postfix邮件服务器搭建

来源：互联网发布：淘宝大码女装编辑：程序博客网时间：2024/04/30 07:47

Postfix邮件服务器搭建方案

操作系统：Linux Red Hat Enterprise Linux Serverrelease 6.3

IP:10.0.0.20

主机名：www.szgyzb.com

目标：1.实现局域网内部同域名之间互相收发；

2.实现往外部Internet邮箱发送邮件；

3.实现对部分帐号邮件外发管控；

一、需要安装的软件清单：

名称

版本

说明

Postfix

postfix-2.7.0.tar.gz

MTA

Mysql

mysql-5.5.9.tar.gz

存储虚拟用户信息的数据库

Courier-authlib

courier-authlib-0.62.4.tar.bz2

搭配SASL做验证

cyrus-sasl

cyrus-sasl-2.1.22.tar.gz

认证包

courier-imap

courier-imap-4.5.0.tar.bz2

结合postfix提供imap和pop3服务

perl

perl-5.10.1-127.el6.x86_64（rpm）

解释器

pcre

pcre-8.34.tar.gz

安装imap需要—perl兼容正则表达式

httpd

httpd-2.2.29.tar.gz

Web服务器提供虚拟机服务

Extmail

extman-0.2.5.tar.gz

邮件WebMail

Extmail

extmail-1.1.0.tar.gz

邮件后台管理包

DBD

DBD-mysql-3.0002_3.tar.gz

登录邮件服务器后台报错MySQL.pm line 13. BEGIN failed--compilation aborted需要安装这两个依赖工具

DBI

DBI-1.607.tar.gz

Clamav

杀毒软件

amavisd-new

扫描邮件病毒

Spamassassin

防垃圾邮件工具

maildrop

邮件投递

创建用户和组清单：

用户

组

简介

备注

mysql

mysql的用户和组

安装mysql时候创建

vmail

Postfix虚拟账户所使
用的用户和组

uid: 1003
gid: 1003

postfix

postfix主程序使用的用户和组

uid: 1000
gid: 1000

postdrop

Postfix专用组

该组不能包含任何成员，包括前面的postfix虚拟帐号也不例外。
gid:1002

clamav

杀毒软件用户

amavis

邮件扫描用户

#groupadd -g 1001vmail

#useradd -g 1001 -u1001 -s /sbin/nologin -M vmail

#groupadd -g 1002postdrop

#groupadd -g 1000postfix

#useradd -g 1000 -u1000 -s /sbin/nologin -M postfix

#useradd clamav

#useradd amavis

卸载系统自带的sendmail和sasl

#rpm -qa | grepsendmail

sendmail-8.13.8-2.el5

#service sendmailstop

#rpm -e --nodepssendmail

#rpm -qa |grep sasl

cyrus-sasl-lib-2.1.22-4

cyrus-sasl-devel-2.1.22-4

cyrus-sasl-2.1.22-4

cyrus-sasl-plain-2.1.22-4

#rpm -e --nodepscyrus-sasl-lib cyrus-sasl-devel cyrus-sasl cyrus-sasl-plain

创建虚拟用户的邮件存放路径

#mkdir -p/var/mailbox

#chown vmail:vmail/var/mailbox

#chmod 700/var/mailbox

源码包存放及解压路径
/mail
Mysql和Apache的安装
省略，参考SVN和wiki搭建文档中
安装配置courier-authlib
重点在Configure和make这两步，容易出错，重点说明：
./configure --with-mailuser=vmail --with-mailgroup=vmail--with-mysql-libs=/usr/local/mysql/lib--with-mysql-include=/usr/local/mysql/include/mysql --prefix=/usr/local/authlib--without-stdheaderdir
configure报错
报错1：configure: error: Cannot find either the gdbm or the dblibrary.
处理1：原因是gdbm-devel的版本不对，开始用的是32位的工具gdbm-devel-1.8.0-24.i386.rpm，一直报错，重新下载一个64位的gdbm-devel工具 gdbm-devel-1.8.0-26.2.1.el5_6.1.x86_64.rpm即可
下载地址是http://rpm.pbone.net/index.php3?stat=3&limit=5&srodzaj=3&dl=40&search=gdbm-devel
报错2：make时候libgdbm.a: could not read symbols: Bad value
处理2：
1.CFLAGS="-O3 -fPIC" ./configure--with-mailuser=vmail --with-mailgroup=vmail--with-mysql-libs=/usr/local/mysql/lib--with-mysql-include=/usr/local/mysql/include/mysql --prefix=/usr/local/authlib--without-stdheaderdir

2.gdbm-1.8.3.tar.gz在configure时候也加上CFLAGS="-O3 -fPIC"

3.备份/usr/lib64/libgdbm.a文件 cp /usr/local/gdbm/lib/libgdbm.a/usr/lib64/、cp /usr/local/gdbm/lib/libgdbm.a /usr/lib

make通过

4.mysql的lib和include路径的指向需要注意，照搬网上的会容易出错，要根据自己源码安装的路径来

安装完成以后需要修改配置vim /usr/local/authlib/etc/authlib/authdaemonrc

authmodulelist="authmysql"

authmodulelistorig="authmysql"

#vim/usr/local/authlib/etc/authlib/authmysqlrc

配置如下：

##VERSION: $Id: authmysqlrc,v 1.202007/10/07 02:50:45 mrsam Exp $

# distribution information.

# Do not alter lines that begin with ##,they are used when upgrading

# this configuration.

# authmysqlrc created from authmysqlrc.distby sysconftool

# DO NOT INSTALL THIS FILE with world readpermissions. This file

# might contain the MySQL admin password!

# Each line in this file must follow thefollowing format:

# field[spaces|tabs]value

# That is, the name of the field, followedby spaces or tabs, followed by

# field value. Trailing spaces are prohibited.

##NAME: LOCATION:0

# The server name, userid, and password usedto log in.

MYSQL_SERVERwww.szgyzb.com //数据库服务器主机名

MYSQL_USERNAME extmail //数据库登录用户名

MYSQL_PASSWORD 123456 //数据库登录密码

##NAME: SSLINFO:0

# The SSL information.

# To use SSL-encrypted connections, definethe following variables (available

# in MySQL 4.0, or higher):

# MYSQL_SSL_KEY /path/to/file

# MYSQL_SSL_CERT /path/to/file

# MYSQL_SSL_CACERT /path/to/file

# MYSQL_SSL_CAPATH /path/to/file

# MYSQL_SSL_CIPHERS ALL:!DES

##NAME: MYSQL_SOCKET:0

# MYSQL_SOCKET can be used with MySQLversion 3.22 or later, it specifies the

# filesystem pipe used for the connection

# MYSQL_SOCKET /var/mysql/mysql.sock

MYSQL_SOCKET "/tmp/mysql.sock"

