系统环境

CENTOS6.2 X86-64 并已经使用yum安装配置好LNMP环境

以下是安装所使用的部分软件包

shell>cd /usr/local/src

shell>wget http://jaist.dl.sourceforge.net/project/courier/imap/4.16.0/courier-imap-4.16.0.tar.bz2

shell>wget ftp://ftp.cuhk.edu.hk/pub/packages/mail-server/postfix/official/postfix-2.11.4.tar.gz

shell>wget http://cznic.dl.sourceforge.net/project/courier/authlib/0.66.1/courier-authlib-0.66.1.tar.bz2

shell>wget ftp://ftp.cyrusimap.org/cyrus-sasl/cyrus-sasl-2.1.26.tar.gz

shell>wget ftp://ftp.cuhk.edu.hk/pub/packages/mail-server/postfix/official/postfix-2.11-patch04.gz

shell>wget http://cznic.dl.sourceforge.net/project/courier/courier-unicode/1.1/courier-unicode-1.1.tar.bz2

shell>wget http://jaist.dl.sourceforge.net/project/courier/maildrop/2.8.1/maildrop-2.8.1.tar.bz2

shell>wget ftp://ftp.csx.cam.ac.uk/pub/software/programming/pcre/pcre-8.35.tar.bz2

shell>wget ftp://ftp.funet.fi/pub/languages/perl/CPAN/modules/by-module/DBD/DBD-mysql-4.031.tar.gz

shell>wget ftp://ftp.funet.fi/pub/languages/perl/CPAN/modules/by-module/DBI/DBI-1.633.tar.gz

shell>wget http://www.cpan.org/modules/by-module/FCGI/FCGI-0.77.tar.gz

shell>wget http://search.cpan.org/CPAN/authors/id/G/GB/GBJK/FCGI-ProcManager-0.25.tar.gz

shell>wget http://search.cpan.org/CPAN/authors/id/I/IN/INGY/IO-All-0.86.tar.gz

shell>wget http://www.cpan.org/authors/id/M/MH/MHARNISCH/Unix-Syslog-1.1.tar.gz

shell>wget http://www.cpan.org/authors/id/M/MG/MGRABNAR/File-Tail-1.0.tar.gz

shell>wget http://jaist.dl.sourceforge.net/project/clamav/clamav/0.98.6/clamav-0.98.6.tar.gz

shell>wget http://www.ijs.si/software/amavisd/amavisd-new-2.10.1.tar.xz

shell>wget http://www.cpan.org/authors/id/J/JM/JMEHNLE/mail-spf/Mail-SPF-v2.9.0.tar.gz




安装前准备工作

shell>yum -y groupinstall "Development tools"

shell>yum install libtool #安装courier-authlib须要

shell>yum install libtool-ltdl-devel #安装courier-authlib须要

shell>yum install expect #安装courier-authlib须要

shell>yum install gdbm-devel

shell>yum install libidn-devel

shell>yum install mysql-devel

shell>yum -y install db4-devel

创建组

shell>groupadd postfix -g 1000

shell>groupadd postdrop -g 1002

shell>useradd postfix -u 1000 -g postfix -G postdrop

shell>groupadd vmail -g 1001

shell>useradd vmail -u 1001 -g 1001 -M -s /bin/false


配置配置Nginx支持FCGI

shell>yum install perl-ExtUtils-Embed

shell>yum install perl-CGI

shell>cd /usr/local/src/

shell>tar -zxvf FCGI-0.77.tar.gz

shell>cd FCGI-0.77

shell>perl Makefile.PL

shell>make && make install

shell>cd ..

shell>tar -zxvf FCGI-ProcManager-0.25.tar.gz

shell>cd FCGI-ProcManager-0.25

shell>perl Makefile.PL

shell>make && make install

shell>cd ..

shell>tar zxvf IO-All-0.86.tar.gz

shell>cd IO-All-0.86

shell>perl Makefile.PL

shell>make && make install


shell>tar -zxvf Unix-Syslog-1.1.tar.gz

shell>cd Unix-Syslog-1.1

shell>perl Makefile.PL

shell>make && make install

shell>cd ..

shell>tar -zxvf DBD-mysql-4.031.tar.gz

shell>cd DBD-mysql-4.031

shell>perl Makefile.PL

shell>make && make install

shell>cd ..

shell>tar -zxvf DBI-1.633.tar.gz

shell>cd DBI-1.633

shell>perl Makefile.PL

shell>make && make install


卸载系统自带的POSTFIX

shell>rpm -qa |grep postfix

shell>groupadd -g 1000 postfix

shell>useradd -g postfix -u 1000 postfix -s /sbin/nologin 

shell>groupadd -g 1002 postdrop


安装courier-authlib

shell>cd /usr/local/src/

shell>tar -jxvf courier-authlib-0.66.1.tar.bz2 

shell>cd courier-authlib-0.66.1

shell>./configure    --prefix=/usr/local/courier-authlib --with-mailuser=vmail --with-mailgroup=vmail   --without-stdheaderdir  --without-authpam    --without-authldap    --without-authpwd    --without-authshadow     --without-authpgsql --with-authmysql    --with-redhat    CFLAGS="-march=x86-64 -O2 -fexpensive-optimizations" CXXFLAGS="-march=x86-64 -O2 -fexpensive-optimizations"  

shell>make 

shell>make install

shell>make install-configure

shell>cd /usr/local/courier-authlib/etc/authlib/

shell>cp authdaemonrc authdaemonrc.back

shell>vi authdaemonrc

authmodulelist="authmysql"

authmodulelistorig="authmysql"

