笔记11

##########邮件#############
首先重置两台虚拟机
然后对ip和yum源进行配置
对主机名进行更改
先进行dns配置
在desktop中
yum install bind -y
vim /etc/named.rfc***
zone "westos.com" IN {
        type master;
        file "westos.com.zone";
        allow-update { none; };
};

zone "linux.com" IN {
        type master;
        file "linux.com.zone";
        allow-update { none; };
};
vim /etc/named.conf里面进行配置             #######加//表示功能全开
cd /var/named
cp -p named.localhost westos.com.zone
[root@mailwestos named]# cat westos.com.zone
$TTL 1D
@    IN SOA    dns.westos.com. root.westos.com. (
                    0    ; serial
                    1D    ; refresh
                    1H    ; retry
                    1W    ; expire
                    3H )    ; minimum
        NS    dns.westos.com.
dns        A    172.25.254.114
westos.com.    MX 1    172.25.254.114.
cp -p westos.com.zone   linux.com.zone
[root@mailwestos named]# cat linux.com.zone
$TTL 1D
@    IN SOA    dns.linux.com. root.linux.com. (
                    0    ; serial
                    1D    ; refresh
                    1H    ; retry
                    1W    ; expire
                    3H )    ; minimum
        NS    dns.linux.com.
dns        A    172.25.254.114
linux.com.    MX 1    172.25.254.214.

测试：dig -t mx westos.com//linux.com



######发邮件#########
两个虚拟机配置同样
smtp服务
vim /etc/postfix/main.cf
76 myhostname = mailwestos.westos.com            ##配置主机名
83 mydomain = westos.com                ##配置域名
99 myorigin = $mydomain                    ##配置给别人发送是的名字
113 inet_interfaces = all                ##打开所有接口
114 #inet_interfaces = $myhostname    
115 #inet_interfaces = $myhostname, localhost        
116 #inet_interfaces = localhost
164 mydestination = $myhostname, $mydomain, localhost  ##配置可以接受啥样的邮件
mailq                            ##查看邮箱队列
postquene -f                        ##刷新队列
mail                            ##查看邮件
systemctl restart postfix                ##重启服务
在westos.com里面测试
测试： mail root@linux.com
在linux.com里面测试
测试： mail root@westos.com

######别名和群发#####
vim /etc/aliases
 97 admin:          root                ##root的别名为admin
 98 more:           :include:/etc/postfix/users        ##群发
vim /etc/postfix/users
root
student
wq
postalias /etc/aliases                    ##给aliases文件加密

测试：mail admin@linux.com                
mail more                        ##群发
mail -u student                        ##查看student的邮件

####伪装用户名和域名######
##linux中做操作#####
vim /etc/postfix/virtual                 ##配置文件
295 admin@qq.com            root@linux.com        ##伪装root@linux.com    
296 @qq.com                 @linux.com            ##伪装linux.com为qq.com

postmap /etc/postfix/virtual                 ##对文件进行加密
postconf -d |grep virtual                
postconf -e "virtual_alias_maps = hash:/etc/postfix/virtual"

测试：mail admin@qq.com
mail admin@qq.com
Subject: qq
com
.
EOT

测试：mail student@qq.com
mail student@qq.com
Subject: qq
com
.
EOT

mail -u student
 U  1 root                  Fri Mar 10 22:22  23/680   "yy"
>N  2 root                  Fri Mar 10 22:42  18/547   "qq"

########在westos里面给root@qq.com发送#####
cp -p linux.com.zone qq.com.zone
$TTL 1D
@       IN SOA  dns.qq.com. root.qq.com. (
                                        0       ; serial
                                        1D      ; refresh
                                        1H      ; retry
                                        1W      ; expire
                                        3H )    ; minimum
                NS      dns.qq.com.
dns             A       172.25.254.114
qq.com. MX 1    172.25.254.214.

vim /etc/named.rfc1912.zones
zone "qq.com" IN {
        type master;
        file "qq.com.zone";
        allow-update { none; };
};

测试：root@qq.com
#######返回者的信息更改#######

在linux中做的操作

vim generic
root@linux.com   root@qq.com
postconf -d |grep generic
postconf -e "smtp_generic_maps = hash:/etc/postfix/generic"
postmap generic                    ##加密
systemctl restart postfix.service


#####devote
###telnet###                ##远程邮件
在真机里面把真机当作客户端
然后yum install telnet -y
telnet 172.25.254.214 25        ##远程发送邮件
[root@foundation14 ~]# telnet 172.25.254.214 25
Trying 172.25.254.214...
Connected to 172.25.254.214.
Escape character is '^]'.
220 maillinux.linux.com ESMTP Postfix
ehlo woqu
250-maillinux.linux.com
250-PIPELINING
250-SIZE 10240000
250-VRFY
250-ETRN
250-ENHANCEDSTATUSCODES
250-8BITMIME
250 DSN
mail from:root@westos.com
250 2.1.0 Ok
rcpt to:root@westos.com
250 2.1.5 Ok
data
354 End data with <CR><LF>.<CR><LF>
kj
jk
.
250 2.0.0 Ok: queued as E223626CE00
quit
221 2.0.0 Bye
Connection closed by foreign host.


