在Fedora上建立自己的邮件服务器

由 viento 在 11-22-2003 07:20 发表:

在Fedora上建立自己的邮件服务器

在Fedora上建立自己的邮件服务器

Postfix + Mysql + Sasl + Courier-imap

/////飘飘于2003.11.20 barcelona////

一，软件的准备

A. 检查你的系统是否已安装了以下软件，

1. pam

2. pam-devel

3. mysql

4. mysql-servel

5. mysql-devel

6. imap-devel

7. sharutils

B. 下载以下软件

1. metamail*.i386.rpm

2. pam-mysql

3. cyrus-sasl-2.1.15

4. postfix-2.0.16

5. courier-imap

C.说明

mysql-devel在第3个盘。我忘了装，结果pam-mysql和postfix的编译过不了。metamail和sharutils是取验证码用的。

二，mysql数据库和表的建立。

A. [root@localhost root]# mysql

Welcome to the MySQL monitor. Commands end with ; or \g.

Your MySQL connection id is 3 to server version: 3.23.58

Type 'help;' or '\h' for help. Type '\c' to clear the buffer.

mysql> use mysql

Reading table information for completion of table and column names

You can turn off this feature to get a quicker startup with -A

Database changed

mysql> INSERT INTO db (Host,Db,User,Select_priv)VALUES('localhost','postfix','postfix','Y');

Query OK, 1 row affected (0.00 sec)

mysql> CREATE DATABASE postfix;

Query OK, 1 row affected (0.00 sec)

mysql> GRANT ALL ON postfix.* TO postfix@localhost

-> IDENTIFIED BY "postfix";

Query OK, 0 rows affected (0.00 sec)

mysql> FLUSH PRIVILEGES;

Query OK, 0 rows affected (0.00 sec)

mysql> quit

Bye

B. 把下列文字复制存为postfix.sql

########potfix_sql########bigin##################

CREATE TABLE alias (

username varchar(255) NOT NULL default'',

goto text NOT NULL,

domain varchar(255) NOT NULL default'',

PRIMARY KEY (username)

) TYPE=MyISAM;

CREATE TABLE domain (

domain varchar(255) NOT NULL default'',

description varchar(255) NOT NULL default'',

PRIMARY KEY (domain)

) TYPE=MyISAM;

CREATE TABLE mailbox (

userid char(20) binary NOT NULL default'',

username varchar(255) NOT NULL default'',

password varchar(255) NOT NULL default'',

home varchar(255) NOT NULL default'',

maildir varchar(255) NOT NULL default'',

name varchar(255) NOT NULL default'',

uid smallint(5) unsigned NOT NULL default'12345',

gid smallint(5) unsigned NOT NULL default'12345',

quota varchar(255) NOT NULL default'',

domain varchar(255) NOT NULL default'',

create_date date NOT NULL default'0000-00-00',

create_time time NOT NULL default'00:00:00',

change_date date NOT NULL default'0000-00-00',

change_time time NOT NULL default'00:00:00',

last_access int(10) unsigned NOT NULL default'0',

passwd_lastchanged int(10) unsigned NOT NULL default'0',

status tinyint(4) NOT NULL default'1',

PRIMARY KEY (username),

KEY status (status)

) TYPE=MyISAM;

#####################end########################

[root@localhost root]# mysql postfix < /work/postfix.sql

C. 对表的内容的一些说明.

mysql> use postfix

Reading table information for completion of table and column names

You can turn off this feature to get a quicker startup with -A

Database changed

mysql> show tables;

+-------------------+

| Tables_in_postfix |

+-------------------+

| alias |

| domain |

| mailbox |

+-------------------+

3 rows in set (0.00 sec)

mysql> desc alias;

+----------+--------------+------+-----+---------+-------+

+----------+--------------+------+-----+---------+-------+

+----------+--------------+------+-----+---------+-------+

3 rows in set (0.00 sec)

mysql> desc domain;

+-------------+--------------+------+-----+---------+-------+

+-------------+--------------+------+-----+---------+-------+

+-------------+--------------+------+-----+---------+-------+

2 rows in set (0.00 sec)

mysql> desc mailbox;

+--------------------+----------------------+------+-----+------------+-------+

+--------------------+----------------------+------+-----+------------+-------+

| uid | smallint(5) unsigned | | | 12345 | |

| gid | smallint(5) unsigned | | | 12345 | |

| status | tinyint(4) | | MUL | 1 | |

+--------------------+----------------------+------+-----+------------+-------+

17 rows in set (0.00 sec)

mysql>

domain表的解释:

domain 任意的domain.

