Redhat Sendmail配置详解.docx

Redhat Sendmail配置详解一、 软件包1. dovecot-1.2.12.tar.gz2. Sendmail二、安装步骤1. 安装dovecot一、RPM格式1。安装RPM包；2。编辑/etc/dovecot.conf其中，修改protocols = imap pop3passdb passwd passdb shadow 3。启动#service dovecot start二、tar.gz包的安装1。下载地址：(目前最新版本)/releases/dovecot-1.2.12.tar.gz2。安装：#tar zxvf dovecot-1.2.12.tar.gz#cd dovecot-1.2.12#./configure -prefix=/usr/local/dovecot -sysconfdir=/usr/local/etc -with-mysql -without-ssl -disable-ipv6#make#make install# cp /usr/local/etc/dovecot-example.conf /usr/local/etc/dovecot.conf3。建立启动进程所依赖的用户# useradd -s /bin/false -d /dev/null dovecot4。修改配置文件编辑/usr/local/etc/dovecot.conf其中，修改protocols = imap pop3ssl_disable = yespassdb passwd passdb shadow 5。启动#/usr/local/dovecot/sbin/dovecot6。可以把启动命令写进/etc/rc.d/rc.local文件，以使得系统启动时能自动启动服务。#echo /usr/local/dovecot/sbin/dovecot /etc/rc.d/rc.local7。验正(1)验正POP3#telnet localhost 110Trying .Connected to localhost.localdomain ().Escape character is .+OK Dovecot ready.(2)验正imap#telnet localhost 143Trying .Connected to localhost.localdomain ().Escape character is .* OK Dovecot ready.Yum y install sendmailChkconfig sendmail onService sendmail restart修改 /etc/mail/sendmail.mc.divert(-1)dnldnl #dnl # This is the sendmail macro config file for m4. If you make changes todnl # /etc/mail/sendmail.mc, you will need to regenerate thednl # /etc/mail/sendmail.cf file by confirming that the sendmail-cf package isdnl # installed and then performing adnl #dnl # make -C /etc/maildnl #include(/usr/share/sendmail-cf/m4/cf.m4)dnlVERSIONID(setup for Red Hat Linux)dnlOSTYPE(linux)dnldnl #dnl # Uncomment and edit the following line if your outgoing mail needs todnl # be sent out through an external mail server:dnl #dnl define(SMART_HOST,vider)dnl #define(confDEF_USER_ID,8:12)dnldefine(confTRUSTED_USER, smmsp)dnldnl define(confAUTO_REBUILD)dnldefine(confTO_CONNECT, 1m)dnldefine(confTRY_NULL_MX_LIST,true)dnldefine(confDONT_PROBE_INTERFACES,true)dnldefine(PROCMAIL_MAILER_PATH,/usr/bin/procmail)dnldefine(ALIAS_FILE, /etc/aliases)dnldnl define(STATUS_FILE, /etc/mail/statistics)dnldefine(UUCP_MAILER_MAX, 2000000)dnldefine(confUSERDB_SPEC, /etc/mail/userdb.db)dnldefine(confPRIVACY_FLAGS, authwarnings,novrfy,noexpn,restrictqrun)dnldefine(confAUTH_OPTIONS, A)dnldnl #dnl # The following allows relaying if the user authenticates, and disallowsdnl # plaintext authentication (PLAIN/LOGIN) on non-TLS linksdnl #dnl define(confAUTH_OPTIONS, A p)dnldnl # dnl # PLAIN is the preferred plaintext authentication method and used bydnl # Mozilla Mail and Evolution, though Outlook Express and other MUAs dodnl # use LOGIN. Other mechanisms should be used if the connection is notdnl # guaranteed secure.dnl #TRUST_AUTH_MECH(EXTERNAL DIGEST-MD5 CRAM-MD5 LOGIN PLAIN)dnldefine(confAUTH_MECHANISMS, EXTERNAL GSSAPI DIGEST-MD5 CRAM-MD5 LOGIN PLAIN)dnldnl #dnl # Rudimentary information on creating certificates for sendmail TLS:dnl # make -C /usr/share/ssl/certs usagednl #dnl define(confCACERT_PATH,/usr/share/ssl/certs)dnl define(confCACERT,/usr/share/ssl/certs/ca-bundle.crt)dnl define(confSERVER_CERT,/usr/share/ssl/certs/sendmail.pem)dnl