DEBUG_LOGIN=2

修改上面3项，其他的项保持不变。这个修改前2行表示用mysql认证模块；把DEBUG_LOGIN的值有默认的“0”改成“2”的用意是运行postfix时有更多的信息输出，通过生成的日志以帮助排错。

shell>cp authmysqlrc authmysqlrc.back

shell>vi authmysqlrc

MYSQL_SERVER localhost

MYSQL_USERNAME extmail

MYSQL_PASSWORD extmail

MYSQL_DATABASE extmail

MYSQL_SOCKET /var/lib/mysql/mysql.sock

MYSQL_PORT              3306

MYSQL_USER_TABLE mailbox

MYSQL_CRYPT_PWFIELD password  //这里需要注意

#MYSQL_CLEAR_PWFIELD password

DEFAULT_DOMAIN mail.test.com

MYSQL_UID_FIELD ‘1001’

MYSQL_GID_FIELD ‘1001’

MYSQL_LOGIN_FIELD username

MYSQL_HOME_FIELD '/var/mailbox/'

MYSQL_NAME_FIELD name

MYSQL_MAILDIR_FIELD maildir

MYSQL_QUOTA_FIELD concat(quota,'S')

MYSQL_WHERE_CLAUSE active='1'

shell> ln -s /usr/local/courier-authlib/include/* /usr/include/

shell>cp courier-authlib.sysvinit /etc/init.d/courier-authlib

chmod +x /etc/init.d/courier-authlib

chkconfig --add courier-authlib

chkconfig courier-authlib on

service courier-authlib start


安装cyrus-sasl

先卸载系统自带的cyrus-sasl 

shell>rpm -e cyrus-sasl

shell>rpm -e --nodeps cyrus-sasl-lib

    

shell>cd /usr/local/src/

shell>tar -zxvf cyrus-sasl-2.1.26.tar.gz 

shell>cd cyrus-sasl-2.1.26

shell>./configure --prefix=/usr/local/sasl2 --disable-sample   --disable-digest --disable-gssapi --disable-anon --enable-plain --enable-login --enable-sql  --with-authdaemond=/usr/local/courier-authlib/var/spool/authdaemon/socket  

shell>make

shell>make install

shell>ln -s /usr/local/sasl2/lib/sasl2 /usr/lib/

shell>ln -s /usr/local/sasl2/lib/sasl2 /usr/lib64/

shell>vi /etc/ld.so.conf

/usr/local/sasl2/lib/

/usr/local/sasl2/lib/sasl2

shell>ldconfig -v

shell>vi /usr/local/sasl2/lib/sasl2/smtpd.conf 

pwcheck_method: authdaemond

mech_list: PLAIN LOGIN

log_level: 3

authdaemond_path: /usr/local/courier-authlib/var/spool/authdaemon/socket

shell>chmod +x -R /usr/local/courier-authlib/var/spool/authdaemon/

shell>mkdir -pv /var/state/saslauthd #创建运行时须要的目录

shell>/usr/local/sasl2/sbin/saslauthd -v #查看版本

shell>/usr/local/sasl2/sbin/saslauthd -a shadow pam -d #测试，正常的话不会报错，如果没有报错.crtl+c结束掉进程

shell>/usr/local/sasl2/sbin/saslauthd -a shadow pam

shell>/usr/local/sasl2/sbin/testsaslauthd -u root -p 123456 #正常显示0: OK "Success"表示成功(此处输入的是系统登录账号root 的密码,不是指的MySQL账号密码。否则会提示：

    0: NO "authentication failed",同时，注意这里测试不用开启authdaemond(authlib)

shell>echo "/usr/local/sasl2/sbin/saslauthd -a shadow pam" >>/etc/rc.local 

  

下载安装相同版本的VDA补丁,使postfix支持磁盘限额，如果未安装该补丁，POSTFIX配置磁盘限额后启动POSTFIX会报错

shell>tar -zxvf postfix-2.11.4.tar.gz 

shell>wget http://vda.sourceforge.net/VDA/postfix-vda-v13-2.11.4.patch

shell>patch -p1 <postfix-vda-v13-2.11.4.patch

安装postfix

shell>cd postfix-2.11.4

shell>mkdir /var/mailbox

shell>chown vmail:vmail /var/mailbox/

shell>make Makefiles 'CCARGS=-DHAS_MYSQL -I/usr/include/mysql -DUSE_SASL_AUTH -DUSE_CYRUS_SASL -I/usr/local/sasl2/include/sasl' 'AUXLIBS=-L/usr/lib64/mysql -lmysqlclient -lz -lm -L/usr/local/sasl2/lib -lsasl2'

