Postfix電子郵件系統精要

[root@myest modules]# ll

total 12212

-rw-r–r–  1 root root     8873 Jul 30 14:55 httpd.exp

-rwxr-xr-x  1 root root 12473318 Jul 31 09:29 libphp5.so

vi test.php

<?

 

phpinfo();

?>

[root@mail ~]# grep “authdaemonvar” /usr/local/authlib/etc/authlib/authdaemonrc

##NAME: authdaemonvar:2

# authdaemonvar is here, but is not used directly by authdaemond.  It`s

authdaemonvar=/usr/local/authlib/var/spool/authdaemon

vi /usr/local/authlib/etc/authlib/authdaemonrc 
authmodulelist=”authmysql”
authmodulelistorig=”authmysql”
DEBUG_LOGIN=2

 

修改上面3項，其他的項保持不便。這個修改前2行表示用mysql認證模組；把DEBUG_LOGIN的值有預設的“0”改成“2”的用意是執行postfix時有更多的資訊輸出，通過生成的日誌以幫助排錯。

vi /usr/local/authlib/etc/authlib/authmysqlrc 
MYSQL_SERVER localhost
MYSQL_USERNAME postfix
MYSQL_PASSWORD postfix

MYSQL_DATABASE postfix

MYSQL_SOCKET /tmp/mysql.sock
MYSQL_USER_TABLE mailbox
#MYSQL_CRYPT_PWFIELD password
MYSQL_CLEAR_PWFIELD password

DEFAULT_DOMAIN sery.com
MYSQL_UID_FIELD `1001`
MYSQL_GID_FIELD `1001`

MYSQL_LOGIN_FIELD username
MYSQL_HOME_FIELD `/var/mailbox/`

MYSQL_NAME_FIELD name
MYSQL_MAILDIR_FIELD maildir
MYSQL_QUOTA_FIELD concat(quota,’S’)
MYSQL_WHERE_CLAUSE active=`1`

照上面的格式修改，這是比較容易出錯的地方，要特別小心。我曾經把MYSQL_USER_TABLE mailbox這一項的mailbox寫成mailbov導致sasl驗證一直沒法通過！特別注意MYSQL_UID_FIELD和MYSQL_GID_FIELD欄位的值，這裡是‘1001’,也可以是其它的，但一定要與vmail使用者及組相一致（id vmail可以得出這2者的值）

— cyrus-sasl-2.1.20/lib/client.c~     2003-11-11 11:26:06.000000000 -0500

+++ cyrus-sasl-2.1.20/lib/client.c      2005-05-31 22:34:14.000000000 -0400

@@ -61,7 +61,7 @@

 

 static cmech_list_t *cmechlist; /* global var which holds the list */

 

-static sasl_global_callbacks_t global_callbacks;

+sasl_global_callbacks_t global_callbacks;

 

 static int _sasl_client_active = 0;

