![[PukiWiki]](image/inamuu-logo2.png "[PukiWiki]"){kind=logo}
#author("2017-11-29T05:41:00+00:00","default:kazuma","kazuma") #author("2017-11-29T06:42:27+00:00","default:kazuma","kazuma") [[Postfix]] *環境 [#s0a41415] CentOS6 *事前インストール [#g7d23c94] # yum install postfix dovecot mysql-server dovecot-mysql php httpd cyrus-sasl-sql.x86_64 cyrus-sasl-devel.x86_64 cyrus-sasl-plain php-mbstring php-imap php-mysql *Postfixadmin 構築手順 [#g168f9d5] # cp -p /etc/postfix/main.cf /etc/postfix/main.cf.`date +%Y%m%d` # vi /etc/postfix/main.cf myhostname = mail01.example.jp mydomain = example.jp myorigin = $mydomain inet_interfaces = all mynetworks = 127.0.0.0/8, [::1]/128 home_mailbox = Maildir/ smtpd_banner = ESMTP unknown smtpd_sasl_auth_enable = yes smtpd_sasl_local_domain = $mydomain smtpd_recipient_restrictions = reject_unauth_destination permit_mynetworks reject_unauth_destination, permit_mynetworks, <-- localhostからも認証必須にする場合は削除する permit_sasl_authenticated broken_sasl_auth_clients=yes smtpd_client_restrictions = permit_mynetworks, reject_rbl_client all.rbl.jp, # reject_rbl_client list.dsbl.org, reject_rbl_client bl.spamcop.net, reject_rbl_client relays.ordb.org, reject_rbl_client sbl-xbl.spamhaus.org ### clamav #smtpd_milters = unix:/var/run/clamav/clamav-milter.sock #non_smtpd_milters = unix:/var/run/clamav/clamav-milter.sock #milter_default_action = accept ### Postfix admin settings local_transport = local virtual_transport = virtual virtual_mailbox_base = /home/mailuser virtual_alias_maps = mysql:/etc/postfix/mysql_virtual_alias_maps.cf virtual_alias_domains = $virtual_alias_maps virtual_mailbox_domains = mysql:/etc/postfix/mysql_virtual_domains_maps.cf virtual_mailbox_maps = mysql:/etc/postfix/mysql_virtual_mailbox_maps.cf virtual_minimum_uid = 5000 virtual_uid_maps = static:5000 virtual_gid_maps = static:5000 # vi /etc/postfix/mysql_virtual_alias_maps.cf [新規作成] user = postfixuser password = EX@mpLEP@ss2013 hosts = localhost dbname = postfix query = SELECT goto FROM alias WHERE address='%s' AND active = '1' # vi /etc/postfix/mysql_virtual_domains_maps.cf [新規作成] user = postfixuser password = EX@mpLEP@ss2013 hosts = localhost dbname = postfix query = SELECT domain FROM domain WHERE domain='%u' # vi /etc/postfix/mysql_virtual_mailbox_maps.cf [新規作成] user = postfixuser password = EX@mpLEP@ss2013 hosts = localhost dbname = postfix query = SELECT maildir FROM mailbox WHERE username = '%s' AND active = '1' # cp -p /etc/postfix/master.cf /etc/postfix/master.cf.20130319 # vi /etc/postfix/master.cf [変更] submission inet n - n - - smtpd # -o smtpd_tls_security_level=encrypt # -o smtpd_enforce_tls=yes -o smtpd_sasl_auth_enable=yes -o smtpd_client_restrictions=permit_sasl_authenticated,reject ***バーチャルドメイン用のユーザとグループを作成 [#x06dd755] # groupadd -g 5000 mailuser # useradd -u 5000 -g 5000 -d /home/mailuser -s /sbin/nologin mailuser ***postfixのsmtp-auth mysql設定 [#d980648e] # cp -p /etc/sasl2/smtpd.conf /etc/sasl2/smtpd.conf.`date +%Y%m%d` # vi /etc/sasl2/smtpd.conf # smtpd.conf pwcheck_method: auxprop auxprop_plugin: sql allowplaintext: yes mech_list: plain login sql_engine: mysql sql_hostnames: localhost sql_user: postfixuser sql_passwd: EX@mpLEP@ss2013 sql_database: postfix sql_select: SELECT password FROM mailbox WHERE username = '%u@%r' AND active = '1' *Postfixadminのインストールと設定 [#w31cb3ae] ***ユーザ情報登録用のデータベースを作成 [#x30b8338] # mysql -u root -p mysql> CREATE DATABASE postfix mysql> GRANT ALL PRIVILEGES ON postfix.* TO postfixuser@localhost IDENTIFIED BY 'EX@mpLEP@ss2013'; ***Postixadminの取得と設置 [#t99c3976] ※postfixadminは最新版を取得すること # wget "http://downloads.sourceforge.net/project/postfixadmin/postfixadmin/postfixadmin-2.3.5/postfixadmin-2.3.5.tar.gz?r=http%3A%2F%2Fsourceforge.net%2Fprojects%2Fpostfixadmin%2F&ts=1343955693&use_mirror=jaist" # tar xzvf postfixadmin-2.3.5.tar.gz # mv postfixadmin-2.3.5 /var/www/vhosts/mailmaster ***Postixadmin初期設定 [#u9e21e76] # cp -p /var/www/vhosts/mailmaster/config.inc.php /var/www/vhosts/mailmaster/config.inc.php.`date +%Y%m%d` # vi /var/www/vhosts/mailmaster/config.inc.php [変更箇所] $CONF['configured'] = true; $CONF['setup_password'] = 'changeme'; ←今は未記入のままでOK $CONF['default_language'] = 'ja'; $CONF['postfix_admin_url'] = 'http://www.example.jp/mailmaster'; //Database Config $CONF['database_user'] = 'postfixuser'; $CONF['database_password'] = 'EX@mpLEP@ss2013'; $CONF['database_name'] = 'postfix'; $CONF['admin_email'] = 'postmaster@example.jp'; $CONF['encrypt'] = 'cleartext'; $CONF['page_size'] = '100' $CONF['domain_path'] = 'YES'; $CONF['aliases'] = '300'; $CONF['mailboxes'] = '500'; $CONF['maxquota'] = '500'; ブラウザでhttp://xxx/mailmaster/setup.phpにアクセスする。 