shell>make

shell>make install #默认回车完成安装

shell>mv /etc/aliases /etc/aliases.old

shell>ln -s /etc/postfix/aliases /etc/aliases

shell>/usr/bin/newaliases #生成别名二进制文件，这个步骤如果忽略，会造成postfix效率极低

shell>/usr/sbin/postconf -a #正常显示 cyrus dovecot

shell>/usr/sbin/postconf -m |grep mysql #正常显示 mysql


安装IMAP，须要先安装courier-unicode，不然会报错

shell>tar -jxvf courier-unicode-1.1.tar.bz2 

shell>cd courier-unicode-1.1

shell>./configure 

shell>make

shell>make install


安装courier-imap

shell>tar -jxvf courier-imap-4.16.0.tar.bz2 

shell>cd courier-imap-4.16.0

shell>./configure --prefix=/usr/local/courier-imap  --with-redhat --enable-unicode=utf-8,iso-8859-1,gb2312,gbk,gb18030 --disable-root-check --with-trashquota --with-dirsync  --with-authmysql --with-authmysql=yes --without-ipv6 CPPFLAGS='-I/usr/local/courier-authlib/include' COURIERAUTHCONFIG='/usr/local/courier-authlib/bin/courierauthconfig'

shell>make

shell>make install

shell>make install-configure

shell>vi /usr/local/courier-imap/etc/pop3d

POP3DSTART=YES

MAILDIRPATH=/var/mailbox

shell>vi /usr/local/courier-imap/etc/imapd

IMAPDSTART=YES

MAILDIRPATH=/var/mailbox

shell>cp /usr/local/src/courier-imap-4.16.0/packaging/systemd/courier-imap.sysvinit /etc/rc.d/init.d/imapd

shell>chmod +x /etc/rc.d/init.d/imapd 

shell>chkconfig --add imapd

shell>chkconfig imapd on

shell>cd /usr/local/courier-imap/share

shell>./mkdhparams

shell>service imapd start

shell>netstat -tnl |egrep "110|143"


安装maildrop

shell>cp /lib64/libpcre.so.0 /lib64/libpcre.so.0-old

shell>rpm -e --nodeps pcre

shell>tar -jxvf pcre-8.35.tar.bz2 

shell>cd pcre-8.35

shell>./configure 

shell>make

shell>make install

shell>ln -s /usr/local/courier/bin/courierauthconfig /usr/bin/courierauthconfig #这条命令很重要，没有正常执行的话下面测试的时候Courier Authentication不会出现


shell>tar -jxvf maildrop-2.8.1.tar.bz2 

shell>cd maildrop-2.8.1

shell>./configure --enable-sendmail=/usr/sbin/sendmail  --enable-trusted-users='root vmail' --enable-syslog=1 --enable-maildirquota  --enable-maildrop-uid=1001  --enable-maildrop-gid=1001 --with-trashquota --with-dirsync

shell>make

shell>make install

shell>echo "/usr/local/lib" >>/etc/ld.so.conf

shell>ldconfig -v

shell>maildrop -v

maildrop 2.0.4 Copyright 1998-2005 Double Precision, Inc.

GDBM extensions enabled.

Courier Authentication Library extension enabled.  #这行重要,没有的话要查一下原因

Maildir quota extension enabled.

This program is distributed under the terms of the GNU General Public

License. See COPYING for additional information.


shell>vi /etc/maildroprc

logfile "/var/log/maildrop.log" 

to "$HOME/Maildir"

shell>touch /var/log/maildrop.log

shell>chown vmail:vmail /var/log/maildrop.log 


安装配置extmail、extman

shell>mkdir /var/www/extsuite

shell>mount -o username=administrator,password=密码 //192.168.1.103/download /mnt/

shell>cp /mnt/extma* .

shell>tar -zxvf extmail-1.2.tar.gz -C /var/www/extsuite

shell>cd /var/www/extsuite/

shell>mv extmail-1.2/ extmail

shell>cp extsuite/extmail/webmail.cf.default webmail.cf

shell>chown -R vmail:vmail /var/www/extsuite/extmail/

shell>chmow +x R /var/www/extsuite/extmail/cgi

shell>cp nginx.conf nginx.conf-2015-03-26

shell>vi nginx.conf

user  vmail vmail;

worker_processes 8;

#error_log  /usr/local/nginx/logs/nginx_error.log  crit;

error_log  /usr/local/nginx/logs/nginx_error.log  info;


pid        /usr/local/nginx/nginx.pid;

#Specifies the value for maximum file descriptors that can be opened by this process. 

worker_rlimit_nofile 51200;

events 

{

  use epoll;

  worker_connections 51200;

}

http 

{

  include       mime.types;

  default_type  application/octet-stream;

  #charset  gb2312;

  server_names_hash_bucket_size 128;

  client_header_buffer_size 32k;

  large_client_header_buffers 4 32k;

  client_max_body_size 8m;

  sendfile on;

  tcp_nopush     on;

  keepalive_timeout 60;

  tcp_nodelay on;

  fastcgi_connect_timeout 300;

  fastcgi_send_timeout 300;

  fastcgi_read_timeout 300;

  fastcgi_buffer_size 64k;

  fastcgi_buffers 4 64k;

  fastcgi_busy_buffers_size 128k;

  fastcgi_temp_file_write_size 128k;

  gzip on;

  gzip_min_length  1k;

  gzip_buffers     4 16k;

  gzip_http_version 1.0;

  gzip_comp_level 2;

  gzip_types       text/plain application/x-javascript text/css application/xml;

  gzip_vary on;

