Kasus : Server email sedikit ‘cerewet’ sehingga butuh proses trial error untuk memastikan komposisi nya tepat (pake base OS freebsd 6.3)
Masalah : Server yang ada sudah terlanjur di install Freebsd 7. sehingga emailnya  masih belum aktif.

Solusi :

1. Install ulang OS server yang ada dengan FreeBSD versi 6.3 atau

2. Install FreeBSD 6.3 dalam FreeBSD 7 (mirip analogi install freebsd dalam linux via vmware). Install OS dalam OS ini di FreeBSD namanya ‘jails’.

Berikut panduan untuk menginstall FreeBSD 6.3 dalam FreeBSD 7. Step by step :

Server yang di gunakan dalam contoh ini :

1. Lihat versi FreeBSD

ftp# uname -a
FreeBSD ftp.rasyid.net 7.0-STABLE FreeBSD 7.0-STABLE #1: Mon Mar 31 08:52:19 WIT 2008

nike@ftp.rasyid.net:/usr/obj/usr/src/sys/SANCA i386

2. Lihat layout HD

ftp# df -H
Filesystem Size Used Avail Capacity Mounted on
/dev/ad4s1a 21G 267M 19G 1% /
devfs 1.0k 1.0k 0B 100% /dev
/dev/ad4s1d 260G 104G 135G 44% /home
/dev/ad4s1e 10G 2.7G 6.9G 28% /usr
/dev/ad4s1f 189G 2.9G 171G 2% /var
/dev/ad5s1d 484G 177G 269G 40% /data

3. Copy file iso ke direktori /data

ftp# cd /data

ftp# cp /home/mother/iso/freebsd/6.3/6.3-RELEASE-i386-disc1.iso .

4. Mounting

ftp# mdconfig -a -t vnode -f 6.3-RELEASE-i386-disc1.iso -u 0

ftp# mount -t cd9660 /dev/md0 /mnt

5. Buat jail direktori

ftp# mkdir jails

ftp# mkdir jails/mailserver

6. Install ‘jail’nya.

Ketik ’sysinstall’

ftp# sysinstall

Pilih Custom, Select

Pilih ‘2′, OK.

Isikan tulisan ini pada bagian ‘Release Name’, OK.

Di bagian ‘Install Root’, ketik : /data/jails/mailserver (nama direktori yang sudah dibuat sebelumnya). OK

Hasil akhirnya akan seperti ini :

Tekan huruf Q untuk keluar dari jendela ini.

Berikutnya pilih ‘Distributions’ dan tekan ‘OK’.

Pilih ‘Minimal’, OK.

Pilih ‘Media’, OK.

Pilih ‘File System’. OK

Ketikkan ‘/mnt/’ . OK.

Pilih ‘Commit’ dan OK.

Proses instalasi akan berlangsung hingga selesai.

Selanjutnya pilih ‘No’.

Pilih ‘Exit’ dan OK.

Pilih ‘Exit Install’ untuk kembali ke # prompt.

7. Lihat isi sehabis install

ftp# cd /data/jails/mailserver/
ftp# ls
.cshrc bin etc media rescue sys var
.profile boot lib mnt root tmp
COPYRIGHT dev libexec proc sbin usr
8. Memberi identitas buat jail yang baru di install

Buka /etc/rc.conf, tambahkan baris2 ini :

#set ip alias buat jail

ifconfig_em1_alias0=”inet 172.88.1.5 netmask 255.255.255.255″

jail_set_hostname_allow=”NO”
jail_enable=”YES”
jail_list=”mailserver”
jail_interface=”em1″
jail_devfs_enable=”YES”
jail_procfs_enable=”YES”

jail_mailserver_rootdir=”/data/jails/mailserver”
jail_mailserver_hostname=”mailserver”
jail_mailserver_ip=”172.88.1.5″
jail_mailserver_devfs_ruleset=”devfsrules_jail”Simpan filenya.

