HOW TO install ASSP Deluxe for cPanel plus ASSP 1.7.1.3  (updated 21 May 2010)

• Installation requirements

An ASSP Deluxe license for your server , you can get it here Hardware requirements : You can install it on any cPanel server with min. 128 MB RAM . You can install/run it on VPS too.  firewall tcp port 55555 and 55553 opened (inbound and outbound) , required for the ASSP Web interface and Stats firewall tcp port 125 opened (only inbound)  Activate and install cPanelPro at http://pro.cpanel.net/activate/  (required to install ClamAV antivirus) Install Clamavconnector antivirus         WHM > cPanel > Addon Modules on cPanel 10,         WHM > Cpanel> Manage Plugins   on cPanel 11 Deactivate/Remove mailscanner if you are using it (otherwise it is redundant)( how to ). Deactivate/Remove rvskin anstispam if you are using it  (otherwise it is redundant).  Deactivate/remove any other spam/antivirus solution installed . Spamassassin/box trapper must be deactivated from WHM and cPanel theme/skins (recommended). You should have min. 1 domain name listed on WHM (account list) some ASSP WHM features will be available only if you'll enable specific tools . For example if you would "EMAIL DAILY REPORTS" you should enable the spambox plugin using ASSP WHM or , another example , if you would see the "spambox" functionality on your users cPanel frontend  you should enable the spambox plugin on assp WHM. A RedHat or CentOS operating System (even if ASSP can work with a FreeBSD os, an operating system that has binary updates like RedHat or CentOS is recommended). All virtual environments are supported (Virtuozzo,Xen,VMware..)

Now you can start the installation . If it's your first "ASSP Deluxe for cPanel" installation , do not worry. If you are familiar executing  console commands and setting cronjobs the installation is easy to be completed. During the installation your clients will be able to send and receive email , you should only execute some EXIM restart . If you follow the installation step by step you'll not have problems at all. If something is not working or you fail some step please send a message to this email (include your licensed ip) and explain me the problem. At the end of installation you (or anyone who is installing ASSP for you) should apply the post installation steps . Uninstallation is included at the end of this HOW TO ( here ).

INSTALLATION  (Time required to complete this installation, 20~30 minutes)

Only If you need to uninstall correctly mailscanner please read this

Deactivate/turn off    spamassassin
To deactivate spamassassin open WHM then select
Service Configuration > Service Manager and uncheck spamd as shown below
 

please be sure antirelayd service is running/enabled as shown below

cPanel 10.x

cPanel 11.24

cPanel 11.25

save Service Manager settings then go to
Server Configuration > Tweak settings  and uncheck spamassassin and boxtrapper as shown below, and save Tweak Settings.

.AND go down to PHP , and select Ioncube .  Save Tweak Settings (on older cPanel versions you can find ioncube here
Server Configuration > Tweak settings > Software  )

With ASSP running all antispam/antivirus configurations configured at EXIM level will be redundant and useless.

As can you see from the image above , after the step 2 , all the email dictionary attacks are already blocked , most/all the SPAM should be blocked , and to EXIM (point 3) should reach only good email to be processed . So each antispam check executed at step 3 (EXIM) is useless . For this reason, you need (it's recommended you have) a default/clean EXIM configuration ; all the spam/virus filtering work will be done by ASSP, and EXIM should work only as an MTA ( message transfer agent ) , any other duty will be useless.

Now, before cleaning exim configuration, create a backup of your current /etc/exim.conf  in this way

cp /etc/exim.conf /etc/exim.conf_old

It will be useful only if you'll decide to uninstall ASSP in the future.

Now , to "clean/reset exim.conf"  ,simply  Open WHM , go to "Service Configuration" , then "Exim Configuration Editor" , and click on "RESET ALL CONFIGS TO DEFAULT" .