修改NGINX以及php-fpm所属用户及组为vmail，并修改相应文件属主，php-fpm配置文件www.conf，否则NGINX无法启动

shell>find / -gid 498 -exec chown :vmail {} \; #将所有属组为NGINX的文件的属组修改为vmail

shell>find / -uid 498 -exec chown vmail {} \; #将所有属主为NGINX的文件的属主修改为vmail

shell>cd conf.d/

shell>vi extmail.conf

server

  {

    listen       80;

    server_name  mail.test.com;

    index index.html index.htm index.php index.cgi;

    root  /var/www/extsuite/extmail/html/;

   

      

    location  /extmail/cgi/ {

        fastcgi_pass  127.0.0.1:12009; 

fastcgi_index         index.cgi;

        fastcgi_param  SCRIPT_FILENAME   /var/www/extsuite/extmail/cgi/$fastcgi_script_name;

        include fastcgi.conf;

   }

    location   ^~ /extmail/ {

        alias  /var/www/extsuite/extmail/html/;

   }

    location /extman/cgi/ {

        fastcgi_pass  127.0.0.1:12009; 

fastcgi_index         index.cgi;

        fastcgi_param  SCRIPT_FILENAME   /var/www/extsuite/extman/cgi/$fastcgi_script_name;

        include fastcgi.conf;

   }

    location ^~ /extman/ {

        alias  /var/www/extsuite/extman/html/;

    }

    location ^~ /status {

       stub_status on;

       access_log   off;

       allow 192.168.0.0/24;

       #deny all;

       }

   location ~ .*\.(php|php5)?$

    {      

      #fastcgi_pass  unix:/tmp/php-cgi.sock;

      fastcgi_pass  127.0.0.1:12009;

      fastcgi_index index.cgi;

      include fastcgi.conf;

    }

    location ~ .*\.(gif|jpg|jpeg|png|bmp|swf)$

    {

expires      30d;

    }

    location ~ .*\.(js|css)?$

    {

expires      1h;

    }   

}


shell>vi /var/www/extsuite/extmail/dispatch-init

   MAXFORK=20

   MAXREQS=500

   TIMEOUT=300

   PORT=12009  #端口号与extmail.conf文件保持一致,

   SU_UID=vmail

   SU_GID=vmail

   

shell>tar -zxvf extman-1.1.tar.gz -C /var/www/extsuite

shell>mv extman-1.1/ extman

shell>chown -R vmail:vmail /var/www/extsuite/extman/

shell>mkdir -pv /tmp/extman

shell>chown -R vmail:vmail /tmp/extman/

shell>cd /var/www/extsuite/extman/docs/

shell>cp init.sql init.sql.back

shell>vi init.sql

更改init.sql中extmail.org的名称为自已域名


shell>vi extmail.sql

/*

 ExtMail - OSS

  License: GPL v2



 This is the MySQL database structure for ExtMail System, derive from

 Postfixadmin ( http://high5.net/howto/ ) project, and modify to meet

 our need, it is compatible with PostfixAdmin MySQL structure and have

 some extmail specific attributes and structure


 ExtMail have an alternative solution on openLDAP, please check the

 extmail.schema (V3) for detail.


 You can create the database from the shell with:


 mysql -u root [-p] < extmail.sql

*/


/*

 Initialize mysql

*/


USE mysql;

/* readonly user & password */

/* clean user if exists */

delete FROM user where User in ('extmail','webman');

delete FROM db where User in ('extmail','webman');


INSERT INTO user (Host, User, Password) VALUES ('localhost','extmail',password('extmail'));

INSERT INTO db (Host, Db, User, Select_priv) VALUES ('localhost','extmail','extmail','Y');


/* extman read/write user & password */

INSERT INTO user (Host, User, Password) VALUES ('localhost','webman',password('webman'));

INSERT INTO db (Host, Db, User, Select_priv, Insert_priv, Update_priv, Delete_priv) VALUES ('localhost', 'extmail', 'webman', 'Y', 'Y', 'Y', 'Y');

FLUSH PRIVILEGES;


/* readonly user */

GRANT USAGE ON extmail.* TO extmail@localhost;

GRANT SELECT, UPDATE ON extmail.* TO extmail@localhost;


/* read/write user */

GRANT USAGE ON extmail.* TO webman@localhost;

GRANT SELECT, INSERT, DELETE, UPDATE ON extmail.* TO webman@localhost;

CREATE DATABASE extmail;

USE extmail;


/* Table structure for table manager */

CREATE TABLE manager (

 username varchar(255) NOT NULL default '',

 password varchar(255) NOT NULL default '',

 type varchar(64) NOT NULL default 'postmaster',

 uid varchar(255) NOT NULL default '',

 name varchar(255) NOT NULL default '',

 question text NOT NULL default '',

 answer text NOT NULL default '',

 disablepwdchange smallint(1),

 createdate datetime NOT NULL default '0000-00-00 00:00:00',

 expiredate DATE NOT NULL default '0000-00-00',

 active tinyint(1) NOT NULL default '1',

 PRIMARY KEY (username)

) ENGINE=MyISAM COMMENT='Ext/Webman - Admin Accounts';

