rhel5之sendmail、dovecot配置

(6),配置dovecot:

默认情况下&＃xff0c;/etc/dovecot.conf文件是不用修改的就可以使用。

[root&＃64;server2 mail]# service saslauthd start
Starting saslauthd: [  OK  ]
[root&＃64;server2 mail]# service dovecot start
Starting Dovecot Imap: [  OK  ]

[root&＃64;server2 mail]# service sendmail restart
Shutting down sm-client: [  OK  ]
Shutting down sendmail: [  OK  ]
Starting sendmail: [  OK  ]
Starting sm-client: [  OK  ]

检查是否成功启动&＃xff1a;

[root&＃64;server2 mail]# netstat -nutpl
Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address               Foreign Address             State       PID/Program name  
tcp        0      0 127.0.0.1:2208              0.0.0.0:*                   LISTEN      3046/hpiod         
tcp        0      0 0.0.0.0:111                 0.0.0.0:*                   LISTEN      2736/portmap       
tcp        0      0 192.168.1.12:53             0.0.0.0:*                   LISTEN      2706/named         
tcp        0      0 127.0.0.1:631               0.0.0.0:*                   LISTEN      3087/cupsd         
tcp        0      0 0.0.0.0:25                  0.0.0.0:*                   LISTEN      3770/sendmail: acce
tcp        0      0 127.0.0.1:953               0.0.0.0:*                   LISTEN      2706/named         
tcp        0      0 127.0.0.1:2207              0.0.0.0:*                   LISTEN      3051/python        
tcp        0      0 :::993                      :::*                        LISTEN      3708/dovecot       
tcp        0      0 :::995                      :::*                        LISTEN      3708/dovecot       
tcp        0      0 :::110                      :::*                        LISTEN      3708/dovecot       
tcp        0      0 :::143                      :::*                        LISTEN      3708/dovecot       
tcp        0      0 :::22                       :::*                        LISTEN      3071/sshd          
tcp        0      0 ::1:953                     :::*                        LISTEN      2706/named         
udp        0      0 0.0.0.0:37392               0.0.0.0:*                               2706/named         
udp        0      0 0.0.0.0:34478               0.0.0.0:*                               3260/avahi-daemon: 
udp        0      0 192.168.1.12:53             0.0.0.0:*                               2706/named         
udp        0      0 0.0.0.0:69                  0.0.0.0:*                               3104/xinetd        
udp        0      0 0.0.0.0:5353                0.0.0.0:*                               3260/avahi-daemon: 
udp        0      0 0.0.0.0:111                 0.0.0.0:*                               2736/portmap       
udp        0      0 0.0.0.0:631                 0.0.0.0:*                               3087/cupsd         
udp        0      0 :::44886                    :::*                                    2706/named         
udp        0      0 :::5353                     :::*                                    3260/avahi-daemon: 
udp        0      0 :::40315                    :::*                                    3260/avahi-daemon: 

防火墙配置&＃xff1a;

[root&＃64;server2 ~]# iptables -A INPUT -s 192.168.1.0/24 -p tcp -m multiport --dport 25,110,143,993,995 -j ACCEPT

993对应的是imaps,995对应的是pop3s。这个在后面说。

windows上测试&＃xff1a;

C:\>telnet mail.rhel5.com.cn 25

220 server2.rhel5.com ESMTP Sendmail 8.13.8/8.13.8; Tue, 31 Mar 2009 22:12:16 &＃43;0
800
ehlo hello
250-server2.rhel5.com Hello xzxj [192.168.1.156], pleased to meet you
250-ENHANCEDSTATUSCODES
250-PIPELINING
250-8BITMIME
250-SIZE
250-DSN
250-ETRN
250-AUTH LOGIN PLAIN
250-DELIVERBY
250 HELP

C:\>telnet mail.rhel5.com.cn 110

&＃43;OK Dovecot ready.

C:\>telnet mail.rhel5.com.cn 143

* OK Dovecot ready.

