CentOS 6.4 x64 postfix + dovecot + 虚拟用户认证
第一， 首先必须安装 apacache mysql php
CentOS 直接使用 yum 安装
yum -y install httpd httpd-devel mysql php-mysql mysql-server mysql-devel mysql-test mysql-connector-odbc64 php pam-devel perl-ExtUtils-CBuilder perl-ExtUtils-MakeMaker
第二，安装Postfix邮件
tar zxvf postfix-2.10.0.tar.gz
cd postfix-2.10.0
groupadd -g 1200 postdrop
groupadd -g 25 postfix
useradd -u 25 -g 25 -G postdrop -s /sbin/nologin -M postfix
make -f Makefile.init makefiles 'CCARGS=-DHAS_MYSQL -I/usr/include/mysql' 'AUXLIBS=-L/usr/lib64/mysql -lmysqlclient -lz -lm'
make install
其间需要配置，我们按照默认方式既可，一直按按回车，既为默认模式安装
输出以下信息:
----------------------------------------------------------------------------------------------------------------------------
Warning: you still need to edit myorigin/mydestination/mynetworks
parameter settings in /etc/postfix/main.cf.
See also http://www.postfix.org/STANDARD_CONFIGURATION_README.html
for information about dialup sites or about sites inside a firewalled
network.
BTW: Check your /etc/aliases file and be sure to set up aliases
that send mail for root and postmaster to a real person, then run
/usr/bin/newaliases.
-----------------------------------------------------------------------------------------------------------------------------
这里先关闭系统自带的sendmail
chkconfig --level 2345 sendmail off
激活别名功能
newaliases
使用postconf 可查看支持
postconf -m |grep mysql 查看是否支持mysql
第三，下面配置postfix
vim /etc/postfix/main.cf
修改 myhostname 为邮件域名
myhostname = mail.11111.com 改成自己的主机名
myorigin = $mydomain
inet_interfaces = all
mynetworks = 127.0.0.0/8
home_mailbox = Maildir/
启动 postfix
postfix start
---------------------------------------------------------------------
postfix/postfix-script: starting the Postfix mail system
----------------------------------------------------------------------
第四，安装配置 dovecot
1. 新建 dovecot 用户
useradd -M -s /sbin/nologin dovecot
编译安装 dovecot
tar zxvf dovecot-1.1.4.tar.gz
cd dovecot-1.1.4
./configure --sysconfdir=/etc/ --with-mysql
make -j 2 && make install
2. 配置 dovecot
cp /etc/dovecot-example.conf /etc/dovecot.conf
vim /etc/dovecot.conf
protocols = imap imaps pop3 pop3s
disable_plaintext_auth = no
ssl_disable = yes
mail_location = maildir:~/opt/mailbox/%d/%n/Maildir
3. 启动dovecot （-c指定配置文件)
/usr/local/sbin/dovecot -c /etc/dovecot.conf
ps aux|grep dovecot
lsof -i:110
lsof -i:143
第五，添加mysql 虚拟用户支持
tar zxvf extman-1.1.tar.gz
cd extman-1.1/docs/
1.导入数据库
mysql -uroot -p < extmail.sql
mysql -uroot -p < init.sql
2. 拷贝mysql认证配置文件到 postfix 目录
cp mysql_virtual_* /etc/postfix/
3. 建虚拟用户vuser
groupadd -g 1000 vuser
useradd -u 1000 -g 1000 -s /sbin/nologin -M vuser
mkdir /opt/mailbox
chown -R vuser:vuser /opt/mailbox
4. 修改main.cf 配置文件，增加以下内容支持mysql 认证查询
vim /etc/postfix/main.cf
# extmail config here
virtual_mailbox_base = /opt/mailbox
virtual_uid_maps = static:1000
virtual_gid_maps = static:1000
virtual_transport = virtual
virtual_alias_maps = mysql:/etc/postfix/mysql_virtual_alias_maps.cf
virtual_mailbox_domains = mysql:/etc/postfix/mysql_virtual_domains_maps.cf
virtual_mailbox_maps = mysql:/etc/postfix/mysql_virtual_mailbox_maps.cf
virtual_mailbox_limit_maps = mysql:/etc/postfix/mysql_virtual_limit_maps.cf
第六，搭建extmail
1. 安装依赖包.
tar zxvf Unix-Syslog-1.1.tar.gz
cd Unix-Syslog-1.1
perl Makefile.PL && make && make install
cd ..
tar zxvf DBI-1.616.tar.gz
cd DBI-1.616
perl Makefile.PL && make && make install
cd ..
tar zxvf DBD-mysql-4.020.tar.gz
cd DBD-mysql-4.020
perl Makefile.PL && make && make install
cd ..
