Hal ini bisa diibaratkan tiap masing2 account di Cpanel memiliki kotak surat masing-masing yang di dalam kotak surat tersebut berisi surat-surat elektronik dari pengirimnya.
Hal paling umum yang biasa dilakukan ketika migrasi mail server ialah sekaligus memindahkan mailbox yang ada di tempat lama ke tempat baru.

Berikut dibawah ini ialah langkah-langkahnya.

1. Migrasi Account Cpanel ke Zimbra
Tahap ini sudah pernah saya bahas di tutorial sebelumnya. Untuk lebih lengkapnya bisa kunjungi tutorial saya Migrasi Account Cpanel ke Zimbra.

2. Migrasi Mailbox
Migrasi Mailbox dari Cpanel ke zimbra dilakukan dengan cara mensinkronisasikan IMAP dengan command imapsync. Ada beberapa requirement yang diperlukan dalam tahap ini, beberapa diantaranya ialah.
  • Kita harus mengetahui username dan password dari tiap2 account. Dalam tahap ini biasanya menjadi kendala karna kita biasanya tidak tahu password dari masing2 account, namun kita masih bisa mengakalinya dengan membuat password default terlebih dahulu ketika migrasi mailbox lalu setelah selesai baru kita migrasikan ulang account nya sesuai dengan password yg lama.
  • Agar memudahkan pekerjaan sebaiknya Domain zimbra mail server sudah dikenal oleh DNS.
  • Perhatikan port IMAP yang digunakan oleh Cpanel dan Zimbra. Ketika menggunakan teknik imapsync biasanya kita menggunakan port 993 (IMAP SSL) di Cpanel dan port 993/7993 di Zimbra (IMAP SSL)
  • Apabila kita tidak mengetahui Domain Cpanel yg akan kita migrasikan maka kita dapat menggunakan IP Address dari Cpanel, untuk mengetahuinya bisa menggunakan ping dari zimbra server kita.
Setelah memperhatikan beberapa hal diatas, kita bisa menggunakan command dibawah ini. 
[root@azpstudent ~]# imapsync --buffersize 8192000 --nosyncacls --subscribe --syncinternaldates --host1 IPADDRESSCPANEL --user1 customer.service@domaincpanel.com --password1 passwordcustomerservicecpanel --ssl1 --port1 993 --host2 mail.azpstudent.com --user2 customer.service@azpstudent.com --password2 passwordcustomerservicezimbra -ssl2 --port2 7993 --noauthmd5

Notes
  • Ganti parameter yang saya bold diatas sesuai yang Anda dibutuhkan dan Anda konfigurasikan di system Anda.
  • Perhatikan pada parameter port2 command diatas saya menggunakan port 7993 di zimbra saya sebagai IMAP SSL. Sesuaikan port tersebut dengan parameter konfigurasi yang ada di sistem Anda.

3. Verifikasi
Untuk verifikasi apakah proses migrasi mailbox sukses atau tidak, Anda bisa masuk ke Zimbra Account Anda, contoh dari disini adalah mailbox customer.service.

























Migrasi Email Account Cpanel ke Zimbra

Okeh jadi hal pertama yang harus dilakukan adalah migrasikan atau export user account tiap pengguna email cpanel ke zimbra. Kebeneran saya dapat script dari salah satu kenalan saya di excellent yang juga dulu ngajarin zimbra (thx mas imanuddin, dhenandi, & team).

Script tersebut kira-kira seperti dibawah ini.

[zimbra@azpstudent ex-im]$ cat script-export-acc-cpanel.sh 
#!/bin/sh

# Clear screen
clear
LOCATION=`pwd`
rm $LOCATION/create-account-zimbra.zmp
touch $LOCATION/create-account-zimbra.zmp
echo "Looping for all users"

DOMAIN=`hostname`
USER_LIST="shadow"
USERS=`cat $LOCATION/$USER_LIST`


for ACCOUNT in $USERS; 
do
        PASS=`echo $ACCOUNT | cut -d ':' -f2`
        ACC=`echo $ACCOUNT | cut -d ":" -f1`

echo "Retrieve password account $ACC@$DOMAIN"
echo "ca $ACC@$DOMAIN PasswordTemp" >> create-account-zimbra.zmp
echo "ma $ACC@$DOMAIN userPassword '{crypt}$PASS'" >> create-account-zimbra.zmp

done
echo "Complete"

Seperti yang kita tahu bahwa username & password di linux tersimpan di file /etc/passwd dan /etc/shadow. Begitupula dengan Cpanel, username dan passwordnya juga disimpan di file tersebut.

Jadi dibawah ini langkah-langkahnya.

1. Log in ke Cpanel dan Go To direktori /etc/DOMAIN/ lalu Download SHADOW File



















2. SSH ke Server Zimbra lalu Masukan Command di Bawah.
Isi dari file yang di download dibawah ini sebenernya adalah script yang sudah di deskripsikan diatas.

cd /srv
wget -c https://dhenandi.com/repo/export-import-acc-cpanel.zip
unzip export-import-acc-cpanel.zip
cd ex-im/

Setelah itu masukan file SHADOW yang sudah di download dari Cpanel ke Zimbra Server direktori /srv/ex-im/ (Bisa gunakan SCP/Win SCP). 

Apabila selesai maka dalam direktori /srv/ex-im akan ada file dibawah ini.



3. Execute Script script-export-acc-cpanel.sh 
Langkah paling krusial yaitu mengeksekusi script yang sudah di download lalu memasukan account tersebut ke zimbra. Ubah permission file agar bisa dieksekusi dengan command dibawah ini.
cd /srv/ex-im
chmod +x script-export-acc-cpanel.sh
./script-export-acc-cpanel.sh

Lalu setelah mengeksekusi command diatas maka akan muncul satu buah file bernama create-account-zimbra.zmp. File tersebut berisi account yang ada di Cpanel yang akan kita migrasikan ke Zimbra.








4. Migrate Account ke Zimbra
Setelah kita berhasil mengenerate file create-account-zimbra.zmp dengan script script-export-acc-cpanel.sh maka langkah selanjutnya kita migrasikan seluruh account dari Cpanel yang ada di create-account-zimbra.zmp ke dalam Zimbra Mail Server.

Langkahnya ialah masuk ke user zimbra lalu gunakan command zmprov.
[root@azpstudent ~]# su - zimbra
[zimbra@azpstudent ~]$ cd /srv/ex-im/  
[zimbra@azpstudent ex-im]$ zmprov < create-account-zimbra.zmp 

####Maka Akan Keluar Output Seperti Dibawah Ini####
prov> ca customer.service@azpstudent.com PasswordTemp
ERROR: account.ACCOUNT_EXISTS (email address already exists: customer.service@azpstudent.com, at DN: uid=customer.service,ou=people,dc=azpstudent,dc=com)
prov> ma customer.service@azpstudent.com userPassword '{crypt}$6$cbL8PhBuZ6EcaUA4$uc4/26w2kqzjNUksrk2n0x9BbUivGbcVgK.1S6ZBcMqSfiHDxkiVpuYt5SWpc7ZsdEPT0M.pUGj1.IA01WDSt0'

5. Verifikasi di Zimbra
Dari langkah diatas kita hanya migrasikan account customer.service dari account Cpanel ke Zimbra.
Untuk melihat apakah account tersebut sudah ada di zimbra kita bisa login ke web zimbra administrator lalu ke bagian Manage -> Accounts.







Bisa dilihat dari tampilan zimbra administrator diatas bahwa account customer.service sudah berhasil di migrasi/export ke zimbra mail server kita.

Sekian tutorial dan catatan saya ini.