pwcheck_method: authdaemond

mech_list: PLAIN LOGIN

log_level: 3

authdaemond_path: /usr/local/authlib/var/spool/authdaemon/socket

[root@mailserv2 postfixadmin]# pwd

/var/www/postfixadmin

[root@mailserv2 postfixadmin]ll

total 236

drwxr-xr-x 2 vmail vmail  4096 Sep 16 16:06 ADDITIONS

drwxr-xr-x 2 vmail vmail  4096 Sep 16 19:31 admin

-rw-r–r– 1 vmail vmail  1195 Sep 16 16:06 BACKUP_MX.TXT

-rw-r–r– 1 vmail vmail 10155 Sep 16 16:06 CHANGELOG.TXT

-rw-r—– 1 vmail vmail  4700 Sep 16 16:14 config.inc.php

-rw-r–r– 1 vmail vmail  4694 Sep 16 16:06 config.inc.php.sample

-rw-r—– 1 vmail vmail  3774 Sep 16 16:06 create-alias.php

-rw-r—– 1 vmail vmail  7379 Sep 16 19:24 create-mailbox.php

-rw-r–r– 1 vmail vmail  4910 Sep 16 16:06 DATABASE_MYSQL.TXT

-rw-r–r– 1 vmail vmail  4955 Sep 16 16:06 DATABASE_PGSQL.TXT

-rw-r—– 1 vmail vmail  2497 Sep 16 19:30 delete.php

-rw-r—– 1 vmail vmail  1727 Sep 16 16:06 edit-active.php

-rw-r—– 1 vmail vmail  3013 Sep 16 16:06 edit-alias.php

-rw-r—– 1 vmail vmail  4026 Sep 16 16:06 edit-mailbox.php

-rw-r—– 1 vmail vmail 25031 Sep 16 16:06 functions.inc.php

drwxr-xr-x 2 vmail vmail  4096 Sep 16 16:06 images

-rw-r—– 1 vmail vmail  3994 Sep 16 16:06 index.php

-rw-r–r– 1 vmail vmail  2655 Sep 16 16:06 INSTALL.TXT

drwxr-xr-x 2 vmail vmail  4096 Sep 16 16:06 languages

-rw-r–r– 1 vmail vmail  1651 Sep 16 16:06 LANGUAGE.TXT

-rw-r–r– 1 vmail vmail  5375 Sep 16 16:06 LICENSE.TXT

-rw-r—– 1 vmail vmail  1743 Sep 16 16:06 login.php

-rw-r—– 1 vmail vmail   494 Sep 16 16:06 logout.php

-rw-r—– 1 vmail vmail   869 Sep 16 16:06 main.php

-rw-r–r– 1 vmail vmail   981 Sep 16 16:06 motd-admin.txt.orig

-rw-r–r– 1 vmail vmail   262 Sep 16 16:06 motd.txt

-rw-r–r– 1 vmail vmail   262 Sep 16 16:06 motd-users.txt

-rw-r—– 1 vmail vmail  4827 Sep 16 16:06 overview.php

-rw-r—– 1 vmail vmail  2314 Sep 16 16:06 password.php

-rwxr-xr-x 1 vmail vmail   392 Sep 16 16:08 postfix_chmod.sh

-rw-r—– 1 vmail vmail  3233 Sep 16 16:06 search.php

-rw-r—– 1 vmail vmail  2119 Sep 16 16:06 sendmail.php

-rw-r—– 1 vmail vmail  5506 Sep 16 16:06 setup.php

-rw-r—– 1 vmail vmail  4204 Sep 16 16:06 stylesheet.css

-rw-r–r– 1 vmail vmail   456 Sep 16 16:06 TABLE_BACKUP_MX.TXT

-rw-r–r– 1 vmail vmail  3737 Sep 16 16:06 TABLE_CHANGES.TXT

drwxr-xr-x 2 vmail vmail  4096 Sep 16 16:06 templates

-rw-r–r– 1 vmail vmail  2303 Sep 16 16:06 UPGRADE.TXT

drwxr-xr-x 2 vmail vmail  4096 Sep 16 16:06 users

-rw-r—– 1 vmail vmail  1949 Sep 16 16:06 variables.inc.php

-rw-r—– 1 vmail vmail  1965 Sep 16 16:06 viewlog.php

drwxr-xr-x 2 vmail vmail  4096 Sep 16 16:06 VIRTUAL_VACATION

[root@mailserv2 postfixadmin]# more config.inc.php

 

//

// Postfix Admin

// by Mischa Peters

// Copyright (c) 2002 – 2005 High5!

// License Info: [url]http://www.postfixadmin.com/?file=LICENSE.TXT[/url]

//

// File: config.inc.php

//

if (ereg (“config.inc.php”, $_SERVER[`PHP_SELF`]))

{

   header (“Location: login.php”);

   exit;

}

 

// Postfix Admin Path

// Set the location to your Postfix Admin installation here.

$CONF[`postfix_admin_url`] = “;

$CONF[`postfix_admin_path`] = “;

 

// Language config

// Language files are located in `./languages`.

