CentOS7下搭建postfix邮件服务器实现extmail的web访问
CentOS7.1最新1503版本最小化安装，基于lnmp，nginx与mysql为yum安装，当然没有安装php，其他编译所需要的全是官网上下载的最新稳定版，搭建的过程中出了很多错误，经过几天的实验，最后终于搭建成了，这次博客也是重新搭建，边写边搭建，如果再次出现错误的话，会将错误一并写出来。一、装备工作
1、防止不必要的麻烦关闭Selinux
1
setenforce 0
关闭防火墙
1
systemctl stop firewalld
2、清空iptables
1
2
3
4
iptables -P INPUT ACCEPT
iptables -F
iptables -X
iptables -L
查看是否全部为ACCEPT3、由于CentOS7默认安装的是MariaDB，所以要添加MySQL的yum源，有些编译需要的devel包只有epel有，所以我们把epel源也一并添加
1
2
3
4
5
yum install -y wget
wget http://dev.mysql.com/get/mysql-community-release-el7-5.noarch.rpm
rpm -ivh mysql-community-release-el7-5.noarch.rpm
wget http://dl.fedoraproject.org/pub/epel/epel-release-latest-7.noarch.rpm
rpm -ivh epel-release-latest-7.noarch.rpm
二、安装postfix1、安装编译及其他所需要的包，我这总共有124个包需要安装，mysql-server比较大，速度也比较慢
1
yum install nginx vim gcc gcc-c++ openssl openssl-devel db4-devel ntpdate mysql mysql-devel mysql-server bzip2 php-mysql cyrus-sasl-md5 perl-GD perl-DBD-MySQL perl-GD perl-CPAN perl-CGI perl-CGI-Session cyrus-sasl-lib cyrus-sasl-plain cyrus-sasl cyrus-sasl-devel libtool-ltdl-devel telnet mail libicu-devel-y
2、编译安装postfix1、卸载系统自带的postfix，删除postfix用户，重新指定uid、gid创建新用户postfix，postdrop
1
2
3
4
5
6
7
yum remove postfix -y
userdel postfix
groupdel postdrop
groupadd -g 2525 postfix
useradd -g postfix -u 2525 -s /sbin/nologin -M postfix
groupadd -g 2526 postdrop
useradd -g postdrop -u 2526 -s /sbin/nologin -M postdrop
2、下载源码包并解压编译
1
2
3
4
5
wget http://mirrors.go-parts.com/postfix/source/official/postfix-3.0.1.tar.gz
tar xf postfix-3.0.1.tar.gz
cd postfix-3.0.1
make makefiles 'CCARGS=-DHAS_MYSQL -I/usr/include/mysql -DUSE_SASL_AUTH -DUSE_CYRUS_SASL -I/usr/include/sasl -DUSE_TLS ' 'AUXLIBS=-L/usr/lib64/mysql -lmysqlclient -lz -lrt -lm -L/usr/lib64/sasl2 -lsasl2 -lssl -lcrypto'
make && make install
make install的时候会有个交互式的界面，自定义一些目录，我们这里只更改第二项临时文件目录，其他的全部默认。
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
Please specify the prefix for installed file names. Specify this ONLY
if you are building ready-to-install packages for distribution to OTHER
machines. See PACKAGE_README for instructions.
install_root: [/]
Please specify a directory for scratch files while installing Postfix. You
must have write permission in this directory.
tempdir: /tmp/extmail
…………………………
…………………………
shlib_directory:
Please specify the final destination directory for non-executable files
that are shared among multiple Postfix instances, such as postfix-files,
dynamicmaps.cf, as well as the multi-instance template files main.cf.proto
and master.cf.proto.