Sumber : 

Friday, April 10, 2015

Implementasi SPF, DKIM, DMARC dan Reverse DNS Sebagai Standard Protection dan Meningkatkan Email Integrity

Ketika kita membangun sebuah email server sering kita lupa bahwa ada konfigurasi tambahan yang harus kita lakukan. Konfigurasi ini termasuk kategori penting loh sebab ini terkait integritas email system yang telah kita bangun, pertanyaannya itu seberapa penting sih? 

Banyak Email System saat ini terutama seperti Gmail, Yahoo, AOL, sampe Email System Perbankan (Bank-Bank) biasanya sangat memperhatikan paramater-parameter seperti SPF, DKIM, DMARC, dan Resolve DNS yang digunakan oleh si pengirim email. Kenapa sih kok ribet amat yah? Itu karna mereka mengeluarkan banyak tenaga untuk bertarung melawan spam dan email spoofing. Inilah kenapa sebabnya biasanya paket email yang tidak terdapat SPF, DKIM, DMARC bahkan yang Resolve DNS nya kurang baik konfigurasinya sering dianggap spam dan lebih parahnya lagi bahkan di DROP oleh email system penerima.

By the way untuk tulisan ini best practicenya menggunakan platform zimbra. Namun, kudu diinget meskipun saya sebelumnya pernah berguru sama salah satu jagoan email server dgn platform zimbra di Indonesia, bukan berarti bahwa standard yang saya tulis ini hanya untuk platform zimbra saja, namun sebenernya juga untuk semua platform. Artinya ketika selesai mendeploy sebuah email system jangan cuma intinya bisa kirim dan terima email saja, sebaiknya jangan lupa juga tambahkan konfigurasi lainnya untuk meningkatkan proteksi dan juga email integrity, antara lain yaitu sebagai berikut ini :
  • Sender Policy Framework (SPF).
  • Domain Keys Identified Mail (DKIM).
  • Domain-Based Message Authentication, Reporting & Conformance (DMARC).
  • Reverse DNS.

Berikut beberapa penjelasan singkat termasuk best practice untuk membangun standard proteksi dan memperbaiki reputasi serta email integrity di email system yang kita bangun. Nah best practicenya baru mengacu pada platform zimbra nih hehe...

Sender Policy Framework (SPF)
Sender policy framework adalah sebuah email validation system yang sebenernya di desain untuk mencegah spoofing. Cara kerja SPF cukup sederhana yaitu SPF akan melakukan verifikasi Source IP dari email yang dikirim lalu mencocokannya dengan DNS TXT record menggunakan SPF content.
Dibawah ini kira-kira merupakan flow gimana kira-kira SPF bekerja.


Penjelasan :
Nah kalo dari flow diatas terlihat bahwa email system yang menerima email akan mengecek Sender-ID Framework dari tiap-tiap email yang mereka terima dengan cara menanyakan SPF record si pengirim email ke DNS.  Nah hasilnya hanya ada dua yaitu Pass atau Fail, apabila pass maka email biasanya akan di redirect ke folder inbox penerima dan apabila fail maka email akan diredirect ke folder Junk/Quarantine bahkan yang lebih parahnya lagi bisa saja di drop.
Sebenernya ada juga status selain Pass dan Fail yaitu neutral. Kalo statusnya neutral ada beberapa kemungkinan bisa saja masih menunggu propagasi DNS atau memang sudah di konfigurasi namun namun memang si admin menginginkan implementasi SPF tanpa policy.
Apa dampaknya kalo kita enggak buat SPF di email system kita? Biasanya kalo si penerima memang agak strict ya email kita di anggap spam bahkan bisa aja di drop karna dianggap tidak trusted.

Konfigurasi SPF?
Setelah saya ceritain dulu konsep SPF biar paham jadi gak cuma bisa konfig doang hehe, maka selanjutnya kita masuk ke proses konfigurasi SPF. Konfigurasinya standardnya sih sebenernya mudah kok, mungkin untuk beberapa kasus yang custom baru sedikit lebih rumit cuma saya coba share yang standard yah..

Format
"v=spf1 a mx include:servermta.domain.com ~all"

Contoh
"v=spf1 a mx include:mail.example.com ~all"

Kalo agan pake WHM contohnya seperti dibawah ini.


Notes :
  • Saya merahin karna pake domain orang, yang saya merahin seharusnya adalah nama domain agan. Nah yang saya kasih tanda panah isi dengan server mta yang sudah di isi dengan A Record di DNS agan.
  • Sebagai catatan tambahan aja kalo masih gak ngerti ~all, -all, ?all, +all bisa liat tabel dibawah ini.

Nah kalo sudah selesai agan tinggal nunggu propagasi DNS paling lama 1-2 hari. 

Pengecekan SPF
Kalo propagasi DNS sudah selesai agan bisa test SPF internet seperti mxtoolbox.com disini. Setelah itu cari box yang SPF lalu masukan domain agan. Kalo sudah selesai seharusnya hasil testing akan seperti dibawah ini.

Dan apabila agan coba ngirim email ke google dan show original code maka SPF akan terlihat pass.




Domain Keys Identified Mail (DKIM)
Domain keys adalah salah satu metode security pada email untuk mengasosiasikan domain name dengan email yang dikirim. Dengan adanya DKIM maka ini memungkinkan adanya proses signature pada masing-masing email yang dikirim oleh si pengirim dengan metode enkripsi asymetric dengan saling berbagi informasi mengenai public keys dan private keys yang digunakan.

Coba agan perhatikan gambar dibawah ini :

Penjelasan :
Nah dari gambar diatas terlihat bahwa MTA si pengirim mempublish public keys di DNS public lalu ketika proses pengiriman email terjadi, maka si penerima akan menggunakan public keys yang ada di DNS untuk mencocokan apakah match atau tidak, apabila match maka akan tertera bahwa email yang dikirim signed-by domain si pengirim.

Konfigurasi DKIM?
Konfigurasi DKIM lebih sedikit rumit daripada SPF namun enggak susah kok. Langkah-langkahnya itu adalah sebagai berikut ini, saya contohkan generate dengan zimbra yah.
  • Masuk ke server lalu masuk lagi ke user zimbra setelah itu cek dengan command ini "/opt/zimbra/libexec/zmdkimkeyutil -q -d contoh.com"
  • Kalau belum ada saatnya buat dengan format seperti dibawah ini :
    /opt/zimbra/libexec/zmdkimkeyutil -a -d example.com -s namadkim
  • Setelah selesai di generate maka akan muncul public key yang bisa di publish di DNS, agan bisa copas public key tersebut lalu buat lagi TXT record di DNS agan. Sebagai contoh hasil generate public key seperti dibawah ini :

    "v=DKIM1; k=rsa; "  "p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC2c4zVBYQtUsoeEGiqYKEZ7JLU3cbuQCOYvr+IDQJPOQjVlsSTapsu+4yUZ6OJ41RmzYQooneL+We1MMYDmGMAQmHNQAAfhoudLN/+aSC7ggo+rTAd4ipwMujgySB8SsKzKBeAFLth/WteAOrVMIfMrmNgKj0pLUfQp1sVpa1WGQIDAQAB"

    Hapus tanda-tanda petik diatas lalu coba copas ke website tools checker dkim di disini.
    Kalo hasilnya sudah seperti pada screenshot dibawah ini maka berarti DKIM untuk domain agan sudah berjalan.

  • Setelah selesai di cek copas key record yang sudah valid tsb ke WHM atau manajemen tools yang agan gunakan, buat TXT record yah. Sebagai contoh seperti dibawah ini :

Pengecekan DKIM
Untuk mengecek DKIM agan sudah berjalan atau belum agan bisa cek di link yang sama di dkimcore disini. Lalu masukan nama dkim yang agan generete tadi lalu domain seperti dikotak merah ini.


Kalo hasilnya sudah valid seperti gambar dibawah berarti DKIM anda sudah terecord di DNS.