description 通常是2种 "local:" 用于本地的 or "virtual:" 用于是虚拟的.

alias表的解释:

username 是虚拟的邮箱[email protected] ，将被转发到goto下的联结中.

goto 可以用简单的名字，如果是本地用户名，如(root, postmaster, etc.), 或者是整个的邮箱名字，[email protected]。

Mailbox表的内容:

Userid 使用者编码

username 可以是user.domain.tld 或 [email protected]

password 在mysql中用encrypt('password') 输入.

name 使用着的真实姓名。

uid 虚拟用户身份uid

gid 组的gid

home "/usr/local/virtual/". Maildirs必须在此目录下。

domain 这栏可以不要，但有些软件需要他。

maildir 是整个地址，必须带”/”结尾。

Quota 邮箱的空间或信息量的限制。

status 0 为禁止。"MYSQL_WHERE_CLAUSE= status" .

三，pam-mysql的编译

tar pam-mysql-5.0.tar.gz

make cp pam_mysql.so /lib/security

四，修改pam.

[root@localhost pam_mysql]# cd /etc/pam.d

[root@localhost pam.d]# cp /work/postfix postfix

[root@localhost pam.d]#

postfix的内容如下：

##########/etc/pam.d/postfix##################

echo auth sufficient pam_mysql.so user=postfix passwd=postfix host=localhost db=postfix table=mailbox usercolumn=username passwdcolumn=password crypt=1

echo account required pam_mysql.so user=postfix passwd=postfix host=localhost db=postfix table=mailbox usercolumn=username passwdcolumn=password crypt=1

echo auth sufficient pam_unix_auth.so

echo account sufficient pam_unix_acct.so

[root@localhost pam.d]# [ -f imap ] && mv imap imap.orig

[root@localhost pam.d]# [ -f pop ] && mv pop pop.orig

[root@localhost pam.d]# [ -f smtp ] && mv smtp smtp.orig

[root@localhost pam.d]# n -s postfix imap

bash: n: command not found

[root@localhost pam.d]# ln -s postfix imap

[root@localhost pam.d]# ln -s postfix pop

[root@localhost pam.d]# ln -s postfix smtp

[root@localhost pam.d]# cp postfix sieve

[root@localhost pam.d]# cd ..

五，cyrus-sasl的安装配置

我本不想重新编译cyrus-sasl的，可是fedora自带的在我测试的时候出问题，还是重编译吧，虽然fedora带的也是2.1.15版本。

[root@localhost etc]# cd /ruanjian

[root@localhost ruanjian]# cd cyrus-sasl-2.1.15

[root@localhost cyrus-sasl-2.1.15]# ./configure --disable-sample \

> --disable-pwcheck --disable-gssapi --disable-cram \

> --disable-digest --disable-krb4 --disable-anon \

> --with-saslauthd=/var/run/saslauthd \

> --enable-plain --enable-login

[root@localhost cyrus-sasl-2.1.15]# [ -d /usr/lib/sasl2 ] && mv /usr/lib/sasl2 /usr/lib/sasl2.orig

[root@localhost cyrus-sasl-2.1.15]# ln -s /usr/local/lib/sasl2 /usr/lib/sasl2

[root@localhost cyrus-sasl-2.1.15]# echo /usr/local/lib >> /etc/ld.so.conf

[root@localhost cyrus-sasl-2.1.15]# echo /usr/local/lib/sasl2 >> /etc/ld.so.conf

[root@localhost cyrus-sasl-2.1.15]# ldconfig

[root@localhost cyrus-sasl-2.1.15]#

[root@localhost cyrus-sasl-2.1.15]# echo pwcheck_method: saslauthd > /usr/lib/sasl2/smtpd.conf

[root@localhost cyrus-sasl-2.1.15]# /usr/local/sbin/saslauthd -a pam

[root@localhost cyrus-sasl-2.1.15]#

六，postfix的安装和配置。

A.先停止sendmail.fedora已经默认安装了sendmail,去掉它。

[root@localhost ruanjian]# /etc/init.d/sendmail stop

关闭 sendmail： [失败]