Berikutnya rc.conf utk mesin jailnya

ftp# ee /data/jails/mailserver/etc/rc.conf

isikan ini :

hostname=”mailserver”
ifconfig_em1=”inet 172.88.1.5 netmask 255.255.255.255″
defaultrouter=”172.88.1.4″
rpcbind_enable=”NO”
clear_tmp_enable=”YES”
sendmail_enable=”YES”
sshd_enable=”YES”

simpan.

Berikutnya copy resolv.conf

ftp# cp /etc/resolv.conf /data/jails/mailserver/etc/

9. Konfigurasi dan testing login ke jail (FreebSD 6.3)

Menjalankan jail :
ftp# /etc/rc.d/jail start
Configuring jails:.
Starting jails: mailserver.

Testing lihat proses jail yang ada skrg :
ftp# jls
JID IP Address Hostname Path
1 172.88.1.5 mailserver /data/jails/mailserver

Ubah password root :

ftp# jexec 1 touch /etc/fstab
ftp# jexec 1 passwd
Changing local password for root
New Password:
Retype New Password:
ftp#

Tambah User baru :

ftp# jexec 1 adduser
Username: alamster
Full name: alamsyah rasyid
Uid (Leave empty for default):
Login group [alamster]: wheel
Login group is wheel. Invite alamster into other groups? []:
Login class [default]:
Shell (sh csh tcsh nologin) [sh]: csh
Home directory [/home/alamster]:
Use password-based authentication? [yes]:
Use an empty password? (yes/no) [no]:
Use a random password? (yes/no) [no]:
Enter password:
Enter password again:
Lock out the account after creation? [no]:
Username : alamster
Password : *****
Full Name : alamsyah rasyid
Uid : 1001
Class :
Groups : wheel
Home : /home/alamster
Shell : /bin/csh
Locked : no
OK? (yes/no): yes
adduser: INFO: Successfully added (alamster) to the user database.
Add another user? (yes/no): no
Goodbye!
Login ke sistem :

ftp# jexec 1 login
llogin: alamster
Password:
Last login: Tue Jul 8 04:09:50 on ttyp0
Copyright (c) 1992-2008 The FreeBSD Project.
Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
The Regents of the University of California. All rights reserved.

FreeBSD 7.0-STABLE (SANCA) #1: Mon Mar 31 08:52:19 WIT 2008

Welcome to FreeBSD!

Before seeking technical support, please use the following resources:

o Security advisories and updated errata information for all releases are
at http://www.FreeBSD.org/releases/ – always consult the ERRATA section
for your release first as it’s updated frequently.

o The Handbook and FAQ documents are at http://www.FreeBSD.org/ and,
along with the mailing lists, can be searched by going to
http://www.FreeBSD.org/search/. If the doc distribution has
been installed, they’re also available formatted in /usr/share/doc.

If you still have a question or problem, please take the output of
`uname -a’, along with any relevant error messages, and email it
as a question to the questions@FreeBSD.org mailing list. If you are
unfamiliar with FreeBSD’s directory layout, please refer to the hier(7)
manual page. If you are not familiar with manual pages, type `man man’.

You may also use sysinstall(8) to re-enter the installation and
configuration utility. Edit /etc/motd to change this login announcement.

%su
Password:
mailserver# echo ‘Mail Server Jail’ > /etc/motd

Ubah akses ssh untuk remote akses :

mailserver# /etc/rc.d/sshd stop
Stopping sshd.
mailserver# ee /etc/ssh/sshd_config

ubah bagian Listen Address nya, ex :

#Port 22
#Protocol 2
#AddressFamily any
ListenAddress 172.88.1.5
#ListenAddress ::

simpan filenya dan restart ssh nya.

/etc/rc.d/sshd start
Tes ssh dari windows untuk memastikan ssh server jail sudah bisa di akses :

Login dengan user yang di buat di server jail tadi, user : alamster, password : palcomtech

password root : palcomtech

Done.

Selanjutnya tinggal masukkan CD ports mail, copy isinya ke folder ports server jail dan lanjutkan install server email seperti di web purplehat.

Ini screenshot http://172.88.1.5/~alamster/info.php

Artinya : apache jalan, mysql OK, php on di dalam jail ini.

Link pendukung :

http://www.bsdguides.org/guides/freebsd/security/manage_jails