2. 安装 extmail
tar zxvf extmail-1.2.tar.gz
cp -r extmail-1.2 /opt/htdocs/extmail
cd /opt/htdocs/extmail/
chown -R postfix:postfix cgi/
cp webmail.cf.default webmail.cf
vim webmail.cf
SYS_CONFIG = /opt/htdocs/extmail/
SYS_LANGDIR = /opt/htdocs/extmail/lang
SYS_TEMPLDIR = /opt/htdocs/extmail/html
SYS_MAILDIR_BASE = /opt/mailbox
SYS_MYSQL_USER = extmail
SYS_MYSQL_PASS = extmail
SYS_MYSQL_DB = extmail
SYS_MYSQL_HOST = localhost
SYS_MYSQL_SOCKET = /var/lib/mysql/mysql.sock
SYS_G_ABOOK_FILE_PATH = /opt/htdcos/extmail/globabook.cf
3. 配置httpd 虚拟主机
vim /etc/httpd/conf/httpd.conf
User vuser
Group vuser
<VirtualHost *:80>
ServerAdmin admin@moxian.com
DocumentRoot /var/www/html/extmail/html
ServerName mail.moxian.com
ErrorLog logs/error.log
CustomLog logs/access.log common
ScriptAlias /extmail/cgi/ "/var/www/html/extmail/cgi/"
Alias /extmail "/var/www/html/extmail/html/"
</VirtualHost>
第七，搭建extman
1. 安装依赖包.
yum install gd-devel -y
tar zxvf GD-2.46.tar.gz
cd GD-2.46
perl Makefile.PL && make && make install
cd ..
tar zxvf File-Tail-0.99.3.tar.gz
cd File-Tail-0.99.3
perl Makefile.PL && make && make install
cd ..
2. 安装图形日志依赖包rrdtool,rrdtool-perl (centos 6.0以上的可用 yum 安装 yum -y install rrdtool rrdtool-perl )
centos默认yum源中没有这两个包，所以需要手动添加yum源来安装这两个包
vim /etc/yum.repos.d/CentOS-Base.repo
---------------------------------------------------------------
[dag]
name=Dag RPM Repository for Red Hat Enterprise Linux
baseurl=http://apt.sw.be/redhat/el$releasever/en/$basearch/dag
gpgcheck=1
gpgkey=http://dag.wieers.com/rpm/packages/RPM-GPG-KEY.dag.txt
enabled=1
-------------------------------------------------------------------
yum install rrdtool rrdtool-perl -y
3. 安装extman
tar zxvf extman-1.1.tar.gz
cp -r extman-1.1 /opt/htdocs/extman
cd /opt/htdocs/extman/
chown -R postfix:postfix cgi/
mkdir /tmp/extman
chown -R postfix:postfix /tmp/extman/
chmod -R 777 /tmp/extman/
4. 修改extman配置参数, 让其支持MYSQL 查询
cp webman.cf.default webman.cf
vim webman.cf
SYS_CONFIG = /opt/htdocs/extman/
SYS_LANGDIR = /opt/htdocs/extman/lang
SYS_TEMPLDIR = /opt/htdocs/extman/html
SYS_MAILDIR_BASE = /opt/mailbox
SYS_SESS_DIR = /tmp/extman/
SYS_DEFAULT_UID = 1000
SYS_DEFAULT_GID = 1000
SYS_MYSQL_USER = webman
SYS_MYSQL_PASS = webman
SYS_MYSQL_DB = extmail
SYS_MYSQL_HOST = localhost
SYS_MYSQL_SOCKET = /var/lib/mysql/mysql.sock
5. 修改虚拟主机配置文件，使其支持extman
在上面虚拟机中添加
<VirtualHost *:80>
.......