##NAME: MYSQL_PORT:0

# MYSQL_PORT can be used with MySQL version3.22 or later to specify a port to

# connect to.

#MYSQL_PORT 0

MYSQL_PORT 3306 //数据库端口

##NAME: MYSQL_OPT:0

# Leave MYSQL_OPT as 0, unless you know whatyou're doing.

MYSQL_OPT 0

##NAME: MYSQL_DATABASE:0

# The name of the MySQL database we willopen:

#MYSQL_DATABASE mysql

MYSQL_DATABASE extmail //数据库名称

#NAME: MYSQL_CHARACTER_SET:0

# This is optional. MYSQL_CHARACTER_SETinstalls a character set. This option

# can be used with MySQL version 4.1 or later. MySQL supports70+ collations

# for 30+ character sets. See MySQLdocumentations for more detalis.

# MYSQL_CHARACTER_SET latin1

##NAME: MYSQL_USER_TABLE:0

# The name of the table containing your userdata. See README.authmysqlrc

# for the required fields in this table.

#MYSQL_USER_TABLE passwd

MYSQL_USER_TABLE mailbox //虚拟帐号用户信息表

##NAME: MYSQL_CRYPT_PWFIELD:0

# Either MYSQL_CRYPT_PWFIELD orMYSQL_CLEAR_PWFIELD must be defined. Both

# are OK too. crypted passwords go intoMYSQL_CRYPT_PWFIELD, cleartext

# passwords go intoMYSQL_CLEAR_PWFIELD. Cleartext passwordsallow

# CRAM-MD5 authentication to be implemented.

#MYSQL_CRYPT_PWFIELD crypt

MYSQL_CRYPT_PWFIELD password

##NAME: MYSQL_CLEAR_PWFIELD:0

# MYSQL_CLEAR_PWFIELD clear

##NAME: MYSQL_DEFAULT_DOMAIN:0

# If DEFAULT_DOMAIN is defined, and someonetries to log in as 'user',

# we will look up 'user@DEFAULT_DOMAIN'instead.

# DEFAULT_DOMAIN example.com

DEFAULT_DOMAIN gyzb.com

##NAME: MYSQL_UID_FIELD:0

# Other fields in the mysql table:

# MYSQL_UID_FIELD - contains the numericaluserid of the account

MYSQL_UID_FIELD '1003'

##NAME: MYSQL_GID_FIELD:0

# Numerical groupid of the account

MYSQL_GID_FIELD '1003' //虚拟帐号用户名ID

##NAME: MYSQL_LOGIN_FIELD:0

# The login id, default is id. Basically the query is:

# SELECT MYSQL_UID_FIELD, MYSQL_GID_FIELD, ... WHERE id='loginid'

MYSQL_LOGIN_FIELD username

##NAME: MYSQL_HOME_FIELD:0

MYSQL_HOME_FIELD "/var/mailbox" //注意有双引号

##NAME: MYSQL_NAME_FIELD:0

# The user's name (optional)

MYSQL_NAME_FIELD name

##NAME: MYSQL_MAILDIR_FIELD:0

# This is an optional field, and can be usedto specify an arbitrary

# location of the maildir for the account,which normally defaults to

# $HOME/Maildir (where $HOME is read fromMYSQL_HOME_FIELD).

# You still need to provide aMYSQL_HOME_FIELD, even if you uncomment this

# out.

MYSQL_MAILDIR_FIELD maildir

##NAME: MYSQL_DEFAULTDELIVERY:0

# Courier mail server only: optional fieldspecifies custom mail delivery

# instructions for this account (if defined)-- essentially overrides

# DEFAULTDELIVERY from${sysconfdir}/courierd

# MYSQL_DEFAULTDELIVERY defaultdelivery

##NAME: MYSQL_QUOTA_FIELD:0

# Define MYSQL_QUOTA_FIELD to be the name ofthe field that can optionally

# specify a maildir quota. See README.maildirquota for more information

MYSQL_QUOTA_FIELD (quota,'S')

##NAME: MYSQL_AUXOPTIONS:0

# Auxiliary options. The MYSQL_AUXOPTIONS field should be a charfield that

# contains a single string consisting ofcomma-separated "ATTRIBUTE=NAME"

# pairs. These names are additional attributes that define various per-account

# "options", as given in INSTALL'sdescription of the "Account OPTIONS"

# setting.

# MYSQL_AUXOPTIONS_FIELD auxoptions

# You might want to try something like this,if you'd like to use a bunch

# of individual fields, instead of a singletext blob:

# MYSQL_AUXOPTIONS_FIELD CONCAT("disableimap=",disableimap,",disablepop3=",disablepop3,",disablewebmail=",disablewebmail,",sharedgroup=",sharedgroup)

# This will let you define fields called"disableimap", etc, with the end result

# being something that the OPTIONS parserunderstands.

##NAME: MYSQL_WHERE_CLAUSE:0

# This is optional, MYSQL_WHERE_CLAUSE canbe basically set to an arbitrary

# fixed string that is appended to the WHEREclause of our query

# MYSQL_WHERE_CLAUSE server='mailhost.example.com'

MYSQL_WHERE_CLAUSE active='1'

##NAME: MYSQL_SELECT_CLAUSE:0

# (EXPERIMENTAL)

# This is optional, MYSQL_SELECT_CLAUSE canbe set when you have a database,

# which is structuraly different fromproposed. The fixed string will

# be used to do a SELECT operation ondatabase, which should return fields

# in order specified bellow:

# username, cryptpw, clearpw, uid, gid,home, maildir, quota, fullname, options

# The username field should include thedomain (see example below).

# Enabling this option causes ignorance ofany other field-related

# options, excluding default domain.

# There are two variables, which you canuse. Substitution will be made

# for them, so you can put entered username(local part) and domain name

# in the right place of your query. Thesevariables are:

# $(local_part), $(domain),$(service)

# If a $(domain) is empty (not given by theremote user) the default domain

# name is used in its place.

# $(service) will expand out to the servicebeing authenticated: imap, imaps,

# pop3 or pop3s. Courier mail server only: service will alsoexpand out to

# "courier", when searching forlocal mail account's location. In thiscase,

# if the "maildir" field is notempty it will be used in place of

# DEFAULTDELIVERY. Courier mail server will also use esmtp whendoing

# authenticated ESMTP.

# This example is a little bit modifiedadaptation of vmail-sql

# database scheme:

# MYSQL_SELECT_CLAUSE SELECT CONCAT(popbox.local_part, '@',popbox.domain_name), \

# CONCAT('{MD5}',popbox.password_hash), \

# popbox.clearpw, \

# domain.uid, \

# domain.gid, \

# CONCAT(domain.path,'/', popbox.mbox_name), \

# '', \

# domain.quota, \

# '', \

# CONCAT("disableimap=",disableimap,",disablepop3=", \

# disablepop3,",disablewebmail=",disablewebmail, \

# ",sharedgroup=",sharedgroup) \

# FROMpopbox, domain \

# WHEREpopbox.local_part = '$(local_part)' \

# ANDpopbox.domain_name = '$(domain)' \

# ANDpopbox.domain_name = domain.domain_name

##NAME: MYSQL_ENUMERATE_CLAUSE:1

# {EXPERIMENTAL}

# Optional custom SQL query used toenumerate accounts for authenumerate,

# in order to compile a list of accounts forshared folders. The query

# should return the following fields: name,uid, gid, homedir, maildir, options

# Example:

# MYSQL_ENUMERATE_CLAUSE SELECT CONCAT(popbox.local_part, '@',popbox.domain_name), \

# domain.uid, \

# domain.gid, \

# CONCAT(domain.path,'/', popbox.mbox_name), \

# '', \

# CONCAT('sharedgroup=',sharedgroup) \

# FROMpopbox, domain \

# WHEREpopbox.local_part = '$(local_part)' \

# ANDpopbox.domain_name = '$(domain)' \

# ANDpopbox.domain_name = domain.domain_name

##NAME: MYSQL_CHPASS_CLAUSE:0

# (EXPERIMENTAL)

# This is optional, MYSQL_CHPASS_CLAUSE canbe set when you have a database,

# which is structuraly different fromproposed. The fixed string will

# be used to do an UPDATE operation ondatabase. In other words, it is

# used, when changing password.

# There are four variables, which you canuse. Substitution will be made

# for them, so you can put entered username(local part) and domain name

# in the right place of your query. Therevariables are:

# $(local_part), $(domain) , $(newpass) , $(newpass_crypt)

# If a $(domain) is empty (not given by theremote user) the default domain

# name is used in its place.

# $(newpass) contains plain password

# $(newpass_crypt) contains its crypted form

# MYSQL_CHPASS_CLAUSE UPDATE popbox \

# SET clearpw='$(newpass)', \

# password_hash='$(newpass_crypt)' \

# WHERE local_part='$(local_part)' \

# AND domain_name='$(domain)'

切换到源码目录，启动authlib，并设置开机自启动

#cp courier-authlib.sysvinit/etc/init.d/courier-authlib

#chmod 755 /etc/init.d/courier-authlib

#chkconfig --add courier-authlib

#chkconfig courier-authlib on

#servicecourier-authlib start

查看是否启动：

[root@www init.d]# ps -aux|grep authlib

Warning: bad syntax, perhaps a bogus '-'?See /usr/share/doc/procps-3.2.8/FAQ

root 1291 0.0 0.0 4060 508 ? S Nov12 0:00 /usr/local/authlib/sbin/courierlogger-pid=/usr/local/authlib/var/spool/authdaemon/pid -start/usr/local/authlib/libexec/courier-authlib/authdaemond

