1. Install the module

apt-get install libapache2-mod-geoip


2. Restart Apache

/etc/init.d/apache2 restart


3. Create a new PHP file to test the module (pico /var/www/test.php or any file you can access on your server)

<?php
print_r($_SERVER);
?>


4. Navigate to the new file in a web browser (http://yourserver/test.php)

The response will be something like this:

Array
(
[GEOIP_COUNTRY_CODE] => GB
[GEOIP_COUNTRY_NAME] => United Kingdom
...
)


1. Install the required packages

apt-get install pptpd


2. Configure the IP range assigned to clients (pico /etc/pptpd.conf)

localip 192.168.1.2
remoteip 192.168.1.10-20


Using this config the clients are assigned any IP address between and including 192.168.1.10 and 192.168.1.20.

3. Restart the PPTP daemon

/etc/init.d/pptpd restart


4. Create a user allowed to connect (pico /etc/ppp/chap-secrets)

user1 pptpd secretpassword *


Passwords are not encrypted. This allows the a user with the username: user1 and the password: secretpassword to login from any ip address.

5. Enable IP forward at startup to allow the VPN clients to connect to the server's local network. (pico /etc/sysctl.conf)

net.ipv4.ip_forward=1


Also run this command to activate the IP forward instantly:

echo 1 > /proc/sys/net/ipv4/ip_forward


6. Create a routing rule to allow the VPN clients to route network traffic through the server.

iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE


Read this tutorial to learn how to create iptables rules on startup:
Loading iptables rules on startup

1. Installing the XCache package

apt-get install php5-xcache


2. Restart Apache

/etc/init.d/apache2 restart


That's it. XCache is now installed.

FromOrTo: user1@domain.com yes
FromOrTo: user2@domain.net yes
FromOrTo: default no


2. Configure MailScanner to handle all messages in the blacklist as spam (pico /etc/MailScanner/MailScanner.conf)

Replace this line:
Is Definitely Spam = no
 
with this:
Is Definitely Spam = %rules-dir%/spam.blacklist.rules


3. Restart MailScanner

/etc/init.d/mailscanner restart


1. Install suPHP

apt-get install libapache2-mod-suphp


2. Disable the php5 apache module

a2dismod php5


3. Restart Apache

/etc/init.d/apache2 restart


4. You can test if suPHP is working correctly by creating a php file containing the following lines:

<?php
system('id');
?>


The script will return user/group id and name. Make sure you set the file owner to a user/group with id greater than 99.

1. Install Nikto

apt-get install nikto


2. Test the local web server

nikto -h localhost


Nikto also supports testing on different ports. Click here for Nikto usage information.

1. Install the Squid package

apt-get install squid


2. Allow your ip network to use the proxy server (pico /etc/squid/squid.conf). Append lines similar to these to your config

file:

acl mynetwork src 192.168.1.0/255.255.255.0
http_access allow mynetwork


Replace 192.168.1.0/255.255.255.0 with the network that should be able to use the proxy.

3. Don't forward client ip information (optional)

forwarded_for off


4. Restart the daemon

/etc/init.d/squid restart


5. Configure your web browser or application your would like to use the proxy server to connect to serverip at port 3128.

1. Install the pound package

apt-get install pound


2. Configure the load balancing. Replace everything below and including ListenHTTP with something like this: (pico /etc/pound/pound.cfg)

ListenHTTP
  Address 0.0.0.0
  Port 80
  xHTTP 0
 
  Service
    HeadRequire "Host: .*www.google.com.*"
 
    BackEnd
      Address 209.85.227.103
      Port 80
    End
    BackEnd
      Address 209.85.227.104
      Port 80
    End
    BackEnd
      Address 209.85.227.105
      Port 80
    End
    BackEnd
      Address 209.85.227.106
      Port 80
    End
  End
End


In this example we'll be listening for www.google.com and forward requests to 4 of Google's web servers/clusters. You can of course replace the domain with one of your own and point it to any servers. The servers can be on different networks, using different platforms and you can even forward different paths to different servers. Ex. www.google.com/apps could be forwarded to 1.2.3.4 while www.google.com is forwarded to 2.3.4.5. Click here for more details about Pound

3. Enable the Pound service (pico /etc/default/pound)

startup=1


4. Restart Pound

/etc/init.d/pound start


You must point the dns record for www.google.com to your server's IP address. You could use the hosts file to do this or use another domain.

It's assumed that you have already installed and configured Postfix according to this tutorial:
Installing Postfix with MySql backend and SASL for SMTP authentication

1. Install required packages (ClamAV, SpamAssassin, Razor and required libs for MailScanner)

apt-get install clamav clamav-base clamav-freshclam libclamav6 spamassassin razor unzip libarchive-zip-perl libconvert-tnef-perl libhtml-parser-perl libmime-tools-perl libmime-perl libcompress-zlib-perl libconvert-binhex-perl libdbd-sqlite3-perl libfilesys-df-perl libsys-syslog-perl libsys-hostname-long-perl libmailtools-perl libole-storage-lite-perl


2. Download MailScanner

wget http://ftp.us.debian.org/debian/pool/main/m/mailscanner/mailscanner_4.74.16-1_all.deb


3. Install MailScanner

dpkg -i mailscanner_4.74.16-1_all.deb


4. Enable MailScanner (pico /etc/default/mailscanner)

run_mailscanner=1


5. Edit MailScanner configuration (pico /etc/MailScanner/MailScanner.conf)

Run As User = postfix
Run As Group = postfix
Incoming Queue Dir = /var/spool/postfix/hold
Outgoing Queue Dir = /var/spool/postfix/incoming
MTA = postfix
Always Include SpamAssassin Report = yes
Send Notices = no
Spam List = RFC-IGNORANT-DSN SORBS-SMTP spamhaus-ZEN spamcop.net CBL
Spam Lists To Reach High Score = 2
High SpamAssassin Score = 8
Rebuild Bayes Every = 86400
Wait During Bayes Rebuild = yes
High Scoring Spam Actions = delete


6. Create razorhome, discover razor servers and register for identify

razor-admin -create
razor-admin -register


7. Make Postfix put all messages on hold to allow MailScanner to scan the messages (pico /etc/postfix/main.cf)

header_checks = regexp:/etc/postfix/header_checks


8. Create the header checks file referenced by previous line (pico /etc/postfix/header_checks)

/^Received:/ HOLD


9. Restart MailScanner and Postfix

/etc/init.d/mailscanner restart
postfix reload


1. Open the SSH daemon config file and change this line: (pico /etc/ssh/sshd_config)

PermitRootLogin no


2. Restart the SSH daemon

/etc/init.d/ssh restart