环境:Centos 6.4
关闭防火墙和selinux
1
2
3
| [iyunv@localhost ~]# postconf mail_version
mail_version = 2.6.6
[iyunv@localhost ~]#
|
1
2
3
4
5
6
7
8
9
10
11
12
| [iyunv@localhost ~]# yum -y install postfix dovecot cyrus* openssl openssl-devel
[iyunv@localhost ~]# sed -i '/host\.domain\.tld/imyhostname \= mail\.com' /etc/postfix/main.cf
[iyunv@localhost ~]# sed -i '/^#mydomain \=/imydomain \= mail\.com' /etc/postfix/main.cf
[iyunv@localhost ~]# sed -i '/myorigin \= \$mydomain/s/^#//g' /etc/postfix/main.cf
[iyunv@localhost ~]# sed -i '/inet_interfaces \= all/s/^#//g' /etc/postfix/main.cf
[iyunv@localhost ~]# grep 'inet_protocols = all' /etc/postfix/main.cf
inet_protocols = all
[iyunv@localhost ~]# sed -i '/inet\_interfaces \= localhost/s/inet\_interfaces/#inet\_interfaces/g' /etc/postfix/main.cf
[iyunv@localhost ~]# sed -i '/^mydestination/s/localhost/localhost\, \$mydomain/g' /etc/postfix/main.cf
[iyunv@localhost ~]# sed -i '/127\.0\.0\.0/imynetworks \= 0\.0\.0\.0\/0' /etc/postfix/main.cf
[iyunv@localhost ~]# sed -i '/^#mynetworks_style = subnet/s/^#//g' /etc/postfix/main.cf
[iyunv@localhost ~]# sed -i '/^#relay_domains/irelay_domains \= \$mydomain' /etc/postfix/main.cf
|
让其支持smtps
生成证书:
1
2
3
4
5
6
7
8
9
10
11
12
13
14
| [iyunv@localhost ~]# cd /etc/pki/tls/certs/
[iyunv@localhost certs]# make postfix.pem
[iyunv@localhost ~]# echo '#smtpd-tls' >> /etc/postfix/main.cf
[iyunv@localhost ~]# echo 'smtpd_tls_cert_file = /etc/pki/tls/certs/postfix.pem' >> /etc/postfix/main.cf
[iyunv@localhost ~]# echo 'smtpd_tls_key_file = /etc/pki/tls/certs/postfix.pem' >> /etc/postfix/main.cf
[iyunv@localhost ~]# echo 'smtpd_use_tls = yes' >> /etc/postfix/main.cf
[iyunv@localhost ~]# echo 'tls_random_source = dev:/dev/urandom' >> /etc/postfix/main.cf
[iyunv@localhost ~]# echo 'tls_daemon_random_source = dev:/dev/urandom' >> /etc/postfix/main.cf
[iyunv@localhost ~]# echo 'message_size_limit = 10240000' >> /etc/postfix/main.cf //限制邮件大小
[iyunv@localhost ~]# sed -i '/smtps/s/^#//g' /etc/postfix/master.cf
[iyunv@localhost ~]# sed -i '/smtpd\_tls\_wrappermode/s/^#//g' /etc/postfix/master.cf
[iyunv@localhost ~]# sed -i "19s/^#//g" /etc/postfix/master.cf
[iyunv@localhost ~]# echo -e 'group:\tyfshare,bob' >> /etc/aliases
[iyunv@localhost ~]# newaliases
|
1
2
3
4
5
6
7
8
| [iyunv@localhost ~]# /etc/init.d/postfix restart
[iyunv@localhost ~]# chkconfig postfix on
[iyunv@localhost ~]# telnet localhost 25
Trying ::1...
Connected to localhost.
Escape character is '^]'.
