Section 1 Things to Consider Before Installation

LISTSERV for Unix is available for AIX, FreeBSD, HP-UX, Linux, MacOS, OSF/1-Digital Unix-Tru64, and Solaris-SPARC.

1.1 Installing LDAP Support to Re-Link LISTSERV

Beginning with LISTSERV 15.5, if you plan to install or re-install LISTSERV with DBMS support, or otherwise need to re-link the 'lsv' executable for any reason, you MUST first install LDAP support on your machine. For Linux servers, this may not be an issue, as OpenLDAP is generally installed by most distributions by default. For other unix variants, your mileage may vary.

Note: The config.sh installer will try to identify whether or not your machine has LDAP support before allowing you to add any functionality that requires relinking.

Attempting to re-link the 'lsv' executable manually (i.e., from the Makefile) without having LDAP support installed on the machine will result in compiler errors similar to the following:

ld: 0711-317 ERROR: Undefined symbol: .ldap_next_entry
ld: 0711-317 ERROR: Undefined symbol: .ldap_first_entry
ld: 0711-317 ERROR: Undefined symbol: .ldap_first_attribute
ld: 0711-317 ERROR: Undefined symbol: .ldap_next_attribute
ld: 0711-317 ERROR: Undefined symbol: .ldap_get_values_len
ld: 0711-317 ERROR: Undefined symbol: .ldap_value_free_len
ld: 0711-317 ERROR: Undefined symbol: .ldap_memfree
ld: 0711-317 ERROR: Undefined symbol: .ber_free
ld: 0711-317 ERROR: Undefined symbol: .ldap_msgfree
ld: 0711-317 ERROR: Undefined symbol: .ldap_search_s
ld: 0711-317 ERROR: Undefined symbol: .ldap_unbind
ld: 0711-317 ERROR: Undefined symbol: .ldap_initialize
ld: 0711-317 ERROR: Undefined symbol: .ldap_set_option
ld: 0711-317 ERROR: Undefined symbol: .ldap_bind_s
ld: 0711-317 ERROR: Undefined symbol: .ldap_err2string

and any resulting 'lsv' will not be executable.

1.2 Classic Distribution vs. Lite Distribution

1.2.1 LISTSERV Classic Distribution

LISTSERV Classic for UNIX(R) is distributed either as two compressed "tar" archive files (the original method of distribution) or as a single binary installation kit (used in the "simplified" installation), depending on your needs. The installation guide, which is the file you are currently reading, is also available independently of the archives.

In the original distribution scheme, one of the tar files (common.tar.Z) contains data files common to LISTSERV on all UNIX(R) platforms, including the Makefile, and the other (`uname`.tar.Z, where `uname` corresponds to your OS-specific distribution) contains the compiled version of the LISTSERV server, object files for recompilation, and the 'wa' CGI for the web archive interface. In order to simplify the process of removing extraneous files created during the installation procedure, you should copy the tar files to a scratch directory, install LISTSERV, and then "rm -fr /tmp/scratch" (or whatever you name the staging area).

The "simplified" distribution is a single binary that is run at the shell prompt. This installer asks a number of questions related to the installation and then installs LISTSERV accordingly.

1.2.2 LISTSERV Lite Distribution

LISTSERV Lite for UNIX(R) is distributed as a single compressed "tar" archive file, `uname`-Lite.tar.Z (the original method of distribution), or as a single binary installation kit (used in the "simplified" installation), depending on your needs.

In the original distribution scheme, all files needed, including the "common" files, are shipped in the single archive.

The "simplified" distribution is a single binary that is run at the shell prompt. This installer asks a number of questions related to the installation and then installs LISTSERV accordingly.

1.3 For Sites Running Sendmail

In the past, many commercial unixes were shipped with sendmail version 5. If your sendmail is at a version less than version 8, note that you will probably experience long turnaround times on requests to LISTSERV that could run to several hours. This is because earlier Sendmail versions could handle only 1-2K deliveries per day. L-Soft strongly recommends that any Unix site running LISTSERV with Sendmail upgrade to at least Sendmail version 8.7.x, and at this time, for anti-spam and general security purposes, Sendmail version 8.11.x or later should be preferred.

If you are running a sendmail earlier than 8.7.x, please note that at least one sendmail archive site (see ftp://ftp.cs.berkeley.edu/ucb/sendmail/.message) currently notifies users that "8.6 is not supported, not secure, and should not be run on any network-connected machine."

Important: While L-Soft supports Sendmail as an MTA for use with LISTSERV, L-Soft does not provide support for the Sendmail product itself.

1.3.1 Sendmail and restricted shells

If you are running sendmail out of a restricted shell (for instance the smrsh shell), note that the lsv_amin mailer program that you will install below must be registered as a trusted application that may be executed by sendmail, or mail sent to LISTSERV and to lists will be rejected (typically with a sh: lsv_amin not available for sendmail programs error, although this may depend on how you have sendmail set up). Registering an application with the restricted shell typically involves placing symbolic links from /usr/adm/sm.bin/ to the programs which are authorized. If you need more information on restricted shells, please refer to the sendmail documentation.

1.3.2 What is 'sf90m'?

The `uname`.tar.Z archive (or for LISTSERV Lite, the `uname`-Lite.tar.Z archive) contains a little executable called 'sf90m'. This executable is provided by L-Soft as a convenience to sites that wish to compare delivery times between sendmail and (typically) L-Soft's LSMTP(R) product. 'sf90m' is meant to be run against your sendmail log and produces a small table of delivery times. The syntax is simply 'sf90m sendmail_logname', where sendmail_logname is the full path and name of the log file that contains sendmail log entries. On some systems this may be the syslog; on others it may be a file called 'messages'. Typically this file is found in /var/log/ or similar.

There is no support for 'sf90m'; it is provided only as a convenience, and is documented here only because so many people have asked about it.