meta_directory:
3、更改目录属主属组
1
2
3
4
chown -R postfix:postdrop /var/spool/postfix
chown -R postfix:postdrop /var/lib/postfix/
chown root /var/spool/postfix
chown -R root /var/spool/postfix/pid
4，修改postfix的配置文件
1
2
3
4
5
6
7
8
9
10
# vim /etc/postfix/main.cf
myhostname = mail.everyoo.com //设置主机名
mydomain = everyoo.com //指定域名
myorigin = $mydomain //指明发件人所在的域名
inet_interfaces = //all指定postfix系统监听的网络接口
mydestination = $myhostname, localhost.$mydomain, localhost,$mydomain //指定postfix接收邮件时收件人的域名 [使用虚拟域需要禁用]
mynetworks_style = host //指定信任网段类型
mynetworks = 192.168.1.0/24, 127.0.0.0/8 //指定信任的客户端
relay_domains = $mydestination //指定允许中转邮件的域名
alias_maps = hash:/etc/aliases //设置邮件的别名
三、安装dovecot
1、yum安装
1
#yum install -ydovecot dovecot-mysql
2、配置dovecot
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
# cd /etc/dovecot/
# vim dovecot.conf //直接在配置文件最后添加即可
protocols = imap pop3
!include conf.d/*.conf
listen = *
base_dir = /var/run/dovecot/
# cd conf.d/
# vim 10-auth.conf
disable_plaintext_auth = no
# vim 10-mail.conf
mail_location = maildir:~/Maildir
mail_location = maildir:/var/mailbox/%d/%n/Maildir
mail_privileged_group = mail
# vim 10-ssl.conf
ssl = no
# vim 10-logging.conf og_path = /var/log/dovecot.log
info_log_path = /var/log/dovecot.info
log_timestamp = "%Y-%m-%d %H:%M:%S "
# cp auth-sql.conf.ext auth-sql.conf
# vim auth-sql.conf
passdb {driver = sql# Path for SQL configuration file, see example-config/dovecot-sql.conf.extargs = /etc/dovecot/dovecot-sql.conf.ext}
userdb {driver = sqlargs = /etc/dovecot/dovecot-sql.conf.ext}
3、编辑dovecot通过mysql认证的配置文件
1
2
3
4
5
6
# vim /etc/dovecot-mysql.conf
driver = mysql
connect = host=localhost dbname=extmail user=extmail password=extmail
default_pass_scheme = CRYPT
password_query = SELECT username AS user,password AS password FROM mailbox WHERE username = '%u'
user_query = SELECT maildir, uidnumber AS uid, gidnumber AS gid FROM mailbox WHERE username = '%u'
四、安装courier-authlib
1、下载解压并并编译
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
# wget https://sourceforge.net/projects/courier/files/authlib/0.66.2/courier-authlib-0.66.2.tar.bz2
# tar xf courier-authlib-0.66.2.tar.bz2
# cd courier-authlib-0.66.2
# ./configure \
--prefix=/usr/local/courier-authlib \
--sysconfdir=/etc \
--without-authpam \
--without-authshadow \
--without-authvchkpw \
--without-authpgsql \
--with-authmysql \
--with-mysql-libs=/usr/lib64/mysql \
--with-mysql-includes=/usr/include/mysql \
--with-redhat \
--with-authmysqlrc=/etc/authmysqlrc \
--with-authdaemonrc=/etc/authdaemonrc \
--with-mailuser=postfix
这里会报错，configure: error: The Courier Unicode Library 1.2 appears not to be installed.提示Courier Unicode Library没有安装，我们下载courier-unicode-1.2并编译安装。
1
2
3
4
5
# wget https://sourceforge.net/projects/courier/files/courier-unicode/1.2/courier-unicode-1.2.tar.bz2
# tar xf courier-unicode-1.2.tar.bz2
# cd courier-unicode-1.2
# ./configure
# make && make install
再次编译courier-authlib就没问题了，别忘了make && makeinstall
2、配置courier-authlib
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