CREATE TABLE alias (

 address varchar(255) NOT NULL default '',

 goto text NOT NULL,

 domain varchar(255) NOT NULL default '',

 createdate datetime NOT NULL default '0000-00-00 00:00:00',

 active tinyint(1) NOT NULL default '1',

 PRIMARY KEY (address)

) ENGINE=MyISAM COMMENT='ExtMail - Virtual Aliases';

CREATE TABLE domain (

 domain varchar(255) NOT NULL default '',

 description varchar(255) NOT NULL default '',

 hashdirpath varchar(255) NOT NULL default '',

 maxalias int(10) NOT NULL default '0',

 maxusers int(10) NOT NULL default '0',

 maxquota varchar(16) NOT NULL default '0',

 maxnetdiskquota varchar(16) NOT NULL default '0',

 transport varchar(255) default NULL,

 can_signup tinyint(1) NOT NULL default '0',

 default_quota varchar(255) default NULL,

 default_netdiskquota varchar(255) default NULL,

 default_expire varchar(12) default NULL,

 disablesmtpd smallint(1),

 disablesmtp smallint(1),

 disablewebmail smallint(1),

 disablenetdisk smallint(1),

 disableimap smallint(1),

 disablepop3 smallint(1),

 createdate datetime NOT NULL default '0000-00-00 00:00:00',

 expiredate DATE NOT NULL default '0000-00-00',

 active tinyint(1) NOT NULL default '1',

 PRIMARY KEY (domain)

) ENGINE=MyISAM COMMENT='ExtMail - Virtual Domains';

CREATE TABLE domain_manager (

 username varchar(255) NOT NULL default '',

 domain varchar(255) NOT NULL default '',

 createdate datetime NOT NULL default '0000-00-00 00:00:00',

 active tinyint(1) NOT NULL default '1',

 KEY username (username)

) ENGINE=MyISAM COMMENT='Ext/Webman - Domain Admins';

CREATE TABLE mailbox (

 username varchar(255) NOT NULL default '',

 uid varchar(255) NOT NULL default '',

 password varchar(255) NOT NULL default '',

 clearpwd varchar(128) NOT NULL default '',

 name varchar(255) NOT NULL default '',

 mailhost varchar(255) NOT NULL default '',

 maildir varchar(255) NOT NULL default '',

 homedir varchar(255) NOT NULL default '',

 quota varchar(16) NOT NULL default '0',

 netdiskquota varchar(16) NOT NULL default '0',

 domain varchar(255) NOT NULL default '',

 uidnumber int(6) NOT NULL default '1000',

 gidnumber int(6) NOT NULL default '1000',

 createdate datetime NOT NULL default '0000-00-00 00:00:00',

 expiredate DATE NOT NULL default '0000-00-00',

 active smallint(1) NOT NULL default '1',

 disablepwdchange smallint(1),

 disablesmtpd smallint(1),

 disablesmtp smallint(1),

 disablewebmail smallint(1),

 disablenetdisk smallint(1),

 disableimap smallint(1),

 disablepop3 smallint(1),

 question text NOT NULL default '',

 answer text NOT NULL default '',

 PRIMARY KEY (username)

) ENGINE=MyISAM COMMENT='ExtMail - Virtual Mailboxes';


shell>mysql -u root -p <extmail.sql 

shell>mysql -u root -p <init.sql

shell>vi extmail/webmail.cf

SYS_USER_LANG = en_US  改为SYS_USER_LANG = zh_CN

SYS_MAILDIR_BASE = /home/domains 右边改为 /var/mailbox

SYS_MYSQL_USER = db_user 右边改为extmail

SYS_MYSQL_PASS = db_pass    右边改为extmail

SYS_AUTHLIB_SOCKET = /usr/local/courier-authlib/var/spool/authdaemon/socket


shell>cd ../../extman/

shell>cp webman.cf.default webman.cf

shell>vi webman.cf

SYS_MAILDIR_BASE = /home/domains 右边改为/var/mailbox

SYS_DEFAULT_UID = 1001

SYS_DEFAULT_GID = 1001

SYS_CAPTCHA_ON = 0          //关闭图形验证码


shell>/var/www/extsuite/extmail/dispatch-init start

shell>service nginx restart


配置postfix

shell> vi /etc/postfix/master.cf

maildrop  unix  -       n       n       -       -       pipe

  flags=DRhu user=vmail argv=/usr/local/bin/maildrop -d ${recipient}


shell> vi /etc/postfix/main.cf

queue_directory = /var/spool/postfix

command_directory = /usr/sbin

daemon_directory = /usr/libexec/postfix

data_directory = /var/lib/postfix

mail_owner = postfix

myhostname = njjnyy.cn

mydomain = njjnyy.cn

myorigin = $mydomain

inet_interfaces = all

#mydestination = $myhostname, localhost.$mydomain, localhost, $mydomain

mydestination =

unknown_local_recipient_reject_code = 550

mynetworks = 192.168.0.0/24,127.0.0.0/8

relay_domains = $mydestination    无

alias_maps = $alias_database 无

defer_transports = 无

mail_spool_directory = /var/spool/mail 无

debug_peer_level = 2

debugger_command =

         PATH=/bin:/usr/bin:/usr/local/bin:/usr/X11R6/bin

         ddd $daemon_directory/$process_name $process_id & sleep 5

sendmail_path = /usr/sbin/sendmail

newaliases_path = /usr/bin/newaliases

mailq_path = /usr/bin/mailq

setgid_group = postdrop

html_directory = no

manpage_directory = /usr/local/man

sample_directory = /etc/postfix

readme_directory = no

 ############################CYRUS-SASL########################

broken_sasl_auth_clients = yes

smtpd_recipient_restrictions = permit_mynetworks,permit_sasl_authenticated,reject_invalid_hostname,reject_non_fqdn_hostname,reject_unknown_sender_domain,reject_non_fqdn_sender,reject_non_fqdn_recipient,reject_unknown_recipient_domain,reject_unauth_pipelining,reject_unauth_destination,permit