Section 3 Installing LISTSERV

3.1 Creating the “LISTSERV” Username

LISTSERV requires exclusive access to the mail sent to one username. Unless you have a very good reason to do otherwise, the "listserv" username should be used for that purpose. Many people around the world are already familiar with LISTSERV, and will assume that mail sent to <listserv@your.host.name> will reach the server. The LISTSERV account is just an ordinary user, it doesn't need privileges, doesn't require access to restricted directories, and it doesn't need to have any particular UID or GID.

3.1.1 Running LISTSERV under a userid other than 'listserv'

If you do change the username under which LISTSERV runs (which for the reason noted above is not recommended by L-Soft), you must make sure that the following points are observed as you work through the installation:

You must set the LSVNAME macro in the Makefile to the username you have selected.
If you have a compiler, you must edit lsv_amin.c and change the line

#define LISTSERV "LISTSERV"

#define LISTSERV "USERNAME"

where USERNAME is the username you have selected.

You must ensure that the lsv_amin mailer, when run, is invoked suid userid, where "userid" is the username LISTSERV is running under. Otherwise mail sent to LISTSERV will be treated as if it were being sent to a list with the name "userid".
If you do not have a compiler and must use the precompiled lsv_amin executable, you will have to modify the aliases in /etc/aliases that are normally made by the 'make aliases' stage of the Makefile. For instance if you have decided to run LISTSERV under the username 'listmanager', you would have to make the aliases

listmanager: "|/usr/local/bin/lsv_amin -t listserv"

owner-listmanager: "|/usr/local/bin/lsv_amin -t owner-listserv"

In other words, lsv_amin will be invoked suid listmanager but will feed the userid 'listserv' to LISTSERV. Since you cannot change the name used internally by LISTSERV unless you have a compiler, this is required to keep mail to 'listmanager' and 'owner-listmanager' from being treated as list mail rather than administrative mail.

3.2 Extracting Installation Materials from the "TAR" Files

Important: The Makefile should be run from a temporary directory rather than the target directory. Otherwise some 'mv' commands will produce unexpected results.

For LISTSERV Classic, the two archive files you receive will be called common.tar.Z and either AIX.tar.Z, or SunOS.tar.Z, or Linux.tar.Z, etc... depending on the version of UNIX(R) you are using. The filename is taken from the string returned by the "uname" command on each UNIX(R) platform.

For LISTSERV Lite, you will receive only one archive file, which will be called AIX.tar.Z, or SunOS.tar.Z, or Linux.tar.Z, etc... depending on the version of UNIX(R) you are using. Again, the filename is taken from the string returned by the "uname" command on each UNIX(R) platform. For LISTSERV Lite installations simply ignore further references in this document to common.tar.Z as all of the "common" files are contained in your `uname`.tar.Z file.

Some FTP sites may change the name of the files slightly to adhere to system specific naming conventions. If you're used to dealing with compressed tar files already, then just extract the contents using whatever commands you prefer. If you'd like the sample commands listed below to work as shown, rename the files you received to common.tar.Z and `uname`.tar.Z before continuing. For example, if the system specific file you received is called aix.tar-z, you would enter the command mv aix.tar-z `uname`.tar.Z. Copy or move the two files to a scratch directory first. (The advantage of using a work directory for the installation is that you can easily clean up afterwards.) Once the files have been copied, "cd" to that directory and enter, uncompress *.tar.Z to restore them to their original state. Then enter, tar xf common.tar and tar xf `uname`.tar to unbundle the programs, data files, etc... needed to install LISTSERV. Afterwards you should find the following files have been created in your current directory,

go	listview.c	nooci.o
go2	lsv	nocli.o
go.sys	lsv.o	nouodbc.o
go.user.sample	lsv_amin.c	sf90m
home	lsv_amin.h	unixinst.html
jobview.c	lsv_amin-precompiled	unixinst-sim.html
lcmd.c	lsv-logger.pl	wa
lcmdx.c	Makefile

and the ./home directory will contain the following files.

aliases.names	listall.refcard	listownr.memo	stdcmd.file
bitearn.nodes	listcat.file	listpres.memo	syscfg.file
country.file	listdev.memo	listqs.memo	sysff.file
default.mailtpl	listfile.memo	listserv.memo	system.catalog
default.wwwtpl	listjob.memo	lsvhelp.file	upload.cab
errfac.file	listkeyw.memo	lsvinfo.file	upload.jar
intpeers.names	listkwd.file	maestro.mailtpl
license.merge	listlpun.memo	peers.names
linkswt2.file	listmast.memo	service.names

Sample commands for this step:

mkdir /tmp/scratch

cp common.tar.Z `uname`.tar.Z /tmp/scratch

cd /tmp/scratch

uncompress *.Z

tar xf common.tar

tar xf `uname`.tar

- or -

mkdir /tmp/scratch

cp common.tar.Z `uname`.tar.Z /tmp/scratch

cd /tmp/scratch

zcat common.tar.Z | tar xf -

zcat `uname`.tar.Z | tar xf -

3.3 Customizing the Makefile to Determine LISTSERV’s Location

If you plan to use the precompiled lsv binary, then you can skip this section as it uses the defaults for these locations.

Before you can continue with the installation of LISTSERV, you need to choose where you want several things to be placed. The installation process needs the full path names of three directories. All of them are defined by macros in the Makefile (which was extracted from the common.tar archive in the preceding step).

The directory where the mail interface and command line interface programs should be installed is defined by the BINDIR macro. The Makefile is distributed with BINDIR set to /usr/local/bin by default. Whether you choose to use the default directory, or redefine it, the installation procedure assumes the directory already exists. If you choose a new directory, you will need to create it before running the final "make install". This directory is only referenced during the installation of the mail interface. Neither the mail interface program, the command line interface utility, nor the LISTSERV server process requires write access to this directory afterwards.