define(confSERVER_KEY,/usr/share/ssl/certs/sendmail.pem)dnl #dnl # This allows sendmail to use a keyfile that is shared with OpenLDAPsdnl # slapd, which requires the file to be readble by group ldapdnl #dnl define(confDONT_BLAME_SENDMAIL,groupreadablekeyfile)dnldnl #dnl define(confTO_QUEUEWARN, 4h)dnldnl define(confTO_QUEUERETURN, 5d)dnldnl define(confQUEUE_LA, 12)dnldnl define(confREFUSE_LA, 18)dnldefine(confTO_IDENT, 0)dnldnl FEATURE(delay_checks)dnlFEATURE(no_default_msa,dnl)dnlFEATURE(smrsh,/usr/sbin/smrsh)dnlFEATURE(mailertable,hash -o /etc/mail/mailertable.db)dnlFEATURE(virtusertable,hash -o /etc/mail/virtusertable.db)dnlFEATURE(redirect)dnlFEATURE(always_add_domain)dnlFEATURE(use_cw_file)dnlFEATURE(use_ct_file)dnldnl #dnl # The -t option will retry delivery if e.g. the user runs over his quota.dnl #FEATURE(local_procmail,procmail -t -Y -a $h -d $u)dnlFEATURE(access_db,hash -T; -o /etc/mail/access.db)dnlFEATURE(blacklist_recipients)dnlEXPOSED_USER(root)dnldnl #dnl # The following causes sendmail to only listen on the IPv4 loopback addressdnl # and not on any other network devices. Remove the loopbackdnl # address restriction to accept email from the internet or intranet.dnl #DAEMON_OPTIONS(Port=smtp,Addr=, Name=MTA)dnldnl #dnl # The following causes sendmail to additionally listen to port 587 fordnl # mail from MUAs that authenticate. Roaming users who cant reach theirdnl # preferred sendmail daemon due to port 25 being blocked or redirected finddnl # this useful.dnl #DAEMON_OPTIONS(Port=25, Name=MSA)dnldnl #dnl # The following causes sendmail to additionally listen to port 465, butdnl # starting immediately in TLS mode upon connecting. Port 25 or 587 followeddnl # by STARTTLS is preferred, but roaming clients using Outlook Express cantdnl # do STARTTLS on ports other than 25. Mozilla Mail can ONLY use STARTTLSdnl # and doesnt support the deprecated smtps; Evolution 1.1.1 uses smtpsdnl # when SSL is enabled- STARTTLS support is available in version 1.1.1.dnl #dnl # For this to work your OpenSSL certificates must be configured.dnl #dnl DAEMON_OPTIONS(Port=smtps, Name=TLSMTA, M=s)dnldnl #dnl # The following causes sendmail to additionally listen on the IPv6 loopbackdnl # device. Remove the loopback address restriction listen to the network.dnl #dnl # NOTE: binding both IPv4 and IPv6 daemon to the same port requiresdnl # a kernel patchdnl #dnl DAEMON_OPTIONS(port=smtp,Addr=:1, Name=MTA-v6, Family=inet6)dnldnl #dnl # We strongly recommend not accepting unresolvable domains if you want todnl # protect yourself from spam. However, the laptop and users on computersdnl # that do not have 24x7 DNS do need this.dnl #FEATURE(accept_unresolvable_domains)dnldnl #dnl FEATURE(relay_based_on_MX)dnldnl # dnl # Also accept email sent to localhost.localdomain as local email.dnl # LOCAL_DOMAIN()dnldnl #dnl # The following example makes mail from this host and any additionaldnl # specified domains appear to be sent from dnl #dnl MASQUERADE_AS()dnldnl #dnl # masquerade not just the headers, but the envelope as welldnl #dnl FEATURE(masquerade_envelope)dnldnl #dnl # masquerade not just , but *.m