root 1292 0.0 0.1 36316 1680 ? S Nov12 0:00/usr/local/authlib/libexec/courier-authlib/authdaemond

root 1293 0.0 0.1 114328 1772 ? S Nov12 0:00 /usr/local/authlib/libexec/courier-authlib/authdaemond

root 1294 0.0 0.1 114328 1772 ? S Nov12 0:00 /usr/local/authlib/libexec/courier-authlib/authdaemond

root 1295 0.0 0.1 114328 1772 ? S Nov12 0:00 /usr/local/authlib/libexec/courier-authlib/authdaemond

root 1296 0.0 0.1 114328 1772 ? S Nov12 0:00 /usr/local/authlib/libexec/courier-authlib/authdaemond

root 1297 0.0 0.1 114328 1772 ? S Nov12 0:00/usr/local/authlib/libexec/courier-authlib/authdaemond

查到上面的进程，表明authlib启动成功

修改authdaemon的socket目录权限如果该目录权限不正确修改，maildrop及postfix等将无法正确获取用户的信息及密码认证：

#chmod 755/usr/local/authlib/var/spool/authdaemon

#ll -d/usr/local/authlib/var/spool/authdaemon

drwxr-xr-x

系统集成

#ln -s/usr/local/courier-authlib/lib/courier-authlib/* /usr/lib

#ldconfig –v

安装配置Cyrus-SASL2

重点在Configure这步容易出错，重点说明：

步骤1：./configure --prefix=/usr/local/sasl2 --disable-gssapi --disable-anon --disable-sample --disable-digest --enable-plain --enable-login--enable-sql --with-mysql=/usr/local/mysql --with-mysql-includes=/usr/local/mysql/include/mysql --with-mysql-libs=/usr/local/mysql/lib--with-authdaemond=/usr/local/authlib/var/spool/authdaemon/socket（第一次用这种验证方式，STMP测试无法通过）

./configure --prefix=/usr/local/sasl2 --disable-anon--disable-gssapi --disable-sample --disable-digest --enable-plain --enable-login --enable-cram--enable-digest --enable-sql --with-mysql=/usr/local/mysql --with-mysql-includes=/usr/local/mysql/include/mysql--with-mysql-libs=/usr/local/mysql/lib--with-saslauthd=/var/run/saslauthd（重新编译安装改为saslauthd验证，SMTP测试通过）

make报错

报错1：error: mysql.h: No such file or directory

处理1.这是因为在编译时需要 MySQL 的头的文件。而它按默认搜索找不到头文件的位置，所以才出现这个问题。通过软连接把MySQL头文件对应到/usr/local/include/下就好

比如你的MySQL安装文件位于/usr/local/mysql，那么就执行以下命令：

# ln -s/usr/local/mysql/include/* /usr/local/include/

报错2：error: des.h: No such file or directory

处理2：查到openssl安装目录下面的des.sh路径，编译cyrus时候会去默认的路径/usr/local/include下面找des.sh文件，但是实际des.sh是在/usr/local/ssl/include/openssl/下面的，故做软连接处理，确保可以找到

ln -s /usr/local/ssl/include/openssl/*/usr/local/include/

系统集成

#ln -s /usr/local/lib/sasl2/ /usr/lib/

#ldconfig -v | grep sasl

Postfix的SMTP认证需要透过Cyrus-SASL，连接到authdaemon获取认证信息，这里我们需要配置smtp的验证，后续的还需要修改postfix的main.cf文件这里先不错说明，等到了配置postfix的时候再介绍如何配置postfix的smtp认证的配置

vim /usr/local/sasl2/lib/sasl2/smtpd.conf

#pwcheck_method:saslauthd (原来采用此，SMTP验证测试老是不通过，改为下面的方式才通过)

pwcheck_method:authdaemond

mech_list: plain login

log_level: 3

authdaemond_path:/usr/local/authlib/var/spool/authdaemon/socket //安装authlib时候socket的路径

安装配置Postfix
主要是编译步骤采用第二种，前提是要装好BerkeleyDB
make -f Makefile.init makefiles 'CCARGS=-DHAS_MYSQL-I/usr/local/mysql/include/mysql -DUSE_SASL_AUTH -DUSE_CYRUS_SASL-I/usr/local/sasl2/include/sasl' 'AUXLIBS=-L/usr/local/mysql/lib -lmysqlclient-lz -lm -L/usr/local/lib -lsasl2'
make -f Makefile.init makefiles 'CCARGS=-DHAS_MYSQL-I/usr/local/mysql/include/mysql -DUSE_SASL_AUTH -DUSE_CYRUS_SASL-I/usr/local/sasl2/include/sasl -I/usr/local/BerkeleyDB/include -DUSE_TLS -I/usr/local/ssl/include/openssl ''AUXLIBS=-L/usr/local/mysql/lib -lmysqlclient -lz -lm -L/usr/local/sasl2/lib-lsasl2 -L/usr/local/BerkeleyDB/lib -L/usr/local/ssl/lib -lssl -lcrypto'
报错1：找不到libmysqlclient.so
处理1：ln-s /usr/local/mysql/lib/libmysqlclient.so /usr/lib/libmysqlclient.so和ln -s /usr/local/mysql/lib/libmysqlclient.so/usr/lib64/libmysqlclient.so
类似的问题都可以这样处理
报错2：errorwhile loading shared libraries: libmysqlclient.so.16: cannot open shared objectfile: No such file

编译完成后程序会自动进入交互状态，等待用户的输入，一般情况下，一路回车即可完成所有的安装。生成别名二进制文件

#/usr/bin/newaliases

这条命令的作用就是将/etc/alias文件利用工具转为postfix可以读取的二进制文件，存为/etc/postfix/ aliases

验证安装的Postfix是否支持SASL、MySQL

#postconf -a

cyrus

dovecot

#postconf -m

btree

cidr

environ

hash

mysql

nis

proxy

regexp

static

unix

注意：

（1）如果没有显示出cyrus项说明你的postfix不支持SASL，需要检查但前系统是否将libsasl库加入到系统中，利用ldconfig -v | grep 查看。如果没有libsasl2.so.2 -> libsasl2.so.2.0.23需要将/usr/local/lib目录添加到/etc/ld.so.conf文件中然后再执行ldconfig命令使其生效。这在前面的安装前准备工作中已经有介绍。

（2）如果没有mysql项说明postfix不支持mysql协议的查询，肯定是编译时mysql的目录指定错误，重新查看mysql的lib目录和include目录的确切位置后重新编译安装postfix

Postfix配置

Postfix的配置我们放到最后等courier-imap、maildrop、extmail安装完成之后做统一的配置。

创建虚拟用户验证配置文件的目录由于我们的虚拟用户是结合mysql进行验证的，

postfix的配置文件中可以针对虚拟用户进行配置的定义，该目录就是存储mysql验证的配置文件。

后文extman配置时会介绍。这里先创建相应目录。

#mkdir -p /etc/postfix/mysql

创建postfix启动daemon控制脚本

#vim /etc/init.d/postfix

#!/bin/sh

# postfix Postfix Mail Transfer Agent

# chkconfig: 2345 80 30

# description: Postfix is a Mail TransportAgent, which is the program \

# that moves mail from one machine toanother.

# processname: master

# pidfile: /var/spool/postfix/pid/master.pid

# config: /etc/postfix/main.cf

# config: /etc/postfix/master.cf

# $Revision: 2.4 $

# Source function library.

. /etc/rc.d/init.d/functions

# Source networking configuration.

. /etc/sysconfig/network

# Check that networking is up.

[ ${NETWORKING} = "no" ]&& exit 0

[ -x /usr/sbin/postfix ] || exit 0

[ -d /etc/postfix ] || exit 0

[ -d /var/spool/postfix ] || exit 0

RETVAL=0

start() {

# Start daemons.

echo -n "Starting postfix: "

/usr/sbin/postfix start 2>/dev/null1>&2 && success || failure

RETVAL=$?

