Setup iRedMail on Debian Wheezy

This tutorial will show you how to install the groupware iRedMail on a fresh installation of Debian Wheezy.

You should use a server with at least one gigabyte of memory, preferably even two. While the software doesn’t use many resources when idling, it peaks very fast when under load. For example, during virus scans.

Important: Please do not try to install iRedMail on a system that’s already in production. It’s designed to be installed on a fresh installation and will override other MTAs when it finds them. Please be cautious and always have backups at hand.

For the course of this tutorial, we will assume that you are working as the administrative user. If you want to use sudo Instead, then you will have to append it where necessary.

Change Hostname

First, make sure that a fully qualified domain name is set by opening /etc/hostname It with your favorite text editor and replace the value there with an FQDN:

mail.example.com

Next, make sure that the FQDN is the first value listed in /etc/hosts:

127.0.0.1   mail.example.com mail localhost localhost.localdomain

Verify that everything worked by issuing hostname -f. The output should be:

mail.example.com

The only dependency of iRedMail is bzip2, install it with:

apt-get install bz2

Download and install iRedMail

Download and unpack the latest version from the official homepage:

wget https://bitbucket.org/zhb/iredmail/downloads/iRedMail-0.8.7.tar.bz2
tar -xf iRedMail-0.8.7.tar.bz2

Change the permissions of the script, and run the installer:

cd iRedMail-0.8.7/
chmod 700 iRedMail.sh
./iRedMail.sh

The installation script will update your package list, then ask you some questions:

The installer will now prompt you about a file with sensitive information in it, /root/iRedMail-0.8.7/config. Make sure to properly set the file permissions when the installation is finished:

chmod 600 /root/iRedMail-0.8.7/config

At this point, the installation script installs a lot of packages. After it has finished, you will be asked about firewall rules:

< Question > Would you like to use firewall rules provided by iRedMail now?
< Question > File: /etc/default/iptables, with SSHD port: 22. [Y|n]

These questions depend on your wants. For a sane ruleset to start with, you should go for Y here. Next, you’ll be prompted with all the necessary information to use iRedMail – after a reboot:

reboot

(Don’t worry, the prompted information can be found in /root/iRedMail-0.8.7/iRedMail.tip after the reboot.)

The webmail interface can now be accessed with your web browser at:

https://mail.example.com/mail

Install Certificate Authority

However, since iRedMail uses a certificate that’s not issued by a legitimate certificate authority (CA), you will most likely get a security warning from your browser. If you would like to remove the security warning, then you will need to obtain a certificate from a trusted CA. Installing a different certificate requires both the certificate and the private key. Once uploaded to your server, these files can be copied to the proper location with the following commands:

cp /path/to/your/cert /etc/ssl/certs/iRedMail_CA.pem
cp /path/to/your/key /etc/ssl/private/iRedMail.key

Then, restart everything that uses the cert/key:

service postfix restart
service dovecot restart
service apache2 restart

And now you have an all-in-one mail solution. Happy mailing!

Other Versions

FreeBSD