smtpd_sasl_auth_enable = yes

smtpd_sasl_local_domain = $mydomain

smtpd_sasl_security_options = noanonymous

#smtpd_sasl_application_name = smtpd

smtpd_banner = Welcome to our $myhostname ESMTP,Warning: Version not Available!

#############################SASL-END##############################

#############################Virtual Mailbox Settings################

virtual_mailbox_base = /var/mailbox

virtual_mailbox_maps = mysql:/etc/postfix/mysql/mysql_virtual_mailbox_maps.cf

virtual_mailbox_domains = mysql:/etc/postfix/mysql/mysql_virtual_domains_maps.cf

virtual_alias_domains=

virtual_alias_maps = mysql:/etc/postfix/mysql/mysql_virtual_alias_maps.cf

virtual_uid_maps = static:1001       #vmail

virtual_gid_maps = static:1001       #vmai

virtual_transport = maildrop

maildrop_destination_recipient_limit = 1

maildrop_destination_concurrency_limit = 1

#################################Mailbox END###########################

#################################Quota Settings########################

message_size_limit = 200000000

virtual_mailbox_limit = 20971520

virtual_create_maildirsize = yes

virtual_mailbox_extended = yes

virtual_mailbox_limit_maps = mysql:/etc/postfix/mysql/mysql_virtual_mailbox_limit_maps.cf

virtual_mailbox_limit_override = yes

virtual_maildir_limit_message = Sorry, the user's maildir has overdrawn his diskspace quota, please try again later.

virtual_overquota_bounce = yes

################################Quota END############################

################################Amavis Start##########################

content_filter=amavisfeed:[127.0.0.1]:10024

max_use=10

################################Amavis END###########################


测试邮件账号

shell>/usr/local/courier-authlib/sbin/authtest -s smtp lxb@njjnyy.cn l123456

正常显示如下：

Authentication succeeded.

Authenticated: lxb@njjnyy.cn  (uid 1001, gid 1001)

Home Directory: /var/mailbox/njjnyy.cn/lxb

Maildir: /var/mailbox/njjnyy.cn/lxb/Maildir/

Quota: 5242880S

Encrypted Password: $1$Ynp2/b/r$5DHAdX18fsbJMR98CU.1o/

Cleartext Password: a123456


安装webmail图形化日志

shell>yum install rrdtool

shell>yum install rrdtool-perl

shell>yum install perl-Time-HiRes

shell>cd /usr/local/src/

shell>tar -zxvf File-Tail-1.0.tar.gz

shell>cd  File-Tail-1.0

shell>perl Makefile.PL

shell>make && make install

shell>cp -r /var/www/extsuite/extman/addon/mailgraph_ext /usr/local/

shell>/var/www/extsuite/extman/daemon/cmdserver -d

shell>/usr/local/mailgraph_ext/mailgraph-init start

shell>echo "/var/www/extsuite/extman/daemon/cmdserver -d" >>/etc/rc.local

shell>echo "/usr/local/mailgraph_ext/mailgraph-init start">>/etc/rc.local


extmail登录界面修改

1 修改文件：/var/www/extsuite/extmail/html/default/index.html

设定默认域名

<TD><INPUT TYPE="text" class="input_n" NAME="domain" value="njjnyy.cn"></TD>

其中的domain和example.com随自己实际情况进行更改。

POP3和SMTP设置信息提示   

POP3 <b>:</b>& nbsp;& nbsp;pop3.yourdomain.com<br />

SMTP <b>:</b>& nbsp;& nbsp;smtp.yourdomain.com<br />

技术支持和自愿捐助连接，用<!-- -->注释掉。

<div class=donate> <a href="http://www.extmail.org/support/<%LANG%>/index.html" target="_blank"> <b><%support_link%></b></a> | <img style="vertical-align: middle" src="/extmail/p_w_picpaths/donate.png"> <a

2 修改文件：/var/www/extsuite/extmail/webmail.cf

去除免费注册

修改位置：SYS_SHOW_SIGNUP = 1

修改结果：SYS_SHOW_SIGNUP = 0

去掉网络磁盘功能

修改位置：SYS_NETDISK_ON = 1

修改结果：SYS_NETDISK_ON = 0

3 更换logo标志

修改文件：/var/www/extsuite/extmail/html/default/p_w_picpaths/logo.gif

修改内容：替换成需要的Logo图片文件

4 修改文件：/var/www/extsuite/extmail/lang/zh_CN

修改位置：

%lang_login = (

meta_title => '欢迎使用ExtMail'


修改位置：

%lang_login = (

intro2 => '<b>快速而可靠</b><br />引入索引缓存(Cache)技术和高效核心，WebMail操作疾步如飞',

intro3 => '<b>多语言同屏读写</b><br />全面支持UTF8，实现同屏读写多国语言，真正做到国际邮、无乱码',

intro4 => '<b>真正模板化设计</b><br />MVC设计+高速模板引擎，实现了内容数据完全分离，轻松修改模板',

intro5 => '<b>高性能I/O</b><br />;轻松应付>1GB邮箱/200M附件，远强于流行的各式php webmail',


修改位置：

%lang_login = (

wsplash => '快速可靠, 高性能I/O

开源MAIL开足马力迈进中...',


修改位置：

%lang_login = (

welcome_index => '欢迎使用ExtMail!'