# chmod 755 /usr/local/courier-authlib/var/spool/authdaemon
# cp /etc/authdaemonrc.dist/etc/authdaemonrc
# cp /etc/authmysqlrc.dist/etc/authmysqlrc
# vim /etc/authdaemonrc //配置文件里的验证方法比较多，我们这里只使用authmysql
authmodulelist="authmysql"
authmodulelistorig="authmysql"
# vim /etc/authmysqlrc //直接添加到配置文件尾部，然后去上面将响应系统默认的注视掉，或者删除即可
MYSQL_SERVER localhost
MYSQL_USERNAME extmail
MYSQL_PASSWORD extmail
MYSQL_SOCKET /var/lib/mysql/mysql.sock
MYSQL_PORT 3306
MYSQL_DATABASE extmail
MYSQL_USER_TABLE mailbox
MYSQL_CRYPT_PWFIELD password
DEFAULT_DOMAIN test.com
MYSQL_UID_FIELD '2525'
MYSQL_GID_FIELD '2525'
MYSQL_LOGIN_FIELD username
MYSQL_HOME_FIELD concat('/var/mailbox/',homedir)
MYSQL_NAME_FIELD name
MYSQL_MAILDIR_FIELD concat('/var/mailbox/',maildir)
3、courier-authlib添加服务启动脚本及其他
1
2
3
4
5
6
7
8
# cp courier-authlib.sysvinit /etc/init.d/courier-authlib
# chmod +x /etc/init.d/courier-authlib
# chkconfig --add courier-authlib
# chkconfig courier-authlib on
# echo "/usr/local/courier-authlib/lib/courier-authlib" >> /etc/ld.so.conf.d/courier-authlib.conf
# ldconfig
# service courier-authlib start
Starting Courier authentication services: authdaemond
4、smtp以及虚拟用户相关的设置
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
# vim /usr/lib64/sasl2/smtpd.conf //文件不存在，要自己创建
pwcheck_method: authdaemond
log_level: 3
mech_list: PLAIN LOGIN
authdaemond_path:/usr/local/courier-authlib/var/spool/authdaemon/socket
# vim /etc/postfix/main.cf
##postfix支持SMTP##
smtpd_sasl_auth_enable = yes
smtpd_sasl_local_domain = ''
smtpd_recipient_restrictions = permit_mynetworks,permit_sasl_authenticated,reject_unauth_destination
broken_sasl_auth_clients=yes
smtpd_client_restrictions = permit_sasl_authenticated
smtpd_sasl_security_options = noanonymous
##postfix支持虚拟用户##
virtual_mailbox_base = /var/mailbox
virtual_mailbox_maps = mysql:/etc/postfix/mysql_virtual_mailbox_maps.cf //这里的配置文件需在后面extman
里复制过来
virtual_mailbox_domains = mysql:/etc/postfix/mysql_virtual_domains_maps.cf
virtual_alias_domains =
virtual_alias_maps = mysql:/etc/postfix/mysql_virtual_alias_maps.cf
virtual_uid_maps = static:2525
virtual_gid_maps = static:2525
virtual_transport = virtual
五、安装extmail
extmail和extman可通过这两个链接下载
http://7xivyw.com1.z0.glb.clouddn.com/extmail-1.2.tar.gz
http://7xivyw.com1.z0.glb.clouddn.com/extman-1.1.tar.gz
1、创建目录并解压
1
2
3
# mkdir -p /var/www/extsuite
# tar xf extmail-1.2.tar.gz -C /var/www/extsuite/
# mv /var/www/extsuite/extmail-1.2/ /var/www/extsuite/extmail
2、更改extmail的配置文件
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
# cd /var/www/extsuite/extmail
# cp webmail.cf.default webmail.cf
# vim webmail.cf
SYS_SESS_DIR = /tmp/extmail
SYS_UPLOAD_TMPDIR = /tmp/extmail/upload
SYS_USER_LANG = zh_CN
SYS_MIN_PASS_LEN = 8
SYS_MAILDIR_BASE = /var/mailbox
SYS_MYSQL_USER = extmail
SYS_MYSQL_PASS = extmail
SYS_MYSQL_DB = extmail
SYS_MYSQL_HOST = localhost
SYS_MYSQL_SOCKET = /var/lib/mysql/mysql.sock
SYS_MYSQL_TABLE = mailbox
SYS_MYSQL_ATTR_USERNAME = username
SYS_MYSQL_ATTR_DOMAIN = domain
SYS_MYSQL_ATTR_PASSWD = password
SYS_AUTHLIB_SOCKET = /usr/local/courier-authlib/var/spool/authdaemon/socket
3、建立临时文件目录与session目录
1
2
# mkdir -p /tmp/extmail/upload
# chown -R postfix.postfix /tmp/extmail/
六、安装extman
1、解压extman
1
2
3
