Le site web de Pierre Damien GATOUILLAT

Trackbacks

Aucun trackback.

Les trackbacks pour ce billet sont fermés.

Commentaires

1. Le vendredi 13 octobre 2006 à 15:26, par moi

Install postfixadmin

Récupération des sources
cd /usr/local/src
aptitude install links
links high5.net/postfixadmin/do...
cd /srv/www
tar xfz /usr/local/src/postfixadmin-2.1.0.tgz
ln -s postfixadmin-2.1.0 postfixadmin
cd postfixadmin
vi DATABASE_MYSQL.TXT
**change password**
mysql -u root -p < DATABASE_MYSQL.TXT
**change right on postfixadmin dir**
cd /srv/www/postfixadmin
chmod 640 *.php *.css
cd admin/
chmod 640 *.php .ht*
cd ../images
chmod 640 *.gif *.png
cd ../languages/
chmod 640 *.lang
cd ../templates/
chmod 640 *.tpl
cd ../users/
chmod 640 *.php
**config apache**
cd /etc/apache/conf.d
vi postfixadmin-apache.conf
<Directory /srv/www/postfixadmin>
Options Indexes Includes FollowSymLinks MultiViews
AllowOverride AuthConfig
</Directory>

Alias /pa/ /srv/www/postfixadmin/
:wq
apachectl configtest ; apachectl graceful
cp config.inc.php.sample config.inc.php
vi config.inc.php
**change options, password**
changer dans le répertoire admin/.htaccess le bon chemin @IP/pa/setup.php
@IP/pa/admin admin/admin
**ajout domaine/comptes, etc**

**config postfix**
cd /srv
mkdir mail
chown postfix.postfix mail
cd mail
mkdir virtual
chown postfix.postfix virtual
postfixwiki.org/index.php...

cd /etc/postfix
cp main.cf main.cf.orig
vi main.cf
virtual_alias_maps = mysql:/etc/postfix/mysql_virtual_alias_maps.cf
virtual_gid_maps = static:1001
virtual_mailbox_base = /virtual
virtual_mailbox_domains = mysql:/etc/postfix/mysql_virtual_domains_maps.cf
virtual_mailbox_limit = 51200000
virtual_mailbox_maps = mysql:/etc/postfix/mysql_virtual_mailbox_maps.cf
virtual_minimum_uid = 1001
virtual_transport = virtual
virtual_uid_maps = static:1001
# Additional for quota support
# ne fonctionne pas avec postfix standard, il faut le patch VDA
# debian.home-dn.net/
virtual_create_maildirsize = yes
virtual_mailbox_extended = yes
virtual_mailbox_limit_maps = mysql:/etc/postfix/mysql_virtual_mailbox_limit_maps.cf
virtual_mailbox_limit_override = yes
virtual_maildir_limit_message = Sorry, the user's maildir has overdrawn his diskspace quota, please try again later.
virtual_overquota_bounce = yes

relay_domains = mysql:/etc/postfix/mysql_relay_domains_maps.cf


#RBL and divers restrictions

smtpd_helo_restrictions = permit_mynetworks, reject_invalid_hostname
smtpd_helo_required = yes
strict_rfc821_envelopes = yes

smtpd_client_restrictions =
permit_mynetworks
reject_rbl_client sbl-xbl.spamhaus.org
reject_rbl_client dnsbl.njabl.org
#reject_rbl_client hosts.rbl.zonnet.net
reject_rbl_client list.dsbl.org
#reject_rbl_client rbl-plus.mail-abuse.org
#reject_rbl_client bl.spamcop.net
#reject_rbl_client will-spam-for-food.eu.org
#reject_rbl_client relays.mail-abuse.org
#reject_rbl_client blackholes.mail-abuse.org
#reject_rbl_client relays.visi.com
#reject_rbl_client wingate.opm.blitzed.org
#reject_rbl_client korea.rominet.net
#reject_rbl_client china.rominet.net
#reject_rbl_client taiwan.rominet.net
#reject_rbl_client hong-kong.rominet.net
#reject_rbl_client cbl.abuseat.org
#reject_rbl_client sober-p.dnsbl.hostingxs.nl