[root@localhost ruanjian]# mv /usr/bin/newaliases /usr/bin/newaliases.orig

[root@localhost ruanjian]# mv /usr/bin/mailq /usr/bin/mailq.orig

[root@localhost ruanjian]# mv /usr/sbin/sendmail /usr/sbin/sendmail.orig

B.添加用户和组

[root@localhost ruanjian]# groupadd -g 12345 postfix

[root@localhost ruanjian]# groupadd -g 12346 postdrop

[root@localhost ruanjian]# useradd -u 12345 -g 12345 -c postfix -d /dev/null -s /nologin postfix

C.编译postfix

[root@mail ruanjian]# cd postfix-2.0.16

[root@mail postfix-2.0.16]# make -f Makefile.init makefiles \

> 'CCARGS=-DUSE_SASL_AUTH -DHAS_MYSQL -I/usr/include/mysql -I/usr/include/sasl' \

> 'AUXLIBS=-L/usr/lib/mysql -L/usr/local/lib/sasl2 -lmysqlclient -lsasl2 -lz -lm'

[root@mail postfix-2.0.16]# make install

[root@localhost postfix-2.0.16]# cd /etc

[root@localhost etc]# mv aliases aliases.orig

[root@localhost etc]# ln -s postfix/aliases aliases

[root@localhost etc]# cd postfix

[root@localhost postfix]# echo 'root: tester' >> /etc/postfix/aliases

[root@localhost postfix]# postalias /etc/postfix/aliases

[root@localhost postfix]#

D.配置postfix.

1. 主要是main.cf的配置。

virtual_alias_maps = mysql:/etc/postfix/mysql_virtual_alias_maps.cf

virtual_gid_maps = static:12345

virtual_mailbox_base = /usr/local/virtual

virtual_mailbox_domains = mysql:/etc/postfix/mysql_virtual_domains_maps.cf

virtual_mailbox_maps = mysql:/etc/postfix/mysql_virtual_mailbox_maps.cf

virtual_mailbox_limit = 51200000

virtual_minimum_uid = 1001

virtual_transport = virtual

virtual_uid_maps = static:12345

smtpd_sasl_auth_enable = yes

#smtpd_sasl_local_domain = $myhostname

smtpd_recipient_restrictions = permit_mynetworks permit_sasl_authenticated permit_auth_destination reject

smtpd_sasl_security_options = noanonymous

smtpd_client_restrictions = permit_sasl_authenticated

broken_sasl_auth_clients = yes

2. mysql_virtual_alias_maps.cf 如下

user = postfix

password = postfix

hosts = localhost

dbname = postfix

table = alias

select_field = goto

where_field = username

3. mysql_virtual_domains_maps.cf 如下

user = postfix

password = postfix

hosts = localhost

dbname = postfix

table = domain

select_field = description

where_field = domain

4. mysql_virtual_mailbox_maps.cf 如下

user = postfix

password = postfix

hosts = localhost

dbname = postfix

table = mailbox

select_field = maildir

where_field = username

E.建立

[root@localhost root]# mkdir /usr/local/virtual

[root@localhost root]# chown -R postfix ostfix /usr/local/virtual

[root@localhost root]# chmod -R 751 /usr/local/virtual

七.测试端口25

A. mysql> use postfix

Reading table information for completion of table and column names

You can turn off this feature to get a quicker startup with -A

Database changed

mysql> show tables;

+-------------------+

| Tables_in_postfix |

+-------------------+

| alias |

| domain |

| mailbox |

+-------------------+

3 rows in set (0.00 sec)

mysql> INSERT INTO alias (username,goto) VALUES ('[email protected]','[email protected]');

Query OK, 1 row affected (0.08 sec)

mysql> INSERT INTO domain (domain,description) VALUES ('lansemail.com','local:'); Query OK, 1 row affected (0.00 sec)

mysql> INSERT INTO mailbox (username,password,home,maildir,name,domain,create_date,create_time) VALUES('tester','$1$pi.WVgBx$a3dUCzBnbY76jnZlqWQCQ/','/usr/local/virtual/','[email protected]/','tester','lansemail.com','2003-11-19','21:24:00'); Query OK, 1 row affected (0.03 sec)

mysql> select * from mailbox

-> ;

+--------+----------+------------------------------------+---------------------+-----------------------+--------+-------+-------+-------+---------------+-------------+-------------+-------------+-------------+-------------+--------------------+--------+

| | tester | $1$pi.WVgBx$a3dUCzBnbY76jnZlqWQCQ/ | /usr/local/virtual