全部都测试成功。

首先配置dovecot的ssl加密&＃xff1a;

进到/etc/pki/dovecot目录&＃xff0c;修改下dovecot-openssl.cnf此文件&＃xff0c;我修改后的文件如下&＃xff1a;

[root&＃64;server2 dovecot]# vi dovecot-openssl.cnf

[ req ]
default_bits &＃61; 1024
encrypt_key &＃61; yes
distinguished_name &＃61; req_dn
x509_extensions &＃61; cert_type
prompt &＃61; no

[ req_dn ]
# country (2 letter code)
#C&＃61;CN

# State or Province Name (full name)
#ST&＃61;zhejiang

# Locality Name (eg. city)
#L&＃61;Hangzhou

# Organization (eg. company)
#O&＃61;xzxj

# Organizational Unit Name (eg. section)
OU&＃61;mail.rhel5.com.cn

# Common Name (*.example.com is also possible)
CN&＃61;rhel5

# E-mail contact
emailAddress&＃61;postmaster&＃64;mail.rhel5.com.cn

[ cert_type ]
nsCertType &＃61; server

在执行之前&＃xff0c;将/etc/pki/dovecot目录下的所有dovecot.pem文件删除&＃xff0c;然后进到/usr/share/doc/dovecot-1.0.7/examples目录里执行mkcert.sh脚本&＃xff1a;

[root&＃64;server2 examples]# ./mkcert.sh
Generating a 1024 bit RSA private key
..................&＃43;&＃43;&＃43;&＃43;&＃43;&＃43;
....&＃43;&＃43;&＃43;&＃43;&＃43;&＃43;
writing new private key to &＃39;/etc/pki/dovecot/private/dovecot.pem&＃39;
-----

subject&＃61; /OU&＃61;mail.rhel5.com.cn/CN&＃61;rhel5/emailAddress&＃61;postmaster&＃64;mail.rhel5.com.cn
SHA1 Fingerprint&＃61;FB:42:D3:3A:D3:97:54:55:CB:4F:25:43:D3:02:AD:B5:D4:32:22:7D

完了后会在/etc/pki/dovecot目录下产生新的dovecot.pem文件。

接着修改/etc/dovecot.conf文件&＃xff1a;

[root&＃64;server2 ~]# vi /etc/dovecot.conf

找到此行&＃xff0c;将前面的注释符去掉&＃xff1a;

protocols &＃61; imap imaps pop3 pop3s&＃xff0c;接着加入下面内容&＃xff0c;设置监听的地址以及端口号&＃xff1a;

protocol imap {
       listen &＃61; 192.168.1.12:143
       ssl_listen &＃61; 192.168.1.12:993
    }
    protocol pop3 {
       listen &＃61; 192.168.1.12:110
       ssl_listen &＃61; 192.168.1.12:995
    }

去掉ssl_disable &＃61; no前面的注释符&＃xff0c;最后修改以下两行&＃xff1a;

ssl_cert_file &＃61; /etc/pki/dovecot/certs/dovecot.pem
ssl_key_file &＃61; /etc/pki/dovecot/private/dovecot.pem

将前面的注释符去掉&＃xff0c;dovecot.pem此文件之先创建过&＃xff0c;这里不用修改了。

接着配置sendmail的ssl加密&＃xff1a;
[root&＃64;server2 certs]# cd /etc/pki/tls/certs

[root&＃64;server2 certs]# make sendmail.pem
umask 77 ; \
        PEM1&＃61;&＃96;/bin/mktemp /tmp/openssl.XXXXXX&＃96; ; \
        PEM2&＃61;&＃96;/bin/mktemp /tmp/openssl.XXXXXX&＃96; ; \
        /usr/bin/openssl req -utf8 -newkey rsa:1024 -keyout $PEM1 -nodes -x509 -days 365 -out $PEM2 -set_serial 0 ; \
        cat $PEM1 >  sendmail.pem ; \
        echo ""    >> sendmail.pem ; \
        cat $PEM2 >> sendmail.pem ; \
        rm -f $PEM1 $PEM2
Generating a 1024 bit RSA private key
............................................&＃43;&＃43;&＃43;&＃43;&＃43;&＃43;
....&＃43;&＃43;&＃43;&＃43;&＃43;&＃43;
writing new private key to &＃39;/tmp/openssl.Ow4054&＃39;
-----
You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter &＃39;.&＃39;, the field will be left blank.
-----
Country Name (2 letter code) [GB]:CN
State or Province Name (full name) [Berkshire]:zhejiang
Locality Name (eg, city) [Newbury]:HZ
Organization Name (eg, company) [My Company Ltd]:xzxj
Organizational Unit Name (eg, section) []:IT
Common Name (eg, your name or your server&＃39;s hostname) []:mail.rhel5.com.cn
Email Address []:admin&＃64;rhel5.com.cn

