EMOS邮件系统外网连接调试.docx

自己遇到的问题能够发出邮件，但是却收不到更改了以下项目，测试成功mynetworks = /24 /8改为mynetworks = 85/24 /885是我公司的外网地址另外在使用 OUTLOOK 时，在配置时注意下面的一点邮件地址、 接收和发送的邮件服务器地址一定要写正确，接收和发送的邮件服务器的域名要解析成功。在域名管理的网站上添加接收和发送邮件服务器的A记录，添加MX记录.如下图所示，必须启用验证。emos 邮件系统的搭建后常见问题基于emos 邮件系统的搭建以及常见问题实施步骤1 、解析、拓扑图邮件服务器，首先需要有解析的哦，最好先搭建dns，否则做到后便你都不知道你是怎么挂掉的哦。我这里已经用万网的解析了。不再谈dns 的搭建了(*_*) 嘻嘻。准备软硬件Emos 1.4 安装系统 下载地址为：url=/iso/emos/EMOS_1.2.iso/iso/emos/EMOS_1.2.iso/urlPostfix 、mysql（都包含在系统里边，直接用了(*_*) 嘻嘻）2 安装系统安装过程详细地址参考：url=/emos_install_howto/emos_install_howto/url 我这里就不过多叙述了，太多的图片了。 3 启动服务 1、/etc/init.d/postfix start 启动邮件系统 2、/etc/init.d/mysqld start 启动数据库 3、/etc/init.d/courier-imap start 启动imap服务（相当于邮箱的pop3服务） 4、更改平配置文件 主要为：postfix 的主文件main.cf 更改的地方为： smtpd_recipient_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_non_fqdn_hostname, reject_non_fqdn_sender, reject_non_fqdn_recipient, reject_unauth_destination, reject_unauth_pipelining, reject_invalid_hostname,# check_policy_service inet::10030 此处为注释掉，邮件规则太多header_checks = regexp:/etc/postfix/dspam_header_checks重新启动服务和3列表一样，不再叙述 六：测试测试账号：账号 密码url=mailto:/url test最后访问url=/extmail//extmail/url， 如无意外，将看到webmail的登陆页，不过此时还没有加正式的用户，所以不能登陆，包括url=mailto:/url也不行。必须要 登陆到url=/extman//extman/url 里增加一个新帐户才能登陆。ExtMan的默认超级管理员帐户：url=mailto:/url，初始密码：extmail*123*，登 陆成功后，建议将密码修改，以确保安全。测试ok。错误收集把需要通过的域名加到白名单去，然后重启过滤器.重启过滤器/usr/local/slockd/slockd-init stop/usr/local/slockd/slockd-init start白名单文件/usr/local/slockd/config/whitelist用winscp 去修改Linux的EMOS邮件系统还是不错 的7、错误收集管4）配置Postfix4.1）配置Postfix的主配置文件 /etc/postfix/main.cf#=BASE=myhostname = mail.test.hk #postfix服务的邮件主机的主机名，建虚拟域时不要建这个同名的mydomain = test.hk #postfix服务的邮件主机的域名myorigin = $mydomain #设置由本机寄出的邮件所使用的域名或主机名称mydestination = $myhostname localhost localhost.$mydomain #设置可接收邮件的主机名称或域名mynetworks = /24 /8 #设置可转发哪些网络的邮件，不需要认证的网段inet_interfaces = all #设置postfix服务监听的网络接口#relay_domains = $mydestination #设置可转发哪些网域的邮件#=Vritual Mailbox settings=virtual_mailbox_base = /home/domainsvirtual_mailbox_maps = ldap:/etc/postfix/ldap/ldap_virtual_mailbox_maps.cfvirtual_mailbox_domains = ldap:/etc/postfix/ldap/ldap_virtual_domains_maps.cfvirtual_alias_domains =virtual_alias_maps = ldap:/etc/postfix/ldap/ldap_virtual_alias_maps.cfvirtual_uid_maps = static:501virtual_gid_maps = static:502virtual_transport = virtualmaildrop_destination_recipient_limit = 1maildrop_destination_concurrency_limit = 1url=/html/article/guanli/20071213/9057_2.html/html/article/guanli/20071213/9057_2.html/urlurl=/read.php?153/read.php?153/urlurl=/forum/thread-7714-1-1.html/forum/thread-7714-1-1.html/urlurl=/forum/thread-8151-1-1.html/forum/thread-8151-1-1.html/url：不能收取邮件的几个原因：，查看邮件日志文件，发现如下错误：第一种，其他邮箱不能发送，报告下面日志的错误Apr 18 04:11:57 mail postfix/smtp27315: 4AF5F3CC388: to=,orig_to=, relay=:10024, delay=590, delays=576/0.01/0/14, dsn=4.5.0, status=deferred (host said: 451-4.5.0 Errorin processing, id=26361-06, virus_scan FAILED: virus_scan: ALL VIRUS SCANNERS FAILED: ClamAV-clamd av-scanner FAILED: CODE(099a35a0) Too many retries to talk to /tmp/clamd.sock (Cant connect to UNIX socket /tmp/clamd.sock: No such file ordirectory) at (eval 86) line 310. at (eval 86) line 511.; ClamAV-clamscan av-scanner FAILED: /usr/bin/clamscan unexpected exit 50, output=”* 451-4.5.0 LibClamAV Warning: * This version of the ClamAV engine is outdated. *451-4.5.0 LibClamAV Warning: * DONT PANIC! Read url=/support/support/url/faq * 451-4.5.0 LibClamAV Warning: * 451-4.5.0 LibClamAV Error: cli_hex2str(): Malformed hexstring:This ClamAV version has reached End of Life! Please upgrade to解决方法一：日志文件显示的是clamav需要更新，上extmail论坛查看原因，原来是clamav杀毒软件造成不能接收邮件url=/forum/viewthread.php?tid=14413&highlight=clamav/forum/vie . 