5 修改文件：/var/www/extsuite/extmail/html/default/TOP_BAN.html

注释掉

href="http://www.extmail.org/support/<%LANG%>/about.html"><%about%></a> | <a target=_blank href="http://www.extmail.org/support/<%LANG%>/help.html"><%help%></a></span>

6修改文件：/var/www/extsuite/extmail/html/default/BOTTOM.html

<div id="Bcr">Powered by <%VERSION%> 2006 ExtMail.Org Runtime: <%TIME%><br>

<%extmail_whatis%></div>

上面内容可以根据页面底部的显示信息对比修改。

7 修改文件：/var/www/extsuite/extmail/html/default/welcome.html

去掉项目新闻 注释掉下面内容

<div style="padding-left: 5px;padding-right:5px">

                <div class="panelout" id="etnews_div">

                <div class="paneltit">&nbsp;ExtMail Project News</div>

                <div class="panelin" id="etnews_container">

                </div>

                </div>

                <script type="text/javascript">

                        etnews_init();

                </script>

                </div>

8 更换原天气预报代码

更换掉原来的这段代码

<TD  width=230px valign=top style="">

                <div class="panelout" id="coolweather_div">

                        <div class="paneltit">&nbsp;<%weatherinfo%></div>

                        <div class="panelin" id="coolweather_container">

                        </div>

                        <script type="text/javascript">

                                coolweather_iconspath = '/extmail/plugins/coolweather/icons/';

                                coolweather_init();

                        </script>

                </div>

        </TD>

        <TD width=10px></TD>

新的代码为

<TD  width=230px valign=top style="">

        <iframe src="http://www.thinkpage.cn/weather/weather.aspx?c=BU5CI&l=&p=CMA&a=1&u=C&s=1&m=1&x=1&d=3&fc=&bgc=&bc=" frameborder="0" scrolling="no" width="200" height="260" allowTransparency="true">

        </iframe>

        </TD>

        <TD width=10px></TD>


安装CLAMAV杀毒软件

shell>adduser -s /bin/false -c "Amavis User" -d /var/amavis amavis

shell>useradd -s/bin/false -d /dev/null clamav

shell>cd /usr/local/src/

shell>tar zxvf clamav-0.98.6.tar.gz

shell>./configure --prefix=/usr/local/clamav --with-dbdir=/usr/local/share/clamav

shell>make

shell>make install

shell>cp clamd.conf.sample clamd.conf

shell>vi clamd.conf

LogFile /var/log/clamav/clamd.log

LogTime yes

LogFacility LOG_MAIL

LogSyslog yes

LogVerbose yes

PidFile /var/run/clamd.pid

DatabaseDirectory /usr/local/share/clamav

LocalSocket /tmp/clamd.socket

StreamMaxLength 100M

User amavis

ScanMail yes

ScanArchive yes


shell>sed -e  '/^#/d' -e '/^$/d' clamd.conf #查看配置文件

shell>cp freshclam.conf.sample freshclam.conf

shell>vi freshclam.conf

DatabaseDirectory /usr/local/share/clamav

UpdateLogFile /var/log/clamav/freshclam.log

LogVerbose yes

LogSyslog yes

LogTime yes

PidFile /var/run/freshclam.pid

DatabaseOwner amavis

DatabaseMirror db.CN.clamav.net

DatabaseMirror database.clamav.net

Checks 12


shell>mkdir /usr/local/share/clamav

shell>mkdir /var/log/clamav

shell>chmod -R 744 /var/log/clamav

shell>chown -R amavis:amavis /var/log/clamav

shell>chown -R amavis.amavis /usr/local/share/clamav

shell>vi /etc/init.d/clamd

#! /bin/bash

#

# crond Start/Stop the clam antivirus daemon.

#

# chkconfig: 2345 90 60

# description: clamdis a standard UNIX program that scans for Viruses.

# processname: clamd

# config: /usr/local/clamav/etc/clamd.conf

# pidfile: /var/run/clamd.pid

# Source function library.

. /etc/init.d/functions

RETVAL=0

# See how we were called.

prog="clamd"

progdir="/usr/clamav/local/sbin"

# Source configuration

if [ -f /etc/sysconfig/$prog ] ; then

 . /etc/sysconfig/$prog

fi

start() {

 echo -n $"Starting $prog: "

 daemon $progdir/$prog

 RETVAL=$?

 echo

 [ $RETVAL -eq 0 ] && touch /var/run/clamd.pid

 return $RETVAL

}

stop() {

 echo -n $"Stopping $prog: "

 killproc $prog

 RETVAL=$?