 

// Database Config

// mysql = MySQL 3.23 and 4.0

// mysqli = MySQL 4.1

// pgsql = PostgreSQL

$CONF[`database_type`] = `mysql`;

$CONF[`database_host`] = `localhost`;

$CONF[`database_user`] = `postfixadmin`;

$CONF[`database_password`] = `postfixadmin`;

$CONF[`database_name`] = `postfix`;

$CONF[`database_prefix`] = “;

…………………………省略若干……………………………………….

// Mailboxes

// If you want to store the mailboxes per domain set this to `YES`.

// Example: /usr/local/virtual/domain.tld/username@domain.tld

$CONF[`domain_path`] = `YES`;

// If you don`t want to have the domain in your mailbox set this to `NO`.

// Example: /usr/local/virtual/domain.tld/username

$CONF[`domain_in_mailbox`] = `NO`;

…………………………省略若干……………………………………….

// Default Domain Values

// Specify your default values below. Quota in MB.

$CONF[`aliases`] = `1000`;

$CONF[`maxquota`] = `1000`;

…………………………省略若干……………………………………….

// Quota

// When you want to enforce quota for your mailbox users set this to `YES`.

$CONF[`quota`] = `NO`;

// You can either use `1024000` or `1048576`

$CONF[`quota_multiplier`] = `1024000`;

…………………………省略若干……………………………………….

?>

[root@mailserv2 postfixadmin]# more  create-mailbox.php

 

//

// Postfix Admin

// by Mischa Peters

// Copyright (c) 2002 – 2005 High5!

// License Info: [url]http://www.postfixadmin.com/?file=LICENSE.TXT[/url]

……………………………………省略若干…………………………………….

$tQuota = $CONF[`maxquota`];

if ($fMail == “on”)

……………………………………省略若干…………………………………….

?>

[root@mailserv2 postfixadmin]# vi delete.php

……………………………………….省略很多………………………………

 

require (“./variables.inc.php”);

require (“./config.inc.php”);

require (“./functions.inc.php”);

include (“./languages/” . check_language () . “.lang”);

$SESSID_USERNAME = check_session();

……………………………………….省略很多………………………………     $result = db_query (“SELECT * FROM mailbox WHERE username=`$fDelete` AND domain=`$fDomain`”);

      $userarray=explode(“@”,$fDelete);

……………………………………….省略很多………………………………

 ?>

[root@mailserv2 ~] # cd /var/www/postfixadmin 
[root@mailserv2 ~] # mysql -u root < DATABASE_MYSQL.TXT

 

 

 

 

 

 

root@mailserv2 postfix]#  id vmail

uid=1001(vmail) gid=1001(vmail) groups=1001(vmail)

[root@mailserv2 mysql]# more mysql_virtual_alias_maps.cf

user = postfix

password = postfix

hosts = localhost

dbname = postfix

table = alias

select_field = goto

where_field = address

 

[root@mailserv2 mysql]# more mysql_virtual_domains_maps.cf

user = postfix

password = postfix

hosts = localhost

dbname = postfix

table = domain

select_field = description

where_field = domain

 

[root@mailserv2 mysql]# more mysql_virtual_mailbox_limit_maps.cf

user = postfix

password = postfix

hosts = localhost

dbname = postfix

table = mailbox

select_field = quota

where_field = username

 