[root&＃64;server2 certs]# ls
ca-bundle.crt  localhost.crt  make-dummy-cert  Makefile  sendmail.pem

修改/etc/mail/sendmail.mc文件&＃xff0c;找到以下四行&＃xff0c;将其前面的注释符号去掉&＃xff1a;

define(&＃96;confCACERT_PATH&＃39;, &＃96;/etc/pki/tls/certs&＃39;)dnl
define(&＃96;confCACERT&＃39;, &＃96;/etc/pki/tls/certs/ca-bundle.crt&＃39;)dnl
define(&＃96;confSERVER_CERT&＃39;, &＃96;/etc/pki/tls/certs/sendmail.pem&＃39;)dnl
define(&＃96;confSERVER_KEY&＃39;, &＃96;/etc/pki/tls/certs/sendmail.pem&＃39;)dnl

接着注释下行&＃xff1a;

dnl DAEMON_OPTIONS(&＃96;Port&＃61;smtp,Addr&＃61;0.0.0.0, Name&＃61;MTA&＃39;)dnl

去掉下行前面的dnl后为

[root&＃64;server2 mail]# m4 sendmail.mc >sendmail.cf

重启dovecot和sendmail&＃xff0c;使配置生效&＃xff01;

[root&＃64;server2 mail]# service dovecot restart
Stopping Dovecot Imap: [  OK  ]
Starting Dovecot Imap: [  OK  ]
[root&＃64;server2 mail]# service sendmail restart
Shutting down sm-client: [  OK  ]
Shutting down sendmail: [  OK  ]
Starting sendmail: [  OK  ]
Starting sm-client: [  OK  ]

[root&＃64;server2 certs]# netstat -nutpl
Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address               Foreign Address             State       PID/Program name  
tcp        0      0 127.0.0.1:2208              0.0.0.0:*                   LISTEN      3046/hpiod         
tcp        0      0 192.168.1.12:993            0.0.0.0:*                   LISTEN      4111/dovecot       
tcp        0      0 192.168.1.12:995            0.0.0.0:*                   LISTEN      4111/dovecot       
tcp        0      0 192.168.1.12:110            0.0.0.0:*                   LISTEN      4111/dovecot       
tcp        0      0 192.168.1.12:143            0.0.0.0:*                   LISTEN      4111/dovecot       
tcp        0      0 0.0.0.0:111                 0.0.0.0:*                   LISTEN      2736/portmap       
tcp        0      0 0.0.0.0:465                 0.0.0.0:*                   LISTEN      4150/sendmail: acce
tcp        0      0 192.168.1.12:53             0.0.0.0:*                   LISTEN      2706/named         
tcp        0      0 127.0.0.1:631               0.0.0.0:*                   LISTEN      3087/cupsd         
tcp        0      0 127.0.0.1:953               0.0.0.0:*                   LISTEN      2706/named         
tcp        0      0 127.0.0.1:2207              0.0.0.0:*                   LISTEN      3051/python        
tcp        0      0 :::22                       :::*                        LISTEN      3071/sshd          
tcp        0      0 ::1:953                     :::*                        LISTEN      2706/named         
udp        0      0 0.0.0.0:37392               0.0.0.0:*                               2706/named         
udp        0      0 0.0.0.0:34478               0.0.0.0:*                               3260/avahi-daemon: 
udp        0      0 192.168.1.12:53             0.0.0.0:*                               2706/named         
udp        0      0 0.0.0.0:69                  0.0.0.0:*                               3104/xinetd        
udp        0      0 0.0.0.0:5353                0.0.0.0:*                               3260/avahi-daemon: 
udp        0      0 0.0.0.0:111                 0.0.0.0:*                               2736/portmap       
udp        0      0 0.0.0.0:631                 0.0.0.0:*                               3087/cupsd         
udp        0      0 :::44886                    :::*                                    2706/named         
udp        0      0 :::5353                     :::*                                    3260/avahi-daemon: 
udp        0      0 :::40315                    :::*                                    3260/avahi-daemon: 

防火墙的配置&＃xff1a;

[root&＃64;server2 certs]# iptables -A INPUT -s 192.168.1.0/24 -p tcp --dport 465 -j ACCEPT

,到此基于ssl的邮件服务就完毕了。

使用windows的outlook测试发信和收信。

日志信息如下所示&＃xff1a;