smtpd_sender_restrictions =
permit_mynetworks
#reject_non_fqdn_sender
reject_unknown_sender_domain
reject_rbl_client sbl-xbl.spamhaus.org
reject_rbl_client dnsbl.njabl.org
#reject_rbl_client hosts.rbl.zonnet.net
#pas bien zonnet => bloque quasi tous les senders en ip dynamique...
reject_rbl_client list.dsbl.org
#reject_rbl_client rbl-plus.mail-abuse.org
#reject_rbl_client bl.spamcop.net
#reject_rbl_client will-spam-for-food.eu.org
#reject_rbl_client relays.mail-abuse.org
#reject_rbl_client blackholes.mail-abuse.org
#reject_rbl_client relays.visi.com
#reject_rbl_client wingate.opm.blitzed.org
#reject_rbl_client korea.rominet.net
#reject_rbl_client china.rominet.net
#reject_rbl_client taiwan.rominet.net
#reject_rbl_client hong-kong.rominet.net


vi mysql_virtual_alias_maps.cf
i user = postfix
password = postfix
hosts = 127.0.0.1
dbname = postfix
table = alias
select_field = goto
where_field = address

#Syntax with postfix 2.2.x:
#user = postfix
#password = postfix
#hosts = 127.0.0.1
#dbname = postfix
#query = SELECT goto FROM alias WHERE #address='%s' AND active = 1

vi mysql_virtual_domains_maps.cf
i user = postfix
password = postfix
hosts = 127.0.0.1
dbname = postfix
table = domain
select_field = domain
where_field = domain
#additional_conditions = and backupmx = '0' and active = '1'

#Syntax with postfix 2.2.x:
#user = postfix
#password = postfix
#hosts = 127.0.0.1
#dbname = postfix
#query = SELECT domain FROM domain WHERE domain='%s'
#optional query to use when relaying for backup MX
#query = SELECT domain FROM domain WHERE domain='%s' and backupmx = '0' and active = '1'

vi mysql_virtual_mailbox_maps.cf
i user = postfix
password = postfixMDP
hosts = 127.0.0.1
dbname = postfix
table = mailbox
select_field = maildir
where_field = username
#additional_conditions = and active = '1'

#Syntax with postfix 2.2.x:
#user = postfix
#password = postfix
#hosts = 127.0.0.1
#dbname = postfix
#query = SELECT maildir FROM mailbox WHERE username='%s' AND active = 1

vi mysql_virtual_mailbox_limit_maps.cf
i user = postfix
password = postfixMDP
hosts = 127.0.0.1
dbname = postfix
table = mailbox
select_field = quota
where_field = username
#additional_conditions = and active = '1'

#Syntax with postfix 2.2.x:
#user = postfix
#password = postfix
#hosts = 127.0.0.1
#dbname = postfix
#query = SELECT quota FROM mailbox WHERE username='%s'

vi mysql_relay_domains_maps.cf
i user = postfix
password = postfixMDP
hosts = 127.0.0.1
dbname = postfix
table = domain
select_field = domain
where_field = domain
additional_conditions = and backupmx = '1'

#Syntax with postfix 2.2.x:
#user = postfix
#password = postfix
#hosts = 127.0.0.1
#dbname = postfix
#query = SELECT domain FROM domain WHERE domain='%s' and backupmx = '1'

chmod 640 *.cf
chgrp postfix *.cf

cd /etc/courier
vi authmysqlrc
gateway:/etc/courier# grep -v ^# authmysqlrc | sed -e '/^$/d'
MYSQL_SERVER localhost
MYSQL_USERNAME postfix
MYSQL_PASSWORD postfixMDP
MYSQL_PORT 0
MYSQL_OPT 0
MYSQL_DATABASE postfix
MYSQL_USER_TABLE mailbox
MYSQL_CRYPT_PWFIELD password
DEFAULT_DOMAIN gatouillat.net
MYSQL_UID_FIELD 105
MYSQL_GID_FIELD 107
MYSQL_LOGIN_FIELD username
MYSQL_HOME_FIELD '/srv/www/mail/virtual'
MYSQL_NAME_FIELD name
MYSQL_MAILDIR_FIELD maildir
MYSQL_QUOTA_FIELD quota

remplacer dans les mysql_cf, localhost par 127.0.0.1 et dans mysql autorisé localhost.localdomain pour les users postfix

!!!!
virtual_mailbox_base = /srv/mail/virtual
!!!!

uid/gid = postfix attention

master.cf
**line modified**
pickup fifo n - - 60 1 pickup
-o content_filter=
-o receive_override_options=no_header_body_checks

smtp-amavis unix - - - - 2 smtp
-o smtp_data_done_timeout=1200
-o smtp_send_xforward_command=yes
-o disable_dns_lookups=yes
-o max_use=20