[ $RETVAL -eq 0 ] && touch/var/lock/subsys/postfix

echo

return $RETVAL

}

stop() {

# Stop daemons.

echo -n "Shutting down postfix:"

/usr/sbin/postfix stop 2>/dev/null1>&2 && success || failure

RETVAL=$?

[ $RETVAL -eq 0 ] && rm -f/var/lock/subsys/postfix

echo

return $RETVAL

}

reload() {

echo -n "Reloading postfix: "

/usr/sbin/postfix reload 2>/dev/null1>&2 && success || failure

RETVAL=$?

echo

return $RETVAL

}

restart() {

stop

start

}

abort() {

/usr/sbin/postfix abort 2>/dev/null1>&2 && success || failure

return $?

}

flush() {

/usr/sbin/postfix flush 2>/dev/null1>&2 && success || failure

return $?

}

check() {

/usr/sbin/postfix check 2>/dev/null1>&2 && success || failure

return $?

}

# See how we were called.

case "$1" in

start)

start

;;

stop)

stop

;;

restart)

restart

;;

reload)

reload

;;

abort)

abort

;;

flush)

flush

;;

check)

check

;;

status)

status master

;;

condrestart)

# don't use /var/lock/subsys/postfix, checkfor postfix running directly

daemon_directory=$(postconf -hdaemon_directory)

$daemon_directory/master -t 2>/dev/null&& : || restart

;;

echo "Usage: postfix

{start|stop|restart|reload|abort|flush|check|status|condrestart}"

exit 1

esac

exit $?

添加服务，指定自动启动

#chmod +x /etc/init.d/postfix

#chkconfig --add postfix

#chkconfig postfix on

安装配置courier-imap
./configure --prefix=/usr/local/courier-imap--with-redhat --disable-root-check --enable-unicode=utf-8,iso-8859-1,gb2312,gbk,gb18030--with-trashquota --with-dirsync --with-mysql-libs=/usr/local/mysql/lib--with-mysql-includes=/usr/local/mysql/include/mysql --with-authmysql--with-authmysql=yes CPPFLAGS='-I/usr/local/authlib/include'LDFLAGS='-L/usr/local/authlib/lib/courier-authlib' COURIERAUTHCONFIG='/usr/local/courier-authlib/bin/courierauthconfig'
报错1：configure: error: courierauthconfig not found
处理1：ln -s /usr/local/authlib/bin/courierauthconfig/usr/bin/courierauthconfig
其它报错处理：换4.5版本解决问题
配置
#vim/usr/local/courier-imap/etc/imapd
跳到文件最后，找到IMAPDSTART=NO
替换为IMAPDSTART=YES
#vim/usr/local/courier-imap/etc/pop3d
与imapd文件类似，在文件最后找到POP3DSTART=NO
修改为POP3DSTART=YES启动服务
#service imapdstart
StartingCourier-IMAP server: imap pop3
#netstat -tulnp |egrep "110|143"
tcp 0 0 :::110:::* LISTEN 23349/couriertcpd
tcp 0 0 :::143:::* LISTEN 23343/couriertcpd
安装配置pcre比较简单过程省略
安装maildrop
./configure--enable-sendmail=/usr/sbin/sendmail --enable-trusted-users='root vmail' --enable-syslog=1--enable-maildirquota --enable-maildrop-uid=1003 --enable-maildrop-gid=1003 --with-trashquota--with-dirsync
验证安装
#maildrop -v
maildrop 2.1.0 Copyright 1998-2005 DoublePrecision, Inc.
GDBM/DB extensions enabled.
Courier Authentication Library extensionenabled.
Maildir quota extension enabled.
This program is distributed under the termsof the GNU General Public
License. See COPYING for additionalinformation.
如果没有显示Courier Authentication Library extension enabled.说明你的maidrop还不支持courier auth，请仔细检查，重新编译maildrop建议不要自定义目录安装，可以减少不必要的麻烦，删除很方便：直接在已经编译的源代码目录make uninstall知道maildrop把邮件移动到哪个用户目录还是非常有必要的，这个操作就是maildrop的日志记录。这里我们创建一个新文件/etc/maildroprc，这个文件就2行内容：如果加入反SPAM,需要更改以下内容
#touch /var/log/maildrop.log;chownvmail.vmail /var/log/maildrop.log
安装配置extman和extmail
解压它们，并拷贝它们的解压出来的目录到/usr/local/apache/htdocs下面
#tar -xvzf extmail-1.1.0.tar.gz -C/usr/local/apache/htdocs
#cd /usr/local/apache/htdocs
#mv extmail-1.1.0/ extmail
#chown vmail.vmail extmail/ -R
#cd extmail
#cp -pwebmail.cf.default webmail.cf
配置extmail.cf
# sys_config, theconfig file and webmail programe root
SYS_CONFIG =/usr/local/apache/htdocs/extmail/ //虚拟机指向的extmail路径

# sys_langdir, thei18n dir
SYS_LANGDIR =/usr/local/apache/htdocs/extmail/lang

# sys_templdir,the template dir
SYS_TEMPLDIR =/usr/local/apache/htdocs/extmail/html

# sys_http_cache,a switch to enable or disable http cache via http header
SYS_HTTP_CACHE = 0

# sys_smtp_host
SYS_SMTP_HOST =10.0.0.20 //smtp服务器 IP

# sys_smtp_port
SYS_SMTP_PORT = 25 //smtp端口

# sys_smtp_timeout
SYS_SMTP_TIMEOUT =5 //smtp超时时间

#sys_spam_report_on = 1 | 0 - enable spam reporting or not
SYS_SPAM_REPORT_ON= 0

#sys_spam_report_type = dspam | spamassassin - spam reporting type
SYS_SPAM_REPORT_TYPE= dspam

# sys_warn, showsystem warning or not, default to yes
SYS_SHOW_WARN = 0

#sys_permit_noquota, permit an account without qouta?
SYS_PERMIT_NOQUOTA= 1

# sys_sess_dir,the session dir
SYS_SESS_DIR =/tmp

#sys_upload_tmpdir, the temp directory for file uploading
SYS_UPLOAD_TMPDIR= /tmp

# sys_log_on = 1 |0 - enable logging or not
SYS_LOG_ON = 1

# sys_log_type =file|syslog|nsyslog, syslog will save login
# or error infointo mail.*, nsyslog is a replacement to syslog
# that will sendlog message to network syslogd
#SYS_LOG_TYPE =syslog
SYS_LOG_TYPE =file

# sys_log_file -path to log file, if sys_log_type = file
SYS_LOG_FILE =/var/log/extmail.log

#sys_sess_timeout, session timeout, default 3 hours (3h) format:
#number+(s|m|h|d|M|y); or only number, the 0 means that the
# session willlast for 0 seconds, but if you specify the
#sys_sess_cookie_only = 1 then it means the session will expire
# after you closeyour browser :)
SYS_SESS_TIMEOUT= 0

#sys_sess_cookie_only = 0|1 use cookie only or include cgi "sid"
# parameter ? ifset to true(1), the session will be expired after
# sys_sess_timeoutif there is no any active request from browser
SYS_SESS_COOKIE_ONLY= 1