13&highlight=clamav/url先用论坛里所说的方法解决，关闭clamav：删除/etc/amavisd.conf 里面的av_scanners和av_scanners_backup两段删关闭病毒检查，将下面这行行首的注释符#去掉bypass_virus_checks_maps = (1); # uncomment to DISABLE anti-virus code重启amavis：/etc/init.d/amavisd restart邮件被APF server或slockd 的RBL拦截linux 13 三月 2009,rootmail config# tail -f /var/log/maillog查看日志获得过滤邮件信息：Mar 13 15:05:45 mail postfix/smtpd16447: connect from 4Mar 13 15:05:45 mail postfix/smtpd16447: NOQUEUE: reject: RCPT from 4: 554 5.7.1 : Recipient address rejected: blocked using , see url=/cgi/rbl?4/cgi/rbl?4/url; from= to= proto=ESMTP helo=Mar 13 15:05:45 mail postfix/smtpd16447: disconnect from 4Mar 13 15:06:34 mail pop3d: Connection, ip=:ffff:98主要是国外的邮箱向我们的邮箱发，发不过来，但是对国内的邮箱收发 都正常，4 已被APF server或slockd 的RBL拦 截您的主机发送了过量的垃圾邮件您的主机是开放中继(open-relay)您的主机已被病毒或蠕虫感染您的主机配置不正确或不符合RFC规定据说两种办法：1、加人白名单rootmail config# pwd/usr/local/slockd/configrootmail config# lsblacklist plugin.cf recip_whitelist sender_whitelistmain.cf recip_blacklist sender_blacklist whitelistrootmail config# vi sender_whitelistrootmail config# less sender_whitelist# the whitelist that wont be reject and process by any plugin# borrow from postgrey project, thanks the author!# the sample whitelist domain## the sample whitelist domain in regexp#/$/# the sample whitelist sender#url=mailto:/url# the sample whitelist sender in regexp#/$/url=mailto:/urlurl=mailto:DennisStormPDennisStormP/urlAIG.com2、vi /usr/local/slockd/config/PLUGIN.CFdnsbl_plugin = yes 改为 dnsbl_plugin = nogreylist_plugin = yes 改为 greylist_plugin = no#dnsbl_plugin = yesdnsbl_plugin = no# set soft_reject to yes will reject the client with 450 instead# off 5xx smtp error codednsbl_soft_reject = no# rbl server list, using postfix style configurationdnsbl_server_list = , , ,# the Modified SPF and combined Black list plugin“plugin.cf” 111L, 3200C written rootmail config# /usr/local/slockd/slockd-init stopStopping spam locker daemon: slockdrootmail config# /usr/local/slockd/slockd-init startStarting spam locker daemon: slockdrootmail config# service postfix restartShutting down postfix: OK Starting postfix: OK 解决方法二：url=mailto:161/url to= proto=SMTP helo=Apr 23 13:21:54 mail postfix/smtpd6418: disconnect from 99Apr 23 13:24:56 mail postfix/smtpd6468: connect from 34Apr 23 13:24:56 mail postfix/smtpd6468: warning: connect to :10030: Connection refusedApr 23 13:24:56 mail postfix/smtpd6468: warning: problem talking to server :10030: Connection refusedApr 23 13:24:57 mail postfix/smtpd6468: warning: connect to :10030: Connection refusedApr 23 13:24:57 mail postfix/smtpd6468: warning: problem talking to server :10030: Connection refusedApr 23 13:24:57 mail postfix/smtpd6468: NOQUEUE: reject: RCPT from 34: 451 4.3.5 Server configuration problem; from= to= proto=SMTP helo=connect to :10030: connection refused 这个错误很明确的提示你，连接到10030的端口被拒绝，而10030正是slockd的监听端口，可以推断slockd 进程死掉了，您重新启动slockd应该就可以解决这个故障了。由于slockd阻止邮件太过于严格，现已停止使用它。停止它的办法 是在postfix的main.cf里将check_policy_service 注释掉，然后service postfix reload.postfix+extmail+slockd的时候，很多邮件全收不到，那是因为slockd给阻止了。所以要加白名单。rootmail # vi /usr/local/slockd/config/sender_whitelist (好像是这个文件）照 此格式，添加。不用重启slockd，也不用重启postfix，就可以生效！还有就是最好通知下公司人员，把常用的客户的邮箱地址收集下，做个白名单，或者给员工群发个邮件说明这个问题，客户邮件有可能发送不过来，请将地址 转给你，你添加后就OK了，不用重启slockd服务，更不用重启postfix，添加后立即生效，十分爽歪歪.在一种更新病毒库当我试着手动启动clamd,出现如下错误rootgzidc-mail root# service clamd startLibClamAV Warning: *LibClamAV Warning: * This version of ClamAV engine is outdated. *LibClamAV Warning: * Please update it IMMEDIATELY! *LibClamAV Warning: *LibClamAV Warning: *LibClamAV Warning: * This version of ClamAV engine i