在 Slackware ...

nullTao | 净空无道 | Blog

在 Slackware 下全部从源代码安装邮件服务器：三、系统配置 Mon, Jul 20. 2009

1、配置 MySQL

首先启动 MySQL 服务器，并且修改 MySQL 的 root 用户的密码：

  1. mysql.server start
  2. /home/mysql/bin/mysqladmin -u root password your_password

运行 /home/mysql/bin/mysql -u root -p，并且在提示符后输入 root 用户的密码，进入 MySQL 客户端，执行以下命令：

  1. # 创建 postfix 数据库
  2. CREATE DATABASE `postfix` DEFAULT CHARACTER SET utf8 COLLATE utf8_unicode_ci;
  3. # 创建同名用户，并且设置密码
  4. CREATE USER 'postfix'@'localhost' IDENTIFIED BY 'postfix_user_password';
  5. # 将 postfix 数据库的所有权限都赋予 postfix 用户
  6. GRANT ALL PRIVILEGES ON `postfix`.* TO 'postfix'@'localhost';

2、配置 Apache

2.1、httpd.conf

编辑 /home/httpd/conf/httpd.conf 文件，找到如下配置并且按照你自己的实际情况修改：

  1. # 设置默认字符集为 utf-8
  2. AddDefaultCharset utf-8
  3.  
  4. # 设置以 vmail:vmail 的身份执行所有的 web 程序
  5. <IfModule !mpm_netware_module>
  6.     User vmail
  7.     Group vmail
  8. </IfModule>
  9.  
  10. # 服务器管理员电子邮件，在出错页面显示
  11. ServerAdmin you@domain.tld
  12.  
  13. # 监听 80 端口
  14. ServerName localhost:80
  15.  
  16. # 设置文档主目录为 /home/www
  17. # 我的习惯是对不同的虚拟主机使用 /home/www/domain 的目录命名习惯
  18. # 具体可见 home/httpd/conf/extra/httpd-vhosts.conf
  19. DocumentRoot "/home/www"
  20.  
  21. # 设置 /home/www 的默认权限
  22. <Directory "/home/www">
  23.     Options Indexes Includes FollowSymLinks MultiViews
  24.     AllowOverride All
  25.     Order allow,deny
  26.     Allow from all
  27. </Directory>
  28.  
  29. # 设置默认索引页
  30. <IfModule dir_module>
  31.     DirectoryIndex index.html index.php
  32. </IfModule>
  33.  
  34. # 加载虚拟主机配置文件
  35. Include conf/extra/httpd-vhosts.conf

2.2、httpd-vhosts.conf

编辑 /home/httpd/conf/httpd.conf 文件，找到如下配置并且按照你自己的实际情况修改。我们在后面配置 Extman/Extmail 的时候同时配置该文件。

说明：如果有域名的 DNS 管理权限，推荐使用不同的域名表示不同服务，这样便于访问和管理，那么就需要配置该文件以支持多域名对应的虚拟主机。如果没有 DNS 管理权限，那么就只能把所有的服务都放在一个目录下，那么就不需要本文件的支持，同时上一节中的 /home/httpd/conf/httpd.conf 文件的 Include conf/extra/httpd-vhosts.conf 也可以注释掉。但是这种情况下，ExtMan 和 ExtMail 的 CGI 设置需要对应的修改。