Alternativelly to "clean/reset exim.conf" , Open WHM , go to "Service Configuration" , then "Exim Configuration Editor" ,
then "Advanced editor". You should empty all text boxes (ACL too , they should be recreated automatically **) , then click on "save". In some OS (for example on Trustix), the ACL sections are not re-created automatically from cPanel , in this case you should execute "reset ACL config to default" or  "RESET ALL CONFIGS TO DEFAULT" to recreate the ACL section .  
 

• Then , if you have cPanel 10 you should configure WHM > Exim Configuration editor in this way. 001#

  cPanel 10.x
  

 

• If you have Cpanel 11.24 you should configure WHM > Exim Configuration editor in this way (all disabled except of "validate sender") . All disabled because all these checks will be redundant/useless with ASSP running (ASSP spam filtering is executed before exim) , as explained some row above .

  cPanel 11.24
  

 

• If you have Cpanel 11.25 you should configure WHM > Exim Configuration editor in this way (all disabled except of "validate sender") . All disabled because all these checks will be redundant/useless with ASSP running (ASSP spam filtering is executed before exim) , as explained some row above .

  cPanel 11.25
  

 

 

Ok , now go to ssh console , execute following command to check your Perl version...

perl -v

if you have Perl version 5.8.8 or above you can continue (5.8.8 is required if you have cPanel 11)  . Otherwise execute /scripts/perlinstaller and check again the perl version. If /scripts/perlinstaller fails to update Perl go to http://layer1.cpanel.net download the latest Perl installer and install it.

Now execute following command to check your cPanel internal php version...

/usr/local/cpanel/3rdparty/bin/php -v

Only If you have a php version below 5.2.6  execute the command below . If you have php 5.2.6 or above you must skip the command below.

 

ln -s /usr/local/cpanel/3rdparty/bin/php /usr/local/cpanel/3rdparty/bin/php-cgi

Now check if you have ClamAV antivirus installed

clamd --v

or

/usr/sbin/clamd --v

if it returns ClamAV 0.95.2 or above you can continue
Otherwise you should install or upgrade clamavconnector using  WHM > cPanel > plugins  ( WHM / ADD on modules on cPanel 10).
If you are using a custom clamAV installation I recommend you to remove it and use only  ClamAV provided by WHM/Cpanel.

Ok now create the folder /usr/local/assp in this way

mkdir /usr/local/assp

Now we start with ASSP installation

cd /usr/local/assp
wget http://www.grscripts.com/131/ASSP_1.3.1-Install.zip
unzip -d /usr/local/assp /usr/local/assp/ASSP_1.3.1-Install.zip
mv --target-directory=/usr/local/assp /usr/local/assp/ASSP/*
mv --target-directory=/usr/local/assp /usr/local/assp/ASSP/.DS_Store

If  mv --target-directory is not accepted try this

mv /usr/local/assp/ASSP/* /usr/local/assp;mv /usr/local/assp/ASSP/.DS_Store /usr/local/assp

then execute

rm -rf /usr/local/assp/__MACOSX
rm -rf /usr/local/assp/ASSP;rm -f ASSP_1.3.1-Install.zip

 

Now we get latest ASSP version and the ASSP configuration file ( latest blue line gets assp.cfg )

cd /usr/local/assp
wget -r -nH --cut-dirs=10 http://www.grscripts.com/assp1712/assp.tar.gz
tar xvzf assp.tar.gz;rm -f assp.tar.gz
chmod 700 assp.pl;chmod 755 rebuildspamdb.pl;chmod 755 repair.pl
wget -r -nH --cut-dirs=10 http://www.grscripts.com/135_50/assp.cfg

Now we create working ASSP files and folders

cd /usr/local/assp;mkdir pb;cd pb
touch denysmtp.txt;touch exportedextreme.txt;touch pbdb.black.db
touch pbdb.rbl.db;touch pbdb.white.db
cd /usr/local/assp;mkdir notspam;mkdir spam;mkdir errors
mkdir /usr/local/assp/errors/notspam;mkdir /usr/local/assp/errors/spam
chmod 700 /usr/local/assp/spam;chmod 700 /usr/local/assp/notspam;chmod 700 /usr/local/assp/errors