「Setup password」を入力してsubmitすると、 $CONF['setup_password'] = ‘aa45fgasfgkldhfahsldhf2asjdqweroajsdfasdfasd’; のようなパラメータが赤字で表示されるので、config.inc.phpに反映させる。 # vi /var/www/vhosts/mailmaster/config.inc.php [再修正] $CONF['setup_password'] = 'changeme'; 再度ブラウザでhttp://xxx/mailmaster/setup.phpにアクセスする。 再度setup.phpにアクセスして管理者（特権管理者となる）を登録する。 index.phpにアクセスするとログイン画面が表示されるので、 登録した管理者でログインする。 引き続きドメインの設定、ユーザの設定を行うとユーザ情報用のデータベースに以下のようなレコードが登録されている。 mysql> show tables; +-----------------------+ | Tables_in_postfix | +-----------------------+ | admin | | alias | | alias_domain | | config | | domain | | domain_admins | | fetchmail | | log | | mailbox | | quota | | quota2 | | vacation | | vacation_notification | +-----------------------+ 13 rows in set (0.00 sec) mysql> select * from domain; +-------------------------+-------------+---------+-----------+----------+-------+-----------+----------+---------------------+---------------------+--------+ | domain | description | aliases | mailboxes | maxquota | quota | transport | backupmx | created | modified | active | +-------------------------+-------------+---------+-----------+----------+-------+-----------+----------+---------------------+---------------------+--------+ | ALL | | 0 | 0 | 0 | 0 | | 0 | 0000-00-00 00:00:00 | 0000-00-00 00:00:00 | 1 | | example.jp | | 10 | 10 | 50 | 0 | virtual | 0 | 2012-08-03 10:14:35 | 2012-08-03 10:14:35 | 1 | +-------------------------+-------------+---------+-----------+----------+-------+-----------+----------+---------------------+---------------------+--------+ 2 rows in set (0.00 sec) mysql> select * from mailbox; +----------------------------------+------------------------------------+------+----------------------+----------+------------+-------------+---------------------+---------------------+--------+ | username | password | name | maildir | quota | local_part | domain | created | modified | active | +----------------------------------+------------------------------------+------+----------------------+----------+------------+-------------+---------------------+---------------------+--------+ | user001@example.jp | $1$s20dlgklksdfkworkgkj13k5lkdfg/ | | example.jp/user001/ | 51200000 | user001 | example.jp | 2012-08-03 11:22:16 | 2012-08-03 11:22:16 | 1 | +----------------------------------+------------------------------------+------+----------------------+----------+------------+-------------+---------------------+---------------------+--------+ 1 row in set (0.00 sec) *Dovecot設定 [#z4acfe99] # cp -p /etc/dovecot/dovecot.conf /etc/dovecot/dovecot.conf.`date +%Y%m%d` # vi /etc/dovecot/dovecot.conf [編集] protocols = pop3 imap disable_plaintext_auth = no mail_location = maildir:/home/mailuser/%d/%n/ ※%uだとドメイン名無しで認証する # cp -p /etc/dovecot/conf.d/10-auth.conf /etc/dovecot/conf.d/10-auth.conf.`date +%Y%m%d` # vi /etc/dovecot/conf.d/10-auth.conf [編集] disable_plaintext_auth = no auth_mechanisms = plain login #!include auth-system.conf.ext !include auth-sql.conf.ext # cp -p /etc/dovecot/conf.d/10-mail.conf /etc/dovecot/conf.d/10-mail.conf.`date +%Y%m%d` # vi /etc/dovecot/10-mail.conf [編集] mail_location = maildir:~/Maildir # cp -p /etc/dovecot/conf.d/10-master.conf /etc/dovecot/conf.d/10-master.conf.`date +%Y%m%d` # vi /etc/dovecot/conf.d/10-master.conf [編集] port = 143 port = 110 # cp -p /etc/dovecot/conf.d/auth-sql.conf.ext /etc/dovecot/conf.d/auth-sql.conf.ext.`date +%Y%m%d` # vi /etc/dovecot/conf.d/auth-sql.conf.ext [編集] passdb内↓ args = /etc/dovecot/conf.d/dovecot-sql.conf.ext userdb内↓ args = /etc/dovecot/conf.d/dovecot-sql.conf.ext # vi /etc/dovecot/conf.d/dovecot-sql.conf.ext [作成] driver = mysql default_pass_scheme = PLAIN connect = host=localhost dbname=postfix user=postfixuser password=EX@mpLEP@ss2013 password_query = SELECT password FROM mailbox WHERE username = '%u' AND active = '1' user_query = SELECT concat('/home/mailuser/', maildir) as home, 5000 as uid, 5000 as gid FROM mailbox WHERE username = '%u' AND active = '1' # chkconfig dovecot on ***備考 [#y216a1d4] 必要であればclamとspam設定を実施する