3、配置 Postfix

3.1、main.cf

编辑 /etc/postfix/main.cf 文件，如下：

  1. # LOCAL PATHNAME INFORMATION
  2. queue_directory = /home/postfix/spool
  3. command_directory = /home/postfix/sbin
  4. daemon_directory = /home/postfix/libexec
  5. data_directory = /home/postfix/var
  6.  
  7. # QUEUE AND PROCESS OWNERSHIP
  8. mail_owner = postfix
  9.  
  10. # INTERNET HOST AND DOMAIN NAMES
  11. myhostname = mail.$mydomain
  12. mydomain = domain.ltd
  13.  
  14. # SENDING MAIL
  15. myorigin = $mydomain
  16.  
  17. # RECEIVING MAIL
  18. inet_interfaces = all
  19. mydestination =
  20.  
  21. # REJECTING MAIL FOR UNKNOWN LOCAL USERS
  22. local_recipient_maps = $alias_maps $virtual_mailbox_maps unix:passwd.byname
  23. unknown_local_recipient_reject_code = 550
  24.  
  25. # TRUST AND RELAY CONTROL
  26. mynetworks_style = subnet
  27. mynetworks = 202.119.43.0/24, 127.0.0.0/8
  28.  
  29. # ALIAS DATABASE
  30. alias_maps = mysql:/etc/postfix/mysql_virtual_alias_maps.cf
  31.  
  32. # DELIVERY TO MAILBOX
  33. home_mailbox = Maildir/
  34. mail_spool_directory = /home/mailbox
  35.  
  36. # DEBUGGING CONTROL
  37. debug_peer_level = 2
  38. debugger_command =
  39.         PATH=/bin:/usr/bin:/usr/local/bin; export PATH; (echo cont;
  40.         echo where) | gdb $daemon_directory/$process_name $process_id 2>&1
  41.         >$config_directory/$process_name.$process_id.log & sleep 5
  42.  
  43. # INSTALL-TIME CONFIGURATION INFORMATION
  44. sendmail_path = /home/postfix/sbin/sendmail
  45. newaliases_path = /home/postfix/bin/newaliases
  46. mailq_path = /home/postfix/bin/mailq
  47. setgid_group = postdrop
  48. html_directory = /home/postfix/html
  49. manpage_directory = /home/postfix/man
  50. sample_directory = /etc/postfix
  51. readme_directory = /home/postfix/doc
  52.  
  53. # VIRTUAL DOMAIN STORAGE
  54. virtual_mailbox_base = /home/mailbox
  55. virtual_mailbox_maps = mysql:/etc/postfix/mysql_virtual_mailbox_maps.cf,
  56.         mysql:/etc/postfix/mysql_virtual_alias_domain_mailbox_maps.cf
  57. virtual_mailbox_domains = mysql:/etc/postfix/mysql_virtual_domains_maps.cf
  58. virtual_alias_domains =
  59. virtual_alias_maps = mysql:/etc/postfix/mysql_virtual_alias_maps.cf,
  60.         mysql:/etc/postfix/mysql_virtual_alias_domain_maps.cf,
  61. virtual_uid_maps = static:2002
  62. virtual_gid_maps = static:202
  63. virtual_transport = maildrop
  64. virtual_minimum_uid = 200
  65. relay_domains = $mydestination
  66. maildrop_destination_recipient_limit = 1
  67. maildrop_destination_concurrency_limit = 1
  68.  
  69. # QUOTA
  70. message_size_limit = 14336000
  71. virtual_mailbox_limit = 20971520
  72. virtual_create_maildirsize = yes
  73. virtual_mailbox_extended = yes
  74. virtual_mailbox_limit_maps = mysql:/etc/postfix/mysql_virtual_mailbox_limit_maps.cf
  75. virtual_mailbox_limit_override = yes
  76. virtual_maildir_limit_message = Sorry, the user's maildir has overdrawn his diskspace quota, please try again later.
  77. virtual_overquota_bounce = yes
  78.  
  79. # SASL
  80. smtpd_sasl_path = smtpd
  81. broken_sasl_auth_clients = yes
  82. smtpd_recipient_restrictions =
  83.         permit_sasl_authenticated,
  84.         permit_mynetworks,
  85.         reject_unauth_destination
  86. smtpd_sasl_auth_enable = yes
  87. smtpd_sasl2_auth_enable = yes
  88. smtpd_sasl_local_domain = $myhostname
  89. smtpd_sasl_security_options = noanonymous
  90. smtpd_sasl_application_name = smtpd
  91. smtpd_banner=$myhostname ESMTP "Version not Available"
  92. smtpd_sasl_authenticated_header = yes
  93.  
  94. # TLS
  95. smtpd_use_tls = yes
  96. smtpd_tls_cert_file = /etc/postfix/postfix.pem
  97. smtpd_tls_key_file = $smtpd_tls_cert_file
  98.  
  99. # OPTIONAL PART
  100. smtpd_helo_required = yes
  101. disable_vrfy_command = yes
  102. smtpd_data_restrictions = reject_unauth_pipelining
  103. smtpd_etrn_restrictions = reject
  104. show_user_unknown_table_name = no
  105.  
  106. # AMAVIS
  107. content_filter=smtp-amavis:[127.0.0.1]:10024