Now we install ASSP service files .

cd /usr/local/assp
wget  -r -nH --cut-dirs=10 http://www.grscripts.com/service/start
chmod 700 start
wget -r -nH --cut-dirs=10 http://www.grscripts.com/service/stop
chmod 700 stop
cd /etc/rc.d/init.d
wget -r -nH --cut-dirs=10 http://www.grscripts.com/service/assp
chmod 755 assp
cd /usr/local/assp

Now we install ASSP Deluxe php scripts on /usr/local/assp/deluxe in this way

cd /usr/local/assp;mkdir deluxe;cd /usr/local/assp/deluxe
ln -s /etc/relayhosts /usr/local/assp/deluxe/relayhosts
wget -r -nH --cut-dirs=10 http://www.grscripts.com/assp150/deluxe/assp.tar.gz
tar xvzf assp.tar.gz;rm -f assp.tar.gz;chmod 755 *.*;chmod 755 *
chmod 666 *spam_lover;chmod 666 assp_catch_all;chmod 755 /usr/local/assp/rebuildspamdb.pl

Now we install perl modules required by ASSP exectuing this command

/usr/local/cpanel/3rdparty/bin/php-cgi /usr/local/assp/deluxe/modules.php

WHM ASSP Deluxe for cPanel interface
Now you can install the WHM ASSP Deluxe for cPanel interface ; 

cd /usr/local/cpanel/whostmgr/docroot/cgi
wget -r -nH --cut-dirs=10 http://www.grscripts.com/asspwhm/whm.tar.gz
tar xvzf whm.tar.gz;rm -f whm.tar.gz

Now , if you open  WHM , and go down to Plugins (ADD-ons on cPanel 10) menu , you should find the Grscripts ASSP Deluxe link .

Now you can install the ASSP Deluxe cPanel frontend .

Open  WHM ,  go down to Plugins (ADD-ons on cPanel 10) menu , and click on the link Grscripts ASSP Deluxe
Go down to Install / Upgrade Center ,  "ASSP Deluxe for cPanel frontend"

Select a supported cPanel theme (x ,x2 , xmail , moonson , bluelagoon, rvskin , x3/x3mail, xcontroller, ALL THEMES) or enter a custom cPanel theme then click the "ASSP Deluxe Cpanel Frontend" button to install the ASSP Deluxe for Cpanel frontend.

If you receive a message like this you can continue

The web interface for your clients will be installed on /usr/local/cpanel/base/frontend/yourskin/asspdeluxe and you can view the web interface pointing your browser to /usr/local/cpanel/base/frontend/yourskin/asspdeluxe/index.php  ( http://www.domain.com:2082/frontend/yourskin/asspdeluxe/index.php ).

Do not forget to remove/disable spamassassin and boxtrapper everywhere from your control panel and WHM .

If you want customize your ASSP Deluxe for cPanel end-user frontend adding another language pack or if you want change something on the html layout please read here . ( you can do this step later , reccomended ) .

Now ,  return to ssh console and  execute this

# /usr/local/cpanel/3rdparty/bin/php-cgi /usr/local/assp/deluxe/ex_ips.php
# /usr/local/cpanel/3rdparty/bin/php-cgi /usr/local/assp/deluxe/ex_localdomains.php
# /usr/local/cpanel/3rdparty/bin/php-cgi /usr/local/assp/deluxe/update_email.php
# replace :blackhole: :fail: -- /etc/valiases/*
# /usr/local/cpanel/3rdparty/bin/php-cgi  /usr/local/assp/deluxe/fix_valiases.php

Now you must set ASSP Deluxe cronjobs ; execute the command below to edit your cronjobs