ScriptAlias /extman/cgi "/opt/htdocs/extman/cgi/"
Alias /extman "/opt/htdocs/extman/html/"</VirtualHost>
6. 启动extman 中自带的图形化支持脚本
/opt/htdocs/extman/daemon/cmdserver -d
cp -a /opt/htdocs/extman/addon/mailgraph_ext/ /usr/local/
/opt/htdocs/extman/addon/mailgraph_ext/mailgraph-init start
/opt/htdocs/extman/addon/mailgraph_ext/qmonitor.pl &
第八，虚拟用户发信认证
1. 安装courier-authlib认证软件包
tar jxvf courier-authlib-0.62.4.tar.bz2
cd courier-authlib-0.62.4
./configure --prefix=/usr/local/courier-authlib --without-stdheaderdir --with-authmysql --with-mysql-libs=/usr/lib64/mysql/ --with-mysql-includes=/usr/include/mysql/
make -j 8 && make install && make install-configure
2. 把courier-authlib链接库添加进系统默认支持库
vim /etc/ld.so.conf.d/courier-authlib.conf
/usr/local/courier-authlib/lib/courier-authlib
3. 编辑authdaemonrc，使其支持mysql认证
cd /usr/local/courier-authlib/etc/authlib/
vim authdaemonrc
authmodulelist="authmysql"
authmodulelistorig="authmysql"
chmod -R 755 /usr/local/courier-authlib/var/spool/authdaemon/
4. 编辑authmysqlrc设置和mysql的连接参数.
cd /usr/local/courier-authlib/etc/authlib/
vim authmysqlrc
MYSQL_SERVER localhost
MYSQL_USERNAME extmail
MYSQL_PASSWORD extmail
MYSQL_SOCKET /var/lib/mysql/mysql.sock
MYSQL_PORT 3306
MYSQL_DATABASE extmail
MYSQL_USER_TABLE mailbox
MYSQL_CRYPT_PWFIELD password
MYSQL_UID_FIELD 1000
MYSQL_GID_FIELD 1000
MYSQL_LOGIN_FIELD username
MYSQL_HOME_FIELD concat('/opt/mailbox/',homedir)
MYSQL_NAME_FIELD name
MYSQL_MAILDIR_FIELD concat('/opt/mailbox/',maildir)
5. 将脚本文件添加进默认环境变量中,并添加开机启动程序
cp /opt/software/courier-authlib-0.62.4/courier-authlib.sysvinit /usr/local/bin/courier-authlib
chmod 755 /usr/local/bin/courier-authlib
courier-authlib start
6. 新建smtpd.conf文件，使postfix支持认证。
vim /usr/lib64/sasl2/smtpd.conf
----------------------------------------------------------------------------
pwcheck_method: authdaemond
mech_list:PLAIN LOGIN
authdaemond_path:/usr/local/courier-authlib/var/spool/authdaemon/socket
-----------------------------------------------------------------------------
cp -a /usr/local/courier-authlib/sbin/authtest /usr/local/sbin/
第九，虚拟用户收信认证
1. 编辑dovecot.conf 文件 打开mysql认证，关闭默认pam认证
vim /etc/dovecot.conf
--------------------------------------------------------------------------------------------------
protocols = imap imaps pop3 pop3s <---默认没有打开pop3，需要手动添加
disable_plaintext_auth = no <------允许plain认证
ssl_disable = yes<------禁用ssl加密
mail_location = maildir:~/opt/mailbox/%d/%n/Maildir
mechanisms = plain
#passdb pam {<--默认是打开的，需要注释掉
#}
passdb sql {
args = /etc/dovecot-mysql.conf
}
userdb sql {
args = /etc/dovecot-mysql.conf
}
---------------------------------------------------------------------------------------------------
2. 创建dovecot-mysql.conf，设置和mysql连接及查询参数
vim /etc/dovecot-mysql.conf
-----------------------------------------------------------------------------------------------------------------
driver = mysql
connect = host=localhost dbname=extmail user=extmail password=extmail
default_pass_scheme = CRYPT
password_query = SELECT username AS user,password AS password FROM mailbox WHERE username = '%u'
user_query = SELECT maildir, uidnumber AS uid, gidnumber AS gid FROM mailbox WHERE username = '%u'
--------------------------------------------------------------------------------------------------------------------
3. 重启 dovecot
pkill dovecot
dovecot -c /etc/dovecot.conf
第十，虚拟用户SASL身份认证
1. 重新编译 postfix
postfix stop
make makefiles 'CCARGS=-DHAS_MYSQL -I/usr/include/mysql -DUSE_SASL_AUTH -DUSE_CYRUS_SASL -I/usr/include/sasl -DUSE_TLS ' 'AUXLIBS=-L/usr/lib64/mysql -lmysqlclient -lz -lm -L/usr/lib64/sasl2 -lsasl2 -lssl -lcrypto'
make -j 8
2. 升级postfix (升级)
make upgrade
重新启动 postfix