Tinggal lanjutkan coba kirim email dari email agan ke google lalu cek parameter ini dan show original code, apabila sudah sesuai seperti dibawah ini harusnya DKIM sudah berjalan.

Show Original Code

Show Arrow Details


Keliatan kalo di original code bahwa dkim agan statusnya PASS dan di arrow details bisa dilihat signed-by nah yg garis merah seharusnya nama domain agan.
Kalo seperti ini lebih reliable dan trusted kan? hehe


Domain-Based Message Authentication, Reporting & Conformance (DMARC)
Selanjutnya kita membahas DMARC, sebenernya cara kerjanya hampir sama seperti dengan SPF namun metodenya dan fungsinya sedikit berbeda. Meskipun begitu nampaknya saat ini DMARC merupakan salah satu komponen penting juga yang kudu dikonfigurasi pada email system kita yang sudah established untuk meningkatkan email integrity.
DMARC sendiri adalah sebuah spesifikasi teknis yang dibuat oleh sekelompok organisasi yang ingin membantu mengurangi potensi penyalahgunaan email dengan metode email authentication protocol. Coba perhatikan cara kerjanya pada gambar dibawah ini.


Penjelasan :
DMARC melakukan standarisasi dengan mendeteksi bagaimana penerima email menjalankan autentikasi menggunakan mekanisme well-known SPF & DKIM yang telah ada di record DNS. Hal ini biasanya akan berdampak pada user experience pengirim email tersebut karna email yg dikirim akan menerima "Consistent Authentication Results" dari setiap penerima email mereka yg juga menjalankan mekanisme DMARC, yang jelas dengan menggunakan mekanisme ini komunikasi email yang terjadi antara pengirim dan penerima akan menjadi lebih reliable.

Konfigurasi DMARC?
Untuk melakukan konfigurasi DMARC sebaiknya lakukan dulu konfigurasi SPF dan DKIM di email system agan. Setelah itu agan bisa generate record untuk DMARC disini.

Nah coba isi parameter seperti contoh dibawah ini, lalu kalo sudah selesai tekan tombol "Get DMARC Record". Nama domain example.com ganti dengan nama domain masing-masing yah.


Dari policy diatas itu saya tentukan apabila status email paket fail maka akan di redirect ke quaratine. Sebenernya agan bisa juga pilih policy yang reject kalo mau lebih strict sih, cuma kekurangannya kita jadi gak bisa analisa aja itu email spam ato bukan karna langsung di drop emailnya. #CMIIW

Setelah dapet DMARC Record seperti gambar dibawah ini agan bisa masukan record yang ada di kotak merah dari gambar dibawah ini ke DNS agan, seperti biasa buat TXT record.


Copas record yang sudah di generate dari link diatas yg ada di kotak merah tsb lalu buat TXT Record di WHM ato cPanel ato DNS managemen agan lah pokoke seperti contoh gambar dibawah ini.


Kalo sudah selesai ketik OK/Apply Modification.

Pengecekan DMARC
Kamu bisa cek dari mxtoolbox.com disini lalu cari kotak box DMARC dan masukan domain agan, atau bisa juga di dmarcian.com disini dengan cara yang sama tinggal masukan domain agan. Sebagai contoh saya masukan domain google.com di mxtoolbox kalo domain agan yang dimasukan hasilnya sudah sesuai sama seperti gambar dibawah ini maka seharusnya mekanisme DMARC sudah berjalan di email system agan.


Agan bisa cek juga dengan kirim email ke gmail misalnya lalu di "Show Original Code" cari parameter DMARC, apabila sudah PASS seperti gambar dibawah ini artinya sudah berjalan nih mekanisme DMARC di email system agan.



Reverse & Resolve DNS
Sepertinya banyak engineer dan sysadmin yang kurang aware juga untuk hal yang satu ini, di beberapa email system yang sudah strict banged ada loh biasanya yang mereject pengirim email yang tidak memiliki Reverse DNS yang konsisten.
Gambaran proses untuk Resolve DNS bisa dilihat dari gambar dibawah ini.


Setelah liat gambar diatas harusnya dapet yah gambarannya? Kalo Resolution DNS itu menentukan IP Address yang diasosiasikan ke domain name, sedangkan kalo Reverse DNS itu sebaliknya Domain yang diasosiasikan ke IP Address.

Konfigurasi Reverse DNS?
Cara satu-satunya itu cuma bisa minta tolong ISP di tempat dimana agan berlangganan. Bilang aja ke mereka kalo kita punya IP Public pengen bikin PTR Record yang dipointing ke domain A dengan IP Public yang digunakan B, sesimple itu kok hehe.
Setelah itu jangan lupa edit SMTP Helo agan, kalo di zimbra bisa menggunakan command dibawah ini.

Perhatikan bahwa mail.example.com ganti dengan nama mx record yg digunakan di DNS agan yah.

Version 8.0.X
zmlocalconfig -e postfix_smtpd_banner="mail.example.com"
zmcontrol restart

Version 8.5 keatas
zmprov ms  `zmhostname` zimbraMtaSmtpdBanner mail.example.com
zmcontrol restart

Pengecekan Reverse DNS
Caranya gampang gan, tinggal pake mxtoolbox.com aja menggunakan link disini. Lalu agan tinggal masukan IP Address yang agan gunakan sebagai mail server agan yg juga digunakan sebagai MX Record. Kalo sudah sesuai artinya sudah tidak ada issue lagi dan dengan cara ini pastinya email integrity dari email system kita akan naik di pihak penerima email.


Done! 
Lumayan panjang yah? Namanya juga catetan pribadi, semoga bermanfaat terutama buat diri saya pribadi hehehe.....

Sunday, February 8, 2015

Installasi Zimbra di CentOS 6.5 dan Konfigurasi DNS Server dengan Bind

Kali ini saya mau coba share langkah-langkah installasi zimbra mail server di CentOS 6.5.
Sebagai catatan, karna ini sifatnya lab saja jadi saya gunakan IP Private. Sedangkan pada best practicenya, temen-temen seharusnya menggunakan IP Public.

Requirement :
Di lab ini saya pake server VM dengan spesifikasi dibawah ini
- RAM 4GB
- CPU 1 core
- Storage 30GB ( Minimal kalo mau aman buat nge-lab 30GB ya ^,^)
- IP Address 192.168.99.99 ( Sekali lagi, best practicenya biasanya ip public namun karna ini buat lab pake IP Private yah hehe )
- Hostname : mail.azpstudent.com
- Domain : azpstudent.com

Remarks :
Pastiin kamu terkoneksi ke internet yah untuk instalasi package-package dari repository online.
Ato kalo kamu udah punya repository lokal gak masalah, untuk buat repository local bisa liat link ini http://arifzulfikarp.blogspot.com/2014/10/membuat-lokal-repository-http-di-centos.html


Konfigurasi Awal (IP, Hostname, Selinux -> Disabled, Iptables -> off)


Konfigurasi Hostname
[root@mail ~]# vim /etc/sysconfig/network
#ganti menjadi seperti dibawah ini.

NETWORKING=yes
HOSTNAME=mail.azpstudent.com

Konfigurasi File /etc/hosts
[root@mail ~]# vim /etc/hosts
#Lalu tambahkan 192.168.99.99 azpstudent.com mail mail.azpstudent.com dibagian paling bawah

127.0.0.1   localhost localhost.localdomain localhost4 localhost4.localdomain4
::1         localhost localhost.localdomain localhost6 localhost6.localdomain6

192.168.99.99 azpstudent.com mail mail.azpstudent.com

Konfigurasi IP Address
[root@mail ~]# vim /etc/sysconfig/network-scripts/ifcfg-eth0
#ganti menjadi seperti dibawah ini.