3.2、master.cf

编辑 /etc/postfix/master.cf 文件。

找到如下的代码：

  1. maildrop  unix  -       n       n       -       -       pipe
  2.   flags=DRhu user=vmail argv=/usr/local/bin/maildrop -d ${recipient}

修改为：

  1. maildrop  unix  -       n       n       -       -       pipe
  2.   flags=DRhu user=vmail argv=/home/courier/maildrop/bin/maildrop -d ${recipient}

在该文件的最后增加如下代码：

  1. smtp-amavis unix -      -       n       -       2  lmtp
  2.     -o lmtp_data_done_timeout=1200
  3.     -o lmtp_send_xforward_command=yes
  4.  
  5. 127.0.0.1:10025 inet n  -       n       -       -  smtpd
  6.     -o content_filter=
  7.     -o local_recipient_maps=
  8.     -o relay_recipient_maps=
  9.     -o smtpd_restriction_classes=
  10.     -o smtpd_client_restrictions=
  11.     -o smtpd_helo_restrictions=
  12.     -o smtpd_sender_restrictions=
  13.     -o smtpd_recipient_restrictions=permit_mynetworks,reject
  14.     -o mynetworks=127.0.0.0/8
  15.     -o strict_rfc821_envelopes=yes
  16.     -o smtpd_error_sleep_time=0
  17.     -o smtpd_soft_error_limit=1001
  18.     -o smtpd_hard_error_limit=1000

3.3、mysql_*.cf

新建如下文件：

/etc/postfix/mysql_virtual_alias_domain_mailbox_maps.cf

  1. user = postfix
  2. password = password_for_postfix
  3. hosts = localhost
  4. dbname = postfix
  5. query = SELECT maildir FROM mailbox,alias_domain WHERE alias_domain.alias_domain = '%d' and mailbox.username = CONCAT('%u', '@', alias_domain.target_domain) AND mailbox.active = 1 AND alias_domain.active='1'

/etc/postfix/mysql_virtual_alias_domain_maps.cf

  1. user = postfix
  2. password = password_for_postfix
  3. hosts = localhost
  4. dbname = postfix
  5. query = SELECT goto FROM alias,alias_domain WHERE alias_domain.alias_domain = '%d' and alias.address = CONCAT('%u', '@', alias_domain.target_domain) AND alias.active = 1 AND alias_domain.active='1'

/etc/postfix/mysql_virtual_alias_maps.cf

  1. user = postfix
  2. password = password_for_postfix
  3. hosts = localhost
  4. dbname = postfix
  5. query = SELECT goto FROM alias WHERE address='%s' AND active = '1'
  6. #expansion_limit = 100

/etc/postfix/mysql_virtual_domains_maps.cf

  1. user = postfix
  2. password = password_for_postfix
  3. hosts = localhost
  4. dbname = postfix
  5. query  = SELECT domain FROM domain WHERE domain='%s' AND active = '1'
  6. #query = SELECT domain FROM domain WHERE domain='%s'
  7. #optional query to use when relaying for backup MX
  8. #query = SELECT domain FROM domain WHERE domain='%s' AND backupmx = '0' AND active = '1'
  9. #expansion_limit = 100

/etc/postfix/mysql_virtual_mailbox_maps.cf

  1. user = postfix
  2. password = password_for_postfix
  3. hosts = localhost
  4. dbname = postfix
  5. query = SELECT maildir FROM mailbox WHERE username='%s' AND active = '1'
  6. #expansion_limit = 100

3.4、创建 SSL 证书

  1. cd /etc/postfix
  2. /usr/local/ssl/bin/openssl req -x509 -newkey rsa:1024 -keyout postfix.pem -out postfix.pem -nodes -days 365