[root@mailserv2 mysql]# more mysql_virtual_mailbox_maps.cf

user = postfix

password = postfix

hosts = localhost

dbname = postfix

table = mailbox

select_field = maildir

where_field = username

[root@mailserv2 postfix]# more master.cf

#

# Postfix master process configuration file.  For details on the format

# of the file, see the Postfix master(5) manual page.

#

# ==========================================================================

# service type  private unpriv  chroot  wakeup  maxproc command + args

#               (yes)   (yes)   (yes)   (never) (100)

# ==========================================================================

smtp      inet  n       –       n       –       –       smtpd

#submission inet n      –       n       –       –       smtpd

#       -o smtpd_etrn_restrictions=reject

#       -o smtpd_client_restrictions=permit_sasl_authenticated,reject

#smtps    inet  n       –       n       –       –       smtpd

#  -o smtpd_tls_wrappermode=yes -o smtpd_sasl_auth_enable=yes

#submission   inet    n       –       n       –       –       smtpd

#  -o smtpd_etrn_restrictions=reject

#  -o smtpd_enforce_tls=yes -o smtpd_sasl_auth_enable=yes

#628      inet  n       –       n       –       –       qmqpd

pickup    fifo  n       –       n       60      1       pickup

cleanup   unix  n       –       n       –       0       cleanup

qmgr      fifo  n       –       n       300     1       qmgr

#qmgr     fifo  n       –       n       300     1       oqmgr

tlsmgr    unix  –       –       n       1000?   1       tlsmgr

rewrite   unix  –       –       n       –       –       trivial-rewrite

bounce    unix  –       –       n       –       0       bounce

defer     unix  –       –       n       –       0       bounce

trace     unix  –       –       n       –       0       bounce

verify    unix  –       –       n       –       1       verify

flush     unix  n       –       n       1000?   0       flush

proxymap  unix  –       –       n       –       –       proxymap

smtp      unix  –       –       n       –       –       smtp

# When relaying mail as backup MX, disable fallback_relay to avoid MX loops

relay     unix  –       –       n       –       –       smtp

        -o fallback_relay=

#       -o smtp_helo_timeout=5 -o smtp_connect_timeout=5

showq     unix  n       –       n       –       –       showq

error     unix  –       –       n       –       –       error

discard   unix  –       –       n       –       –       discard

local     unix  –       n       n       –       –       local

virtual   unix  –       n       n       –       –       virtual

lmtp      unix  –       –       n       –       –       lmtp

anvil     unix  –       –       n       –       1       anvil

scache    unix  –       –       n       –       1       scache

#

# ====================================================================

# Interfaces to non-Postfix software. Be sure to examine the manual

# pages of the non-Postfix software to find out what options it wants.

#

# Many of the following services use the Postfix pipe(8) delivery

# agent.  See the pipe(8) man page for information about ${recipient}

# and other message envelope options.

# ====================================================================

#

# maildrop. See the Postfix MAILDROP_README file for details.

# Also specify in main.cf: maildrop_destination_recipient_limit=1

#

maildrop  unix  –       n       n       –       –       pipe

  flags=DRhu user=vmail:vmail argv=/usr/local/maildrop/bin/maildrop -d ${recipient}

#

# The Cyrus deliver program has changed incompatibly, multiple times.

#

old-cyrus unix  –       n       n       –       –       pipe

  flags=R user=cyrus argv=/cyrus/bin/deliver -e -m ${extension} ${user}

# Cyrus 2.1.5 (Amos Gouaux)

# Also specify in main.cf: cyrus_destination_recipient_limit=1

cyrus     unix  –       n       n       –       –       pipe

  user=cyrus argv=/cyrus/bin/deliver -e -r ${sender} -m ${extension} ${user}

#

# See the Postfix UUCP_README file for configuration details.

#

uucp      unix  –       n       n       –       –       pipe

  flags=Fqhu user=uucp argv=uux -r -n -z -a$sender – $nexthop!rmail ($recipient)

#

# Other external delivery methods.

#

ifmail    unix  –       n       n       –       –       pipe

  flags=F user=ftn argv=/usr/lib/ifmail/ifmail -r $nexthop ($recipient)

bsmtp     unix  –       n       n       –       –       pipe

  flags=Fq. user=foo argv=/usr/local/sbin/bsmtp -f $sender $nexthop $recipient

 