Incoming mail is written to the directory defined by the LSVSPOOL macro in the Makefile. The default value is $(LSVROOT)/spool. Unlike the BINDIR directory, the LISTSERV spool directory is assumed to be a new directory. In fact, no other users or daemon processes should write to this directory since LISTSERV scans this directory for incoming mail. If the directory doesn't exist when the "make install" command is executed, it will be created, and the LISTSERV account will be made the owner.

The LISTSERV executable, as well as associated directories and data files will be installed in the directory pointed to by the LSVROOT macro in the Makefile. Any directory can be used, so long as LISTSERV has write access to it. When the final "make install" is run, the LSVSPOOL directory, and several subdirectories, will be created if necessary. The LISTSERV account will be made the owner of those directories. The Makefile is distributed with the LSVROOT macro set to /home/listserv. If you choose the default setting, the directories /home/listserv, /home/listserv/home, and /home/listserv/tmp will be created as a result.

To use different directories, edit the Makefile and change the BINDIR, LSVSPOOL, and/or LSVROOT macros.

Documented Restriction: Under unix, all files and directory paths accessed by LISTSERV must be in lower case. In other words, you cannot install LISTSERV under the LSVROOT path of /home/users/LISTSERV ; instead, you must use the path /home/users/listserv instead (or in any case, a path that is in lower case).

Sample command for this step:

vi Makefile

3.4 Building the Interface Utilities and LISTSERV Server

BEFORE RELINKING LISTSERV BINARIES, PLEASE READ THIS SECTION OF THE DOCUMENT.

Note: L-Soft does not recommend using the precompiled executables if you have a compiler. It is always preferable to compile and link with your own local libraries rather than to assume that ours are the same as yours. However, it is not required to do so.

3.4.1 Using the Compiler

The program that handles incoming mail is called lsv_amin and is distributed in source form. The file lsv_amin.c is a standalone program that can be modified to suit your local mail system as needed. It should work as distributed with unmodified Sendmail systems.

If you are running an older version of ZMailer instead of Sendmail, you must change the value of the Makefile macro LSVAMIN_TYPE from "flags" to "links". This causes LISTSERV to use symbolic links to "lsv_amin" for each LISTSERV email address. Backleveled ZMailer users must choose this option since programs run from ZMAILER "aliases" files can't have arguments. Current versions of ZMailer do not appear to have this restriction.

If you are running PP instead of Sendmail, you can compile the standard mail interface with -DMAIL_PP. To compile lsv_amin, first check the CC and CFLAGS macro in the Makefile to make certain the compiler and options specified are appropriate for your system. Second, if you have enabled the syslog daemon on your system, note that the lsv_amin program logs informational and error level messages using the syslog facility. By default, lsv_amin logs those messages as part of the mail system. That is, LOG_MAIL is used on the openlog() call. If you would prefer to log the LISTSERV mail interface entries separate from the other mail software on your system, edit lsv_amin.h and change the line

#define LOG_FACILITY LOG_MAIL

replacing LOG_MAIL with LOG_LOCAL1, or whatever category is appropriate for your site. If you are using a system on which the openlog() routine only takes two parameters, an older Ultrix system for example, just change LOG_MAIL to 0.

The "lcmd" utility is also distributed in source form. Once you've compiled and installed "lcmd", users can use it to send commands to your LISTSERV server rather than having to use a mail program. Users familiar with the Bitnet version of LISTSERV will find "lcmd" works much like the VM "tell" and JNET "send" commands. The primary differences are that LISTSERV sends back mail in response to commands submitted with "lcmd", and only your local LISTSERV can be reached. In addition to providing a simple command line interface to LISTSERV, sending commands with "lcmd" obviates the need for password validation of protected commands. Since the origin of the command is determined by the username of the person running "lcmd", not by parsing mail headers, password checking can be skipped by LISTSERV. The lcmd.c program should compile without modification. Site specific information needed by "lcmd" will be provided by the Makefile when building the program.

If you have decided to link the lsv.o file and make your own lsv binary, there should be no need to modify anything in the Makefile to perform this step.

Sample commands for this step:

vi Makefile

vi lsv_amin.c

3.4.2 Using the precompiled binaries

If you do not have a compiler, or if you have just decided to use the precompiled binaries from the kit, you now need to rename the lsv_amin-precompiled binary to lsv_amin. This will prevent 'make' from trying to call 'cc'.

Note: There is no precompiled lcmd binary. This is because lcmd requires that the LSVSPOOL directory specification be compiled into it, and there is no way to know ahead of time whether or not your site will be using the defaults. Therefore sites that elect to use the precompiled binaries will not be able to run 'make lcmd'.

If you are using the precompiled binaries because you do not have a compiler, you should move or delete the 'lcmd.c' and 'jobview.c' files from the 'scratch' directory before running 'make install', so that the Makefile doesn't try to compile them and crash because it can't find 'cc'.

Sample commands for this step:

mv lsv_amin-precompiled lsv_amin

If you do not have a compiler:

rm lcmd.c

rm jobview.c

3.4.3 Adding DBMS Support

(See the Advanced Topics Manual for LISTSERV for more information on DBMS support.)

LISTSERV 15.5 for unix kits support Oracle, DB2, and MySQL (via unixODBC) in a single, universal kit. This kit contains both a precompiled 'lsv' executable (which does not support any database), and a set of object files allowing you to link a new 'lsv' that supports any combination of databases for which you have a run-time environment on the machine running LISTSERV. The following object files are included:

lsv.o	Main object file for linking 'lsv'
nooci.o	Link with lsv.o to disable OCI (Oracle) support
nocli.o	Link with lsv.o to disable CLI (DB2) support
nouodbc.o	Link with lsv.o to disable unixODBC (MySQL) support

If a particular database is not available for your operating system, the corresponding noxxx.o file will have been pre-linked into lsv.o and will not be included in the kit.

