| 1 | <?xml version='1.0' encoding='UTF-8'?> |
1 | <?xml version='1.0' encoding='UTF-8'?> |
| 2 | <!-- $Header: /var/cvsroot/gentoo/xml/htdocs/doc/en/virt-mail-howto.xml,v 1.47 2005/12/16 07:43:40 fox2mike Exp $ --> |
2 | <!-- $Header: /var/cvsroot/gentoo/xml/htdocs/doc/en/virt-mail-howto.xml,v 1.48 2006/01/08 01:10:07 vanquirius Exp $ --> |
| 3 | <!DOCTYPE guide SYSTEM "/dtd/guide.dtd"> |
3 | <!DOCTYPE guide SYSTEM "/dtd/guide.dtd"> |
| 4 | |
4 | |
| 5 | <guide link="/doc/en/virt-mail-howto.xml"> |
5 | <guide link="/doc/en/virt-mail-howto.xml"> |
| 6 | <title>Virtual Mailhosting System with Postfix Guide</title> |
6 | <title>Virtual Mailhosting System with Postfix Guide</title> |
| 7 | |
7 | |
| 8 | <author title="Author"> |
8 | <author title="Author"> |
| 9 | <mail link="antifa@gentoo.org">Ken Nowack</mail> |
9 | <mail link="antifa@gentoo.org">Ken Nowack</mail> |
| 10 | </author> |
10 | </author> |
| 11 | <author title="Author"> |
11 | <author title="Author"> |
| 12 | <mail link="ezra@revoltltd.org">Ezra Gorman</mail> |
12 | <mail link="ezra@revoltltd.org">Ezra Gorman</mail> |
| 13 | </author> |
13 | </author> |
| 14 | <author title="Editor"> |
14 | <author title="Editor"> |
| 15 | <mail link="klasikahl@gentoo.org">Zack Gilburd</mail> |
15 | <mail link="klasikahl@gentoo.org">Zack Gilburd</mail> |
| 16 | </author> |
16 | </author> |
| 17 | <author title="Editor"> |
17 | <author title="Editor"> |
| 18 | <mail link="seather@scygro.za.net">Scygro</mail> |
18 | <mail link="seather@scygro.za.net">Scygro</mail> |
| 19 | </author> |
19 | </author> |
| 20 | |
20 | |
| 21 | <abstract> |
21 | <abstract> |
| 22 | This document details how to create a virtual mailhosting system based upon |
22 | This document details how to create a virtual mailhosting system based upon |
| 23 | postfix, mysql, courier-imap, and cyrus-sasl. |
23 | postfix, mysql, courier-imap, and cyrus-sasl. |
| 24 | </abstract> |
24 | </abstract> |
| 25 | |
25 | |
| 26 | <version>1.0.24</version> |
26 | <version>1.0.25</version> |
| 27 | <date>2005-12-02</date> |
27 | <date>2006-01-07</date> |
| 28 | |
28 | |
| 29 | <!-- |
29 | <!-- |
| 30 | Contents |
30 | Contents |
| 31 | |
31 | |
| 32 | I. Introduction |
32 | I. Introduction |
| 33 | II. Postfix Basics |
33 | II. Postfix Basics |
| 34 | III. Courier-imap |
34 | III. Courier-imap |
| 35 | IV. Cyrus-sasl |
35 | IV. Cyrus-sasl |
| 36 | V. SSL Certificates for Postfix and Apache |
36 | V. SSL Certificates for Postfix and Apache |
| 37 | VI. Adding SSL and SASL support to Postfix |
37 | VI. Adding SSL and SASL support to Postfix |
| 38 | VII. MySQL |
38 | VII. MySQL |
| 39 | VIII. Apache and phpMyAdmin |
39 | VIII. Apache and phpMyAdmin |
| 40 | IX. The vmail user |
40 | IX. The vmail user |
| 41 | X. Configuring MySQL Authentication and vhosts |
41 | X. Configuring MySQL Authentication and vhosts |
| 42 | XI. Squirrelmail |
42 | XI. Squirrelmail |
| … | |
… | |
| 367 | smtpd_sasl_local_domain = |
367 | smtpd_sasl_local_domain = |
| 368 | |
368 | |
| 369 | <comment>(The broken_sasl_auth_clients option and the login auth method |
369 | <comment>(The broken_sasl_auth_clients option and the login auth method |
| 370 | are for outlook and outlook express only and are undocumented. |
370 | are for outlook and outlook express only and are undocumented. |
| 371 | Isn't having to hack software for stupid, broken, M$ BS great? |
371 | Isn't having to hack software for stupid, broken, M$ BS great? |
| 372 | smtpd_sasl_local_domain appends a domain name to clients using |
372 | smtpd_sasl_local_domain appends a domain name to clients using |
| 373 | smtp-auth. Make sure it's blank or your user names will get |
373 | smtp-auth. Make sure it's blank or your user names will get |
| 374 | mangled by postfix and be unable to auth.)</comment> |
374 | mangled by postfix and be unable to auth.)</comment> |
| 375 | |
375 | |
| 376 | smtpd_recipient_restrictions = |
376 | smtpd_recipient_restrictions = |
| 377 | permit_sasl_authenticated, |
377 | permit_sasl_authenticated, |
| 378 | permit_mynetworks, |
378 | permit_mynetworks, |
| 379 | reject_unauth_destination |
379 | reject_unauth_destination |
| 380 | |
380 | |
| 381 | |
381 | |
|
|
382 | <comment>(The next two options enable outgoing encryption.)</comment> |
|
|
383 | smtp_tls_note_starttls_offer = yes |
| 382 | smtpd_use_tls = yes |
384 | smtpd_use_tls = yes |
| 383 | #smtpd_tls_auth_only = yes |
385 | #smtpd_tls_auth_only = yes |
| 384 | smtpd_tls_key_file = /etc/postfix/newreq.pem |
386 | smtpd_tls_key_file = /etc/postfix/newreq.pem |
| 385 | smtpd_tls_cert_file = /etc/postfix/newcert.pem |
387 | smtpd_tls_cert_file = /etc/postfix/newcert.pem |
| 386 | smtpd_tls_CAfile = /etc/postfix/cacert.pem |
388 | smtpd_tls_CAfile = /etc/postfix/cacert.pem |
| 387 | smtpd_tls_loglevel = 3 |
389 | smtpd_tls_loglevel = 3 |
| 388 | smtpd_tls_received_header = yes |
390 | smtpd_tls_received_header = yes |
| 389 | smtpd_tls_session_cache_timeout = 3600s |
391 | smtpd_tls_session_cache_timeout = 3600s |
| 390 | tls_random_source = dev:/dev/urandom |
392 | tls_random_source = dev:/dev/urandom |
| 391 | |
393 | |
| 392 | <comment>(smtpd_tls_auth_only is commented out to ease testing the system. |
394 | <comment>(smtpd_tls_auth_only is commented out to ease testing the system. |
| 393 | You can turn this on later if you desire.)</comment> |
395 | You can turn this on later if you desire.)</comment> |
| 394 | |
396 | |
| 395 | # <i>postfix reload</i> |
397 | # <i>postfix reload</i> |
| 396 | </pre> |
398 | </pre> |