DEVICE=eth0
HWADDR=08:00:27:0A:F1:68
TYPE=Ethernet
UUID=5118fb36-09d6-45a1-b3fa-6fc23410479f
ONBOOT=yes
NM_CONTROLLED=no
BOOTPROTO=none
IPADDR=192.168.99.99
PREFIX=24
GATEWAY=192.168.99.5
DNS1=192.168.99.99
DNS2=8.8.8.8 

Konfigurasi Selinux
[root@mail ~]# vim /etc/selinux/config
#Ganti bagian yang SELINUX dari enforcing menjadi disabled

SELINUX=disabled
SELINUXTYPE=targeted

Konfigurasi IP Tables
[root@mail ~]# /etc/init.d/iptables stop
[root@mail ~]# chkconfig iptables off

Setelah selesai reboot server kamu, reboot ini karna ada perubahan selinux dari enforcing menjadi disabled.

Instalasi Bind sebagai DNS Server.

Di lab kali ini, DNS servernya merupakan localhost alias server yang diinstall mail server itu pula yaitu ipaddress 192.168.99.99.
Di dunia real, DNS server sebaiknya dipisah dengan mail server.
Langsung saja, dibawah ini langkah-langkahnya

[root@mail ~]# yum install bind* -y

Apabila proses instalasi sudah selesai, ubah dan tambahkan konfigurasi bind nya yang saya bold di bawah ini.

[root@mail ~]# vim /etc/named.conf
//
// named.conf
//
// Provided by Red Hat bind package to configure the ISC BIND named(8) DNS
// server as a caching only nameserver (as a localhost DNS resolver only).
//
// See /usr/share/doc/bind*/sample/ for example named configuration files.
//

options {
listen-on port 53 { any; };
listen-on-v6 port 53 { any; };
directory "/var/named";
dump-file "/var/named/data/cache_dump.db";
        statistics-file "/var/named/data/named_stats.txt";
        memstatistics-file "/var/named/data/named_mem_stats.txt";
allow-query     { any; };
recursion yes;
forwarders {8.8.8.8;};
dnssec-enable yes;
dnssec-validation no;
dnssec-lookaside auto;

/* Path to ISC DLV key */
bindkeys-file "/etc/named.iscdlv.key";

managed-keys-directory "/var/named/dynamic";
};

logging {
        channel default_debug {
                file "data/named.run";
                severity dynamic;
        };
};

zone "." IN {
type hint;
file "named.ca";
};

zone "azpstudent.com" IN {
        type master;
        file "/var/named/azpstudent.com.zone";
        allow-update { none; };
};

include "/etc/named.rfc1912.zones";
include "/etc/named.root.key";


Setelah itu buat file dengan nama azpstudent.com.zone sesuai dengan konfigurasi diatas di direktori /var/named

[root@mail ~]# vim /var/named/azpstudent.com.zone 
# Lalu isi dengan konfigurasi seperti dibawah ini

$TTL 86400
@   IN  SOA     ns1.azpstudent.com. root.azpstudent.com. (
        2013042201  ;Serial
        3600        ;Refresh
        1800        ;Retry
        604800      ;Expire
        86400       ;Minimum TTL
)
; Specify our two nameservers
  IN NS  ns1.azpstudent.com.
  IN MX 10 azpstudent.com.
; Resolve nameserver hostnames to IP, replace with your two droplet IP addresses.
ns1  IN A  192.168.99.99
mail  IN A  192.168.99.99

; Define hostname -> IP pairs which you wish to resolve
@  IN A  192.168.99.99
www  IN A  192.168.99.99

Setelah selesai save konfigurasi, lalu nyalakan service bind nya.
[root@mail ~]# /etc/init.d/named start

[root@mail ~]# chkconfig named on

Nah karna di /etc/named.conf kita sudah pakai forwarders ke ip 8.8.8.8 maka di /etc/sysconfig/network-scripts/ifcfg-eth0 DNS2=8.8.8.8 bisa dihapus.

Remarks
Alasan pake ini supaya pemula gak bingung pasti muncul error karna tadi DNS1 mengarah ke 192.168.99.99 yang mana bind-nya belum diinstall.

[root@mail ~]# vim /etc/sysconfig/network-scripts/ifcfg-eth0
#Hapus DNS2, maka konfigurasi seharusnya menjadi dibawah ini
DEVICE=eth0
HWADDR=08:00:27:0A:F1:68
TYPE=Ethernet
UUID=5118fb36-09d6-45a1-b3fa-6fc23410479f
ONBOOT=yes
NM_CONTROLLED=no
BOOTPROTO=none
IPADDR=192.168.99.99
PREFIX=24
GATEWAY=192.168.99.5
DNS1=192.168.99.99

Setelah itu kamu restart service network kamu,
[root@mail ~]# /etc/init.d/network restart

Lalu cek apakah azpstudent.com sudah mengarah ke IP 192.168.99.99
[root@mail ~]# host -al azpstudent.com
#Apabila output seperti dibawah ini seharusnya sudah benar
Trying "azpstudent.com"
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 64452
;; flags: qr aa ra; QUERY: 1, ANSWER: 8, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;azpstudent.com. IN AXFR

;; ANSWER SECTION:
azpstudent.com. 86400 IN SOA ns1.azpstudent.com. root.azpstudent.com. 2013042201 3600 1800 604800 86400
azpstudent.com. 86400 IN A 192.168.99.99
azpstudent.com. 86400 IN NS ns1.azpstudent.com.
azpstudent.com. 86400 IN MX 10 azpstudent.com.
mail.azpstudent.com. 86400 IN A 192.168.99.99
ns1.azpstudent.com. 86400 IN A 192.168.99.99
www.azpstudent.com. 86400 IN A 192.168.99.99
azpstudent.com. 86400 IN SOA ns1.azpstudent.com. root.azpstudent.com. 2013042201 3600 1800 604800 86400

Received 216 bytes from 192.168.99.99#53 in 0 ms

Nah, instalasi DNS sudah OK, sekarang ke tahap selanjutnya yaitu instalasi zimbra nya ^^


Instalasi Zimbra.

Tahap pertama, instalasi package yang diperlukan.
[root@mail ~]# yum install system-config-network-tui system-config-firewall-tui nc sudo mysql mysql-server mysql-devel sysstat wget postfix ntp -y

Tahap kedua, download paket zimbra dengan command dibawah ini. Ukurannya sekitar 750MB.
[root@mail ~]# wget http://files2.zimbra.com/downloads/8.0.6_GA/zcs-8.0.6_GA_5922.RHEL6_64.20131203103705.tgz

Tahap ketiga, kalo sudah selesai extract filenya lalu ikuti langkah-langkah dibawah ini.
[root@mail ~]# tar -xvzf zcs-8.0.6_GA_5922.RHEL6_64.20131203103705.tgz
[root@mail ~]# cd zcs-8.0.6_GA_5922.RHEL6_64.20131203103705

Remarks :
Pada proses instalasi agar gak terjadi port conflicts sebaiknya matikan dulu postfix atau sendmail kalo pake sendmail
Matiin postfix. 

[root@mail ~]# /etc/init.d/postfix stop
[root@mail ~]# chkconfig postfix off

Matiin sendmail.

[root@mail ~]# /etc/init.d/sendmail stop
[root@mail ~]# chkconfig sendmail off


Tahap selanjutnya, install zimbra dengan command dibawah ini.