Note: You may relink LISTSERV with only the following combinations of DBMS support:

· OCI only

· CLI only

· unixODBC only

· OCI and CLI

· OCI and unixODBC

LISTSERV cannot be relinked with support for both CLI and unixODBC at the same time. This is due to the fact that the two implementations are quite similar and share function names inside LISTSERV.

The current kits contain a revised Makefile that is set up to relink 'lsv' without any DBMS support by default. A new "OS-specific flags" section has been added where you can add or remove DBMS support simply by adding or removing the reference to the appropriate no*.o file. For instance, if you are running Solaris, the default flags line is

CFLAGS_Solaris=nooci.o nocli.o -lsocket -lnsl

If you want to relink 'lsv' with Oracle support, simply change this line to

CFLAGS_Solaris=nocli.o -lsocket -lnsl

If you want to relink 'lsv' with DB2 support, you would change the line to

CFLAGS_Solaris=nooci.o -lsocket -lnsl

Relinking 'lsv' with unixODBC support is not quite as intuitive. You would use the following flags line:

CFLAGS_Solaris=nooci.o -lsocket -lnsl -lodbc

For unixODBC, you must leave CLI support enabled because CLI and unixODBC share internal function names in LISTSERV, as noted above. In addition, you must also link explicitly to the unixODBC library (the -lodbc flag). Please see the Advanced Topics Manual for LISTSERV for more detailed information on configuring unixODBC support.

As noted in the Makefile, Solaris requires that -lsocket and -lnsl must be linked in all cases, so don't remove these references from CFLAGS_Solaris under any circumstances.

The other supported unixes are configured in a similar manner.

Important: You should not relink with DBMS support unless you have the appropriate DBMS support (SQL*Net, DB2, unixODBC) installed on your machine. Without this support, the link option will fail.

3.5 Installing the Web Interface CGI Binary

While you will still want to review the Installing the LISTSERV Web Interface section, if you want the installation procedure to properly install and set ownership/permissions on the 'wa' executable, you need to provide the path to your cgi-bin directory in the Makefile macro CGIDIR and uncomment that line in the Makefile. By default this installation feature is commented out:

#CGIDIR=/var/www/cgi-bin

The example setting appears to be a common default for most current Apache versions, but it is your responsibility to ensure that you define the correct directory if you uncomment and use this feature. L-Soft does not recommend taking this default blindly as it may differ on your server.

If you do not uncomment this line, neither 'make install' or 'make update' will try to install 'wa', and you will have to copy it to your cgi-bin directory manually per the instructions below.

Note: This procedure does not attempt to make any directories or files required by the web archive interface. You still need to follow the instructions below to fully install the interface.

3.6 Moving Programs and Files to their Proper Directories

The command, "make install" will copy the "lsv", "lsv_amin", and "lcmd" programs to the appropriate directories, as specified by the BINDIR and LSVROOT macros in the Makefile. In addition, several directories will be created and a number of data files copied to those directories. While there are scenarios in which you can complete this step from the LISTSERV account, in most cases you will need to become "root" to run the "make install" command.

SOLARIS SPECIFIC: When issuing the commands below be sure to follow them exactly. If you issue "su - root" instead of "su root" LISTSERV will be installed but will fail when you attempt to start it.

Sample commands for this step:

su root

make install

exit

3.7 Configuring LISTSERV for Your System

LISTSERV needs to know a variety of things about your system, and also how to communicate with the people that will be maintaining the software. All of the settings that you are likely to want to change are defined in the "go.user" shell script, which is created in the LSVROOT directory when you enter "make install". There are a number of environment variables that you can set to reflect things like the Internet domain name of the machine that will be running LISTSERV, the email address of the LISTSERV postmaster, etc... You'll need to edit the go.user file in the LSVROOT directory, and set each of the variables as appropriate. There are comments in the file explaining the purpose of each variable, and we will discuss the basic settings that must be made before you can start the software below.

After 'make install' finishes, it will tell you that you need to chdir into the ~listserv directory and edit the go.user file before you can start the server. You will need to gather some information before you start.

1. What is the DNS hostname for the machine on which LISTSERV is going to be installed? This is something like LISTSERV.YOURDOMAIN.COM . It must be a fully-qualified domain name (FQDN) and it must map to an A or MX record in your domain's DNS service. While it is possible to use a bracketed IP (eg, [10.0.0.24]) for testing purposes, as noted above the use of bracketed IPs in production is not supported and not recommended.

2. What are the email addresses for the LISTSERV maintainers (the person or persons who are authorized to create lists and operate/maintain the server)?

To configure the server, first open LISTSERV's go.user file with any text-based editor (emacs, vi, pico, etc.). There are four basic settings that must be configured before LISTSERV can be run.

Sample commands for this step:

cd /home/listserv

vi go.user

NODE

# -- The fully qualified domain name for this host.

NODE="LISTSERV.EXAMPLE.COM"

The NODE setting is the fully-qualified domain name as registered in DNS for the machine LISTSERV is running on. As noted above, it is possible to insert a square-bracketed dotted-decimal IP address in this box for testing purposes, but L-Soft neither recommends nor supports this in production. This is the host name that LISTSERV will always identify itself with when it sends mail out.

MYDOMAIN

# -- All possible domain names for this machine. SPACE SEPARATED!

MYDOMAIN=$NODE

It is usually best to leave this set to the default, ie, $NODE, but under some circumstances it may be necessary to deviate from the default.