# sys_user_psize,user default page_size
SYS_USER_PSIZE =10

# sys_user_tsize,user mail subject truncate size, valid type:
# auto => full text
# screen1 =>800x600
# screen2 =>1024x768
# screen3 =>1280x1024
SYS_USER_SCREEN =auto

# sys_user_lang,user default language
#SYS_USER_LANG =en_US
SYS_USER_LANG =zh_CN

# sys_app_type,the app type: WebMail or ExtMan? It must be the same
# as prefix partof language package name, eg: WebMail::en_US
SYS_APP_TYPE =WebMail

#sys_user_template, user default template
SYS_USER_TEMPLATE= default

#sys_user_charset, user default charset
SYS_USER_CHARSET =utf-8

# sys_user_trylocal,user default outgoing encoding mechanism
SYS_USER_TRYLOCAL= 1

#sys_user_timezone, user default timezone
SYS_USER_TIMEZONE= +0800

# sys_user_*default parameters
SYS_USER_CCSENT =1
SYS_USER_SHOW_HTML= 1
SYS_USER_COMPOSE_HTML= 1
SYS_USER_CONV_LINK=1
SYS_USER_ADDR2ABOOK= 1

#sys_message_size_limit, default message size limit per user
# count asbyte(s), eg: 5242880 means 5MB
SYS_MESSAGE_SIZE_LIMIT= 5242880

#sys_min_pass_len, minimal password length, default 2
SYS_MIN_PASS_LEN =2

# sys_mfilter_on,default is off
SYS_MFILTER_ON = 1

# sys_netdisk_on,default is off
SYS_NETDISK_ON = 1

# sys_show_signup,default is on, this feature need extman
# 0.2.2 or higherversion, built with signup serivce
SYS_SHOW_SIGNUP =1

# sys_debug_on,default is off
SYS_DEBUG_ON = 1

# sys auth type,mysql/ldap/authlib
SYS_AUTH_TYPE =mysql

# maildir_base,the base dir of user maildir, use absolute path
# if not set.
#SYS_MAILDIR_BASE= /home/domains
SYS_MAILDIR_BASE =/var/mailbox //这里是存放邮件的路径，注意不要写错，否则造成只能发不能收的问题
# sys_auth_schema,vpopmail1/vpopmail2/virtual
# vpopmail1 =>all user accounts in one table
# vpopmail2 =>accounts in per domain table
SYS_AUTH_SCHEMA =virtual

# crypt_type, thedefault encrypt type of password, possible type
# currently iscrypt|cleartext|plain|md5|md5crypt|plain-md5|ldap-md5|sha|sha1
SYS_CRYPT_TYPE =md5crypt

# if mysql, allrelate parameters should prefix as SYS_MYSQL
SYS_MYSQL_USER =extmail //mysql数据库用户名
SYS_MYSQL_PASS =123456 //mysql数据库密码
SYS_MYSQL_DB =extmail //mysql数据库名
SYS_MYSQL_HOST =10.0.0.20 //mysql DB服务器 IP
SYS_MYSQL_SOCKET =/tmp/mysql.sock
# table name
SYS_MYSQL_TABLE =mailbox
SYS_MYSQL_ATTR_USERNAME= username
SYS_MYSQL_ATTR_DOMAIN= domain
SYS_MYSQL_ATTR_PASSWD= password
# sys_mysql_attr_clearpw- attribute to save clear password, useful for
# postmasterwithdraw the original passwd if the end user forgot, but
# we highlyrecommend that you don't enable it for security reason
SYS_MYSQL_ATTR_CLEARPW= clearpwd
SYS_MYSQL_ATTR_QUOTA= quota
SYS_MYSQL_ATTR_NDQUOTA= netdiskquota
SYS_MYSQL_ATTR_HOME= homedir
SYS_MYSQL_ATTR_MAILDIR= maildir
# serviceenable/disable attributes
# comment them outif you don't want their function
SYS_MYSQL_ATTR_DISABLEWEBMAIL= disablewebmail
SYS_MYSQL_ATTR_DISABLENETDISK= disablenetdisk
SYS_MYSQL_ATTR_DISABLEPWDCHANGE= disablepwdchange
SYS_MYSQL_ATTR_ACTIVE= active
# passwordretrieve attributes
# comment them outif you don't want such function
SYS_MYSQL_ATTR_PWD_QUESTION= question
SYS_MYSQL_ATTR_PWD_ANSWER= answer

# if ldap, allrelate parameters should prefix as SYS_LDAP
SYS_LDAP_BASE =o=extmailAccount,dc=example.com
SYS_LDAP_RDN =cn=Manager,dc=example.com
SYS_LDAP_PASS =secret
SYS_LDAP_HOST =localhost
# ldif attributes
SYS_LDAP_ATTR_USERNAME= mail
SYS_LDAP_ATTR_DOMAIN= virtualDomain
SYS_LDAP_ATTR_PASSWD= userPassword
#sys_ldap_attr_clearpw - attribute to save clear password, useful for
# postmasterwithdraw the original passwd if the end user forgot, but
# we highlyrecommend that you don't enable it for security reason
SYS_LDAP_ATTR_CLEARPW= clearPassword
SYS_LDAP_ATTR_QUOTA= mailQuota
SYS_LDAP_ATTR_NDQUOTA= netdiskQuota
SYS_LDAP_ATTR_HOME= homeDirectory
SYS_LDAP_ATTR_MAILDIR= mailMessageStore
# serviceenable/disable attributes
# comment them outif you don't want their function
SYS_LDAP_ATTR_DISABLEWEBMAIL= disablewebmail
SYS_LDAP_ATTR_DISABLENETDISK= disablenetdisk
SYS_LDAP_ATTR_DISABLEPWDCHANGE= disablePasswdChange
SYS_LDAP_ATTR_ACTIVE= active
# passwordretrieve attributes
# comment them outif you don't want such function
SYS_LDAP_ATTR_PWD_QUESTION= question
SYS_LDAP_ATTR_PWD_ANSWER= answer

# if authlib, allrelate parameters should prefix as AUTHLIB
SYS_AUTHLIB_SOCKET= /usr/local/authlib/var/spool/authdaemon/socket

# Global Abooksupport
#sys_g_abook_type, global abook type, valid is ldap|file
SYS_G_ABOOK_TYPE =file

# if ldap, allrelate parameters should prefix as SYS_G_ABOOK_LDAP
SYS_G_ABOOK_LDAP_HOST= localhost
SYS_G_ABOOK_LDAP_BASE= ou=AddressBook,dc=example.com
SYS_G_ABOOK_LDAP_ROOTDN= cn=Manager,dc=example.com
SYS_G_ABOOK_LDAP_ROOTPW= secret
SYS_G_ABOOK_LDAP_FILTER= objectClass=OfficePerson

# if file, allrelate parameters should prefix as SYS_G_ABOOK_FILE
SYS_G_ABOOK_FILE_PATH= /var/www/extsuite/extmail/globabook.cf
SYS_G_ABOOK_FILE_LOCK= 1
SYS_G_ABOOK_FILE_CONVERT= 0
SYS_G_ABOOK_FILE_CHARSET= utf-8

#tar -xvzf extman-0.2.5.tar.gz -C/usr/local/apache/htdocs

#cd /usr/local/apache/htdocs

#mv extman-0.2.5/ extman; chown vmail.vmailextman –R

配置webman.cf

# vim /data/web/extman/webman.cf

#sys_config, the config file and webman programe root

SYS_CONFIG= /usr/local/apache/htdocs/extman/ //虚拟机指向的extman的路径

#sys_langdir, the i18n dir

SYS_LANGDIR= /usr/local/apache/htdocs/extman/lang

# sys_templdir,the template dir

SYS_TEMPLDIR= /usr/local/apache/htdocs/extman/html

#maildir_base, the base dir of user maildir, use absolute path

# if notset.

SYS_MAILDIR_BASE= /var/mailbox/

# sys_warn,show system warning or not, default to yes

SYS_SHOW_WARN= 0

#sys_sess_dir, the session dir

SYS_SESS_DIR= /var/tmp/extman/

#sys_captcha_on 1|0 - to enable captcha feature or not

SYS_CAPTCHA_ON= 0

#sys_captcha_key

SYS_CAPTCHA_KEY= r3s9b6a7

#sys_captcha_len

SYS_CAPTCHA_LEN= 6

#sys_purge_data - to completely destroy user's mailbox or not?