###接受邮件####
首先在214里面安装dovecot服务
yum install dovecot -y
   86  vim /etc/dovecot/dovecot.conf
 24 protocols = imap pop3 lmtp
 48 login_trusted_networks = 0.0.0.0/0            ##允许访问网络地址
 49 disable_plaintext_auth =no                ##开启明文认证

   87  vim /etc/dovecot/conf.d/10-mail.conf
 > 30 mail_location = mbox:~/mail:INBOX=/var/mail/%u
mkdir /home/student/mail/.imap/
touch ./INBOX

然后在客户端也就是真机里面安装mutt软件
yum insatll mutt -y
然后mutt -f pop://student@172.25.254.214        ##直接查看邮件  只能查看student的不能查看root的   必须得是在214中建立了目录和文件后才能查看
yum install thunderbird-31.2.0-1.el7.x86_64.rpm -y    ##安装雷鸟
thunderbird
然后进入客户端了
**********#新建的用户会自动建立skel下的目录到自己的家目录    ************

#######邮件和数据库(虚拟用户邮件)#########
先安装数据库等
 yum install mariadb-server httpd php php-mysql -y
vim /etc/my.cnf
skip-networking=1
mysql_secure_installation
tar jxf phpMyAdmin-3.4.0-all-languages.tar.bz2
mv phpMyAdmin-3.4.0-all-languages/  admin
cp config.sample.inc.php config.inc.php
vim config.inc.php
$cfg['blowfish_secret'] = 'test';
mysql -uroot -p
create user postfix@localhost identified by 'postfix';    ##创建用户
grant insert,select on email.* to postfix@localhost;    ##授权

重启httpd和mariadb

测试：172.25.254.214/admin
先用root登陆然后创建数据库和创建表  然后添加数据
然后退出之后再创建数据库用户和授权  然后测试用创建的用户能不能登陆进去

cd /etc/postfix
[root@maillinux postfix]# cat mysql-user.cf
hosts = localhost
user = postfix
password = postfix
dbname = email
table = mailsql
select_field = username
where_field = username
[root@maillinux postfix]# cat mysql-domain.cf
hosts = localhost
user = postfix
password = postfix
dbname = email
table = mailsql
select_field = domain
where_field = domain
[root@maillinux postfix]# cat mysql-mailbox.cf
hosts = localhost
user = postfix
password = postfix
dbname = email
table = mailsql
select_field = maildir
where_field = username

测试：     postmap -q "admin@redhat.com" mysql:/etc/postfix/mysql-user.cf
     postmap -q "admin@redhat.com" mysql:/etc/postfix/mysql-mailbox.cf
     postmap -q "redhat.com" mysql:/etc/postfix/mysql-domain.cf



postconf -d | grep virtual

vim /etc/postfix/main.cf
先删掉以前做的hash那两行
680 virtual_mailbox_base = /home/vmail            ##默认目录
681 virtual_gid_maps = static:888
682 virtual_uid_maps = static:888
683 virtual_alias_maps = mysql:/etc/postfix/mysql-user.cf
684 virtual_mailbox_maps = mysql:/etc/postfix/mysql-mailbox.cf
685 virtual_mailbox_domains = mysql:/etc/postfix/mysql-domain.cf
groupadd -g 888 vmail
useradd -u 888 -g 888 vmail
cd /etc/skel
mkdir mail/.imap
touch INBOX

mail admin@redhat.com

然后cd /home/vmail/mail/redhat.com/new        ##查看邮件



#######收邮件#########
 yum install dovecot-mysql.x86_64 -y

vim /etc/dovecot/dovecot.conf

 48 login_trusted_networks = 0.0.0.0/0        #允许访问网络地址
 49 disable_plaintext_auth = no            #开始明文认证

vim /etc/dovecot/conf.d/10-auth.conf

123 !include auth-sql.conf.ext            ##开启数据库数据认证

cp /usr/share/doc/dovecot-2.2.10/example-config/dovecot-sql.conf.ext  /etc/dovecot/dovecot-sql.conf.ext

vim /etc/dovecot/dovecot-sql.conf.ext
32 driver = mysql                ##选择数据库类型

78 default_pass_scheme = PLAIN            ##明文加密

71 connect = host=localhost dbname=email user=postfix password=postfix    ##登陆数据库

107 password_query = \                ##用密码认证   数据库里面找用户名 域名和密码    
108   SELECT username, domain, password \
109   FROM mailsql WHERE username = '%u' AND domain = '%d'

125 user_query = SELECT maildir, 888 AS uid, 888 AS gid FROM mailsql WHERE username = '%u'


vim /etc/dovecot/conf.d/10-mail.conf
30 mail_location = maildir:/home/vmail/%d/%n        ##邮件目录

setsebool -P mysql_connect_any on            ##打开selinux服务
配置好了之后我们再客户端也就是真机里面
[kiosk@foundation14 Desktop]$ telnet 172.25.254.214 110
Trying 172.25.254.214...
Connected to 172.25.254.214.
Escape character is '^]'.
+OK [XCLIENT] Dovecot ready.
user admin@redhat.com
+OK
pass 123
+OK Logged in.
quit
+OK Logging out.
Connection closed by foreign host.