MYDOMAIN does not refer to your corporate Internet domain. MYDOMAIN is the space-separated list of all possible host names your machine might be known as. In many cases the value of MYDOMAIN is the same as NODE, but for instance some machines running LISTSERV also run the enterprise's World Wide Web server, and may thus be identified in DNS as something like "WWW.EXAMPLE.COM". If you have users who receive mail on this machine, you might also have a DNS record for "MAIL.EXAMPLE.COM" pointing to it. And of course we'll assume that NODE has been set above to something like LISTSERV.MYCOMPANY.COM. Using this as an example, you would set the MYDOMAIN setting to contain, in space-separated format, all of these names that mail might come in to LISTSERV under, with the NODE value coming first:

MYDOMAIN="$NODE WWW.MYCOMPANY.COM MAIL.MYCOMPANY.COM"

This way if someone accidentally writes to LISTSERV@MAIL.EXAMPLE.COM, LISTSERV will recognize MAIL.EXAMPLE.COM as equivalent to LISTSERV.EXAMPLE.COM and will process the mail as if it had been addressed to LISTSERV@LISTSERV.EXAMPLE.COM. Otherwise the mail may bounce as LISTSERV has no other way to know what other names the machine might be known by in DNS.

POSTMASTER

# -- The email address(es) of the LISTSERV maintainer(s). SPACE SEPARATED!

POSTMASTER="me@example.com"

This is a space-separated list of userid@host.domain type email addresses belonging to people who have authority to manage LISTSERV--specifically the people who are allowed to create lists, but also who have pretty much global authority on the server to look at lists, modify list headers, and so forth. There are some advanced options for this setting but for right now you will probably just want to insert your own email address so that you can test the server.

Please note carefully that the POSTMASTER should NEVER be LISTSERV@ anywhere or POSTMASTER@ anywhere. These userids are reserved and mean specific things to LISTSERV. If you need to use a generic name for a postmaster account, it is recommended that you use something like "listmaster" or "lstmaint" instead.

CREATEPW

# -- The password to be used when sending "put" commands to create files

CREATEPW="luxfiat"

The password that will be used to create lists and perform certain management functions (such as administering LISTSERV's user password feature). Note that when using the web management features, you do not use the CREATEPW= value, but rather your own personal LISTSERV password, to validate your identity. See the main LISTSERV documentation for information on how to create a personal LISTSERV password.

3.8 Telling Your Mail System about LISTSERV

For Sendmail, see the Telling Sendmail about LISTSERV section.

For Postfix, see both the Sendmail section and the Telling Postfix about LISTSERV section.

For qmail, see the Telling qmail about LISTSERV section.

If you are using Software.Com's Post.Office product or Netscape's Netscape Mail Server product instead of Sendmail, please see the Telling Post.Office and Netscape Mail Server about LISTSERV section.

3.8.1 Telling Sendmail about LISTSERV

Note: The file you need to edit in this step, and the commands you need to issue, will require root privileges. Also, while the procedure for manually modifying the sendmail aliases file is described below, you can also enter "make aliases" to have the installation program complete this step automatically. The automated procedure assumes that your sendmail stores aliases in the file /etc/aliases, that the "newaliases" command will rebuild the aliases database, and finally that "kill -HUP `cat /etc/sendmail.pid`" will cause Sendmail to read in the updated alias list. (On some systems this last item is not required as it is taken care of when you run 'newalises'.)

LISTSERV accepts and responds to several email addresses. Even before you setup mailing lists, mail sent to listserv and owner-listserv should be handed to LISTSERV. The link between LISTSERV and your mail system is the lsv_amin program. If you are running Sendmail, the best way to route incoming mail to lsv_amin is by adding entries to your "aliases" file. Refer to the manual pages for sendmail on your system if you are not sure where the alias file is stored. On many systems the file will be called /etc/aliases. Once you have located the file, add the following lines,

listserv: "|/BBB/lsv_amin /SSS listserv"

owner-listserv: "|/BBB/lsv_amin /SSS owner-listserv"

to the file, replacing /BBB with the directory where the lsv_amin program was installed (the BINDIR macro in the Makefile), and replacing /SSS with the LISTSERV spool directory (the LSVSPOOL macro from the Makefile). Other than that, the lines should look exactly like the examples above. The double quotes should be entered into the alias file.

For example, if you changed BINDIR to /usr/lbin, and kept the default LSVSPOOL directory, the new lines in /etc/aliases would look like the following.

listserv: "|/usr/lbin/lsv_amin /home/listserv/spool listserv"

owner-listserv: "|/usr/lbin/lsv_amin /home/listserv/spool owner-listserv"

After updating the alias file, you will need to issue two Sendmail commands. First enter "newaliases" to compile the alias file into the format the sendmail daemon expects. Then on some systems you may also need to direct the sendmail daemon currently running on your system to read the newly compiled list of aliases. Refer to the manual pages for sendmail if you are unsure of how to do so. The command, "kill -HUP `cat /etc/sendmail.pid`" will work on AIX and SunOS systems. If you are running a syslog daemon, sendmail will log the fact that it has loaded the new aliases file. You can check the syslog output after issuing the command to make sure your changes are in place.

Sample commands for this step:

su root

cd /etc

vi aliases

newaliases

exit

3.8.2 Telling Postfix about LISTSERV

LISTSERV can be used with Wietze Venema's Postfix product, which was designed as an alternative to sendmail. Postfix has a number of advantages, not the least of which is that it is much simpler to configure than sendmail. However, L-Soft does not have any test machines running Postfix and has not run any performance or interoperability tests with Postfix.

In general, the instructions for interfacing LISTSERV with sendmail are all you need to follow for Postfix. It is possible that you may have to modify the ALIASES macro in LISTSERV's Makefile to point to /etc/postfix/aliases instead of the /etc/aliases, depending on how Postfix is installed on your system (a default installation on Red Hat Linux 9.0, for instance, places the alias file in /etc/postfix/aliases). Otherwise, LISTSERV is happy to work with Postfix as a replacement for sendmail.