SYS_PURGE_DATA = 0

#sys_sess_timeout, session timeout in seccond, default 6 hours

#SYS_SESS_TIMEOUT = 21600

#sys_user_psize, user default page_size

SYS_PSIZE =20

#sys_user_lang, user default language

# SYS_LANG= en_US

#sys_app_type, the app type: WebMail or ExtMan? It must be the same

# as prefixpart of language package name, eg: WebMail::en_US

SYS_APP_TYPE= ExtMan

#sys_template_name, the template name

SYS_TEMPLATE_NAME= default

# webmanagement related restritions

#sys_default_expire, valid value: ?y ?m ?d

SYS_DEFAULT_EXPIRE= 1y

#sys_groupmail_sender - sender for groupmail, this account must

# exist orpostfix or other mta will complain error

#SYS_GROUPMAIL_SENDER= root@extmail.org

SYS_GROUPMAIL_SENDER= root@gyzb.com

#sys_default_services, valid value: smtpd, smtp, webmail, netdisk,

# imap andpop3, concatenate with "," as multiple values, eg: webmail,smtpauth

SYS_DEFAULT_SERVICES= webmail,smtpd,smtp,pop3,netdisk

#sys_isp_mode, yes|no - if yes, use our HashDir to spread

# storageto multiple directories

SYS_ISP_MODE= no

#sys_domain_hashdir = yes|no, if yes we will enable domain hashdir

# depend onsys_isp_mode = yes

SYS_DOMAIN_HASHDIR= yes

#sys_domain_hashdir_depth, the hash length and depth, format:

# length xdepth, eg: 2x1 => length =2, depth =1

# depend onsys_isp_mode = yes

SYS_DOMAIN_HASHDIR_DEPTH= 2x2

#sys_user_hashdir = yes|no, if yes we will enable user hashdir

# depend onsys_isp_mode = yes

SYS_USER_HASHDIR= yes

#sys_user_hashdir_depth, similar to sys_hashdir_domain_depth

SYS_USER_HASHDIR_DEPTH= 2x2

# XXX FIXME

#experimental feature, per domain tranport/routing capability

# sameconfig style as SYS_USER_ROUTING_LIST

#SYS_DOMAIN_ROUTING_LIST = lmtp:mx1.extmail.org,lmtp:mx2.extmail.org

# XXX FIXME

#experimental feature, per user routing capability

# pleasespecify routing info, concatenate with "," as multiple list

# members,eg: smtp:mx1.abc.com,smtp:mx2.abc.com

#SYS_USER_ROUTING_LIST = smtp:[192.168.2.130],smtp:[192.168.2.128]

#sys_min_uid, the minimal uid

SYS_MIN_UID= 500

#sys_min_gid, the minimal gid

SYS_MIN_GID= 100

#sys_default_uid, if not set, webman will ignore it

SYS_DEFAULT_UID= 1003 //vmail用户的UID

#sys_default_gid, if not set, webman will ignore it

SYS_DEFAULT_GID= 1003 // vmail组的GID

#sys_quota_multiplier, in bytes, default to 1 MB

SYS_QUOTA_MULTIPLIER= 1048576

#sys_quota_type, valid type: vda|courier

SYS_QUOTA_TYPE= courier

# maxquota,alias, users and netdisk quota for domain

SYS_DEFAULT_MAXQUOTA= 500

SYS_DEFAULT_MAXALIAS= 100

SYS_DEFAULT_MAXUSERS= 100

SYS_DEFAULT_MAXNDQUOTA= 500

# per userdefault quota, netdisk quota and expire

SYS_USER_DEFAULT_QUOTA= 5

SYS_USER_DEFAULT_NDQUOTA= 5

SYS_USER_DEFAULT_EXPIRE= 1y

#sys_backend_type mysql|ldap

SYS_BACKEND_TYPE= mysql

SYS_CRYPT_TYPE= md5crypt

# if mysql,all relate paramters should prefix as SYS_MYSQL

SYS_MYSQL_USER= extmail //数据库登录的用户名

SYS_MYSQL_PASS= 123456 //数据库登录的密码

SYS_MYSQL_DB= extmail //数据库名

SYS_MYSQL_HOST= 10.0.0.20 //数据库服务器IP

SYS_MYSQL_SOCKET= /tmp/mysql.sock

# tablename

SYS_MYSQL_TABLE= manager

SYS_MYSQL_ATTR_USERNAME= username

SYS_MYSQL_ATTR_PASSWD= password

# commentit if you only want to save crypted password

# we highlyrecommend that you disable the following line :)

#SYS_MYSQL_ATTR_CLEARPW = clearpwd

# if ldap,all relate paramters should prefix as SYS_LDAP

SYS_LDAP_BASE= dc=extmail.org

SYS_LDAP_RDN= cn=Manager,dc=extmail.org

SYS_LDAP_PASS= secret

SYS_LDAP_HOST= localhost

# ldifattributes

SYS_LDAP_ATTR_USERNAME= mail

SYS_LDAP_ATTR_PASSWD= userPassword

# commentit if you only want to save crypted password

# we highlyrecommend that you disable the following line :)

#SYS_LDAP_ATTR_CLEARPW = clearPassword

#sys_rrd_datadir, the full path of rrd data

SYS_RRD_DATADIR= /var/lib

#sys_rrd_tmpdir, the temp dir for graph

SYS_RRD_TMPDIR= /tmp/viewlog

#sys_rrd_queue_on, yes|no, show queue or not

SYS_RRD_QUEUE_ON= yes

修改extmail创建表的mysql语句

#vim/data/web/extman/docs/extmail.sql

vi替换命令：【1,$s/TYPE=MyISAM/TYPE=MyISAM DEFAULTCHARSET=utf8/g】

这一行注意ENGINE=MyISAM COMMENT='ExtMail - VirtualDomains';

原来默认不是 ENGINE，改成这个才不报错的

初始化数据库：

添加用户后登录测试报错1：通过客户端无法链接数据库，是需要手动添加数据库extmail的用户名并设定密码，处理步骤1：

mysql>create user extmail identified by'123456'; //创建数据库的登录名

mysql>grant all privileges on extmail.* to extmail; //用户的权限分配

create user extmail@localhost identified by'123456';

grant allprivileges on extmail.* to extmail'@'localhost;

报错2：localhostauthdaemond: mysql_query failed, reconnecting: You have an error in your SQLsyntax; check the manual that corresponds to your MySQL server version for theright syntax to use near '/var/mailbox, maildir, "", name,"" FROM mailbox WHERE usern

处理2：字段格式错误，修改vim/usr/local/authlib/etc/authlib/authmysqlrc中把/var/mailbox加英文双引号

数据库用户名和密码extmail/123456

extman后台添加用户后 /var/mailbox里面没有产生该用户的目录，并且apache后台报错File does not exist:/usr/local/apache/htdocs/extman/plugins, referer:http://mail.example.com/extman/cgi/user.cgi