#############################################################################

#                antispam                                                   #

#############################################################################

smtp-amavis unix – – n – 2 smtp

  -o smtp_data_done_timeout=1200

  -o smtp_send_xforward_command=yes

  -o disable_dns_lookups=yes

 

localhost:10025 inet n – n – – smtpd

  -o content_filter=

  -o local_recipient_maps=

  -o relay_recipient_maps=

  -o mynetworks=127.0.0.0/8

  -o smtpd_helo_restrictions=

  -o smtpd_client_restrictions=

  -o smtpd_sender_restrictions=

  -o smtpd_recipient_restrictions=permit_mynetworks,reject

  -o strict_rfc821_envelopes=yes

  -o smtpd_error_sleep_time=0

  -o smtpd_soft_error_limit=1001

  -o smtpd_hard_error_limit=1000

[root@mailserv2 ~]# cd

[root@mailserv2 ~]# tar jxvf courier-imap-4.1.3.tar.bz2

[root@mailserv2 ~]# cd courier-imap-4.1.3

[root@mailserv2 courier-imap-4.1.3]# make

[root@mailserv2 courier-imap-4.1.3]# make install

[root@mailserv2 courier-imap-4.1.3]# make install-configure

 

 

[root@mailserv2 mailbox]# more /etc/maildroprc

logfile “/var/mailbox/maildrop.log” 

to “$HOME/$DEFAULT”

[root@mailserv2 mailbox]# tail  maildrop.log

Date: Sat Oct  6 12:45:20 2007

From: “Saundra Y. Echols” <saundra@MS13.HINET.NET>

Subj: No girls laugh at me now, haha, i laugh at them

File: /mail/mailbox//sery.com/magazine/                              (3355)

[root@mailserv2 ~]# more /usr/sbin/maildirmake.sh

#!/bin/bash

set -e

if [ ! -d /var/mailbox/$1 ]

then

mkdir /var/mailbox/$1

fi 

chown -R vmail:vmail /var/mailbox/$1

cd “/var/mailbox/$1”

/usr/local/imap/bin/maildirmake $2

mkdir /var/mailbox/$1/$2/Maildir

chown -R vmail:vmail /var/mailbox/$1/$2

 

[root@mailserv2 ~]# more /usr/sbin/maildirdel.sh

#!/bin/bash

rm -rf /var/mailbox/$1/$2

[root@mailserv2 ~]# useradd clamav
[root@mailserv2 ~]# cd
[root@mailserv2 ~]# cd clamav-0.91.2
[root@mailserv2 ~]# ./configure –prefix=/usr/local/clamav –with-dbdir=/usr/local/share/clamav –disable-zlib-vcheck 
[root@mailserv2 ~]# make
[root@mailserv2 ~]# make install

[root@mailserv2 ~]# more /root/amavis.sh

#!/bin/bash

cd /root

mkdir -p /var/amavis /var/amavis/tmp /var/amavis/var /var/amavis/db 
chown -R amavis:amavis /var/amavis 
chmod -R 750 /var/amavis 
cp amavisd /usr/local/sbin/ 
chown root /usr/local/sbin/amavisd 
chmod 755 /usr/local/sbin/amavisd 
cp amavisd.conf /etc/ 
chown root /etc/amavisd.conf 
chmod 644 /etc/amavisd.conf

mkdir /var/virusmails 
chown amavis:amavis /var/virusmails 
chmod 750 /var/virusmails

$max_servers=8;  
$daemon_user = `amavis`; 
$daemon_group = `amavis`; 
$mydomain = `sery.com`; 
$db_home = “$MYHOME/db”; 
$inet_socket_port = 10024; 
$sa_tag_level_deflt = -100;  
$sa_tag2_level_deflt = 6.3;  
$sa_kill_level_deflt = $sa_tag2_level_deflt; 
$virus_admin = “virusalert@$mydomain”; 
$sa_spam_subject_tag = `***SPAM*** `; 
$notify_method = $forward_method; 
$forward_method = `smtp:127.0.0.1:10025`;  
$final_virus_destiny = D_DISCARD; 
$final_banned_destiny = D_DISCARD; 
$final_spam_destiny = D_PASS; 
[`ClamAV-clamd`, 
&ask_daemon, [“CONTSCAN {}n”, “/var/run/clamav/clamd.socket”], 
qr/bOK$/, qr/bFOUND$/, 
qr/^.*?: (?!Infected Archive)(.*) FOUND$/ ],