# tar xf extman-1.1.tar.gz -C /var/www/extsuite/
# cd /var/www/extsuite/
# mv extman-1.1/ extman
2、更改extman配置文件
1
2
# cd extman/
# cp webman.cf.default webman.cf
3、更改cgi目录属主属组
1
2
# chown -R postfix.postfix /var/www/extsuite/extman/cgi/
# chown -R postfix.postfix /var/www/extsuite/extmail/cgi/
4、导入数据库
由于数据库不能识别TYPE=MyISAM，所以这里直接导入会出错，先编辑extmail.sql数据库文件，将TYPE=MyISAM更改为ENGINE=MyISAM
1
2
# vim docs/extmail.sql
:% s/TYPE/ENGINE/g
共有五处修改
导入还是会报错
1
2
# mysql -uroot < docs/extmail.sql
ERROR 1364 (HY000) at line 31: Field 'ssl_cipher' doesn't have a default value
此处需要修改my.cnf配置文件
1
2
3
4
5
# vim /etc/my.cnf
# Recommended in standard MySQL setup
#sql_mode=NO_ENGINE_SUBSTITUTION,STRICT_TRANS_TABLES //将这行注视掉，重启mysql，这里需要注意的是，等数据库导入成功后，这项是不可以去掉注释的，不然mysql就启动不起来了。
再次导入数据库
# mysql -uroot < docs/extmail.sql # mysql -uroot < docs/init.sql
5、创建数据库用户extmail并授予权限
1
2
3
4
mysql> GRANT ALL ON extmail.* to extmail@'%' identified by 'extmail'; //这里直接在授权任何权限在任意地址上了
Query OK, 0 rows affected (0.00 sec)
mysql> FLUSH PRIVILEGES;
Query OK, 0 rows affected (0.00 sec)
6、复制四-4提到的配置文件
1
2
# cd /var/www/extsuite/extman/docs/
# cp mysql_virtual_* /etc/postfix/
6、为extman创建临时目录
1
2
# mkdir /tmp/extman
# chown -R postfix.postfix /tmp/extman/
7、启动postfix、dovecot、saslauthd
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
# ss -tnluo | grep :25
tcp LISTEN 0 100 *:25 *:*
# ps aux | grep dovecot
root 22200.10.3156161508 ? Ss 03:02 0:00 /usr/sbin/dovecot -F
dovecot 22230.00.1 93121004 ? S 03:02 0:00 dovecot/anvil
root 22240.00.2 94401172 ? S 03:02 0:00 dovecot/log
root 22260.00.4124282184 ? S 03:02 0:00 dovecot/config
root 22400.00.1 112640 972 pts/0 R+ 03:02 0:00 grep --color=auto dovecot
# ps aux | grep saslauthd
root 22300.00.171944 916 ? Ss 03:02 0:00 /usr/sbin/saslauthd -m /run/saslauthd -a pam
root 22310.00.171944 676 ? S 03:02 0:00 /usr/sbin/saslauthd -m /run/saslauthd -a pam
root 22320.00.171944 676 ? S 03:02 0:00 /usr/sbin/saslauthd -m /run/saslauthd -a pam
root 22330.00.171944 676 ? S 03:02 0:00 /usr/sbin/saslauthd -m /run/saslauthd -a pam
root 22340.00.171944 676 ? S 03:02 0:00 /usr/sbin/saslauthd -m /run/saslauthd -a pam
root 22420.00.1 112640 668 pts/0 R+ 03:03 0:00 grep --color=auto saslauthd
七、测试
1、测试虚拟用户
1
2
3
4
5
6
7
8
9
10
11
# /usr/local/courier-authlib/sbin/authtest -s login postmaster@extmail.org extmail
Authentication succeeded. //显示这个表示成功，测试时使用的是postmaster@extmail.org，因为我们导入的数据库init.sql里面自带了这个。
Authenticated: postmaster@extmail.org(uid 2525, gid 2525)
Home Directory: /var/mailbox/extmail.org/postmaster//这里需要注意/var/mailbox这个目录现在我们还没有创建，后面web访问的时候如果没有会报错,所以提前创建。
Maildir: /var/mailbox/extmail.org/postmaster/Maildir/
Quota: (none)
Encrypted Password: $1$phz1mRrj$3ok6BjeaoJYWDBsEPZb5C0
Cleartext Password: extmail
Options: (none)
# mkdir /var/mailbox
# chown -R postfix.postfix /var/mailbox/
不创建的话会报错
2、测试smtp发信
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
# printf "postmaster@extmail.org" | openssl base64
cG9zdG1hc3RlckBleHRtYWlsLm9yZw==
#printf "extmail" | openssl base64
ZXh0bWFpbA==
# telnet localhost 25
Trying ::1...
telnet: connect to address ::1: Connection refused
Trying 127.0.0.1...
