|
RHEL5上安装邮件系统Postfix+CyrusSASL+dovecot+MailScanner+spamassassin+f-prot
LEO
默认方式安装RHEL5，不选中任何类型服务器（如WEB服务器，开发服务器，虚拟服务器等）
安装postfix
[root@rhel5 ~]# /etc/rc.d/init.d/sendmail stop
关闭 sm-client： [确定]
关闭 sendmail： [确定]
[root@rhel5 ~]# chkconfig sendmail off
[root@rhel5 Server]# rpm -ivh postfix-2.3.3-2.i386.rpm
[root@rhel5 Server]# vi /etc/postfix/main.cf
myhostname = mail.mailidc.cn #设置运行postfix服务的邮件主机的主机名、域名
mydomain = mailidc.cn
myorigin = $mydomain #设置由本机寄出的邮件所使用的域名或主机名称
inet_interfaces = all #设置postfix服务监听的网络接口
mydestination = $myhostname, $mydomain, localhost.$mydomain, localhost #设置可接收邮件的主机名称或域名
mynetworks = 127.0.0.1 #设置可转发哪些网络的邮件
relay_domains = $mydestination #设置可转发哪些网域的邮件
保存文件。
检查postfix的配置：
[root@rhel5 Server]# postconf –n
[root@rhel5 ~]# chkconfig postfix on
將postfix加入到root的组：
# usermod -G root postfix
SMTP认证的配置
安装cyrus-sasl
1、确认cyrus-sasl是否安装了
[root@rhel5 Server]# rpm -qa|grep cyrus
cyrus-sasl-plain-2.1.22-4
cyrus-sasl-lib-2.1.22-4
cyrus-sasl-2.1.22-4
Cyrus-SASL V2的密码验证机制
[root@rhel5 ~]# saslauthd -v
saslauthd 2.1.22
authentication mechanisms: getpwent kerberos5 pam rimap shadow ldap
我们准备用的是shadow的密码验证机制。
vi /etc/sysconfig/saslauthd
MECH=shadow
启动sasl的daemon并测试：
# service saslauthd start
# /usr/sbin/testsaslauthd -u 帐号 -p '密码'
0: OK "Success." =>帐号验证成功了
[root@rhel5 ~]# chkconfig saslauthd on
设置postfix启用SMTP认证
[root@rhel5 Server]# vi /etc/postfix/main.cf
smtpd_sasl_auth_enable = yes
smtpd_sasl_local_domain= ''
smtpd_recipient_restrictions = permit_mynetworks,permit_sasl_authenticated,
reject_unauth_destination
broken_sasl_auth_clients = yes
smtpd_client_restrictions = permit_sasl_authenticated
smtpd_sasl_security_options = noanonymous
wq!保存
此外，由于当postfix要使用SMTP认证时，会读取/usr/lib/sasl2/smtpd.conf文件的内容以确定所采用的认证方式，所以必须保证/usr/lib/sasl2/smtpd.conf文件的内容是：
pwcheck_method: saslauthd
安装设定dovecot（imap、pop3）：
1、确认dovecot是否有安装：
[root@rhel5 ~]# rpm -qa|grep dovecot
dovecot-1.0-1.2.rc15.el5
2、设定用pop3来收取信件：
#vi /etc/dovecot.conf
protocols = pop3 # imap imaps pop3 pop3s 支持的功能
3、启动并测试：
#service dovecot start
# telnet localhost 110
Trying 127.0.0.1...
Connected to localhost.
Escape character is '^]'.
+OK dovecot ready.
user 账号
+OK
pass 密码
+OK Logged in.