If you plan to use LISTSERV's address probing feature with Postfix (the default is to do so when sending mail-merge jobs, for instance, or when you have configured a list for Auto-Delete), you must configure Postfix to direct all mail received for unknown recipients to LISTSERV. This is because bouncing address probes come back to specially-formatted addresses -- for instance,

owner-mylist-l*someuser**EXAMPLE*-COM@LISTSERV.MYORG.COM

These addresses positively identify to LISTSERV:

· which list or mail-merge job originated the message that bounced; and

· which recipient is the bouncing address.

In order to direct these mails to LISTSERV, you need to modify Postfix's master.cf and main.cf files. Typically these are found in /etc/postfix, but your installation may vary.

In the master.cf file, add a service called "lsvamin" as follows (we are assuming a default installation of LISTSERV for our file locations):

# LISTSERV redirection

lsvamin unix - n n - - pipe

flags=F user=listserv argv=/usr/local/bin/lsv_amin /home/listserv/spool ${user}

Then, in the main.cf file, add:

fallback_transport=lsvamin

local_recipient_maps=

Stop and restart Postfix, if it is already running. Finally, in /etc/aliases, you will also have to add at least one LISTSERV alias:

listserv: "|/usr/local/bin/lsv_amin /home/listserv/spool listserv"

and then run `newaliases'. If you don't do this, mail sent to the 'listserv' user will end up in the unix mailbox, and never get to LISTSERV's command processor.

If you prefer to create a Postfix virtual host instead, add the lsvamin service to master.cf as outlined above, and then add the following in main.cf:

virtual_mailbox_domains = your.virtual.domain.com

virtual_transport = lsvamin

(Replace your.virtual.domain.com with the actual name of the virtual domain you will be creating.)

In either case, it should be noted that all mail addressed to unknown recipients will be shunted to LISTSERV, which can cause LISTSERV postmasters to see significantly more bounce mail than they would otherwise.

For more advanced help with postfix, please see http://www.postfix.com/documentation.html . Some large LISTSERV sites are running with postfix and you can probably get help from their admins by joining and writing to the LSTSRV-L mailing list (see Section 9.2 Mailing Lists for information on L-Soft's support mailing lists).

Note: While L-Soft supports Postfix as an MTA for use with LISTSERV, L-Soft does not provide support for the Postfix product itself.

3.8.3 Telling qmail about LISTSERV

LISTSERV can be used with Dan Bernstein's qmail product. However, L-Soft does not have any test machines running with qmail so the procedure as outlined is based on correspondence with customers who have made this combination work rather than based on tests run on our own systems.

Assuming defaults for everything else, you should include a file called /home/listserv/.qmail that has the following statement in it:

|/var/qmail/bin/preline /usr/local/bin/lsv_amin -s /home/listserv/spool -t listserv

You must also create another file called ~alias/.qmail-default with the following line in it:

|/var/qmail/bin/preline /usr/local/bin/lsv_amin -s /home/listserv/spool -t $LOCAL

(Note that ~alias is a link to /var/qmail/alias .) This entry "generalizes" the aliases that under sendmail would have to go into /etc/aliases .

For more advanced help with qmail you should contact the appropriate qmail support lists and newsgroups (see http://www.qmail.org/ for the qmail home page). Some large LISTSERV sites are running with qmail and you can probably get help from their admins by joining and writing to the LSTSRV-L mailing list (see Section 9.2 Mailing Lists for information on L-Soft's support mailing lists).

Note: While L-Soft supports qmail as an MTA for use with LISTSERV, L-Soft does not provide support for the qmail product itself.

3.8.4 Telling Post.Office and Netscape Mail Server about LISTSERV

LISTSERV can be used with either of these products. You still need to make the same aliases but since neither Post.Office or Netscape Mail Server use /etc/aliases, the procedure is significantly different. L-Soft does not have any test machines running either of these products so the procedure as outlined is based on correspondence with customers who have made this combination work rather than based on tests run on our own systems.

First, you must make a mailbox (login) for each of the aliases discussed in the previous section.

Next, you must use the mail server's configuration GUI to create "program delivery" aliases for each of the mailboxes you have created in the previous step. The "program delivery" aliases must point to the lsv_amin executable, which is responsible for passing incoming mail to LISTSERV in the correct format.

Note: This procedure is identical for both the server aliases and for the eight aliases that need to be created for each mailing list. If you are not familiar with "program delivery" and creating aliases under Post.Office or Netscape Mail Server, please consult the documentation for the respective program. L-Soft cannot help you with the configuration of Post.Office or Netscape Mail Server.

Current versions of these products may also require that you configure them so that lsv_amin is known as a "trusted" program. For more information, again please consult the documentation for the respective program.

Note: While L-Soft supports Post.Office/Netscape Mail Server as an MTA for use with LISTSERV, L-Soft does not provide support for the Post.Office/Netscape Mail Server product itself.

3.9 Creating and Activating the License Key

Note: This step is handled automatically for evaluation kits. The necessary file, called "license.merge", is provided in the common.tar archive and the "make install" command will copy it to the proper directory.

Before you can start up LISTSERV, you will need to install a License Activation Key (LAK) for 'LISTSERV-xxx' (xxx = SUNOS, AIX, BSDI, etc...). In order to offer the same range of services to all LISTSERV sites, regardless of the operating system used, we had to develop our own "license key" scheme. Using system supplied license managers where available and L-Soft LAKs elsewhere would have required us to develop multiple authorization schemes, and would also complicate the task of issuing license keys to customers.

Since the LAK manager is part of LISTSERV, installing the LAK is done last, after all the programs have been built and moved to their proper directories. The process is quite simple, you just create a file called license.merge in the $LSVROOT/home directory and start the LISTSERV server to compile the information. The instructions for doing so are described in the License Registration Form that came with your installation materials.

Section 7 Installing F-Secure (Linux-x86 ONLY)

Please note that this feature is not available under LISTSERV Lite.