[root@mail zcs-8.0.6_GA_5922.RHEL6_64.20131203103705]#./install.sh --platform-override

## Lalu pilih opsi yang saya bold dan underline dibawah ini yah (Saya agak gedein biar keliatan)##


operations logged to /tmp/install.log.11027
Checking for existing installation...
    zimbra-ldap...NOT FOUND
    zimbra-logger...NOT FOUND
    zimbra-mta...NOT FOUND
    zimbra-snmp...NOT FOUND
    zimbra-store...NOT FOUND
    zimbra-apache...NOT FOUND
    zimbra-spell...NOT FOUND
    zimbra-convertd...NOT FOUND
    zimbra-memcached...NOT FOUND
    zimbra-proxy...NOT FOUND
    zimbra-archiving...NOT FOUND
    zimbra-cluster...NOT FOUND
    zimbra-core...NOT FOUND
PLEASE READ THIS AGREEMENT CAREFULLY BEFORE USING THE SOFTWARE.
ZIMBRA, INC. ("ZIMBRA") WILL ONLY LICENSE THIS SOFTWARE TO YOU IF YOU
FIRST ACCEPT THE TERMS OF THIS AGREEMENT. BY DOWNLOADING OR INSTALLING
THE SOFTWARE, OR USING THE PRODUCT, YOU ARE CONSENTING TO BE BOUND BY
THIS AGREEMENT. IF YOU DO NOT AGREE TO ALL OF THE TERMS OF THIS
AGREEMENT, THEN DO NOT DOWNLOAD, INSTALL OR USE THE PRODUCT.

License Terms for the Zimbra Collaboration Suite:
  http://www.zimbra.com/license/zimbra_public_eula_2.4.html

Do you agree with the terms of the software license agreement? [N] y

Oracle Binary Code License Agreement for the Java SE Platform Products
ORACLE  AMERICA, INC. ("ORACLE"), FOR AND ON BEHALF OF ITSELF AND ITS SUBSIDIARIES AND AFFILIATES UNDER COMMON CONTROL, IS WILLING TO  LICENSE  THE SOFTWARE  TO YOU ONLY UPON THE CONDITION THAT YOU ACCEPT ALL OF THE TERMS  CONTAINED IN THIS BINARY CODE LICENSE AGREEMENT AND SUPPLEMENTAL  LICENSE TERMS (COLLECTIVELY "AGREEMENT").  PLEASE READ THE AGREEMENT  CAREFULLY.  BY SELECTING THE "ACCEPT LICENSE AGREEMENT" (OR THE EQUIVALENT) BUTTON AND/OR BY USING THE SOFTWARE YOU ACKNOWLEDGE THAT YOU HAVE READ THE TERMS AND AGREE TO THEM.  IF YOU ARE AGREEING TO THESE TERMS ON BEHALF OF A  COMPANY OR OTHER LEGAL ENTITY, YOU REPRESENT THAT YOU HAVE THE LEGAL  AUTHORITY TO BIND THE LEGAL ENTITY TO THESE TERMS.  IF YOU DO NOT HAVE SUCH  AUTHORITY, OR IF YOU DO NOT WISH TO BE BOUND BY THE TERMS, THEN SELECT THE "DECLINE LICENSE AGREEMENT" (OR THE EQUIVALENT) BUTTON AND YOU MUST NOT USE THE SOFTWARE ON THIS SITE OR ANY OTHER MEDIA ON WHICH THE SOFTWARE IS CONTAINED.
1.  DEFINITIONS.  "Software" means the Java SE Platform Products in binary form that you selected for download, install or use from Oracle or its authorized licensees, any other machine readable materials (including, but not limited to,  libraries,  source  files,  header  files, and data  files), any updates or error corrections provided by Oracle, and any user manuals, programming guides and other documentation provided to you by Oracle under this Agreement.  "General Purpose Desktop Computers and Servers" means computers,  including desktop and laptop computers, or servers, used for general  computing functions under end user control (such as but not specifically  limited to email, general purpose Internet browsing, and office suite  productivity tools).  The use of Software in systems and solutions that provide dedicated functionality (other than as mentioned above) or designed  for use in embedded or function-specific software applications, for example but not limited to: Software embedded in or bundled with industrial control systems, wireless mobile telephones, wireless handheld devices, netbooks, kiosks, TV/STB, Blu-ray Disc devices, telematics and network control switching equipment, printers and storage management systems, and other related systems are excluded from this definition and not licensed under this  Agreement.  "Programs" means Java technology applets and applications  intended to run on the Java Platform, Standard Edition platform on Java-enabled General Purpose Desktop Computers and Servers.  ?Commercial Features? means those features identified in Table 1-1 (Commercial Features In Java SE Product Editions) of the Software documentation accessible at  http://www.oracle.com/technetwork/java/javase/documentation/index.html.  ?README File? means the README file for the Software accessible at http://www.oracle.com/technetwork/java/javase/terms/readme/index.html.

2.  LICENSE TO USE.  Subject to the terms and conditions of this Agreement   including, but not limited to, the Java Technology Restrictions of the  Supplemental License Terms, Oracle grants you a non-exclusive, non-transferable, limited license without license fees to reproduce and use internally the Software complete and unmodified for the sole purpose of  running Programs.  THE LICENSE SET FORTH IN THIS SECTION 2 DOES NOT EXTEND TO THE COMMERCIAL FEATURES.  YOUR RIGHTS AND OBLIGATIONS RELATED TO THE COMMERCIAL FEATURES ARE AS SET FORTH IN THE SUPPLEMENTAL TERMS ALONG WITH ADDITIONAL LICENSES FOR DEVELOPERS AND PUBLISHERS.

3.  RESTRICTIONS.  Software is copyrighted.  Title to Software and all associated intellectual property rights is retained by Oracle and/or its licensors.  Unless enforcement is prohibited by applicable law, you may not modify, decompile, or reverse engineer Software.  You acknowledge that the Software is developed for general use in a variety of information management applications; it is not developed or intended for use in any inherently dangerous applications, including applications that may create a risk of personal injury. If you use the Software in dangerous applications, then you shall be responsible to take all appropriate fail-safe, backup, redundancy, and other measures to ensure its safe use.  Oracle disclaims any express or implied warranty of fitness for such uses.  No right, title or interest in or to any trademark,  service mark, logo or trade name of Oracle or its licensors is granted under this  Agreement.  Additional restrictions for developers and/or publishers licenses are set forth in the Supplemental License Terms.

4.  DISCLAIMER OF WARRANTY.  THE SOFTWARE IS PROVIDED "AS IS" WITHOUT WARRANTY OF ANY KIND.  ORACLE FURTHER DISCLAIMS ALL WARRANTIES, EXPRESS AND IMPLIED, INCLUDING WITHOUT LIMITATION, ANY IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE OR NONINFRINGEMENT. 

5.  LIMITATION OF LIABILITY.  IN NO EVENT SHALL ORACLE BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, PUNITIVE OR CONSEQUENTIAL DAMAGES, OR DAMAGES FOR LOSS OF PROFITS, REVENUE, DATA OR DATA USE, INCURRED BY YOU OR ANY THIRD PARTY, WHETHER IN AN ACTION IN CONTRACT OR TORT, EVEN IF ORACLE HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. ORACLE'S ENTIRE LIABILITY FOR DAMAGES HEREUNDER SHALL IN NO EVENT EXCEED ONE THOUSAND DOLLARS (U.S. $1,000).

6.  TERMINATION.  This Agreement is effective until terminated.  You may terminate this Agreement at any time by destroying all copies of Software.  This Agreement will terminate immediately without notice from Oracle if you  fail to comply with any provision of this Agreement.  Either party may  terminate this Agreement immediately should any Software become, or in either party's opinion be likely to become, the subject of a claim of infringement  of any intellectual property  right.  Upon termination, you must destroy all copies of Software.

7.  EXPORT  REGULATIONS.  You agree that U.S. export control laws and other applicable export and import laws govern your use of the Software, including technical data; additional information can be found on Oracle's Global Trade Compliance web site (http://www.oracle.com/products/export). You agree that neither the Software nor any direct product thereof will be exported, directly, or indirectly, in violation of these laws, or will be used for any purpose prohibited by these laws including, without limitation, nuclear, chemical, or biological weapons proliferation. 