127.0.0.1:10025 inet n - - - - smtpd
-o content_filter=
-o local_recipient_maps=
-o relay_recipient_maps=
-o smtpd_restriction_classes=
-o smtpd_delay_reject=no
-o smtpd_client_restrictions=permit_mynetworks,reject
-o smtpd_helo_restrictions=
-o smtpd_sender_restrictions=
-o smtpd_recipient_restrictions=permit_mynetworks,reject
-o smtpd_data_restrictions=reject_unauth_pipelining
-o smtpd_end_of_data_restrictions=
-o mynetworks=127.0.0.0/8
-o smtpd_error_sleep_time=0
-o smtpd_soft_error_limit=1001
-o smtpd_hard_error_limit=1000
-o smtpd_client_connection_count_limit=0
-o smtpd_client_connection_rate_limit=0
-o receive_override_options=no_header_body_checks,no_unknown_recipient_checks


main.cf
content_filter = smtp-amavis:[127.0.0.1]:10024

pb imap/pop auth
fichier authmysqlrc très important
mettre des quotes simple '' sur le directory et autour de uid/gid

config amavis
cf. amavisd.conf

aptitude install clamav clamav-daemon clamav-freshclam
config clamav (pour pouvoir se connecter en socket)
User amavis
chgrp amavis /var/run/clamav -R
chmod g+w /var/run/clamav -R

spamassassin
aptitude install spamassassin
vi /etc/spamassassin/local.cf
required_hits 4
rewrite_subject 1
subject_tag [*SPAM*]
report_header 1
use_terse_report 0
defang_mime 0
report_safe 0
use_bayes 1
auto_learn 1
ok_locales en fr
ok_languages en fr

# Enable or disable network checks
dns_available 1
skip_rbl_checks 0
use_razor2 1
use_dcc 0
use_pyzor 0

score RAZOR2_CF_RANGE_51_100 2.202
score RCVD_IN_SBL 2.226
score RCVD_IN_DSBL 1.412
score RCVD_IN_NJABL_PROXY 1.000
score RCVD_IN_SORBS_HTTP 2.202
score RCVD_IN_SORBS_MISC 2.408
~

RAZOR
aptitude install razor
su - amavis
razor-client
razor-admin --create
razor-admin --register

LEARN
su - amavis
vi .fetchmailrc
poll 127.0.0.1 protocol imap username spamtrap password spamtrapMDP
:wq
chmod 600 .fetchmailrc
vi /var/lib/amavis/learnspam
#!/bin/bash


SA-UPDATE (spamass > 3.1.x) (si sarge, ajout de testing dans apt/sources.list, puis aptitude download spamassassin, enleve testing, puis dpkg -i spamassassassin, installer les dépendances manuellement si besoin)
noc-mail-1:~# cat /etc/cron.daily/sa-updates
#!/bin/sh
#
# Updates SA, which is run by AMaViS with new rules

# Update the link to the correct version
VERSION=`grep -m 1 -E 'VERSION = ' /usr/share/perl5/Mail/SpamAssassin.pm | cut -f2 -d\"`
rm /var/lib/spamassassin/current
ln -s /var/lib/spamassassin/${VERSION} /var/lib/spamassassin/current

# Update from saupdate.openprotect.com & updates.spamassassin.org
# Restart AMaViS so that it reads in the new rules
sa-update -D --nogpg --channel saupdates.openprotect.com --nogpg --channel updates.spamassassin.org && /etc/init.d/amavis restart >/dev/null

ajout de ça dans local.cf de spamass
# OpenProtect SAUpdates
include /var/lib/spamassassin/current/saupdates_openprotect_com.pre
include /var/lib/spamassassin/current/saupdates_openprotect_com.cf

# Standard SA Updates
include /var/lib/spamassassin/current/updates.spamassassin.org.pre
include /var/lib/spamassassin/current/updates.spamassassin.org.cf



RESTE A FAIRE
backuppc
squid/squidguard/havp
apache (site ouam)
awstats
linbox

2. Le jeudi 29 novembre 2007 à 12:37, par moi

Quelques petites précisions concernant ce genre d'install sous une Debian ETCH :
- sa-update est devenu inutile, il existe un cron.daily qui fait ça tout seul et bien
- tant qu'on y est sur spamasss, penser à installer re2c et à l'executer une première fois (regexp to C, comme ça les rules ça barde)

Ajouter un commentaire

Nom ou pseudo :

Email (facultatif) :

Site Web (facultatif) :

Commentaire :

Le code HTML dans le commentaire sera affiché comme du texte, les adresses internet seront converties automatiquement.

Se souvenir de mes informations