Connected to localhost.
Escape character is '^]'.
220 mail.daen.com ESMTP Postfix
auth login
334 VXNlcm5hbWU6
cG9zdG1hc3RlckBleHRtYWlsLm9yZw==
334 UGFzc3dvcmQ6
ZXh0bWFpbA==
235 2.7.0 Authentication successful //成功
quit
221 2.0.0 Bye
Connection closed by foreign host.
八、启动nginx实现web访问
1、nginx本身并不能解析cgi，extmail自带了解析cgi的程序，但是有些地方需要修改下
1
2
3
# vim /var/www/extsuite/extmail/dispatch-init
SU_UID=postfix
SU_GID=postfix
启动dispatch-init
1
2
# /var/www/extsuite/extmail/dispatch-init start
Starting extmail FCGI server...
启动cmdserver，不启动会出现Connection refused
1
2
# /var/www/extsuite/extman/daemon/cmdserver -v -d
loaded ok
2、添加nginx虚拟主机
1
# vim /etc/nginx/conf.d/extmail.conf
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
server {
listen 8080;
server_namemail.everyoo.com;
index index.html index.htm index.php index.cgi;
root/var/www/extsuite/extmail/html/;
location /extmail/cgi/ {
fastcgi_pass 127.0.0.1:8888;
fastcgi_index index.cgi;
fastcgi_paramSCRIPT_FILENAME /var/www/extsuite/extmail/cgi/$fastcgi_script_name;
include fcgi.conf;
}
location/extmail/{
alias/var/www/extsuite/extmail/html/;
}
location /extman/cgi/ {
fastcgi_pass 127.0.0.1:8888;
fastcgi_index index.cgi;
fastcgi_paramSCRIPT_FILENAME /var/www/extsuite/extman/cgi/$fastcgi_script_name;
include fcgi.conf;
}
location /extman/ {
alias/var/www/extsuite/extman/html/;
}
access_log/var/log/extmail_access.log;
}
生成fcgi.conf
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
# vim /etc/nginx/fcgi.conf
fastcgi_paramGATEWAY_INTERFACECGI/1.1;
fastcgi_paramSERVER_SOFTWARE nginx;
fastcgi_paramQUERY_STRING $query_string;
fastcgi_paramREQUEST_METHOD $request_method;
fastcgi_paramCONTENT_TYPE $content_type;
fastcgi_paramCONTENT_LENGTH $content_length;
fastcgi_paramSCRIPT_NAME $fastcgi_script_name;
fastcgi_paramREQUEST_URI $request_uri;
fastcgi_paramDOCUMENT_ROOT $document_root;
fastcgi_paramSERVER_PROTOCOL $server_protocol;
fastcgi_paramREMOTE_ADDR $remote_addr;
fastcgi_paramREMOTE_PORT $remote_port;
fastcgi_paramSERVER_ADDR $server_addr;
fastcgi_paramSERVER_PORT $server_port;
fastcgi_paramSERVER_NAME $server_name;
重启nginx，访问192.168.1.105:8080
出错，需要安装Unix::Syslog
安装Unix::Syslog
1
2
3
4
# wget http://www.cpan.org/authors/id/M/MH/MHARNISCH/Unix-Syslog-1.1.tar.gz
# tar xf Unix-Syslog-1.1.tar.gz
# cd Unix-Syslog-1.1# perl Makefile.PL
# make && make install
再次访问就可以了，extman的登录账户为root@extmail.org密码为extmail*123*，首次使用需要先添加域，添加之后再修改域，改为可自由注册，再注册用户就可以登录发邮件了
九、问题集锦
图形日志无法查看，后续补充
新建DNS服务器，通过FOXmail访问不了? smtp.domain.com pop.domain.com 110 25端口已打开
新建用户邮件登录时提示新建邮箱名目录没权限
编辑 vi /var/www/extsuite/extmail/libs/Ext/Storage/Maildir.pm
在89行左右（定义了$CFG{path}参数之后，chdir(untaint($CFG{path}))之前）添加代码
if (! -d $CFG{path}) {
my ($maildir) = $CFG{path};
my @dirs = split(/\//, $maildir);
$maildir = shift @dirs;
foreach my $dir (@dirs) {
$maildir = File::Spec->catfile( $maildir, $dir );
mkdir $maildir unless (-e $maildir);
}
}
页:
[1]