Please note that the anti-virus scanning software is available only for Windows NT/2000/XP and Linux-x86, and that this feature is only available for LISTSERV Classic or LISTSERV Classic HPO sites running those operating systems. An L-Soft maintenance contract is also required.

LISTSERV Version 15.5 supports on-the-fly anti-virus scanning of all messages sent to mailing lists that run under LISTSERV Classic or LISTSERV Classic HPO on Windows 2000/2003/XP and Linux-x86 servers, including inline uuencoded binaries and MIME attachments in those messages. This is a value-added feature which, in addition to a regularly-licensed LISTSERV Classic or LISTSERV Classic-HPO installation, requires the following:

For sites with perpetual ("EXP=NEVER") LAKs: An additional "maintenance" LAK, meaning that you must purchase maintenance (which includes automatic anti-virus signature updates for the term of the LAK) for LISTSERV in order to use the feature. This LAK will come from your sales representative automatically when a perpetual LISTSERV LAK is purchased with maintenance and must be renewed yearly.
For all sites: A separate F-Secure Anti-Virus key that should be sent to you by your sales representative along with your LISTSERV LAK.

The table below indicates the web sites for F-Secure downloads.

Linux-x86:

NOTICE: The use of F-Secure Linux Security 7.02 and later requires, at minimum, LISTSERV version 15.0. Use of FSAV 4.65 requires, at minimum, LISTSERV version 14.3. Issue a SHOW VERSION command to LISTSERV to ascertain your product level BEFORE upgrading or installing FSAV. The current LISTSERV for Linux kits can be downloaded at http://www.lsoft.com/download/listserv.asp#unix.

Installation kits:

For use with LISTSERV 15.0 and later:

F-Secure Linux Security (FSLS) 7.02

ftp://ftp.lsoft.com/f-secure/f-secure-linux-security-7.02.73807.tgz

For use with LISTSERV 14.3, 14.4, and 14.5:

FSAV 4.65 for Linux Servers

ftp://ftp.lsoft.com/F-Secure/fsav-linux-srv-4.65.5502-lsoft.tgz

Manuals:

F-Secure Linux Security 7.02 documentation:

http://www.f-secure.com/export/system/fsgalleries/manuals/fsls_702_manual.pdf

In order to use LISTSERV’s Anti-Virus features, F-Secure^® Anti-Virus must be installed on the same server as LISTSERV^®. If you already have F-Secure Anti-Virus installed on the server, you should make sure that you are running the version supported by LISTSERV, or higher:

· For Linux-x86: version 7.02

7.1 Recommended FSAV Versions for LISTSERV 15.0 and Following

L-Soft strongly recommends that all such Windows LISTSERV sites upgrade to at least version 7.01 (server) or 7.11 (workstation) with all hotfixes for those versions released to date (see http://support.f-secure.com/enu/corporate/downloads/hotfixes/av5-hotfixes.shtml for applicable hotfixes).

L-Soft strongly recommends that all such Linux-Intel LISTSERV sites upgrade to F-Secure Linux Security version 7.02, build 73807 with all hotfixes for that version released to date (see http://support.f-secure.com/enu/corporate/downloads/hotfixes/av-linux-hotfixes.shtml) for applicable hotfixes).

The FSAV for Windows Servers or FSAV for Linux Servers license key provided by L-Soft is for a single stand-alone server only. If you wish to run the Enterprise edition of F-Secure Anti-Virus, this can be purchased separately, and it will still work with LISTSERV.

The FSAV for Windows Servers license key normally provided by L-Soft is for the server version of F-Secure Anti-Virus. The server version will not install on a workstation version of Windows (that is, Windows XP or Windows 2000 Professional). If you are affected by this, please contact your sales representative for an FSAV for Windows Workstations key.

The FSAV key provided by L-Soft is valid only as long as your paid maintenance contract for LISTSERV is up-to-date. If you discontinue LISTSERV maintenance, you must uninstall F-Secure Anti-Virus or purchase a separate key from F-Secure.

7.1 Recommended F-Secure Hotfixes

Given our own experience and that of customers who have reported problems to support, L-Soft strongly recommends that all currently-available hotfixes for FSAV be installed.

FSAV hotfixes can be downloaded from:

http://support.f-secure.com/enu/corporate/downloads/hotfixes/av5-hotfixes.shtml.

When downloading F-Secure hotfixes, be sure to choose the ones for standalone environments, which are signified with the single computer icon.

Please check the F-Secure website regularly for any hotfixes that may be provided.

7.2 F-Secure Linux Security Installation Instructions

L-Soft is pleased to offer its Linux customers the ability to integrate F-Secure Linux Security (FSLS) 7.02 into their LISTSERV 15.0 or later environment.

Please be aware that L-Soft provides a license for the "command-line" version of F-Secure Linux Security. The "command-line" version does not include the real-time protection, integrity checking, web user interface or central management features provided in the full version. This version is designed specifically for users migrating from the F-Secure Anti-Virus 4.6x series or for users who do not need the additional functions.

Before starting to install FSLS 7.02, make sure that you have your FSLS installation key from your sales representative. The FSLS key is normally sent with your LISTSERV LAK(s) but may be obtained separately if you have not previously received it.

Please note that the support department does not have access to, nor can it provide, either LISTSERV LAKs or FSLS keys.

IMPORTANT: Required LISTSERV Version

F-Secure Linux Security 7.02 and later works with LISTSERV 15.0 and later.

THIS IS AN ABSOLUTE REQUIREMENT. FSLS 7.02 WILL NOT WORK WITH LISTSERV VERSIONS THAT REPORT AS BEING EARLIER THAN VERSION 15.0.

F-Secure Linux Security 7.02 is fully certified to work with LISTSERV 15.0 and later.

Please visit the LISTSERV documentation page to read the LISTSERV release notes.

Please visit the LISTSERV product download page to download the current kit.