处理方法：chown -R vmail:vmail /var/mailbox即可

配置Apache

添加cgi和php支持：

<IfModuledir_module>

DirectoryIndex index.html index.phpindex.cgi index.htm index.html.var

</IfModule>

<Directory"/usr/local/apache/cgi-bin">

AllowOverride None

Options None

Order allow,deny

Allow from all

</Directory>

AddHandlercgi-script .cgi

AddType application/x-httpd-php .php

AddType application/x-httpd-php-source .phps

虚拟机配置：

<VirtualHost*:80>

ServerNamewww.szgyzb.com

DocumentRoot/usr/local/apache/htdocs

ScriptAlias/extmail/cgi /usr/local/apache/htdocs/extmail/cgi

Alias/extmail /usr/local/apache/htdocs/extmail

#SuexecUserGroupvmail vmail

</VirtualHost>

重启Apache生效

邮件管理后台图形日志服务测试（非必须，日后补充）
联调配置与测试
#vim/etc/postfix/master.cf
#
# Postfix master process configurationfile. For details on the format
# of the file, see the master(5) manual page(command: "man 5 master").
#
# Do not forget to execute "postfixreload" after editing this file.
#
#==========================================================================
# service type private unpriv chroot wakeup maxproc command + args
#               (yes)  (yes)  (yes)   (never) (100)
# ==========================================================================
smtp     inet n       -       n      -       -      smtpd
#dbmail-lmtp unix - - n - - lmtp -odisable_dns_lookups=yes               //注销此行
#submission inet n       -      n       -      -      smtpd
# -osmtpd_tls_security_level=encrypt
# -osmtpd_sasl_auth_enable=yes
# -osmtpd_client_restrictions=permit_sasl_authenticated,reject
# -omilter_macro_daemon_name=ORIGINATING
#smtps    inet n       -      n      -       -      smtpd
# -osmtpd_tls_wrappermode=yes
# -osmtpd_sasl_auth_enable=yes
# -osmtpd_client_restrictions=permit_sasl_authenticated,reject
# -omilter_macro_daemon_name=ORIGINATING
#628      inet n       -      n      -       -      qmqpd
pickup   fifo n       -      n      60     1       pickup
cleanup  unix n       -      n      -       0      cleanup
qmgr     fifo n       -      n      300     1      qmgr
#qmgr    fifo n       -      n      300     1      oqmgr
tlsmgr   unix -       -      n      1000?  1      tlsmgr
rewrite  unix -       -      n      -       -      trivial-rewrite
bounce   unix -       -      n      -       0      bounce
defer    unix -       -      n      -       0      bounce
trace    unix -       -      n      -      0       bounce
verify   unix -       -      n      -       1      verify
flush    unix n       -      n      1000?   0      flush
proxymap unix -       -      n      -       -      proxymap
proxywrite unix -       -      n       -      1      proxymap
smtp     unix -       -      n      -       -      smtp
# When relaying mail as backup MX, disablefallback_relay to avoid MX loops
relay    unix -       -      n      -       -      smtp
   -osmtp_fallback_relay=
#       -o smtp_helo_timeout=5 -osmtp_connect_timeout=5
showq    unix n       -      n      -       -      showq
error    unix -       -      n      -       -      error
retry    unix -       -      n      -       -      error
discard  unix -       -      n      -       -      discard
local    unix -       n      n      -       -      local
virtual  unix -       n      n      -       -      virtual
lmtp     unix -       -      n      -       -      lmtp
anvil    unix -       -      n      -       1      anvil
scache   unix -       -      n      -       1      scache
#
#====================================================================
# Interfaces to non-Postfix software. Besure to examine the manual
# pages of the non-Postfix software to findout what options it wants.
#
# Many of the following services use thePostfix pipe(8) delivery
# agent. See the pipe(8) man page for information about ${recipient}
# and other message envelope options.
# ====================================================================
#
# maildrop. See the Postfix MAILDROP_READMEfile for details.
# Also specify in main.cf:maildrop_destination_recipient_limit=1
#
maildrop unix - n n - - pipe
flags=DRhu user=vmail argv=/usr/local/bin/maildrop-d ${recipient}
#
#====================================================================
#
# Recent Cyrus versions can use the existing"lmtp" master.cf entry.
#
# Specify in cyrus.conf:
#  lmtp   cmd="lmtpd -a"listen="localhost:lmtp" proto=tcp4
#
# Specify in main.cf one or more of thefollowing:
# mailbox_transport = lmtp:inet:localhost
# virtual_transport = lmtp:inet:localhost
#
#====================================================================
#
# Cyrus 2.1.5 (Amos Gouaux)
# Also specify in main.cf:cyrus_destination_recipient_limit=1
#
#cyrus    unix -       n      n      -       -      pipe
# user=cyrus argv=/cyrus/bin/deliver -e -r ${sender} -m ${extension}${user}
#
# ====================================================================
#
# Old example of delivery via Cyrus.
#
#old-cyrus unix -      n      n       -      -      pipe
# flags=R user=cyrus argv=/cyrus/bin/deliver -e -m ${extension} ${user}
#
# ====================================================================
#
# See the Postfix UUCP_README file forconfiguration details.
#
#uucp     unix -       n      n      -       -      pipe
# flags=Fqhu user=uucp argv=uux -r -n -z -a$sender - $nexthop!rmail($recipient)
#
#====================================================================
#
# Other external delivery methods.
#
#ifmail   unix -       n      n      -       -      pipe
# flags=F user=ftn argv=/usr/lib/ifmail/ifmail -r $nexthop ($recipient)
#
#bsmtp    unix -       n      n      -       -      pipe
# flags=Fq. user=bsmtp argv=/usr/local/sbin/bsmtp -f $sender $nexthop$recipient
#
#scalemail-backend unix -      n      n       -      2      pipe
# flags=R user=scalemail argv=/usr/lib/scalemail/bin/scalemail-store
# ${nexthop} ${user} ${extension}
#
#mailman  unix -       n      n      -       -      pipe
# flags=FR user=list argv=/usr/lib/mailman/bin/postfix-to-mailman.py
# ${nexthop} ${user}

#vim/etc/postfix/main.cf

myhostname=www.szgyzb.com //服务器主机名

mydomain =szgyzb.com //域名，即邮件@后面显示的部分

myorigin =$mydomain //变量取值

inet_interfaces= all

mynetworks= 10.0.0.0/16,127.0.0.0/8 //设置网络，注意设置方式是IP段的方式

mydestination= $myhostname,localhost.$mydomain,localhost

smtpd_client_restrictions= check_client_access hash:/etc/postfix/access

alias_maps= $alias_database

alias_database= hash:/etc/aliases

mail_spool_directory= /var/spool/mail

default_recipient_refill_delay= 1s

#====================SASLESMTP Authenticat=================

smtpd_sasl_auth_enable= yes

smtpd_sasl_local_domain= $mydomain

smtpd_sasl_security_options= noanonymous

broken_sasl_auth_clients= yes

#========================Authwho to Internet Mail Begin==============

smtpd_restriction_classes= local_only //邮件外发管控

local_only= check_recipient_access hash:/etc/postfix/local_domains,reject //邮件外发管控

local_only1= check_sender_access hash:/etc/postfix/local_domains,reject //邮件外发管控

#local_only1= check_sender_access hash:/etc/postfix/local_domains,reject //邮件外发管控

#========================Authwho to Internet Mail End================

smtpd_recipient_restrictions= check_sender_accesshash:/etc/postfix/local_senders, permit_mynetworks,permit_sasl_authenticated,reject_invalid_hostname,reject_non_fqdn_hostname,reject_unknown_sender_domain,reject_non_fqdn_sender,reject_non_fqdn_recipient,reject_unknown_recipient_domain,reject_unauth_pipelining,reject_unauth_destination

smtpd_sasl_application_name= smtpd

smtpd_banner= $myhostname ESMTP Jobkoo mail system (version:1.0)

