View Single Post
  #1 (permalink)  
Old 11-02-2005, 02:26 PM
mikeygstl mikeygstl is offline
Member
 
Posts: 13
Lightbulb Fedora Core 4 how-to

To install on Fedora Core 4, follow these simple instructions:

Perform a FC4 install making sure to do the following:
  • select no firewall
  • select no SELinux
  • select custom installation
  • in package selection, select minimum install

after you boot into FC4 for the first time, log in as root and perform the following:
  • yum update
  • ln -s /lib/libcrypto.so.0.9.7f /lib/libcrypto.so.4
  • ln -s /lib/libssl.so.0.9.7f /lib/libssl.so.4
  • vi /etc/hosts
    make sure the first non-comment line is:
    127.0.0.1 localhost.localdomain localhost
  • yum install libidn
  • yum install curl
  • yum install fetchmail
  • yum install gmp
  • yum install elinks
  • yum install compat-db # <-UPDATED, see footnote 1
  • chkconfig sendmail off
  • service sendmail stop


use /usr/bin/links (a text browser) to download the FC3 zimbra rpm from www.zimbra.com

extract the .tgz archive
cd into zcs
run install.sh

Everything should go smoothly.

------------------------------

As promised, here are some iptables entries. Keep in mind, these in no way fully protect your system, but should help a bit. These rules will allow remote ssh, http, https, smtp, and remote administration via zimbra interface. Please be aware, your mileage may vary.

iptables -A INPUT -p tcp -m state --state NEW -m tcp --dport 22 -j ACCEPT
iptables -A INPUT -p tcp -m state --state NEW -m tcp --dport 80 -j ACCEPT
iptables -A INPUT -p tcp -m state --state NEW -m tcp --dport 443 -j ACCEPT
iptables -A INPUT -p tcp -m state --state NEW -m tcp --dport 25 -j ACCEPT
iptables -A INPUT -p tcp -m state --state NEW -m tcp --dport 7070 -j ACCEPT
iptables -A INPUT -p tcp -m state --state NEW -m tcp --dport 7071 -j ACCEPT
iptables -A INPUT -p tcp -m state --state NEW -m tcp --dport 7075 -j ACCEPT
iptables -A INPUT -p tcp -m state --state NEW -m tcp --dport 7443 -j ACCEPT
iptables -A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
iptables -A INPUT -s YOUR.INTERFACE.IP.HERE -j ACCEPT
iptables -A INPUT -s 127.0.0.1 -j ACCEPT
iptables -A INPUT -p icmp -m icmp --icmp-type 255 -j ACCEPT
iptables -A INPUT -j REJECT --reject-with icmp-host-prohibited

---------------------------------------------------------------------------------------------------
footnotes:
1 - There is a compatibility issue with the libdb version in FC4. What you must do is downgrade the libdb to the suitable level -or- provide backward compatibility through the compat package.

Last edited by mikeygstl; 12-08-2005 at 12:44 PM..
Reply With Quote