# crontab -e

and add following cronjobs

10 12 * * * /usr/bin/freshclam --quiet --daemon-notify
10 4 * * * cd /usr/local/assp;perl /usr/local/assp/rebuildspamdb.pl
*/59 * * * * /usr/local/cpanel/3rdparty/bin/php-cgi /usr/local/assp/deluxe/ex_localdomains.php
*/3 * * * * /usr/local/cpanel/3rdparty/bin/php-cgi /usr/local/assp/deluxe/update_email.php
*/1 * * * * /usr/local/cpanel/3rdparty/bin/php-cgi /usr/local/assp/deluxe/status.php
*/20 * * * * /usr/local/cpanel/3rdparty/bin/php-cgi /usr/local/assp/deluxe/find_abusers.php sw=12 sc=32 er=13 lm=13 dc=25 rl=20 on=1
30 7 * * * /usr/local/cpanel/3rdparty/bin/php-cgi /usr/local/assp/deluxe/signatures.php

If you don't want receive an email cron notification each time these cron execute ( !! strongly recommended !! ) enter them at the end of your cronjob list in this way ( be sure to avoid the "> /dev/null" solution , since it will NOT work with these scripts ) using MAILTO=

10 12 * * * /usr/bin/freshclam --quiet --daemon-notify
10 4 * * * cd /usr/local/assp;perl /usr/local/assp/rebuildspamdb.pl
MAILTO=""
*/59 * * * * /usr/local/cpanel/3rdparty/bin/php-cgi /usr/local/assp/deluxe/ex_localdomains.php
*/3 * * * * /usr/local/cpanel/3rdparty/bin/php-cgi /usr/local/assp/deluxe/update_email.php
*/1 * * * * /usr/local/cpanel/3rdparty/bin/php-cgi /usr/local/assp/deluxe/status.php
*/20 * * * * /usr/local/cpanel/3rdparty/bin/php-cgi /usr/local/assp/deluxe/find_abusers.php sw=12 sc=32 er=13 lm=13 dc=25 rl=20 on=1
30 7 * * * /usr/local/cpanel/3rdparty/bin/php-cgi /usr/local/assp/deluxe/signatures.php
MAILTO=root

Every cron executed between MAILTO="" and MAILTO=root will not receive email cron notifications (each time the cron executes).
(!!) If you do not use MAILTO your email queue could be filled with messages (email cron notification) generated by the crons above very fast !.

 

Now we configure some parameter on  assp.cfg (ASSP configuration file)
You already downloaded some step above assp.cfg . The ASSP configuration file assp.cfg is already configured to work on
your cPanel server and to use the ASSP Deluxe for cPanel.  You should change only some parameters with your own settings;

open assp.cfg with an editor (pico,vi ...)

# cd /usr/local/assp
# pico assp.cfg

...and replace the first 5 lines ;

webAdminPassword:=nospam4me
EmailAdminReportsTo:=email@youremail.com
EmailFrom:=email@youremail.com
SpamError:=500 Mail appears to be unsolicited -- send error reports to email@youremail.com

as follows....

a) replace email@youremail.com  with your email address .  Your email address should be an internal email , I strongly recommend the usage of   root@yourhostname.com (of course replace yourhostname.com  with your hostname . 
You can get know your current server hostname simply executing

# hostname

  )

b) change the default ASSP Web Interface password ( webAdminPassword:=nospam4me ) with a your new preferred password
    ** DON'T USE YOUR ROOT PASSWORD FOR YOUR ASSP WEB INTERFACE **

Save the file and close the editor.

 

Now we check if ASSP can run as a service

execute this

# service assp start
or
# /etc/rc.d/init.d/assp start

if ASSP starts without errors,  you can continue . If it doesn't start or the command prompt returns only after a long delay please email me specifing your licensed ip . 

Now you can try if the ASSP Web Interface works fine ; open your browser and point it to

http://yourserverip:55555

Login with "assp" and the ASSP password you set before , some row above at point b)  .

