postfix完全配置.doc

网上有许多文章都是说POSTFIX的配置，可是都不是很全，现把自己认为还算完整的配置文档列出如下：#分割线 编译安装Mysql，启动控制Mysql#1、卸载已安装的mysql的RPM包编译安装mysql前，首先查看系统中是否已安装mysql服务器软件：rootserver01 /# rpm -qa | grep mysqlrootserver01 /# rpm -e mysql-serverrootserver01 /# rpm -e mysql-connector-odbcrootserver01 /# rpm -e libdbi-dbd-mysqlrootserver01 /# rpm -e mysql -nodeps删除RPM包创建的mysql账号rootserver01 /# userdel -r mysql2、释放MySQL软件包为了避免发生冲突，建议先卸载掉系统自带的mysql相关软件包rootserver01 tool# tar -zxvf mysql-5.0.56.tar.gz 3、添加MySQL用户和组，用于运行和维护mysql服务rootserver01 tool# useradd -M -s /sbin/nologin mysql-M 选项表示不建立用户宿主目录、-s 选项表示指定用户的shell4、编译前的预配置rootserver01 mysql-5.0.56# ./configure -prefix=/usr/local/mysql5、编译并安装rootserver01 mysql-5.0.56# make & make install6、建立mysql配置文件在展开的源码包目录中的support-files文件夹下，提供了多个MySQL服务器的配置样例文件，分别适用于不同负载的数据库服务器。一般选择f文件即可，该配置文件适用于中等负载的数据库，可以满足大多数企业的应用需求rootserver01 mysql-5.0.56# cp support-files/f /etc/f7、初始化mysql数据库以mysql用户的身份执行mysql_install_db脚本，对MySQL数据库进行初始化rootserver01 mysql-5.0.56# cd /usr/local/mysql/bin/rootserver01 bin# ./mysql_install_db -user=mysql会在/usr/local/mysql下产生var目录，并在var目录下创建2个默认数据库mysql和test；8、调整mysql目录权限修改相关目录的所有权，以便mysql用户可以读写数据库调整/usr/loca/mysql目录的权限：rootserver01 local# ls -ld /usr/local/mysql/rootserver01 local# chown -R root.mysql /usr/local/mysqlrootserver01 local# ls -ld /usr/local/mysql/调整/usr/local/mysql/var目录的权限：rootserver01 local# chown -R mysql /usr/local/mysql/var/rootserver01 local# ls -ld /usr/local/mysql/var9、调整lib库路径由于Mysql安装到了非标准的路径中。所以还需要将MySQL的库文件路径“/usr/local/mysql/lib/mysql”?加入到系统的库文件搜索路径中，以便在用到时能够自动搜索到。增加库文件搜索路径可以通过修改“/etc/ld.so.conf”文件实现rootserver01 local# vi /etc/ld.so.conf添加路径：/usr/local/mysql/lib/mysqlrootserver01 local# ldconfig10、Mysql的启动控制(1) 使用mysqld_safe脚本安全启动服务rootserver01 local# /usr/local/mysql/bin/mysqld_safe -user=mysql &(2) 设置MySQL程序的执行路径，主要是为了在执行mysql管理工具时方便方法一：修改配置文件/etc/profile，使配置永久生效rootserver01 local# vi /etc/profile添加：PATH=$PATH:/usr/local/mysql/binrootserver01 local# source /etc/profile方法二：执行export命令，使配置仅当前生效rootserver01 local#export PATH=$PATH:/usr/local/mysql/bin(3) 将Mysql添加为系统服务，主要是为了mysql服务启动的方便rootserver01 local# cd /tool/mysql-5.0.56rootserver01 mysql-5.0.56# cp support-files/mysql.server /etc/init.d/mysqldrootserver01 mysql-5.0.56# chmod +x /etc/init.d/mysqld rootserver01 mysql-5.0.56# chkconfig -add mysqldrootserver01 mysql-5.0.56# chkconfig mysqld on这样也就可以使用service mysqld start/restart/stop来对mysql服务进行管理了！#分割线 停用/卸载sendmail服务，以避免冲突#1、查看当前系统是否安装sendmailrootserver01 /# rpm -qa | grep sendmail2、为了避免与要安装的postfix冲突，可以停用sendmail或卸载停用方法：rootserver01 /# service sendmail stoprootserver01 /# chkconfig -level 35 sendmail off卸载方法：rootserver01 /# rpm -e sendmail-cfrootserver01 /# rpm -e sendmail -nodeps3、查看系统是否安装postfix的rpm包rootserver01 /# rpm -qa | grep postfix确认系统没有安装postfix服务器软件包#这里安装POSTFIX前的准备#1、安装必要的软件yum install httpd yum install httpd-devel yum install mysqld