220 mail.com ESMTP Postfix
···
|
配置DOVECOT:
1
2
3
4
5
6
7
8
| [iyunv@localhost ~]# sed -i '/protocols/s/^#//g' /etc/dovecot/dovecot.conf
[iyunv@localhost ~]# sed -i '/login_trusted_networks/s/^#//g' /etc/dovecot/dovecot.conf
[iyunv@localhost ~]# sed -i '/login_trusted_networks/s/\=/\= 0\.0\.0\.0\/0/g' /etc/dovecot/dovecot.conf
[iyunv@localhost ~]# sed -i '/INBOX\=\/var\/mail/s/^#//g' /etc/dovecot/conf.d/10-mail.conf
[iyunv@localhost ~]# sed -i '/INBOX\=\/var\/mail/s/^[ \t]*//g' /etc/dovecot/conf.d/10-mail.conf
[iyunv@localhost ~]# sed -i '/#ssl = yes/s/^#//g' /etc/dovecot/conf.d/10-ssl.conf
[iyunv@localhost ~]# /etc/init.d/dovecot restart
[iyunv@localhost ~]# chkconfig dovecot on
|
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
| [iyunv@localhost ~]# netstat -tunlp|grep 110
tcp 0 0 0.0.0.0:110 0.0.0.0:* LISTEN 6272/dovecot
tcp 0 0 :::110 :::* LISTEN 6272/dovecot
[iyunv@localhost ~]# netstat -tunlp|grep 995
tcp 0 0 0.0.0.0:995 0.0.0.0:* LISTEN 6272/dovecot
tcp 0 0 :::995 :::* LISTEN 6272/dovecot
[iyunv@localhost ~]# netstat -tunlp|grep 25
tcp 0 0 0.0.0.0:25 0.0.0.0:* LISTEN 6519/master
tcp 0 0 :::25 :::* LISTEN 6519/master
[iyunv@localhost ~]# netstat -tunlp|grep 465
tcp 0 0 0.0.0.0:465 0.0.0.0:* LISTEN 6519/master
tcp 0 0 :::465 :::* LISTEN 6519/master
[iyunv@localhost ~]# netstat -tunlp|grep 143
tcp 0 0 0.0.0.0:143 0.0.0.0:* LISTEN 6272/dovecot
tcp 0 0 :::143 :::* LISTEN 6272/dovecot
[iyunv@localhost ~]# netstat -tunlp|grep 993
tcp 0 0 0.0.0.0:993 0.0.0.0:* LISTEN 6272/dovecot
tcp 0 0 :::993 :::* LISTEN 6272/dovecot
[iyunv@localhost ~]#
|
1
2
3
4
5
| [iyunv@localhost ~]# tail -n 5 /etc/skel/.bashrc |head -n 3
if [ ! -d ~/mail/.imap/INBOX ];then
mkdir -p ~/mail/.imap/INBOX
fi
[iyunv@localhost ~]#
|
1
2
3
4
5
6
7
8
9
| [iyunv@localhost ~]# useradd yfshare
[iyunv@localhost ~]# useradd bob
[iyunv@localhost ~]# useradd tom
[iyunv@localhost ~]# echo '123456' |passwd yfshare --stdin
[iyunv@localhost ~]# echo '123456' |passwd bob --stdin
[iyunv@localhost ~]# echo '123456' |passwd tom --stdin
[iyunv@localhost ~]# mkdir -p /home/yfshare/mail/.imap/INBOX && chown yfshare:yfshare /home/yfshare/mail -R
[iyunv@localhost ~]# mkdir -p /home/bob/mail/.imap/INBOX && chown bob:bob /home/bob/mail -R
[iyunv@localhost ~]# mkdir -p /home/tom/mail/.imap/INBOX && chown tom:tom /home/tom/mail -R
|
配置saslauth:
1
2
3
4
5
6
7
8
9
10
11
12
13
| [iyunv@localhost ~]# sed -i '/MECH\=/s/pam/shadow/' /etc/sysconfig/saslauthd
[iyunv@localhost ~]# /etc/init.d/saslauthd restart
[iyunv@localhost ~]# chkconfig saslauthd on
[iyunv@localhost ~]# saslauthd -v
saslauthd 2.1.23
authentication mechanisms: getpwent kerberos5 pam rimap shadow ldap
[iyunv@localhost ~]# testsaslauthd -u yfshare -p 123456
0: OK "Success."
[iyunv@localhost ~]# testsaslauthd -u bob -p 123456
0: OK "Success."
[iyunv@localhost ~]# testsaslauthd -u tom -p 123456
0: OK "Success."
[iyunv@localhost ~]#
|
注:selinux会影响testsaslauthd使用shadow认证,如果不想关闭selinux,执行:
1
| [iyunv@localhost ~]# setsebool -P allow_saslauthd_read_shadow 1
|
pop3
| 110
| pop3s
| 995
| smtp
| 25
| smtps
| 465
| imap
| 143
| imaps | 993
|
Postfix当bob用户给yfshare发送邮件并抄送给group,且yfshare在group里,这时yfshare用户会收到两封一模一样的邮件,这是Postfix的BUG
SSL加密发送邮件:(IMAPS+SMTPS)
SSL加密发送邮件:(POP3S+SMTPS)
1
2
3
4
5
6
7
8
9
10
| [iyunv@localhost ~]# ll /home/yfshare/mail/.imap/INBOX/
total 20
-rw-rw----. 1 yfshare mail 16384 Sep 18 17:34 dovecot.index.cache
-rw-rw----. 1 yfshare mail 1668 Sep 18 17:34 dovecot.index.log
[iyunv@localhost ~]# ll /var/mail/
total 16
-rw-rw----. 1 bob mail 7071 Sep 18 17:34 bob
-rw-rw----. 1 tom mail 0 Sep 18 17:10 tom
-rw-rw----. 1 yfshare mail 6955 Sep 18 17:34 yfshare
[iyunv@localhost ~]#
|
Sendmail+dovecot+saslauth+rainloop
|