按照提示输入你的组织等信息。

3.5、修改权限

  1. chmod 640  /etc/postfix/mysql_*
  2. chgrp postfix /etc/postfix/mysql_*

4、配置 CYRUS-SASL

创建并且修改 /home/cyrus-sasl/lib/sasl2/smtpd.conf 文件，内容如下：

  1. pwcheck_method:authdaemond
  2. log_level:3
  3. srp_mda:md5
  4. password_format:crypt
  5. mech_list:PLAIN LOGIN
  6. authdaemond_path: /home/courier/authlib/var/spool/authdaemon/socket

设置属性：

  1. chown postfix:postfix /home/cyrus-sasl/lib/sasl2/smtpd.conf
  2. chmod 400 /home/cyrus-sasl/lib/sasl2/smtpd.conf

5、配置 Courier Authlib

打开 /home/courier/authlib/etc/authlib/authdaemonrc 文件，修改 27 行：

  1. authmodulelist="authuserdb authldap authmysql authcustom authpipe"

为：

  1. authmodulelist="authmysql"

修改 /home/courier/authlib/etc/authlib/authmysqlrc：

  1. # MySQL 服务器地址
  2. MYSQL_SERVER            localhost
  3. # MySQL 用户名
  4. MYSQL_USERNAME          postfix
  5. # MySQL 密码
  6. MYSQL_PASSWORD          password_for_postfix
  7. # 链接 MySQL 用的 sock
  8. MYSQL_SOCKET            /tmp/mysql.sock
  9. # 上面指定了使用 sock 方式，所以端口号不需要指定
  10. # MYSQL_PORT            0
  11. MYSQL_OPT               0
  12. # 数据库名
  13. MYSQL_DATABASE          postfix
  14. # 需要访问的表名
  15. MYSQL_USER_TABLE        mailbox
  16. # 存放加密密码的列名
  17. MYSQL_CRYPT_PWFIELD     password
  18. # 存放密码明文的列名，在这里不需要
  19. # MYSQL_CLEAR_PWFIELD   clear
  20. # 默认域名
  21. DEFAULT_DOMAIN          domain.ltd
  22. # 用户 ID 和用户组 ID
  23. MYSQL_UID_FIELD         2002
  24. MYSQL_GID_FIELD         202
  25. # 存放用户名 (email) 的列名
  26. MYSQL_LOGIN_FIELD       username
  27. # 存放邮箱跟目录的列名，直接指定
  28. MYSQL_HOME_FIELD        '/home/mailbox/'
  29. # 用户姓名列
  30. MYSQL_NAME_FIELD        name
  31. # 存放用户邮箱路径的列名
  32. MYSQL_MAILDIR_FIELD     maildir
  33. # MYSQL_DEFAULTDELIVERY defaultdelivery
  34. # 存放配额的列名
  35. MYSQL_QUOTA_FIELD       quota
  36. # 附加选项列
  37. # MYSQL_AUXOPTIONS_FIELD        CONCAT("disableimap=",  disableimap, ",disablepop3=", disablepop3, ",disablewebmail=", disablewebmail, ",sharedgroup=" ,sharedgroup)
  38. # 附加 WHERE 语句
  39. MYSQL_WHERE_CLAUSE      active='1'

注意：

  1. 确认在这个文件中不能用空格键(包括行尾)，只能用 Tab 键。
  2. 确认只使用单引号，比如：'/var/mailbox/'
  3. localhost 不能用单引号。
  4. 确认你的 /etc/hosts 文件中有 localhost 解析。
  5. 编译时如果支持 Ipv6 可能导致错误。
  6. MYSQL_GID_FIELD 和 MYSQL_UID_FIELD 是 maildrop 所用到的用户(在这里是 vmail:vmail)的 UID 和 GID，而不是 MySQL 的。

6、配置 Courier IMAP

修改 /home/courier/imap/etc 目录下的 imapd、imapd-ssl、pop3d、pop3d-ssl 四个文件。找到 IMAPDSTART、 IMAPDSSLSTART、POP3DSTART、POP3DSSLSTART 四行，把 NO 修改为 YES。如下：