[root@mailserv2 virusalert]# more /usr/local/bin/data_backup.sh

#!/bin/bash

BackupPath=/var/data_bk

Mysql_bk_dir=$BackupPath/mysqlbk

Mail_bk_dir=$BackupPath/mailbk

LogFile=$BackupPath/backuplog

MailBoxDir=/var/mailbox

 

####################################################################

# define mysql variables                                                     #

####################################################################

NewFile=”$Mysql_bk_dir”/postfix$(date +%Y%m%d).tgz

DumpFile=”$Mysql_bk_dir”/postfix$(date +%Y%m%d).sql

OldFile=”$Mysql_bk_dir”/postfix$(date +%Y%m%d –date=`5 days ago`).tgz

DbUser=root

DbPasswd=husb^R

DbName=postfix

####################################################################

#   mysql backup proccess                                                 #

####################################################################

echo “——————————————-” >> $LogFile

echo $(date +”%y-%m-%d %H:%M:%S”) >> $LogFile

echo “————————–” >> $LogFile

#Delete Old File

if [ -f $OldFile ]

then

   rm -f $OldFile >> $LogFile 2>&1

   echo “[$OldFile]Delete Old File Success!” >> $LogFile

else

   echo “[$OldFile]No Old Backup File!” >> $LogFile

fi

 

if [ -f $NewFile ]

then

   echo “[$NewFile]The Backup File is exists,Can`t Backup!” >> $LogFile

else

    cd $Mysql_bk_dir

/usr/local/mysql/bin/mysqldump -u $DbUser -p$DbPasswd –opt $DbName > $DumpFile

    tar czf $NewFile postfix$(date +%Y%m%d).sql >> $LogFile 2>&1

    echo “[$NewFile]Backup Success!” >> $LogFile

    rm -rf $DumpFile

fi

 

######################################################################

#     backup mail`s user directories and files                                    #

######################################################################

MailFileBk=$Mail_bk_dir/mail$(date +%Y%m%d).tgz

OldMailFileBk=$Mail_bk_dir/mail$(date +%Y%m%d –date=`14 days ago`).tgz

 

if [ -f $OldMailFileBk ]

then

   rm -rf $OldMailFileBk

fi

 

if [  -f $MailFileBk ]

   then

   echo “[$MailFileBk]The Backup File is exists,Can`t Backup!” >> $LogFile

   else

   cd /mail

   tar czf $MailFileBk mailbox  >> $LogFile 2>&1

fi

 

echo “——————————————-” >> $LogFile

[root@mailserv2 ~]# crontab -l

0 0 1 * * root wget -N -P /usr/share/spamassassin [url]www.ccert.edu.cn/spam/sa/Chinese_rules.cf;kill[/url] -HUP `cat /var/run/spamd.pid`

00 00 * * * /usr/local/clamav/bin/freshclam

[root@mailserv2 ~]# more /etc/rc.local

#!/bin/sh

#

# This script will be executed *after* all the other init scripts.

# You can put your own initialization stuff in here if you don`t

# want to do the full Sys V style init stuff.

 

touch /var/lock/subsys/local

 

################ normal services ############################

/usr/local/apache/bin/apachectl start

/usr/local/mysql/bin/mysqld_safe –user=mysql&

/usr/local/authlib/sbin/authdaemond start

 

############## postfix relatively ###########################

postfix start

/usr/local/imap/sbin/imapd start

 

################ antivirus and antispam #####################

/usr/bin/spamd –daemonize –pidfile /var/run/spamd.pid

/usr/local/sbin/amavisd start

/usr/local/clamav/sbin/clamd

 

############### system optimize #############################

/usr/local/bin/kernel_optimize

/usr/local/bin/firewall

 

################### NRPE nagios remote plugin execute $$$$$$$$$

/usr/local/nrpe/bin/nrpe -c /usr/local/nrpe/etc/nrpe.cfg -d