yum install mysql yum install php-mysql yum install mysql-server yum install mysql-devel yum install libxml2 yum install gcc yum install make yum install libxml2-devel yum install php-pear yum install dovecot-mysqlyum install cyrus-sasl-lib yum install cyrus-sasl-develyum install cyrus-sasl-plainyum install cyrus-saslyum install cyrus-sasl-md5yum install cyrus-sasl-gssapiyum install saslwrapperyum install python-saslwrapper2、安装DB软件(postfixadmin需要)tar -zxvf DB-1.7.13.tgz cp -R DB-1.7.13/* /usr/share/pear/3、安装php,要注意php的配置参数的顺序，否则会出错。tar -zxvf php-5.4.14.tar.gz cd php-5.4.14./configure -prefix=/usr -with-mysql -with-apxs2 -enable-mbstring -with-imap-ssl -with-kerberos -with-imapmakemake install4、修改防火墙，使25、110、53、80端口能够通过将selinux修改为Permissive模式，命令为：setenforce 0注：php.ini为php的配置文件#分割线 编译安装postfix及vda补丁包#1、创建运行邮件系统的用户账号postfix及用户组postfix和postdroprootserver01 /# groupadd -g 1200 postdroprootserver01 /# groupadd -g 1000 postfixrootserver01 /# useradd -M -u 1000 -g postfix -G postdrop -s /sbin/nologin postfix2、解压释放postfix源码包、合并VGA补丁rootserver01 tools# tar zxvf postfix-2.4.6.tar.gz rootserver01 tools# gunzip postfix-2.4.6-vda-ng.patch.gz rootserver01 tools# cd postfix-2.4.6rootserver01 postfix-2.4.6# patch -p1 main2.cfrootserver01 postfix# mv main.cf main.cf.bakrootserver01 postfix# mv main2.cf main.cf7、启动postfix服务rootserver01 postfix# postfix start查看服务启动后打开的端口：rootserver01 postfix# netstat -antp | grep 25#分割线 配置DNS服务器，创建相应的资源记录#1、在对应的区域数据库文件中增加MX记录：mail IN A 02 IN MX 10 .2、测试mx记录rootserver01 postfix# nslookup set type=mx Server: 02Address: 02#53 mail exchanger = 10 .#分割线 构建postfix电子邮件系统#1、配置postfix，调整运行参数rootserver01 postfix# vi /etc/postfix/main.cf增加如下参数：inet_interfaces=02,myhostname=mydomain=myorigin=$mydomainmydestination=$mydomain,$myhostnamehome_mailbox=Maildir/执行命令产生别名数据库文件aliases.dbrootserver01 # newaliases rootserver01 # ls /etc/aliases.db否则会导致smtpd程序启动失败！2、重新加载配置rootserver01 postfix# postfix reload3、建立邮件用户，通过telnet方法发送电子邮件测试rootserver01 postfix# useradd -s /sbin/nologin mail01rootserver01 postfix# passwd mail01rootserver01 postfix# useradd -s /sbin/nologin mail02rootserver01 postfix# passwd mail02rootserver01 /# telnet 25SMTP常用命令字：HELO localhost 宣告客户端主机地址MAIL FROM: 发件人地址RCPT TO: 收件人地址DATA 邮件数据QUIT 退出#分割线 构建dovecot服务器#1、卸载当前系统已安装的dovecot的rpm包rootserver01 tools# rpm -e dovecot2、编译安装dovecot服务器软件包rootserver01 tools# useradd -M -s /sbin/nologin dovecotrootserver01 tools# tar zxvf dovecot-1.1.4.tar.gz rootserver01 tools# cd dovecot-1.1.4rootserver01 dovecot-1.1.4# ./configure -sysconfdir=/etc -with-mysqlrootserver01 dovecot-1.1.4# make & make install2、配置dovecot的运行参数从dovecot的模板配置文件生成简单配置文件rootserver01 dovecot-1.1.4# cp /etc/dovecot-example.conf /etc/dovecot.confrootserver01 dovecot-1.1.4# vi /etc/dovecot.conf 修改以下配置参数：(建议通过查找的方式配置以下各项)protocols = imap pop3ssl_disable = yesdisable_plaintext_auth = nomail_location = maildir:/Maildir3、创建dovecot的PAM认证文件rootserver01 dovecot-1.1.4# vi /etc/pam.d/dovecotauth required pam_nologin.soauth include system-authaccount include system-authsession include system-auth4、启动dovecot服务rootserver01 dovecot-1.1.4# dovecot -c /etc/dovecot.conf 查看dovecot服务开启的端口：rootserver01 dovecot-1.1.4# netstat -antp | grep dovecot5、pop3邮件测试rootserver01 dovecot-1.1.4# telnet localhost 1106、在windows客户端使用OE连接邮件系统发送电子邮件测试#分割线 添加Webmail邮件界面#准备条件：apache服务器已经安装并配置好，支持php!这里的配置环境是apache编译安装的，安装路径为：/usr/local/apache1、解压squirremail软件包rootserver01 tools# tar jxvf squirrelmail-1.4.13.tar.bz2rootserver01 tools# mv squirrelmail-1.4.13 /usr/local/apache/htdocs/webmailrootserver01 webmail# cd /usr/local/apache/htdocs/webmail/把squirremail的中文补丁包解压出来rootserver01 webmail# tar -jxvf /tools/zh_CN-1.4.13-20071220.tar.bz2 2、创建及调整数据目录、附件目录rootserver01 webmail# mkdir -p attach datarootserver01 webmail# chown -R daemon:daemon attach/ data/rootserver01 webmail# chmod 730 attach/3、创建并修改squirremail的配置文件rootserver01 webmail# cp config/config_default.php config/config.phprootserver01 webmail# vim config/config.php 修改如下：(如果查找起来比较麻烦，可以查找)$squirrelmail_default_language = zh_CN;$domain = ;$smtpServerAddress = localhost;$default_charset = zh_CN.UTF-8;$imap_server_type = dovecot;$data_dir = /usr/local/apache/htdocs/webmail/data;$attachment_dir = /usr/local/apache/htdocs/webmail/attach;4、通过客户端浏览器访问测试/webmail/#分割线 添加SMTP的用户认证 #1、查看系统是否已安装cyrus sasl认证组件rootserver01 /# rpm -qa | grep cyrus在这里如果是rpm安装的，也可以直接使用2、设置cyrus sasl函数库rootserver01 /# vi /usr/lib/sasl2/smtpd.conf 添加参数：pwcheck_method: saslauthd3、启动saslauthd服务rootserver01 /# service saslauthd start4、修改postfix主配置文件main.cf添加sasl认证相关的参数：smtpd_sasl_auth_enable = yessmtpd_sasl_security_options = noanonymousmynetworks = smtpd_recipient_restrictions = permit_mynetworks,permit_sasl_authenticated,reject_unauth_destination5、测试SMTP发信认证在这里测试的方式最好是有2台邮件系统的环境。测试可以通过smtp命令字测试，也可以通过邮件客户端软件测试。#分割线 设置用户别名与邮件群组#1、修改postfix主配置文件，使用/etc/aliases文件作为数据查询表rootserver01 /# vi /etc/postfix/main.cf添加参数：alias_maps = hash:/etc/aliases2、修改/etc/aliases配置文件-配置别名-配置邮件群发-配置邮件转发3、生成查询数据库rootserver01 /# newaliases 4、使用客户端访问测试#分割线 设置邮件大小、邮箱空间限制#邮件大小限制：message_size_limit邮箱空间大小限制：mailbox_size_limit 针对Mailbox邮箱、系统用户，缺省值为50MBvirtual_mailbox_limit 针对使用虚拟用户的情况，缺省值为50MBquota磁盘配额功能 针对使用Linux系统用户作为邮件账号的情况#分割线 配置Postfix虚拟用户支持#1、下载并对extman邮件管理工具解包rootwww mail# tar zxvf extman-0.2.5.tar.gz 2、导入extman的SQL脚本文件rootwww docs# pwd/tool/mail/extman-0.2.5/docsrootwww docs# mysql -u root -p extmail.sqlrootwww docs# mysql -u root -p init.sql3、修改postfix配置文件main.cf，添加支持虚拟用户的参数rootwww /# vi /etc/postfix/main.cf添加如下参数：#mydestination = $mydomain,$myhostname /注释掉此参数virtual_mailbox_base = /mailboxvirtual_alias_maps = mysql:/etc/postfix/mysql_virtual_alias_maps.cfvirtual_mailbox_maps = mysql:/etc/postfix/mysql_virtual_mailbox_maps.cfvirtual_mailbox_domains = mysql:/etc/postfix/mysql_virtual_domains_maps.cfvirtual_uid_maps = static:1000virtual_gid_maps = static:1000smtpd_sasl_auth_enable = yessmtpd_sasl_security_options = noanonymoussmtpd_sasl_local_domain = $myhostnamesmtpd_sasl_application_name = smtpd4、建立虚拟用户映射表文件rootwww docs# pwd/tool/mail/extman-0.2.5/docs把已存在的样例模板文件复制到/etc/postfix目录下：rootwww docs# cp mysql_virtual_* /etc/postfix/5、为虚拟用户设置SMTP发信认证需要安装courier-authlib应用程序才能提供对位于mysql数据库中的邮件虚拟用户的验证rootwww mail# tar jxvf courier-authlib-0.60.2.tar.bz2rootwww mail# cd courier-authlib-0.60.2rootwww courier-authlib-0.60.2# ./configure -prefix=/usr/local/courier-authlib -without-stdheaderdir -with-authmysql -with-redhat -with-mysql-libs=/usr/local/mysql/lib/mysql -with-mysql-include=/usr/local/mysql/include/mysqlrootwww courier-authlib-0.60.2# make & make installrootwww courier-authlib-0.60.2# make install-configure6、修改courier-authlib相关配置，并启动服务rootwww /# vi /etc/ld.so.conf增加路径：/usr/local/courier-authlib/lib/courier-authlibrootwww /# ldconfig7、修改authdaemonrc主配置文件，仅保留authmysql认证方式，去掉其他方式rootwww /# cd /usr/local/courier-authlib/etc/authlib/rootwww authlib# cp authdaemonrc authdaemonrc.bakrootwww authlib# vim authdaemonrc修改认证模块，如下：authmodulelist=authmysqlauthmodulelistorig=authmysqlrootwww authlib# chmod -R 755 /usr/local/courier-authlib/var/spool/authdaemon/8、修改配置文件authmysqlrc，设置如何向mysql数据库查询信息rootwww authlib# cp authmysqlrc authmysqlrc.bakrootwww authlib# vim authmysqlrc修改如下参数的值：MYSQL_SERVER MYSQL_USERNAME extmailMYSQL_PASSWORD extmailMYSQL_SOCKET /tmp/mysql.sockMYSQL_DATABASE extmailMYSQL_USER_TABLE mailboxMYSQL_HOME_FIELD concat(/mailbox/,homedir) MYSQL_MAILDIR_FIELD concat(/mailbox/,maildir)rootwww authlib# chown daemon.daemon authmysqlrc9、复制courier-authlib脚本，并启动courier-authlib服务rootwww courier-authlib-0.60.2# cd /tool/mail/courier-authlib-0.60.2rootwww courier-authlib-0.60.2# cp courier-authlib.sysvinit /etc/init.d/courier-authlibrootwww courier-authlib-0.60.2# chmod 755 /etc/rc.d/init.d/courier-authlibrootwww courier-authlib-0.60.2# chkconfig -level 35 courier-authlib onrootwww courier-authlib-0.60.2# service courier-authlib start10、修改cyrus sasl设置，更改认证方式rootwww /# vi /usr/lib/sasl2/smtpd.conf 修改为：pwcheck_method:authdaemondauthdaemond_path:/usr/local/courier-authlib/var/spool/authdaemon/socket调整socked目录的权限：rootwww /# chmod -R 755 /usr/local/courier-authlib/var/spool/authdaemon/11、重新启动courier-authlib服务rootwww /# service courier-authlib restart12、配置dovecot，调整邮件存储位置及其他参数rootwww /# vim /etc/dovecot.conf 添加并修改参数如下：mail_location = maildir:/mailbox/%d/%n/Maildirauth default mechanisms = plain passdb sql args = /etc/dovecot-mysql.conf userdb sql args = /etc/dovecot-mysql.conf 13、设置配置文件/etc/dovecot-mysql.confrootwww /# cd /etcrootwww etc# touch dovecot-mysql.confrootwww etc# vi dovecot-mysql.conf添加并设置参数如下：driver = mysqlconnect = host=localhost