 

Now if you want run ASSP automatically each time you restart the server (If you have a FreeBSD or Fedora OS server skip this step) execute this

chkconfig --add assp

Only if you have a FreeBSD server and you want run ASSP automatically each time you restart the server execute this

echo 'assp_enable="YES"' >> /etc/rc.conf

Only if you have a Fedora OS server and you want run assp automatically each time you restart the server execute this

echo '/etc/rc.d/init.d/assp start' >> /etc/rc.local

Now you should modify the EXIM configuration file , only after this step ASSP will start to process email. .  [#04]
Open WHM , Exim Configuration Editor , then select Advanced Editor

On the first box enter the following code

######################################################################################
# ASSP deluxe for cPanel
# If you want fully disable ASSP please read
# for more info http://www.grscripts.com/howtofaq.html#20
######################################################################################
local_interfaces = 127.0.0.1
daemon_smtp_ports = 125
log_selector = +arguments +subject

Now SAVE the exim configuration

If EXIM does not restart at this step , execute this from console

# /etc/rc.d/init.d/assp stop;/etc/rc.d/init.d/assp start

and restart EXIM from WHM or from command line with

# service exim restart
or
# /etc/rc.d/init.d/exim restart

exim should restart without errors. Now ASSP and exim should work fine and running .

To see if ASSP is working fine execute this

# cd /usr/local/assp/
# tail -f /usr/local/assp/maillog.txt

You may also execute to check errors exactly when assp (re)starts .

# /etc/rc.d/init.d/assp restart;sleep5;tail -100 /usr/local/assp/maillog.txt

The command above should return something like this

Apr-10-09 04:42:59 /usr/local/assp/assp.pl version 1.7.1.2(1.0.02) (Perl 5.008008) initializing
Apr-10-09 04:42:59 IO::Socket::INET6 module version 2.56 installed - IPv6 support available
Apr-10-09 04:42:59 File::Scan::ClamAV module version 1.91 installed and available
Apr-10-09 04:42:59 /usr/local/assp/assp.pl running on server: hostname.yourserver.com
Apr-10-09 04:42:59 Net::LDAP module version 0.39 installed and available
Apr-10-09 04:42:59 Net::DNS module installed
Apr-10-09 04:42:59 Email::Valid module version 0.181 installed and available
Apr-10-09 04:42:59 Email::Send module version 2.194 installed - sending .eml files available
Apr-10-09 04:42:59 Mail::SPF::Query module version 1.999001 installed and available
Apr-10-09 04:42:59 Mail::SPF module version 2.006 installed and available
Apr-10-09 04:42:59 Mail::SRS module version 0.31 installed - Sender Rewriting Scheme available
Apr-10-09 04:42:59 Compress::Zlib module version 2.017 installed - HTTP compression available
Apr-10-09 04:42:59 Digest::MD5 module version 2.36 installed - delaying can use MD5 keys for hashes
Apr-10-09 04:42:59 File::ReadBackwards module version 1.04 installed - searching of log files enabled
Apr-10-09 04:42:59 Time::HiRes module version 1.9719 installed - CPU usage statistics available
Apr-10-09 04:42:59 Sys::Syslog module version 0.27 installed - Unix centralized logging enabled
Apr-10-09 04:42:59 Tie::RDBM module version 0.70 installed - mysql usage available
Apr-10-09 04:42:59 Net::IP::Match::Regexp module version 1.01 installed - CIDR notation for IP range available
Apr-10-09 04:42:59 Net::CIDR::Lite module version 0.20 installed - hyphenated IP address range available
Apr-10-09 04:42:59 Net::SenderBase module version 1.01 installed - countrycode checks available
Apr-10-09 04:42:59 LWP::Simple module version 5.810 installed - griplist available
Apr-10-09 04:42:59 Text::Iconv module version 1.7 installed - kyrillic charset converter available
Apr-10-09 04:42:59 Email::MIME::Modifier module version 1.443 installed - multiple attachments detection available
Apr-10-09 04:42:59 Net::SMTP module version 2.31 installed - Verify Recipients available
Apr-10-09 04:42:59 IO::Socket::SSL module version 1.24 installed - secure SSL sockets available
Apr-10-09 04:42:59 Listening for SMTP connections on 25
Apr-10-09 04:42:59 Listening for ADMIN http connections on 55555
Apr-10-09 04:42:59 Listening for STATISTICS http connections on 55553
Apr-10-09 04:42:59 Listening for additional SMTP connections on 26
Apr-10-09 04:42:59 Starting /usr/local/assp/assp.pl as PID: 5475

You can ignore the bayesian warnings lines above because ASSP must still create a Bayesian database and a whitelist .
If you see some other errors, you failed some step on the "HOW TO" and they should be fixed.