 echo

 [ $RETVAL -eq 0 ] && rm -f /var/run/clamd.pid

 return $RETVAL

}

rhstatus() {

 status clamd

}

restart() {

 stop

 start

}

reload() {

 echo -n $"Reloading clam daemon configuration: "

 killproc clamd -HUP

 retval=$?

 echo

 return $RETVAL

}

case "$1" in

 start)

 start

 ;;

 stop)

 stop

 ;;

 restart)

 restart

 ;;

 reload)

 reload

 ;;

 status)

 rhstatus

 ;;

 condrestart)

 [ -f /var/lock/subsys/clamd ] && restart || :

 ;;

 *)

 echo $"Usage: $0 {start|stop|status|reload|restart|condrestart}"

 exit 1

esac

exit 0

shell>chkconfig --add clamd 

shell>chkconfig clamd on

shell>service clamd start

shell>/usr/local/clamav/bin/freshclam


安装amavisd-new amavisd-new是一个高性能、可靠的用于连接邮件传输代理和内容检查器之间的接口，例如邮件的病毒扫描、垃圾邮件过滤等等

查看已经安装的perl模块

shell>perldoc -t perllocal | grep "Module"

shell>yum install perl-YAML.noarch

shell>cd /usr/local/src

shell>tar zxvf Mail-SPF-v2.9.0.tar.gz

shell>cd Mail-SPF-v2.9.0

shell>perl Makefile.PL

shell>make && make install

shell>perl -MCPAN -e shell ## 在安装前确定你的系统语言不是UTF-8

    cpan> install Archive::Tar

    cpan> install Archive::Zip

    cpan> install Compress::Zlib

    cpan> install Convert::TNEF

    cpan> install Convert::UUlib

cpan> install Convert::BinHex

    cpan> install MIME::Base64

    cpan> install MIME::Parser

cpan> install MIME::Tools

    cpan> install Mail::Internet

    cpan> install Net::Server

cpan> install Net::LibIDN

    cpan> install Net::SMTP

    cpan> install Digest::MD5

    cpan> install IO::Stringy

    cpan> install Time::HiRes

    cpan> install Unix::Syslog

    cpan> install BerkeleyDB

cpan> install Crypt::OpenSSL::RSA

    cpan> install Digest::SHA1

    cpan> install DBI

    cpan> install DB_File

    cpan> install Net::DNS

cpan> install Mail::DKIM::Verifier

cpan> install Mail::SpamAssassin

    cpan> install IP::Country

cpan> install URI::_idna

cpan> install Net::IDN::Encode

cpan> install Net::Ident

cpan> install IO::Socket::INET6

    cpan> install IO::Socket::SSL

cpan> install NetAddr::IP

cpan> install Net::DNS::Resolver::Programmable

cpan> install installed: Geo::IP

cpan> install Razor2::Client::Agent

cpan> install IO::Socket::IP

cpan> install Encode::Detect

cpan> install Net::Patricia

cpan> install LWP::UserAgent

cpan> install Mail::SPF::Query

cpan> install HTML::Parser

cpan> exit

shell>vi amavisd.sh

#!/bin/bash

tar Jxvf amavisd-new-2.10.1.tar.xz  && cd amavisd*

mkdir -p /var/amavis/tmp /var/amavis/var /var/amavis/db /var/amavis/home

chown -R amavis:amavis /var/amavis

chmod -R 750 /var/amavis

cp amavisd /usr/local/sbin/

chown root /usr/local/sbin/amavisd

chmod 755 /usr/local/sbin/amavisd

cp amavisd.conf /etc/

chown root /etc/amavisd.conf

chmod 644 /etc/amavisd.conf

mkdir /var/virusmails

chown amavis:amavis /var/virusmails

chmod 750 /var/virusmails

cp amavisd_init.sh /etc/init.d/amavisd

chmod 744 /etc/init.d/amavisd

chkconfig --add amavisd

chkconfig amavisd on


shell>./amavisd.sh

vi /etc/amavisd.conf

$max_servers=8;  

$daemon_user = 'amavis'; 

$daemon_group = 'amavis'; 

$mydomain = 'njjnyy.cn'; 

$db_home = "$MYHOME/db"; 

$inet_socket_port = 10024; 

$sa_tag_level_deflt = 5.0;  

$sa_tag2_level_deflt = 6.2;  

$sa_kill_level_deflt = $sa_tag2_level_deflt; 

$virus_admin = "virusalert@$mydomain"; 

$sa_spam_subject_tag = '***SPAM*** '; 

$forward_method = 'smtp:127.0.0.1:10025'; 

$notify_method = $forward_method;

$final_virus_destiny = D_DISCARD; 

$final_banned_destiny = D_DISCARD; 

$final_spam_destiny = D_DISCARD; 

['ClamAV-clamd',

   \&ask_daemon, ["CONTSCAN {}\n", "/amd.socketmp/clamd.socket"],

   qr/\bOK$/m, qr/\bFOUND$/m,

   qr/^.*?: (?!Infected Archive)(.*) FOUND$/m ],





自动更新spamassassin clamav

shell>rpm -ivh --nodeps cronie

shell>crontab -e

0 0 * * * /usr/local/bin/sa-update -D --nogpg

0 4 * * * /usr/local/clamav/bin/freshclam  --quiet -l /var/log/clamav/freshclam.log