然后在数据库里面插入一组数据
最后打开雷鸟 新建用户
然后尝试发送邮件


#######IPv6#######
称为IPv4的下一代协议

为方便操作, ipv6 被换算成 8x16 进制的一
串数字
– 2000:0000:0000:0000:0000:0000:0000:0001
– 2000:0:0:0:0:0:0:1
• 任意位数的 0 可以用 :: 来表示
– 2000:0000:0000:0000:0000:0000:0000:0001
– 2000::1

ping6 2001:db8:0:1::1
• tracepath6 2001:db8:0:2::451
• netstat -46n
– n
– t
– u
– L
– a
– p
不作解析
tcp 协议
udp 协议
状态位 listen 的端口
所有端口
显示进程


nmcli connection add con-name eth0
ifname eth0 type ethernet ip6 2014::1 gw6
2014::5
– ip addr show
– ip -6 route
#######高级网络设置##########
##bridge##
首先把真机里面的ifcfg-br0  ifcfg-enp0s25移到/mnt下面再开始做实验
nm-con***
把以太网和桥接删掉
然后编辑文件
ifcfg-enp0s25
DEVICE=enp0s25                
ONBOOT=yes
BOOTPROTO=none
BRIDGE=br0                ##网桥

vim ifcfg-br0
DEVICE=br0
ONBOOT=yes
BOOTPROTO=none
TYPE=Bridge                ##类型B大写
IPADDR=172.25.254.14
PREFIX=24
DNS1=172.25.254.250

systemctl stop NetworkManager.service
systemctl restart network
systemctl start NetworkManager


#######对网桥的管理######
nm-co***        ##先删除网卡
brctl addbr br0        ##添加网桥
brctl show        ##显示网桥
brctl addif br0 eth0    ##把br0搭在eth0上面
ifconfig br0 172.25.254.114 netmask 255.255.255.0    ##对网桥进行配置
ping 172.25.254.250        ##可以ping通
brctl delif br0 eth0        ##把br0从eth0上面移除
然后ping 172.25.254.250
ifconfig br0 down           ##把br0ifconfig中移除
brctl delbr br0            ##删除网桥


#######bonding#######
如果有一块网卡坏掉的时候该怎么办，现在有网卡的bonding技术

首先需要两块网卡，我们在虚拟机里面添加一块网卡
然后我们开始搭建bond
nmcli connetction add con-name bond0 ifname bond0 type bond mode active-backup ip4 172.25.254.114/24        ##添加bond名字为bond0
然后我们打开两个shell 一个监控bond  一个ping 172.25.254.250
watch -n -1 cat /proc/net/bonding/bond0
然后我们把两块网卡添加到bond0上面
nmcli connetcion add con-name eth0 ifname eth0 type bond-slave master bond0
nmcli connetcion add con-name eth1 ifname eth1 type bond-slave master bond0

分别把两块网卡添加上去

然后我们在监控bond里面可以看见是先添加上去的eth0在工作
Ethernet Channel Bonding Driver: v3.7.1 (April 27, 2011)

Bonding Mode: fault-tolerance (active-backup)
Primary Slave: None
Currently Active Slave: eth1
MII Status: up
MII Polling Interval (ms): 100
Up Delay (ms): 0
Down Delay (ms): 0

Slave Interface: eth0
MII Status: up
Speed: Unknown
Duplex: Unknown
Link Failure Count: 1
Permanent HW addr: 52:54:00:00:0e:0a
Slave queue ID: 0

Slave Interface: eth1
MII Status: up
Speed: Unknown
Duplex: Unknown
Link Failure Count: 0
Permanent HW addr: 52:54:00:77:c2:ad
Slave queue ID: 0


如果ifconfig eth0 down          ##把eth0网卡down掉
ifconfig eth0 up            ##up


#######team######## team类新的最多可以挂8个网卡  不像bond只能挂两个
在做这些之前我们要把刚才做的bond删掉
nmcli connetcion delete eth0
nmcli connetcion delete eth1
nmcli connetcion delete bond0
nmcli connetcion add con-name team0 ifname team0 type team config '{"runner"：{"name":"activebackup"}}' ip4 172.25.254.114/24        ##添加team名为team0
 
分别把eth0和eth1添加到team0中
nmcli connetcion add con-name eth0 type team-slave ifname eth0 master team0
nmcli connetcion add con-name eth1 type team-slave ifname eth1 master team0

监控team的命令：watch -n 1 teamdctl team0 stat