postfix start
postconf -a 查看是否支持 cyrus
3. 修改main.cf配置文件，配置sasl认证参数
vim /etc/postfix/main.cf
在最后面增加 sasl认证
#sasl认证
smtpd_sasl_auth_enable = yes
broken_sasl_auth_clients = yes
smtpd_sasl_security_options = noanonymous
smtpd_recipient_restrictions =
permit_mynetworks,
permit_sasl_authenticated,
reject_non_fqdn_hostname,
reject_unknown_sender_domain,
reject_non_fqdn_sender,
reject_non_fqdn_recipient,
reject_unauth_destination,
reject_unauth_pipelining,
reject_invalid_hostname
smtpd_sender_login_maps =
mysql:/etc/postfix/mysql_virtual_sender_maps.cf,
mysql:/etc/postfix/mysql_virtual_alias_maps.cf
邮件过滤 dkim-milter
--------------------------------------------------------------------------------------------------
rpm -ivh http://download4.fedora.redhat.com/pub/epel/5/`uname -i`/dkim-milter-2.8.3-8.el5.`uname -i`.rpm --nodeps
wget -O dkim-milter.tar.gz http://sourceforge.net/projects/dkim-milter/files/latest/download?source=files
tar zxvf dkim-milter.tar.gz
cd dkim-milter-*
mkdir -p /etc/dkim-milter/keys/
cp ./dkim-filter/dkim-genkey.sh /etc/dkim-milter/keys/
cd /etc/dkim-milter/keys/
chmod +x ./dkim-genkey.sh
chown dkim-milter /etc/dkim-milter
chmod 700 /etc/dkim-milter
chgrp postfix /var/run/dkim-milter
chmod 770 /var/run/dkim-milter
./dkim-genkey.sh -r -d `hostname -f`
chown dkim-milter /etc/dkim-milter/keys/default.private
mv /etc/dkim-milter/keys/default.private /etc/dkim-milter/keys/default.key.pem
#会生成default.txt 和 default.private
#根据default.txt 里面的内容，将DNS的TXT记录添加好
#default.private已安置好，并改名为default.key.pem，可以使用了
#下面的命令，大家根据实际微调
echo "*@moxianmail.com:moxianmail.com:/etc/dkim-milter/keys/default.key.pem" >> /etc/mail/dkim-milter/keys/keylist
echo 'AutoRestart yes' >> /etc/mail/dkim-milter/dkim-filter.conf
echo 'AutoRestartRate 10/1h' >> /etc/mail/dkim-milter/dkim-filter.conf
echo 'Domain kn007.net' >> /etc/mail/dkim-milter/dkim-filter.conf
echo 'SubDomains yes' >> /etc/mail/dkim-milter/dkim-filter.conf
echo 'Selector default' >> /etc/mail/dkim-milter/dkim-filter.conf
echo 'KeyFile /etc/dkim-milter/keys/default.key.pem' >> /etc/mail/dkim-milter/dkim-filter.conf
echo 'Background yes' >> /etc/mail/dkim-milter/dkim-filter.conf
echo 'Socket inet:8891' >> /etc/mail/dkim-milter/dkim-filter.conf
echo 'Userid dkim-milter' >> /etc/mail/dkim-milter/dkim-filter.conf
echo 'smtpd_milters = inet:8891' >> /etc/postfix/main.cf
echo 'non_smtpd_milters = inet:8891' >> /etc/postfix/main.cf
echo 'milter_protocol = 2' >> /etc/postfix/main.cf
echo 'milter_default_action = accept' >> /etc/postfix/main.cf
chkconfig --level 345 dkim-milter on
service dkim-milter start
service postfix restart
cat /var/log/maillog
错误 1
Can't locate CPAN.pm in @INC (@INC contains: /usr/local/lib64/perl5 /usr/local/share/perl5 /usr/lib64/perl5/vendor_perl /usr/share/perl5/vendor_perl /usr/lib64/perl5 /usr/share/perl5 .).
BEGIN failed--compilation aborted.
yum -y install perl-CPAN
然后
perl -MCPAN -eshell
出现 cpan[1]>
输入
install CGI
错误 2
warning: dict_nis_init: NIS domain name not set - NIS lookups disabled
postfix/smtpd[7256]: connect from unknown[113.116.237.125]
postfix/smtpd[7256]: warning: xsasl_cyrus_server_get_mechanism_list: no applicable SASL mechanisms
postfix/smtpd[7256]: fatal: no SASL authentication mechanisms
postfix/master[7247]: warning: process /usr/libexec/postfix/smtpd pid 7256 exit status 1
postfix/master[7247]: warning: /usr/libexec/postfix/smtpd: bad command startup -- throttling
ln -s /usr/local/lib/sasl2 /usr/lib/sasl2
yum -y install cyrus-sasl-plain cyrus-sasl-sql
=====================================================================================
常用命令维护：
查询邮件队列：postqueue -p
清除所有邮件队列：postsuper -d ALL