7.3 Upgrading from an Earlier Version of FSAV

FSAV 4.x versions previously supported with LISTSERV may be upgraded with the FSAV 7.02 kit.

For 64-bit Linux versions

If installing F-Secure Linux Security 7.02 under a 64-bit Linux operating system, please be aware that you must also install the Linux 32-bit compatibility packages appropriate for your Linux distribution. This is because FSLS 7.02 is a 32-bit application and, as such, will not be able to use 64-bit common libraries.

In some cases 32-bit compatibility packages may be installed by default. Should you have any question about the 32-bit compatibility packages, please contact your OS vendor. L-Soft is unable to assist in the installation of these packages.

Please read F-Secure's pre-installation checklist for 64-bit systems before installing.

7.4 F-Secure Anti-Virus Installation Instructions

Login as (or 'su' to) 'root' and download the FSAV installation kit from the URL indicated in the table above. We recommend creating a directory called 'fsav' or similar and downloading the file to that location.

Expand the downloaded archive:

zcat f-secure-linux-security-7.02.73807.tgz | tar xvf -

This leaves the following files in the directory f-secure-linux-security-7.02.73807 :

fsav_linux_702_mib.jar
f-secure-daemon-api-sdk.tgz

f-secure-linux-security-7.02.73807

f-secure-linux-security-7.02.73807-release-notes.txt

The file called f-secure-linux-security-7.02.73807 should have execute permission. (If it does not, chmod it appropriately.)

Execute (still as root) the following command:

./f-secure-linux-security-7.02.73807 --command-line-only

It is very important that the --command-line-only flag be appended to this command! If it is not, you will install an evaluation copy of the full version of the product, for which you are not licensed. You will then have to uninstall the product and reinstall it in command-line mode.

The installation script will first ask you to view and accept the F-Secure license agreement.

[home]root:~/f-secure-linux-security-7.02.73807# ./f-secure-linux-security-7.02.73807 --command-line-only

F-Secure Linux Security installation

Preparing...

You must accept following F-Secure license agreement

to install F-Secure Linux Security.

Press enter to view license agreement.

Simply press enter and then use the space bar to page down. At the end of the license greement you will be asked:

Do you accept this license agreement?

Type "y" or "Y" or some form of "yes" to continue.

After accepting the license agreement, the product will install and create a default configuration.

The license agreement text is available at /opt/f-secure/fsav/LICENSE.

Installing RPM packages, please wait...

Running configuration

.....

You will then be asked to provide the F-Secure license key (and please note that the key shown is only for illustration; it is not a valid key). Type in the key and then hit return.

Keycode for F-Secure Linux Security

To install the licensed version of the product, please enter the keycode you

have received with your purchase or press enter to install the fully functional

30-day evaluation version.
keycode: 1234-5678-90AB-CDEF-GHIJ

The remainder of the installation looks like the following.

Keycode accepted.

Configuring

F-Secure Security Platform

F-Secure Virus Description Database Update

Databases updated successfully.

Database version: 2008-09-18_03

Configuring...

Note: The Virus Definition Databases are now being updated to the newest

versions in the background. You can check the date of the current the

databases by typing 'fsav --version'.

[home]root:~/f-secure-linux-security-7.02.73807#

Unlike previous F-Secure versions, there is no need to install a cron entry to update the virus signatures. An F-Secure automatic update agent is provided as part of the installation and will download the new signatures in the background as they become available.

After installation, there are two minor change that MUST be made to the default FSLS configuration. The default behavior of FSLS is first to try to disinfect, and then to try to rename the file upon detection. Because LISTSERV expects the anti-virus scanner only to report when it detects a virus, and not otherwise change or delete the file, this behavior must be changed. The change is made by opening the FSLS configuration file, normally found at /etc/opt/f-secure/fssp/fssp.conf, in a text editor, and changing the values of two variables in the file as follows:

odsFilePrimaryActionOnInfection 1

odsFileSecondaryActionOnInfection 0

Then save the file.

Please note carefully that this element of the installation is required. If you skip it, FSLS will end up disinfecting or renaming infected files, and LISTSERV will not receive the return code that tells it to reject the message. There is no need for FSLS to delete or rename the file. LISTSERV itself will delete the file when it receives the correct return code.

After restarting LISTSERV, you should see an entry similar to the following in the log:

15 Jan 2009 12:11:39 F-Secure Anti-Virus 7.02 activated, explicit file scan.

LSTSRV-L@PEACH.EASE.LSOFT.COM	for LISTSERV maintainers and interested list owners

LSTOWN-L@PEACH.EASE.LSOFT.COM	for LISTSERV list owners

LSTSRV-E@PEACH.EASE.LSOFT.COM	for LISTSERV evaluation kit users

LSMTP-L@PEACH.EASE.LSOFT.COM	for LSMTP users

LISTSERV-LITE@PEACH.EASE.LSOFT.COM	for LISTSERV Lite users

LISTSERV-DEVELOPERS@PEACH.EASE.LSOFT.COM	for third-party developers using features documented in the Developer's Guide to LISTSERV

1.1 Installing LDAP Support to Re-Link LISTSERV

Section 2 Installation Overview

Section 3 Installing LISTSERV

3.3 Customizing the Makefile to Determine LISTSERV’s Location

3.8.1 Telling Sendmail about LISTSERV

3.8.2 Telling Postfix about LISTSERV

3.8.3 Telling qmail about LISTSERV

3.8.4 Telling Post.Office and Netscape Mail Server about LISTSERV

Section 4 Starting LISTSERV to Verify a Successful Installation

Section 5 Registering the Server

Section 6 Installing the LISTSERV Web Interface

Section 7 Installing F-Secure (Linux-x86 ONLY)

Section 8 Upgrading your LISTSERV installation

9.2 Mailing Lists

Section 4 Starting LISTSERV to Verify a Successful
Installation