  1. IMAPDSTART=YES

如果你不需要 SSL 认证，则不需要修改 imapd-ssl 和 pop3d-ssl 文件。下面一步可以直接跳过。

创建 IMAP 和 POP3 需要的 SSL 证书：

  1. cd /home/courier/imap/share
  2. /usr/local/ssl/bin/openssl req -x509 -newkey rsa:1024 -keyout pop3d.pem -out pop3d.pem -nodes -days 365
  3. /usr/local/ssl/bin/openssl req -x509 -newkey rsa:1024 -keyout imapd.pem -out imapd.pem -nodes -days 365

按照提示输入你的组织等信息。

7、配置 Courier MailDrop

创建并修改 /etc/maildroprc 文件，内容如下：

  1. logfile "/var/log/maildrop.log"
  2.  
  3. if ( $SIZE < 26144 )
  4. {
  5.     exception {
  6.        xfilter "/usr/bin/spamassassin --prefspath=$HOME/$DEFAULT/.spamassassin/user_prefs "
  7.     }
  8. }
  9.  
  10. if (/^X-Spam-Flag: *YES/)
  11. {
  12.     exception {
  13.         to "$HOME/$DEFAULT/.Junk/"
  14.     }
  15. }
  16. else
  17. {
  18.     exception {
  19.         to "$HOME/$DEFAULT"
  20.     }
  21. }
  22.  

创建日志文件并且设置正确的权限：

  1. touch /var/log/maildrop.log
  2. chown vmail:vmail /var/log/maildrop.log
  3. chmod a+r /etc/maildroprc

8、配置 Spamassassin

修改 /etc/mail/spamassassin/local.cf，找到如下行：

  1. # rewrite_header Subject *****SPAM*****
  2. # report_safe 1
  3. # required_score 5.0
  4. # use_bayes 1
  5. # bayes_auto_learn 1

对应修改成如下：

  1. rewrite_header Subject *****SPAM*****
  2. report_safe 0
  3. required_score 10.0
  4. use_bayes 1
  5. bayes_auto_learn 1

并且最最后增加如下规则，以适应中国的邮件，减少误报的机会：

  1. ##################################################
  2. ##Follow is diables some bad rules for chinese mail
  3. ##################################################
  4. score SUBJ_FULL_OF_8BITS 0.0
  5. score BASE64_ENC_TEXT 0.0
  6. score BAYES_99 0.1
  7. score BAYES_90 0.1
  8. score BAYES_80 0.1
  9. score BAYES_70 0.1
  10. score BAYES_60 0.1
  11. score FROM_ILLEGAL_CHARS 0.1
  12. score HEAD_ILLEGAL_CHARS 0.1
  13. score SUBJ_ILLEGAL_CHARS 0.1
  14. score MIME_BASE64_TEXT 0.1
  15. score FAKE_HELO_AOL 0.1
  16. score NO_RDNS_DOTCOM_HELO 0.1
  17. score CHINA_HEADER 0.1

9、配置 Amavisd-new

编辑 /etc/amavisd.conf 文件。找到如下行：

  1. $daemon_user  = 'vscan';     # (no default;  customary: vscan or amavis), -u
  2. $daemon_group = 'vscan';     # (no default;  customary: vscan or amavis), -g
  3.  
  4. $mydomain = 'example.com';   # a convenient default for other settings
  5.  
  6. # $MYHOME = '/var/amavis';   # a convenient default for other settings, -H
  7.  
  8. $QUARANTINEDIR = '/var/virusmails';  # -Q
  9.  
  10. # $db_home   = "$MYHOME/db";      # dir for bdb nanny/cache/snmp databases, -D
  11. # $helpers_home = "$MYHOME/var";  # working directory for SpamAssassin, -S
  12. # $lock_file = "$MYHOME/var/amavisd.lock";  # -L
  13. # $pid_file  = "$MYHOME/var/amavisd.pid";   # -P
  14.  
  15. # $myhostname = 'host.example.com';  # must be a fully-qualified domain name!
  16.  
  17. # $final_virus_destiny      = D_DISCARD;
  18. # $final_banned_destiny     = D_BOUNCE;
  19. # $final_spam_destiny       = D_BOUNCE;
  20. # $final_bad_header_destiny = D_PASS;
  21.  
  22. # ['ClamAV-clamd',
  23. #   \&ask_daemon, ["CONTSCAN {}\n", "/var/run/clamav/clamd"],
  24. #   qr/\bOK$/m, qr/\bFOUND$/m,
  25. #   qr/^.*?: (?!Infected Archive)(.*) FOUND$/m ],