dbname=extmail user=extmail password=extmaildefault_pass_scheme = CRYPTpassword_query = SELECT username AS user,password AS password FROM mailbox WHERE username = %uuser_query = SELECT maildir,uidnumber AS uid,gidnumber AS gid FROM mailbox WHERE username = %u14、建立虚拟用户的邮箱目录rootwww /# mkdir -p /mailbox//postmaster/Maildir/rootwww /# cd /mailbox//postmaster/Maildir/rootwww Maildir# chown -R postfix:postfix /maibox/rootwww Maildir# killall dovecotrootwww Maildir# dovecot15、测试对虚拟用户的SMTP发信认证获得虚拟“用户密码extmail”的加密的字符串有2种方法可以获取：方法一：rootwww authlib# printf | openssl base64rootwww authlib# printf extmail | openssl base64方法二：rootwww authlib# perl -e use MIME:Base64; print encode_base64()rootwww authlib# perl -e use MIME:Base64; print encode_base64(extmail)测试：rootwww authlib# telnet localhost 25#分割线 Extmail邮件使用及管理平台Extman#1、编译安装相关的perl依赖包rootwww /# rpm -qa | grep Unixrootwww /# rpm -qa | grep DBIperl-DBI-1.52-2.el5rootwww /# rpm -qa | grep DBDperl-DBD-MySQL-3.0007-2.el5卸载RPM安装的perl-DBD-MySQLrootwww /# rpm -e perl-DBD-MySQL#安装Unix-Syslog-1.1.tar.gzrootwww mail# tar zxvf Unix-Syslog-1.1.tar.gz rootwww mail# cd Unix-Syslog-1.1rootwww Unix-Syslog-1.1# perl Makefile.PL rootwww Unix-Syslog-1.1# make & make install#安装DBI-1.607.tar.gz rootwww mail# tar zxvf DBI-1.607.tar.gz rootwww mail# cd DBI-1.607rootwww DBI-1.607# perl Makefile.PL rootwww DBI-1.607# make & make install#安装DBD-mysql-4.011.tar.gz rootwww mail# tar zxvf DBD-mysql-4.011.tar.gz rootwww mail# cd DBD-mysql-4.011rootwww DBD-mysql-4.011# perl Makefile.PLrootwww DBD-mysql-4.011# make & make install2、编译安装apache，修改apache配置文件httpd.conf#查看当前系统是否存在rpm的http，如果存在则卸载rootwww /# rpm -qa | grep httpd#释放apache软件包rootwww tool# tar zxvf httpd-2.2.9.tar.gz #编译前的预配置rootwww tool# cd httpd-2.2.9rootwww httpd-2.2.9# ./configure -prefix=/usr/local/apache -with-mysql=/usr/local/mysql -enable-so -enable-rewrite -enable-track-vars -enable-cgi -with-zlib -enable-mods-shared=all -enable-suexec -with-suexec-caller=daemon -with-suexec-docroot=/usr/local/apache/htdocs#编译并安装rootwww httpd-2.2.9# make & make install#查看apache是否安装完成rootwww httpd-2.2.9# ls /usr/local/apache/#配置apache，并启动httpd服务修改httpd.conf配置文件：Listen :80ServerName :80DirectoryIndex index.html index.cgi去掉以下3个配置参数的注释：Include conf/extra/httpd-languages.confInclude conf/extra/httpd-info.confInclude conf/extra/httpd-vhosts.conf配置httpd基于域名的虚拟主机：rootwww /# vim /usr/local/apache/conf/extra/httpd-vhosts.conf 创建虚拟主机：NameVirtualHost DocumentRoot /usr/local/apache/htdocs/ ServerName DocumentRoot /usr/local/apache/htdocs/extmail/html/ ServerName scriptalias /extmail/cgi/ /usr/local/apache/htdocs/extmail/cgi/ alias /extmail /usr/local/apache/htdocs/extmail/html suexecusergroup postfix postfix启动apache服务器：rootwww /# /usr/local/apache/bin/apachectl start#设置apache服务开机启动rootwww /# echo /usr/local/apache/bin/apachectl start /etc/rc.d/rc.local3