If all works fine and messages are processed correctly you can now check if also EXIM is working fine.

# tail -f /var/log/exim_mainlog

If email are processed with a final "Completed" message like this ...

2008-11-13 11:25:20 1Irs1F-0000vx-9U -> em@my.com.tr R=lookuphost T=remote_smtp H=my.com [84.1.1.1] X=TLSv1:AES256-SHA:256
2008-11-13 11:26:30 1Irs1F-0000vx-9U Completed

if it's all ok  then you can  CLICK HERE TO CONTINUE .  Otherwise If you see ACL errors like this

unknown ACL verb "check_recipient" in "check_recipient"

followed by a "unexpected disconnection while reading SMTP command" . open WHM > exim configuration editor >
and try "reset ACL config to default" , then restart EXIM and ASSP using WHM and WHM ASSP interface.  

If the problem is still not fixed open WHM > exim configuration editor > and execute "Reset ALL config to defaults" .
After this step you should go again to  WHM > exim configuration editor > Advanced editor and re-enter on the first box
the following code

######################################################################################
# ASSP deluxe for cPanel
# If you want fully disable ASSP please read
# for more info http://www.grscripts.com/howtofaq.html#20
######################################################################################
local_interfaces = 127.0.0.1
daemon_smtp_ports = 125
log_selector = +arguments +subject

Save exim configuration . Now return to WHM > exim configuration editor and set again  "Standard Options" as was explained above in this HOW TO ( here ) .   Now restart ASSP using WHM. The ACL error on exim mailllog should be fixed and all should be ok .

If on EXIM maillog you see "unexpected disconnection while reading SMTP command" lines without ACL errors , it's a normal behavior , ASSP is disconnecting from EXIM because the email was rejected due to spam (email dictionary attack or any other reason) .

Now to terminate installation you must apply the post installation FAQS
 

 

Uninstalling assp ?  Time required : 5 minutes   (#01)

Uninstallation requires about 5 minutes . Note that if you had/have a temporarly ASSP problem there is no need to uninstall it , simply follow this procedure . If you want really uninstall it, follow this procedure ;

First ,  if you are using ASSP MONITOR , uninstall it using ASSP WHM , OR open WHM then select Service Configuration > Service Manager and uncheck ASSP service.   If you are using  the status.php cronjob , remove it.
STOP ASSP using WHM ASSP (or from command line  # /etc/rc.d/init.d/assp stop).

Now open WHM > exim configuration editor > and execute "Reset ALL config to defaults"
Ok now you are already using EXIM without ASSP .

Now execute

replace 'SMTPPORT = 125' '' -- /usr/local/cpanel/3rdparty/mailman/Mailman/mm_cfg.py

Now uninstall ASSP Deluxe for cPanel frontend from your cPanel themes, you can use the ASSP WHM Interface .
Go to Install / Upgrade Center ,  ASSP Deluxe for cPanel frontend , select the theme and check Uninstall

Now remove the ASSP WHM interface in this way

rm -f /usr/local/cpanel/whostmgr/docroot/cgi/addon_assp_deluxe.php
rm -f /usr/local/cpanel/whostmgr/docroot/cgi/assp_deluxe*
rm -frd /usr/local/cpanel/whostmgr/docroot/cgi/deluxe

Now remove fully ASSP in this way

rm -frd /usr/local/assp
chkconfig --del assp

now remove all cronjobs required by ASSP and ASSP deluxe ( crontab -e ) .

If you was using spamd and boxtrapper re-enable them using WHM/cPanel.

Now execute/force a cPanel update with

/scripts/upcp --force