[root@rhel5 ~]# chkconfig dovecot on
到这里postfix、Cyrus SASL、dovecot就可以正常工作了。
----------------------------------------------------------------------------------------------------------------------
让postfix支持MailScanner、spamassassin、f-prot
A、安装 F-PROT (F-PROT Antivirus for Linux)
从http://files.f-prot.com/files/linux-x86/fp-linux-ws.rpm下载 f-prot
[root@rhel5 ~]# rpm -ivh fp-linux-ws.rpm
B、安装MailScanner
下载http://www.mailscanner.info/file ... 4.60.8-1.rpm.tar.gz
版本.rpm.tar.gz
（这里可能会少些perl的套件，出现错误讯息！请照着错误讯息要的rpm装完即可！）
# tar zxvf MailScanner-4.60.8-1.rpm.tar.gz
# cd MailScanner-4.60.8-1
# ./install.sh
C、安装spamassassin
1、确认spamassassin是否有安装：
# rpm -qa |grep spam
如没有安装就安装该包
[root@rhel5 Server]# rpm -ivh spamassassin-3.1.7-4.el5.i386.rpm
2建立Mailscanner支持spamassassin所需的目录：
# mkdir /var/spool/MailScanner/spamassassin
# chmod 700 /var/spool/MailScanner/spamassassin
# chown postfix.postfix /var/spool/MailScanner/spamassassin
3、修改spamassassin的设定档local.cf
可到站点http://www.yrex.com/spam/spamconfig.php自动生成local.cf的内容。
# vi /etc/mail/spamassassin/local.cf
# How many hits before a message is considered spam.
required_hits 5.0
# Whether to change the subject of suspected spam
rewrite_subject 1
# Text to prepend to subject if rewrite_subject is used
subject_tag *****SPAM*****
# Encapsulate spam in an attachment
report_safe 1
# Use terse version of the spam report
use_terse_report 0
# Enable the Bayes system
use_bayes 1
# Enable Bayes auto-learning
auto_learn 1
# Enable or disable network checks
skip_rbl_checks 1
use_razor2 0
use_dcc 0
use_pyzor 0
# Mail using languages used in these country codes will not be marked
# as being possibly spam in a foreign language.
ok_languages all
# Mail using locales used in these country codes will not be marked
# as being possibly spam in a foreign language.
ok_locales all
4、启动spamassassin
# service spamassassin start
MailScanner设定
1修改MailScanner.conf
# vi /etc/MailScanner/MailScanner.conf
Run As User = postfix
Run As Group = postfix
Incoming Queue Dir = /var/spool/postfix/hold
Outgoing Queue Dir = /var/spool/postfix/incoming
MTA = postfix
Virus Scanners = f-prot
Always Include SpamAssassin Report = yes
Use SpamAssassin = yes
Required SpamAssassin Score = 4
SpamAssassin User State Dir = /var/spool/MailScanner/spamassassin
SpamAssassin Install Prefix = /usr/bin
SpamAssassin Local Rules Dir = /etc/MailScanner
2、修改 postfix支持mailscanner
# vi /etc/postfix/main.cf
变更以下的值
header_checks = regexp:/etc/postfix/header_checks
# vi /etc/postfix/header_checks
/^Received:/ HOLD
注意, 在 / 之前不可以有空白!
3、变更目录权限
# chown postfix.postfix /var/spool/MailScanner/incoming
# chown postfix.postfix /var/spool/MailScanner/quarantine
停止postfix执行、启动MailScanner
# service postfix stop
# chkconfig postfix off
# service MailScanner start
设定MailScanner，当MTA = postfix时，会自己启动postfix，如有设定启动postfix的请先将它停掉
4、定期更新病毒定义文件
# crontab -e
0 4 * * * /usr/local/f-prot/tools/check-updates.pl
并将原本在/etc/cron.hourly/update_virus_scanners 删除掉
测试SpamAssassin
发一封邮件带如下内容，接收后，标题应该带有标记：
XJS*C4JDBQADN1.NSBN3*2IDNEN*GTUBE-STANDARD-ANTI-UBE-TEST-EMAIL*C.34X
这样，我们就已经搭建起一个基本的邮件系统。 | 
免费注册
发表于 2007-06-20 10:21
