Linux/Mailserver/Postfix Satellite: Difference between revisions

Latest revision as of 16:50, 17 May 2017

Installation

install postfix

apt-get install postfix

postfix configuration (automatic during installation or "dpkg-reconfigure postfix")
- "Satellite System"
- System-Email-Name: "domain.de"
- SMTP-Relay-Server: "smtp.domain.de"

Configuration

/etc/mailname

localhostname.localdomain

/etc/postfix/main.cf

smtpd_banner = $myhostname ESMTP $mail_name (Ubuntu)
biff = no

append_dot_mydomain = no
#delay_warning_time = 4h
readme_directory = no

# TLS parameters
smtpd_tls_cert_file=/etc/ssl/certs/ssl-cert-snakeoil.pem
smtpd_tls_key_file=/etc/ssl/private/ssl-cert-snakeoil.key
smtpd_use_tls=yes
smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache
smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache

myhostname = localhostname.localdomain
mydomain = localdomain
alias_maps = hash:/etc/aliases
alias_database = hash:/etc/aliases

relayhost = [smtp.domain.de]:submission
mynetworks = 127.0.0.0/8 [::ffff:127.0.0.0]/104 [::1]/128
mailbox_size_limit = 0
recipient_delimiter = +
inet_interfaces = loopback-only
inet_protocols = all

recipient_canonical_maps = hash:/etc/postfix/canonical_recipients
sender_canonical_maps = hash:/etc/postfix/canonical_senders

smtp_tls_note_starttls_offer = yes
smtp_tls_security_level = encrypt
smtp_tls_mandatory_ciphers = high

smtp_sasl_auth_enable = yes
smtp_sasl_security_options = noanonymous noplaintext
smtp_sasl_tls_security_options = noanonymous
smtp_sasl_password_maps = hash:/etc/postfix/sasl_password

create files

touch /etc/postfix/canonical_recipients
touch /etc/postfix/canonical_senders
touch /etc/postfix/sasl_password
chmod 600 /etc/postfix/sasl_password
touch /etc/postfix/reload.sh
chmod 744 /etc/postfix/reload.sh

/etc/postfix/canonical_recipients

root         server@domain.de
postmaster   root
webmaster    root
user         user@domain.de

/etc/postfix/canonical_senders

root         hostname@domain.de
postmaster   root
webmaster    root
user         root

/etc/postfix/sasl_password

[smtp.domain.de]:submission      username:password

/etc/postfix/reload.sh

#!/bin/bash
newaliases
postmap /etc/postfix/canonical_recipients
postmap /etc/postfix/canonical_senders
postmap hash:/etc/postfix/sasl_password 
/etc/init.d/postfix restart

quick test

echo Emailtext | mail -s "Subject" user@domain.de

Restart

reload maps

postmap /etc/postfix/canonical_recipients
postmap /etc/postfix/canonical_senders
postmap hash:/etc/postfix/sasl_password

restart address mapping

/etc/init.d/postfix restart

@@ Line 9: / Line 9: @@
 * postfix configuration (automatic during installation or "dpkg-reconfigure postfix")
 ** "Satellite System"
-** "domain.de"
+** System-Email-Name: "domain.de"
-** "smtp.domain.de"
+** SMTP-Relay-Server: "smtp.domain.de"
 == Configuration ==
@@ Line 26: / Line 26: @@
 biff = no
-# appending .domain is the MUA's job.
 append_dot_mydomain = no
-# Uncomment the next line to generate "delayed mail" warnings
 #delay_warning_time = 4h
 readme_directory = no
@@ Line 41: / Line 37: @@
 smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache
-# See /usr/share/doc/postfix/TLS_README.gz in the postfix-doc package for
+myhostname = localhostname.localdomain
-# information on enabling SSL in the smtp client.
+mydomain = localdomain
-myorigin = vm-dev.mlnet
-myhostname = vm-dev.mlnet
-mydomain = mlnet
-mydestination =
-#vm-dev.mlnet, localhost.mlnet, localhost
 alias_maps = hash:/etc/aliases
 alias_database = hash:/etc/aliases
-relayhost = smtp.marcluerssen.de
+relayhost = [smtp.domain.de]:submission
 mynetworks = 127.0.0.0/8 [::ffff:127.0.0.0]/104 [::1]/128
 mailbox_size_limit = 0
@@ Line 58: / Line 48: @@
 inet_interfaces = loopback-only
 inet_protocols = all
-#default_transport = smtp
-#relay_transport = smtp
 recipient_canonical_maps = hash:/etc/postfix/canonical_recipients
 sender_canonical_maps = hash:/etc/postfix/canonical_senders
-#smtp_use_tls = yes
 smtp_tls_note_starttls_offer = yes
-#smtp_enforce_tls = yes
 smtp_tls_security_level = encrypt
 smtp_tls_mandatory_ciphers = high
@@ Line 73: / Line 58: @@
 smtp_sasl_auth_enable = yes
 smtp_sasl_security_options = noanonymous noplaintext
-smtp_sasl_tls_security_options = noanonymous noplaintext
+smtp_sasl_tls_security_options = noanonymous
 smtp_sasl_password_maps = hash:/etc/postfix/sasl_password
+</pre>
+</blockquote>
+* create files
+<blockquote>
+<pre>
+touch /etc/postfix/canonical_recipients
+touch /etc/postfix/canonical_senders
+touch /etc/postfix/sasl_password
+chmod 600 /etc/postfix/sasl_password
+touch /etc/postfix/reload.sh
+chmod 744 /etc/postfix/reload.sh
 </pre>
 </blockquote>
-* /etc/postfix/canonical_recipients (+canonical_senders)
+* /etc/postfix/canonical_recipients
 <blockquote>
 <pre>
-root user@domain.de
+root         server@domain.de
-postmaster user@domain.de
+postmaster   root
-webmaster user@domain.de
+webmaster    root
+user         user@domain.de
+</pre>
+</blockquote>
+* /etc/postfix/canonical_senders
+<blockquote>
+<pre>
+root         hostname@domain.de
+postmaster   root
+webmaster    root
+user         root
 </pre>
 </blockquote>
@@ Line 91: / Line 100: @@
 <blockquote>
 <pre>
-touch /etc/postfix/sasl_password
+[smtp.domain.de]:submission      username:password
-echo "smtp.domain.de username:password" > sasl_password
+</pre>
-chmod 600 sasl_password
+</blockquote>
+* /etc/postfix/reload.sh
+<blockquote>
+<pre>
+#!/bin/bash
+newaliases
+postmap /etc/postfix/canonical_recipients
+postmap /etc/postfix/canonical_senders
+postmap hash:/etc/postfix/sasl_password
+/etc/init.d/postfix restart
 </pre>
 </blockquote>
+== quick test ==
+<pre>
+echo Emailtext | mail -s "Subject" user@domain.de
+</pre>
 == Restart ==