8.  TRADEMARKS AND LOGOS.  You acknowledge and agree as between you
and Oracle that Oracle owns the ORACLE and JAVA trademarks and all ORACLE- and JAVA-related trademarks, service marks, logos and other brand
designations ("Oracle Marks"), and you agree to comply with the Third
Party Usage Guidelines for Oracle Trademarks currently located at
http://www.oracle.com/us/legal/third-party-trademarks/index.html.  Any use you make of the Oracle Marks inures to Oracle's benefit.

9.  U.S.  GOVERNMENT LICENSE RIGHTS.  If Software is being acquired by or on  behalf of the U.S. Government or by a U.S. Government prime contractor or  subcontractor (at any tier), then the Government's rights in Software and accompanying documentation shall be only those set forth in this Agreement. 

10.  GOVERNING  LAW.  This agreement is governed by the substantive and procedural laws of California. You and Oracle agree to submit to the exclusive jurisdiction of, and venue in, the courts of San Francisco, or Santa Clara counties in California in any dispute arising out of or relating to this agreement. 

11.  SEVERABILITY.  If any  provision of this  Agreement is held to be unenforceable, this Agreement will remain in effect with the provision omitted, unless omission would frustrate the intent of the parties, in which case this Agreement will immediately terminate.

12.  INTEGRATION.  This Agreement is the entire agreement  between you and Oracle relating to its subject matter.  It supersedes all prior or contemporaneous oral or written communications, proposals, representations  and warranties and prevails over any  conflicting  or additional  terms  of  any  quote, order, acknowledgment, or other communication between the parties  relating to its subject matter during the term of this Agreement.  No modification of this Agreement will be  binding,  unless  in  writing  and  signed  by an  authorized representative of each party.

SUPPLEMENTAL LICENSE TERMS

These  Supplemental  License  Terms add to or modify  the terms of the Binary Code License Agreement.  Capitalized terms not defined in these Supplemental  Terms shall have the same meanings ascribed to them in the Binary Code License Agreement.  These Supplemental Terms shall supersede any  inconsistent or conflicting terms in the Binary Code License Agreement, or in any license contained within the Software.

A.  COMMERCIAL FEATURES.  You may not use the Commercial Features for running Programs, Java applets or applications in your internal business operations or for any commercial or production  purpose, or for any purpose other than as set forth in Sections B, C, D and E of these Supplemental Terms.  If You want to use the Commercial Features for any purpose other than as permitted in this Agreement, You must obtain a separate license from Oracle.

B.  SOFTWARE INTERNAL USE FOR DEVELOPMENT LICENSE GRANT.  Subject to the terms and conditions of this Agreement and restrictions and exceptions set forth in the README File incorporated herein by reference,  including, but not limited to the Java Technology Restrictions of these  Supplemental Terms, Oracle grants you a non-exclusive, non-transferable,  limited license without fees to reproduce internally and use internally the Software complete and unmodified for the purpose of designing, developing, and testing your Programs.

C.  LICENSE TO DISTRIBUTE SOFTWARE.  Subject to the terms and conditions of this Agreement and restrictions and exceptions set forth in the   README File, including, but not limited to the Java Technology Restrictions of these Supplemental Terms, Oracle grants you a non-exclusive, non-transferable, limited license without fees to reproduce and distribute the  Software, provided that (i) you distribute the Software complete and  unmodified and only bundled as part of, and for the sole purpose of running, your Programs, (ii) the Programs add significant and primary functionality  to the Software, (iii) you do not distribute additional  software intended to replace any component(s) of the Software, (iv) you do not remove or alter any proprietary legends or notices contained in the Software, (v) you only distribute the Software subject to a license agreement that: (a) is a complete, unmodified reproduction of this Agreement; or (b) protects Oracle's  interests consistent with the terms contained in this Agreement and that includes the notice set forth in Section G, and (vi) you agree to defend and indemnify Oracle and its licensors from and against any damages, costs, liabilities, settlement amounts and/or expenses (including  attorneys' fees)  incurred in connection  with any claim, lawsuit or action by any third party that arises or results from the use or distribution of any and all Programs and/or Software.

D.  LICENSE TO DISTRIBUTE REDISTRIBUTABLES.  Subject to the terms and conditions of this Agreement and restrictions and exceptions set forth in the README  File, including but not limited to the Java Technology Restrictions of these Supplemental Terms, Oracle grants you a non-exclusive,  non-transferable, limited license without fees to reproduce and distribute  those files specifically identified as redistributable in the   README File ("Redistributables") provided that: (i) you distribute the  Redistributables complete and unmodified, and only bundled as part of Programs, (ii) the Programs add significant and primary functionality to the  Redistributables, (iii) you do not distribute additional software intended to supersede any component(s) of the Redistributables (unless otherwise specified in the applicable README File), (iv) you do not remove or alter any proprietary legends or notices contained in or on the Redistributables, (v)  you only distribute the Redistributables pursuant to a license agreement  that: (a) is a complete, unmodified reproduction of this Agreement; or (b) protects Oracle's interests consistent with the terms contained in the Agreement and includes the notice set forth in Section G, (vi) you agree to defend and indemnify Oracle and its licensors from and against any damages,  costs, liabilities, settlement amounts and/or expenses (including  attorneys'  fees) incurred in connection with any claim, lawsuit or action by any third  party that arises or results from the use or distribution of any and all Programs and/or Software.

E.  DISTRIBUTION BY PUBLISHERS.  This section pertains to your distribution  of the JavaTM SE Development Kit Software with your printed book or magazine (as those terms are commonly used in the industry) relating to Java technology ("Publication").  Subject to and conditioned upon your compliance  with the restrictions and obligations contained in the Agreement, Oracle hereby grants to you a non-exclusive, nontransferable limited right to reproduce complete and unmodified copies of the Software on electronic  media (the "Media") for the sole purpose of inclusion and distribution with your Publication(s), subject to the following terms: (i) You may not distribute  the Software on a stand-alone basis; it must be distributed with your Publication(s); (ii) You are responsible for downloading the Software from the applicable Oracle web site; (iii) You must refer to the Software as JavaTM SE Development Kit; (iv) The Software must be reproduced in its entirety and without any modification whatsoever (including with respect to all proprietary notices) and distributed with your Publication subject to a license agreement that is a complete, unmodified reproduction of this Agreement; (v) The Media label shall include the following information:  Copyright 2011, Oracle America, Inc.  All rights reserved.  Use is subject to license terms.  ORACLE and JAVA trademarks and all ORACLE- and JAVA-related trademarks, service marks, logos and other brand
designations are trademarks or registered  trademarks of Oracle in the U.S. and other countries.  This information must be placed on the Media  label in such a manner as to only apply to the Oracle  Software;  (vi) You must clearly identify the Software as Oracle's product on the Media  holder or Media label, and you may not state or imply that Oracle is responsible for any third-party software contained on the Media; (vii) You may not include any third  party software on the Media which is intended to be a  replacement or substitute for the Software; (viii) You agree to defend and indemnify Oracle and its licensors from and against any damages, costs, liabilities, settlement amounts and/or expenses (including  attorneys'  fees) incurred in connection with any claim, lawsuit or action by any third party that arises or results from the use or distribution of the Software and/or the Publication; ; and (ix) You shall provide Oracle with a written notice for each Publication; such notice shall include the following information: (1) title of Publication, (2) author(s), (3) date of Publication,  and (4)  ISBN or ISSN  numbers.  Such notice shall be sent to  Oracle America, Inc.,  500 Oracle  Parkway, Redwood Shores,  California  94065 U.S.A , Attention:  General Counsel.

F.  JAVA TECHNOLOGY RESTRICTIONS.  You may not create, modify, or change the behavior of, or authorize your licensees to create, modify, or change the behavior of, classes, interfaces, or subpackages that are in any way  identified  as  "java", "javax", "sun", ?oracle? or similar convention as   specified by Oracle in any naming convention designation.