对应修改成如下：

  1. $daemon_user  = 'amavis';     # (no default;  customary: vscan or amavis), -u
  2. $daemon_group = 'amavis';     # (no default;  customary: vscan or amavis), -g
  3.  
  4. $mydomain = 'domain.ltd';   # a convenient default for other settings
  5.  
  6. $MYHOME = '/home/amavis';   # a convenient default for other settings, -H
  7.  
  8. $QUARANTINEDIR = '/home/mailbox/virusmails';  # -Q
  9.  
  10. $db_home   = "$MYHOME/db";      # dir for bdb nanny/cache/snmp databases, -D
  11. $helpers_home = "$MYHOME/var";  # working directory for SpamAssassin, -S
  12. $lock_file = "$MYHOME/var/amavisd.lock";  # -L
  13. $pid_file  = "$MYHOME/var/amavisd.pid";   # -P
  14.  
  15. $myhostname = 'domain.ltd';  # must be a fully-qualified domain name!
  16.  
  17. $final_virus_destiny      = D_PASS;
  18. $final_banned_destiny     = D_PASS;
  19. $final_spam_destiny       = D_PASS;
  20. $final_bad_header_destiny = D_PASS;
  21.  
  22. ['ClamAV-clamd',
  23.   \&ask_daemon, ["CONTSCAN {}\n", "/tmp/clamd.socket"],
  24.   qr/\bOK$/m, qr/\bFOUND$/m,
  25.   qr/^.*?: (?!Infected Archive)(.*) FOUND$/m ],

10、配置 Clam AntiVirus

10.1、clamd.conf

修改 /home/clamav/etc/clamd.conf，找到如下行：

  1. Example
  2. #LogFile /tmp/clamd.log
  3. #TemporaryDirectory /var/tmp
  4. #DatabaseDirectory /var/lib/clamav

对应修改成如下：

  1. #Example
  2. LogFile /tmp/clamd.log
  3. TemporaryDirectory /tmp
  4. DatabaseDirectory /home/clamav/var

10.2、freshclam.conf

修改 /home/clamav/etc/freshclam.conf，找到如下行：

  1. Example
  2. #DatabaseDirectory /var/lib/clamav
  3. #UpdateLogFile /var/log/freshclam.log

对应修改成如下：

  1. # Example
  2. DatabaseDirectory /home/clamav/var
  3. UpdateLogFile /var/log/freshclam.log

10.4、病毒库升级

首先创建日志文件并且升级病毒库：

  1. touch /var/log/freshclam.log
  2. chmod 666 /var/log/freshclam.log
  3. chown amavis /var/log/freshclam.log
  4. /home/clamav/bin/freshclam

设置定时更新，执行 crontab -e，增加如下指令：

  1. 00 08 * * * /home/clamav/bin/freshclam --quiet

表示每天的 08:00 自动升级病毒库。

Posted by Wei Geng in TechniquE Comments: (0) Trackbacks: (0)
Defined tags for this entry: , , , ,
Related entries by tags:
WAMP crashes easily those days: Some notes on PHP configuration
在 Slackware 下全部从源代码安装邮件服务器
Install LILO to MBR on CCISS device
在 Slackware 下全部从源代码安装邮件服务器：五、启动并且测试服务
在 Slackware 下全部从源代码安装邮件服务器：四、Webmail 和管理端
Random Entry: 冬至，七七，平安夜，圣诞节
< 在 Slackware 下全部从源代码安装邮件服务器：二、软件包安装 | 在 Slackware 下全部从源代码安装邮件服务器：四、Webmail 和管理端 >

Trackbacks
Trackback specific URI for this entry

No Trackbacks

Comments
Display comments as (Linear | Threaded)

No comments


Add Comment

You can use [geshi lang=lang_name [,ln={y|n}]][/geshi] tags to embed source code snippets.
Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA

Gravatar/Pavatar author images supported.