Mar 31 22:57:12 server2 dovecot: pop3-login: Login: user&＃61;, method&＃61;PLAIN, rip&＃61;192.168.1.156, lip&＃61;192.168.1.12, TLS
Mar 31 22:57:12 server2 dovecot: POP3(student1): Disconnected: Logged out top&＃61;0/0, retr&＃61;0/0, del&＃61;0/0, size&＃61;0
Mar 31 22:57:12 server2 dovecot: pop3-login: Login: user&＃61;, method&＃61;PLAIN, rip&＃61;192.168.1.156, lip&＃61;192.168.1.12, TLS
Mar 31 22:57:13 server2 dovecot: POP3(student2): Disconnected: Logged out top&＃61;0/0, retr&＃61;0/0, del&＃61;0/0, size&＃61;0
Mar 31 22:57:15 server2 dovecot: pop3-login: Login: user&＃61;, method&＃61;PLAIN, rip&＃61;192.168.1.156, lip&＃61;192.168.1.12, TLS
Mar 31 22:57:15 server2 dovecot: POP3(student1): Disconnected: Logged out top&＃61;0/0, retr&＃61;0/0, del&＃61;0/0, size&＃61;0
Mar 31 22:57:15 server2 dovecot: pop3-login: Login: user&＃61;, method&＃61;PLAIN, rip&＃61;192.168.1.156, lip&＃61;192.168.1.12, TLS
Mar 31 22:57:15 server2 dovecot: POP3(student2): Disconnected: Logged out top&＃61;0/0, retr&＃61;0/0, del&＃61;0/0, size&＃61;0
Mar 31 22:58:32 server2 sendmail[4232]: STARTTLS&＃61;server, relay&＃61;xzxj [192.168.1.156], version&＃61;TLSv1/SSLv3, verify&＃61;NO, cipher&＃61;RC4-MD5, bits&＃61;128/128
Mar 31 22:58:32 server2 sendmail[4232]: AUTH&＃61;server, relay&＃61;xzxj [192.168.1.156], authid&＃61;student1, mech&＃61;LOGIN, bits&＃61;0
Mar 31 22:58:32 server2 sendmail[4232]: n2VEwWq3004232: from&＃61;<[email]student1&＃64;rhel5.com.cn[/email]>, size&＃61;1278, class&＃61;0, nrcpts&＃61;1, msgid&＃61;<88D5650C92C5466F87510EE8FB998C82&＃64;xzxj>, proto&＃61;ESMTP, daemon&＃61;TLSMTA, relay&＃61;xzxj [192.168.1.156]
Mar 31 22:58:32 server2 sendmail[4235]: n2VEwWq3004232: to&＃61;user4, ctladdr&＃61;<[email]student2&＃64;rhel5.com.cn[/email]> (8/0), delay&＃61;00:00:00, mailer&＃61;local, pri&＃61;121278, dsn&＃61;5.1.1, stat&＃61;User unknown
Mar 31 22:58:32 server2 sendmail[4235]: n2VEwWq3004232: to&＃61;user3, ctladdr&＃61;<[email]student2&＃64;rhel5.com.cn[/email]> (8/0), delay&＃61;00:00:00, mailer&＃61;local, pri&＃61;121278, dsn&＃61;5.1.1, stat&＃61;User unknown
Mar 31 22:58:32 server2 sendmail[4235]: n2VEwWq3004232: to&＃61;user2, ctladdr&＃61;<[email]student1&＃64;rhel5.com.cn[/email]> (8/0), delay&＃61;00:00:00, mailer&＃61;local, pri&＃61;61536, dsn&＃61;5.1.1, stat&＃61;User unknown
Mar 31 22:58:32 server2 sendmail[4235]: n2VEwWq3004232: to&＃61;user1, ctladdr&＃61;<[email]student1&＃64;rhel5.com.cn[/email]> (8/0), delay&＃61;00:00:00, mailer&＃61;local, pri&＃61;61536, dsn&＃61;5.1.1, stat&＃61;User unknown
Mar 31 22:58:32 server2 sendmail[4235]: n2VEwWq3004232: n2VEwWq3004235: postmaster notify: User unknown
Mar 31 22:58:32 server2 sendmail[4235]: n2VEwWq3004235: to&＃61;root, delay&＃61;00:00:00, xdelay&＃61;00:00:00, mailer&＃61;local, pri&＃61;32560, dsn&＃61;2.0.0, stat&＃61;Sent

发送成功了。

ok&＃xff0c;也正常接收成功&＃xff01;