G.  COMMERCIAL FEATURES NOTICE.  For purpose of complying with Supplemental Term Section  C.(v)(b) and D.(v)(b), your license agreement shall include the following notice, where the notice is displayed in a manner that anyone using the Software will see the notice:

Use of the Commercial Features for any commercial or production purpose requires a separate license from Oracle.  ?Commercial Features? means those features identified Table 1-1 (Commercial Features In Java SE Product Editions) of the Software documentation accessible at http://www.oracle.com/technetwork/java/javase/documentation/index.html

H.  SOURCE CODE.  Software may contain source code that, unless expressly   licensed for other purposes, is provided solely for reference purposes  pursuant to the terms of this Agreement.  Source code may not be redistributed  unless  expressly  provided for in this Agreement.

I.  THIRD PARTY CODE.  Additional copyright notices and license terms applicable to portions of the Software are set forth in the THIRDPARTYLICENSEREADME file accessible at http://www.oracle.com/technetwork/java/javase/documentation/index.html.  In addition to any terms and conditions of any third party opensource/freeware license identified in the  THIRDPARTYLICENSEREADME file, the disclaimer of warranty and limitation of liability  provisions in  paragraphs 4 and 5 of the Binary Code License Agreement shall apply to all Software in this distribution.

J.  TERMINATION FOR INFRINGEMENT.  Either party may terminate this Agreement immediately should any Software become, or in either party's opinion be likely to become, the subject of a claim of infringement of any intellectual property right.

K.  INSTALLATION AND AUTO-UPDATE.  The Software's installation and auto-update processes transmit a limited amount of data to Oracle (or its service  provider) about those specific processes to help Oracle understand and optimize them.  Oracle does not associate the data with personally  identifiable  information.  You can find more  information about the data Oracle collects as a result of your Software download at http://www.oracle.com/technetwork/java/javase/documentation/index.html.

For inquiries please contact:  Oracle America, Inc., 500 Oracle Parkway,
Redwood Shores, California 94065, USA.

Last updated May 17, 2011

Do you agree with the terms of the software license agreement? [N] y


Checking for prerequisites...
     FOUND: NPTL
     FOUND: nc-1.84-22
     FOUND: sudo-1.8.6p3-15
     FOUND: libidn-1.18-2
     FOUND: gmp-4.3.1-7
     FOUND: /usr/lib64/libstdc++.so.6

Checking for suggested prerequisites...
     FOUND: perl-5.10.1
     FOUND: sysstat
     FOUND: sqlite
Prerequisite check complete.

Checking for installable packages

Found zimbra-core
Found zimbra-ldap
Found zimbra-logger
Found zimbra-mta
Found zimbra-snmp
Found zimbra-store
Found zimbra-apache
Found zimbra-spell
Found zimbra-memcached
Found zimbra-proxy

Select the packages to install

Install zimbra-ldap [Y] y
Install zimbra-logger [Y] y
Install zimbra-mta [Y] y
Install zimbra-snmp [Y] y
Install zimbra-store [Y] y
Install zimbra-apache [Y] y
Install zimbra-spell [Y] y
Install zimbra-memcached [N] n
Install zimbra-proxy [N] n

Checking required space for zimbra-core
Checking space for zimbra-store

Installing:
    zimbra-core
    zimbra-ldap
    zimbra-logger
    zimbra-mta
    zimbra-snmp
    zimbra-store
    zimbra-apache
    zimbra-spell

The system will be modified.  Continue? [N] y


Shutting down zimbra mail

Removing existing packages

   zimbra-ldap...done
   zimbra-logger...done
   zimbra-mta...done
   zimbra-snmp...done
   zimbra-store...done
   zimbra-spell...done
   zimbra-apache...done
   zimbra-core...done

Removing deployed webapp directories

Removing /opt/zimbra
Removing zimbra crontab entry...done.
Cleaning up zimbra init scripts...done.
Cleaning up /etc/ld.so.conf...done.
Cleaning up /etc/prelink.conf...done.
Cleaning up /etc/logrotate.d/zimbra...done.
Cleaning up /etc/security/limits.conf...done.
Cleaning up /etc/security/limits.d/80-zimbra.conf...done.

Finished removing Zimbra Collaboration Server.

Installing packages

    zimbra-core......zimbra-core-8.0.6_GA_5922.RHEL6_64-20131203103705.x86_64.rpm...done
    zimbra-ldap......zimbra-ldap-8.0.6_GA_5922.RHEL6_64-20131203103705.x86_64.rpm...done
    zimbra-logger......zimbra-logger-8.0.6_GA_5922.RHEL6_64-20131203103705.x86_64.rpm...done
    zimbra-mta......zimbra-mta-8.0.6_GA_5922.RHEL6_64-20131203103705.x86_64.rpm...done
    zimbra-snmp......zimbra-snmp-8.0.6_GA_5922.RHEL6_64-20131203103705.x86_64.rpm...done
    zimbra-store......zimbra-store-8.0.6_GA_5922.RHEL6_64-20131203103705.x86_64.rpm...done
    zimbra-apache......zimbra-apache-8.0.6_GA_5922.RHEL6_64-20131203103705.x86_64.rpm...done
    zimbra-spell......zimbra-spell-8.0.6_GA_5922.RHEL6_64-20131203103705.x86_64.rpm...done
Operations logged to /tmp/zmsetup.02082015-232620.log
Installing LDAP configuration database...done.
Setting defaults... MX: azpstudent.com (192.168.99.99)

Interface: 192.168.99.99
Interface: 127.0.0.1
Interface: ::1
192.168.99.99
done.
Checking for port conflicts

Main menu

   1) Common Configuration:                                                  
   2) zimbra-ldap:                             Enabled                       
   3) zimbra-store:                            Enabled                       
        +Create Admin User:                    yes                           
        +Admin user to create:                 admin@azpstudent.com          
******* +Admin Password                        UNSET                         
        +Anti-virus quarantine user:           virus-quarantine.sbtbh48hp@azpstudent.com
        +Enable automated spam training:       yes                           
        +Spam training user:                   spam.fpsj4kw77@azpstudent.com 
        +Non-spam(Ham) training user:          ham.sktjo_sns3@azpstudent.com 
        +SMTP host:                            azpstudent.com                
        +Web server HTTP port:                 80                            
        +Web server HTTPS port:                443                           
        +Web server mode:                      https                         
        +IMAP server port:                     143                           
        +IMAP server SSL port:                 993                           
        +POP server port:                      110                           
        +POP server SSL port:                  995                           
        +Use spell check server:               yes                           
        +Spell server URL:                     http://azpstudent.com:7780/aspell.php
        +Configure for use with mail proxy:    FALSE                         
        +Configure for use with web proxy:     FALSE                         
        +Enable version update checks:         TRUE                          
        +Enable version update notifications:  TRUE                          
        +Version update notification email:    admin@azpstudent.com          
        +Version update source email:          admin@azpstudent.com          

   4) zimbra-mta:                              Enabled                       
   5) zimbra-snmp:                             Enabled                       
   6) zimbra-logger:                           Enabled                       
   7) zimbra-spell:                            Enabled                       
   8) Default Class of Service Configuration:                                
   r) Start servers after configuration        yes                           
   s) Save config to file                                                    
   x) Expand menu                                                            
   q) Quit                                    