#=====================VritualMailbox settings=========================

virtual_mailbox_base= /var/mailbox/

virtual_mailbox_maps= mysql:/etc/postfix/mysql/mysql_virtual_mailbox_maps.cf

virtual_mailbox_domains= mysql:/etc/postfix/mysql/mysql_virtual_domains_maps.cf

#virtual_mailbox_domains= $mydomain

virtual_alias_domains=

virtual_alias_maps= mysql:/etc/postfix/mysql/mysql_virtual_alias_maps.cf

virtual_uid_maps= static:1003 //vmail用户的UID

virtual_gid_maps= static:1003 //vmail用户的GID

virtual_transport= maildrop

maildrop_destination_recipient_limit= 1

maildrop_destination_concurrency_limit= 1

#====================QUOTA============================================

message_size_limit= 20000000

mailbox_size_limit= 409600000

virtual_mailbox_limit= 20000000

virtual_create_maildirsize= yes

virtual_mailbox_extended= yes

virtual_mailbox_limit_maps= mysql:/etc/postfix/mysql/mysql_virtual_mailbox_limit_maps.cf

virtual_mailbox_limit_override= yes

virtual_maildir_limit_message= Sorry, the user's maildir has overdrawn his diskspace

quota, please try again later.

virtual_overquota_bounce= yes

smtp_host_lookup= dns, native

启动postfix

#postfixstart

#tail –f//var/log/maillog

联调配置与测试

[root@www conf]#/usr/local/authlib/sbin/authtest -s login cjin@szgyzb.com 123456

Authenticationsucceeded.

Authenticated: cjin@szgyzb.com (uid 1003, gid 1003)

Home Directory: /var/mailbox

Maildir: szgyzb.com/cjin/Maildir/

Quota: (none)

EncryptedPassword: $1$jG9ds5IO$GGA8Fw2fL3V.4dEi0Zfe9.

CleartextPassword: 123456

Options: (none)

说明：这样表明ExtMan的正确安装，数据库也正确导入，courier-authlib能正确连接到mysql数据库。

STMP认证测试
首先通过perl获取虚拟帐号和密码的base64编码，方式如下：
[root@www ~]# perl -e 'use MIME::Base64;print encode_base64("cjin\@szgyzb.com")'
Y2ppbkBzemd5emIuY29tLmNvbQ==
[root@www ~]# perl -e 'use MIME::Base64;print encode_base64("123456")'
MTIzNDU2

[root@www ~]# telnet 10.0.0.20 25

[root@www ~]# telnet 10.0.0.20 25 //以下红色手动输入

Trying10.0.0.20...

Connectedto 10.0.0.20.

Escapecharacter is '^]'.

220www.szgyzb.com ESMTP Jobkoo mail system (version:1.0)

ehlowww.szgyzb.com

250-www.szgyzb.com

250-PIPELINING

250-SIZE20000000

250-VRFY

250-ETRN

250-AUTHLOGIN PLAIN

250-AUTH=LOGINPLAIN

250-ENHANCEDSTATUSCODES

250-8BITMIME

250DSN

authlogin

334VXNlcm5hbWU6

Y2ppbkBzemd5emIuY29t

334UGFzc3dvcmQ6

MTIzNDU2

#2352.0.0

Authentication successful //表明SMTP认证测试成功

quit

2212.0.0 Bye

命令测试可以收发邮件但是页面收件箱为空：vim /usr/local/apache/htdocs/extmail/webmail.cf 的配置有问题，SYS_MAILDIR_BASE的值由默认的 /home/domains改为实际的 /var/mailbox

POP认证测试

[root@www~]# telnet 10.0.0.20 110

Trying10.0.0.20...

Connectedto 10.0.0.20.

Escapecharacter is '^]'.

+OKHello there.

usercjin@szgyzb.com

+OKPassword required.

pass123456

+OKlogged in.

quit

+OKBye-bye.

命令行和WebMail(Extmail)或者客户端（Foxmail）的方式发信测试

[root@www~]# mail -s test cjin@szgyzb.com

testtest

EOT

说明：test作为邮件主题，手动输入的testtest作为邮件内容，输入完成敲回车后ctrl+d结束并发送邮件给cjin@szgyzb.com

http://www.szgyzb.com/extman(root@szgyzb.com/123456)进入邮件后台，可添加用户上面测试用的,上述cjin@szgyzb.com帐号就是在这里加的

访问http://www.szgyzb.com/extmanil用cjin@szgyzb.com帐号登录即可看到刚才命令发信的信息，在后台再添加一个帐号用Web端做收发测试即可

也可以用Foxmail客户端建立帐号做邮件的收发工作

邮件外发管控
#cd /etc/postfix
#touch local_domains
#touch local_senders
vim /etc/postfix/main.cf

配置:

smtpd_restriction_classes = local_only

local_only = check_recipient_accesshash:/etc/postfix/local_domains,reject

local_only1 = check_sender_accesshash:/etc/postfix/local_domains,reject

smtpd_recipient_restrictions参数加上下面

check_sender_access hash:/etc/postfix/local_senders

在/etc/postifx/local_out_senders加入要禁止外发邮件的邮件帐号地址

在/etc/postfix/local_domains配置

szgyzb.com ok

10.0.0.20 ok

#postmaphash:/etc/postfix/local_in_domains

#postmaphash:/etc/postfix/local_in_senders

#postfix reload //重载postfix配置

至此基于Postfix的邮件服务器搭建基本完成，当邮件需要收发外网的邮件时为了保证邮件的安全性和实现对外网垃圾邮件的拦截，建议安装杀毒软件及垃圾邮件扫描工具

邮件问题处理总结：

问题1：extman管理后台无法登录

进入extman目录下面的tools利用密码找回工具重置密码

./adminctl.pl --mode=mod--managername="root@szgyzb.com" --password="123456"

问题2：不小心执行了chmod –R 777 /var导致/var及子目录、文件权限全部变化，结果是导致postfix无法开启，查看日志后台报错发现：Dec 12 10:00:07 localhostpostfix/master[31815]: fatal: open lock file /var/lib/postfix/master.lock:cannot open file: Permission denied查了一整天，最后终于发现问题在于 /var的权限问题，linux在权限的操作上要十分谨慎小心，一定要在系统定型以后做一个备份

[root@localhost lib]# ls -ld /var

drwx------. 22 root root 4096 Dec 10 15:53 /var

应该改为如下：[root@localhostlib]# chmod 755 /var

[root@localhost lib]# ls -ld /var

drwxr-xr-x. 22 root root 4096 Dec 10 15:53 /var

问题3：进入extman管理后台新增邮件用户帐号后，/var/mailbox下面不会生成帐号信息目录

用帐号登录邮箱时候报错Can't chdir to /var/mailbox/szgyzb.com/chao.jin/Maildir/, Permissiondenied

问题4：[root@www szgyzb.com]# /usr/local/authlib/sbin/authtest -s logincjin@szgyzb.com 123456

Authentication FAILED: Input/output error

查看/var/log/maillog报错authdaemond: failed to connect to mysql server (server=www.gyzb.com,userid=extmail): Can't connect to MySQL server on 'www.gyzb.com' (110)

解决：vim /usr/local/authlib/etc/authlib/authmysqlrc

MYSQL_SERVERwww.gyzb.com ==è改成10.0.0.20

问题5：[root@www szgyzb.com]#/usr/local/authlib/sbin/authtest -s login cjin@szgyzb.com 123456

Authentication FAILED: Operation not permitted

查看/var/log/maillog报错

Dec 17 14:06:01 www authdaemond: SQL query: SELECT username,password, "", '1003', '1003', "/var/mailbox", maildir,"", name, "" FROM mailbox WHERE username ='root@szgyzb.com' AND (active='1')

Dec 17 14:06:01 www authdaemond: zero rows returned

Dec 17 14:06:01 www authdaemond: authmysql: REJECT - trynext module

Dec 17 14:06:01 www authdaemond: FAIL, all modules rejected

解决：将sql copy到mysql客户端中查询发现查不到数据，去掉AND(active='1')

发现就可以查到，说明在创建cjin用户的时候，没有勾选激活，所以删除这个用户，重新创建勾选激活

再测试成功

0 0