Mailserver-Best-Practice: Unterschied zwischen den Versionen
Zur Navigation springen
Zur Suche springen
Thomas (Diskussion | Beiträge) (→Config) |
Thomas (Diskussion | Beiträge) (→Config) |
||
Zeile 52: | Zeile 52: | ||
smtpd_sasl_path = smtpd | smtpd_sasl_path = smtpd | ||
broken_sasl_auth_clients = yes | broken_sasl_auth_clients = yes | ||
+ | smtpd_recipient_restrictions = permit_sasl_authenticated,permit_mynetworks,reject_unauth_destination | ||
==Test== | ==Test== | ||
*testsaslauthd -f /var/spool/postfix/var/run/saslauthd/mux -s smtp -u leroy -p suxer | *testsaslauthd -f /var/spool/postfix/var/run/saslauthd/mux -s smtp -u leroy -p suxer |
Version vom 7. Februar 2018, 11:18 Uhr
Prepare Maildirs
- mkdir -p /etc/skel/Maildir/new
- mkdir -p /etc/skel/Maildir/cur
- mkdir -p /etc/skel/Maildir/tmp
Install Postfix
- apt-get install postfix
Install Procmail
- apt-get install procmail
Postfix Service Handling
- systemctl start postfix.service
- systemctl restart postfix.service
- systemctl stop postfix.service
- systemctl status postfix.service
Config of Postfix
- /etc/postfix/master.cf
- /etc/postfix/main.cf
SSL Verschlüsselung
Install letsencrypt
- sudo apt install letsencrypt
- letsencrypt certonly --standalone -d yyy.tuxmen.de
master.cf changed
smtps inet n - y - - smtpd -o smtpd_tls_wrappermode=yes -o smtpd_sasl_auth_enable=yes -o smtpd_relay_restrictions=permit_sasl_authenticated,reject
main.cf
smtpd_tls_cert_file = /etc/letsencrypt/live/yyy.tuxmen.de/fullchain.pem smtpd_tls_key_file = /etc/letsencrypt/live/yyy.tuxmen.de/privkey.pem smtpd_tls_security_level = may smtpd_tls_received_header = yes smtpd_recipient_restrictions = permit_sasl_authenticated,permit_mynetworks,reject_unauth_destination
Sasl2
Install
- apt-get install sasl2-bin
Config
- /etc/postfix/sasl/smtpd.conf
pwcheck_method: saslauthd mech_list: PLAIN LOGIN saslauthd_path: /var/run/saslauthd/mux
- /etc/default/saslauthd
START=yes OPTIONS="-c -m /var/spool/postfix/var/run/saslauthd"
- /etc/postfix/main.cf
smtpd_sasl_auth_enable = yes smtpd_sasl_path = smtpd broken_sasl_auth_clients = yes smtpd_recipient_restrictions = permit_sasl_authenticated,permit_mynetworks,reject_unauth_destination
Test
- testsaslauthd -f /var/spool/postfix/var/run/saslauthd/mux -s smtp -u leroy -p suxer