Address unconfigured (**) items  (? - help) 3

Store configuration

   1) Status:                                  Enabled                       
   2) Create Admin User:                       yes                           
   3) Admin user to create:                    admin@azpstudent.com          
** 4) Admin Password                           UNSET                         
   5) Anti-virus quarantine user:              virus-quarantine.sbtbh48hp@azpstudent.com
   6) Enable automated spam training:          yes                           
   7) Spam training user:                      spam.fpsj4kw77@azpstudent.com 
   8) Non-spam(Ham) training user:             ham.sktjo_sns3@azpstudent.com 
   9) SMTP host:                               azpstudent.com                
  10) Web server HTTP port:                    80                            
  11) Web server HTTPS port:                   443                           
  12) Web server mode:                         https                         
  13) IMAP server port:                        143                           
  14) IMAP server SSL port:                    993                           
  15) POP server port:                         110                           
  16) POP server SSL port:                     995                           
  17) Use spell check server:                  yes                           
  18) Spell server URL:                        http://azpstudent.com:7780/aspell.php
  19) Configure for use with mail proxy:       FALSE                         
  20) Configure for use with web proxy:        FALSE                         
  21) Enable version update checks:            TRUE                          
  22) Enable version update notifications:     TRUE                          
  23) Version update notification email:       admin@azpstudent.com          
  24) Version update source email:             admin@azpstudent.com          

Select, or 'r' for previous menu [r] 4

## Pada bagian ini masukan password yang kamu gunakan untuk masuk ke page admin panel, di contoh ini saya menggunakan kata sandi password ##

Password for admin@azpstudent.com (min 6 characters): [E5aKdau7B] password

Store configuration

   1) Status:                                  Enabled                       
   2) Create Admin User:                       yes                           
   3) Admin user to create:                    admin@azpstudent.com          
   4) Admin Password                           set                           
   5) Anti-virus quarantine user:              virus-quarantine.sbtbh48hp@azpstudent.com
   6) Enable automated spam training:          yes                           
   7) Spam training user:                      spam.fpsj4kw77@azpstudent.com 
   8) Non-spam(Ham) training user:             ham.sktjo_sns3@azpstudent.com 
   9) SMTP host:                               azpstudent.com                
  10) Web server HTTP port:                    80                            
  11) Web server HTTPS port:                   443                           
  12) Web server mode:                         https                         
  13) IMAP server port:                        143                           
  14) IMAP server SSL port:                    993                           
  15) POP server port:                         110                           
  16) POP server SSL port:                     995                           
  17) Use spell check server:                  yes                           
  18) Spell server URL:                        http://azpstudent.com:7780/aspell.php
  19) Configure for use with mail proxy:       FALSE                         
  20) Configure for use with web proxy:        FALSE                         
  21) Enable version update checks:            TRUE                          
  22) Enable version update notifications:     TRUE                          
  23) Version update notification email:       admin@azpstudent.com          
  24) Version update source email:             admin@azpstudent.com          

Select, or 'r' for previous menu [r] r

Main menu

   1) Common Configuration:                                                  
   2) zimbra-ldap:                             Enabled                       
   3) zimbra-store:                            Enabled                       
   4) zimbra-mta:                              Enabled                       
   5) zimbra-snmp:                             Enabled                       
   6) zimbra-logger:                           Enabled                       
   7) zimbra-spell:                            Enabled                       
   8) Default Class of Service Configuration:                                
   r) Start servers after configuration        yes                           
   s) Save config to file                                                    
   x) Expand menu                                                            
   q) Quit                                    

*** CONFIGURATION COMPLETE - press 'a' to apply

Select from menu, or press 'a' to apply config (? - help) a

Save configuration data to a file? [Yes] yes

Save config in file: [/opt/zimbra/config.552] 
Saving config in /opt/zimbra/config.552...done.

The system will be modified - continue? [No] yes

Operations logged to /tmp/zmsetup.02082015-232620.log
Setting local config values...done.
Initializing core config...Setting up CA...done.
Deploying CA to /opt/zimbra/conf/ca ...done.
Creating SSL zimbra-store certificate...done.
Creating new zimbra-ldap SSL certificate...done.
Creating new zimbra-mta SSL certificate...done.
Installing mailboxd SSL certificates...done.
Installing MTA SSL certificates...done.
Installing LDAP SSL certificate...done.
Initializing ldap...done.
Setting replication password...done.
Setting Postfix password...done.
Setting amavis password...done.
Setting nginx password...done.
Creating server entry for azpstudent.com...done.
Setting Zimbra IP Mode...done.
Saving CA in ldap ...done.
Saving SSL Certificate in ldap ...done.
Setting spell check URL...done.
Setting service ports on azpstudent.com...done.
Adding azpstudent.com to zimbraMailHostPool in default COS...done.
Setting zimbraFeatureTasksEnabled=TRUE...done.
Setting zimbraFeatureBriefcasesEnabled=FALSE...done.
Setting MTA auth host...done.
Setting TimeZone Preference...done.
Initializing mta config...done.
Setting services on azpstudent.com...done.
Creating domain azpstudent.com...done.
Setting default domain name...done.
Creating domain azpstudent.com...already exists.
Creating admin account admin@azpstudent.com...done.
Creating root alias...done.
Creating postmaster alias...done.
Creating user spam.fpsj4kw77@azpstudent.com...done.
Creating user ham.sktjo_sns3@azpstudent.com...done.
Creating user virus-quarantine.sbtbh48hp@azpstudent.com...done.
Setting spam training and Anti-virus quarantine accounts...done.
Initializing store sql database...done.
Setting zimbraSmtpHostname for azpstudent.com...done.
Configuring SNMP...done.
Setting up syslog.conf...done.
Starting servers...done.
Installing common zimlets...
com_zimbra_attachmail...done.
com_zimbra_srchhighlighter...done.
com_zimbra_cert_manager...done.
com_zimbra_date...done.
com_zimbra_clientuploader...done.
com_zimbra_tooltip...done.
com_zimbra_phone...done.
com_zimbra_ymemoticons...done.
com_zimbra_url...done.
com_zimbra_email...done.
com_zimbra_webex...done.
com_zimbra_bulkprovision...done.
com_zimbra_adminversioncheck...done.
com_zimbra_viewmail...done.
com_zimbra_proxy_config...done.
com_zimbra_attachcontacts...done.
Finished installing common zimlets.
Restarting mailboxd...done.
Creating galsync account for default domain...done.

You have the option of notifying Zimbra of your installation.
This helps us to track the uptake of the Zimbra Collaboration Server.
The only information that will be transmitted is:
The VERSION of zcs installed (8.0.6_GA_5922_RHEL6_64)
The ADMIN EMAIL ADDRESS created (admin@azpstudent.com)

Notify Zimbra of your installation? [Yes] no

Notification skipped
Setting up zimbra crontab...done.

Moving /tmp/zmsetup.02082015-232620.log to /opt/zimbra/log

Configuration complete - press return to exit # -> Ketik enter


Setelah itu kamu cek service zimbranya dengan cara masuk ke user zimbra seperti dibawah ini.
[root@mail ~]# su - zimbra
[zimbra@mail ~]$ zmcontrol status
## Apabila output seperti dibawah ini harusnya service sudah running semua
Host azpstudent.com
antispam                Running
antivirus               Running
ldap                    Running
logger                  Running
mailbox                 Running
mta                     Running
opendkim                Running
snmp                    Running
spell                   Running
stats                   Running
zmconfigd               Running

Remarks
- Apabila masih ada service yang belum running kamu bisa gunakan command zmcontrol start buat menyalakan servicenya dengan user zimbra juga yah ^^


Instalasi Selesai, sekarang kamu bisa akses zimbra kamu.

- Untuk halaman panel admin akses url ini https://192.168.99.99:7071














Untuk masuk ke admin panel gunakan username admin@azpstudent.com , lalu passwordnya ialah password. (Seperti konfigurasi ketika instalasi)
Apabila berhasil maka seharusnya kamu akan di redirect ke halaman ini.














- Nah, sedangkan untuk halaman Webmail Client, kamu bisa akses url ini https://192.168.99.99













Gimana gampang kan? Selamat mencoba teman-teman hehehehe.