CentOS7+extmail+postfix+saslauthd+dovecot+nginx+mysql搭建邮件服务器

最终效果

1. 环境清理工作

   1. 关闭Selinux

setenforce 0

永久关闭Selinux

vim /etc/selinux/config

1. 关闭防火墙

systemctl stop firewalld

永久关闭防火墙

chkconfig firewalld off

1. 清理iptables

Iptables –P INPUT ACCEPT

Iptables –F

Iptables –X

Iptables -L

1. 资源下载

   百度云盘：链接: http://pan.baidu.com/s/1i3xrMzN 密码: mcqd

3、安装mysql

rpm -ivh mysql-community-release-el7-5.noarch.rpm

rpm -ivh epel-release-latest-7.noarch.rpm

rpm -ivh mysql-community-server-5.6.26-2.el7.x86_64.rpm

4、安装 postfix

yum install nginx vim gcc gcc-c++ openssl openssl-devel db4-devel ntpdate mysql mysql-devel bzip2 php-mysql cyrus-sasl-md5 perl-GD perl-DBD-MySQL perl-GD perl-CPAN perl-CGI perl-CGI-Session cyrus-sasl-lib cyrus-sasl-plain cyrus-sasl cyrus-sasl-devel libtool-ltdl-devel telnet mail libicu-devel -y

 

1. 卸载系统自带的postfix，删除postfix用户，重新指定uid、gid创建新用户postfix，postdrop

yum remove postfix -y

userdel postfix

groupdel postdrop

groupadd -g 2525 postfix

useradd -g postfix -u 2525 -s /sbin/nologin -M postfix

groupadd -g 2526 postdrop

useradd -g postdrop -u 2526 -s /sbin/nologin -M postdrop

1. 编译postfix

tar xf postfix-3.0.1.tar.gz

cd postfix-3.0.1

make makefiles 'CCARGS=-DHAS_MYSQL -I/usr/include/mysql -DUSE_SASL_AUTH -DUSE_CYRUS_SASL -I/usr/include/sasl -DUSE_TLS ' 'AUXLIBS=-L/usr/lib64/mysql -lmysqlclient -lz -lrt -lm -L/usr/lib64/sasl2 -lsasl2 -lssl -lcrypto'

make && make install

 

make install的时候会有个交互式的界面，自定义一些目录，我们这里只更改第二项临时文件目录，其他的全部默认。

Please specify the prefix for installed file names. Specify this ONLY

if you are building ready-to-install packages for distribution to OTHER

machines. See PACKAGE_README for instructions.

install_root: [/]

Please specify a directory for scratch files while installing Postfix. You

must have write permission in this directory.

tempdir: [/root/postfix-3.0.1] /tmp/extmail

…………………………

…………………………

shlib_directory: [no]

Please specify the final destination directory for non-executable files

that are shared among multiple Postfix instances, such as postfix-files,

dynamicmaps.cf, as well as the multi-instance template files main.cf.proto

and master.cf.proto.

meta_directory: [/etc/postfix]

 

更改目录属主属组

chown -R postfix:postdrop /var/spool/postfix

chown -R postfix:postdrop /var/lib/postfix/

chown root /var/spool/postfix

chown -R root /var/spool/postfix/pid

 

修改postfix配置文件

vim /etc/postfix/main.cf

myhostname = mail.everyoo.com //设置主机名

mydomain = everyoo.com //指定域名

myorigin = $mydomain //指明发件人所在的域名

inet_interfaces = //all指定postfix系统监听的网络接口

mydestination = $myhostname, localhost.$mydomain, localhost,$mydomain //指定postfix接收邮件时收件人的域名 [使用虚拟域需要禁用]

mynetworks_style = host //指定信任网段类型

mynetworks = 192.168.1.0/24, 127.0.0.0/8 //指定信任的客户端

relay_domains = $mydestination //指定允许中转邮件的域名

alias_maps = hash:/etc/aliases //设置邮件的别名

5、安装dovecot

yum install -y dovecot dovecot-mysql

1. 配置dovecot

cd /etc/dovecot/

vim dovecot.conf

protocols = imap pop3

!include conf.d/*.conf

listen = *

base_dir = /var/run/dovecot/

cd conf.d/

vim 10-auth.conf

disable_plaintext_auth = no

vim 10-mail.conf

mail_location = maildir:~/Maildir

mail_location = maildir:/var/mailbox/%d/%n/Maildir

mail_privileged_group = mail

vim 10-ssl.conf

ssl = no

vim 10-logging.conf og_path = /var/log/dovecot.log

info_log_path = /var/log/dovecot.info

log_timestamp = "%Y-%m-%d %H:%M:%S "

cp auth-sql.conf.ext auth-sql.conf

vim auth-sql.conf

passdb { driver = sql # Path for SQL configuration file, see example-config/dovecot-sql.conf.ext args = /etc/dovecot/dovecot-sql.conf.ext}

userdb { driver = sql args = /etc/dovecot/dovecot-sql.conf.ext}

1. 编辑dovecot通过mysql认证的配置文件

vim /etc/dovecot-mysql.conf

driver = mysql

connect = host=localhost dbname=extmail user=extmail password=extmail

default_pass_scheme = CRYPT

password_query = SELECT username AS user,password AS password FROM mailbox WHERE username = '%u'

user_query = SELECT maildir, uidnumber AS uid, gidnumber AS gid FROM mailbox WHERE username = '%u'

 

6、安装courier-authlib

tar xf courier-authlib-0.66.2.tar.bz2

cd courier-authlib-0.66.2

./configure \

--prefix=/usr/local/courier-authlib \

--sysconfdir=/etc \

--without-authpam \

--without-authshadow \

--without-authvchkpw \

--without-authpgsql \

--with-authmysql \

--with-mysql-libs=/usr/lib64/mysql \

--with-mysql-includes=/usr/include/mysql \

--with-redhat \

--with-authmysqlrc=/etc/authmysqlrc \

--with-authdaemonrc=/etc/authdaemonrc \

--with-mailuser=postfix

这里会报错： configure: error: The Courier Unicode Library 1.2 appears not to be installed

（1）安装courier-unicode

tar xf courier-unicode-1.2.tar.bz2

cd courier-unicode-1.2

./configure

make && make install

再次编译安装courier-authlib

1. 配置courier-authlib

chmod 755 /usr/local/courier-authlib/var/spool/authdaemon

cp /etc/authdaemonrc.dist /etc/authdaemonrc

cp /etc/authmysqlrc.dist /etc/authmysqlrc

 

vim /etc/authdaemonrc

//配置文件里的验证方法比较多，我们这里只使用authmysql

authmodulelist="authmysql"

authmodulelistorig="authmysql"

 

vim /etc/authmysqlrc

//直接添加到配置文件尾部，然后去上面将响应系统默认的注视掉，或者删除即可

MYSQL_SERVER localhost

MYSQL_USERNAME extmail

MYSQL_PASSWORD extmail

MYSQL_SOCKET /var/lib/mysql/mysql.sock

MYSQL_PORT 3306

MYSQL_DATABASE extmail

MYSQL_USER_TABLE mailbox

MYSQL_CRYPT_PWFIELD password

DEFAULT_DOMAIN test.com

MYSQL_UID_FIELD '2525'

MYSQL_GID_FIELD '2525'

MYSQL_LOGIN_FIELD username

MYSQL_HOME_FIELD concat('/var/mailbox/',homedir)

MYSQL_NAME_FIELD name

MYSQL_MAILDIR_FIELD concat('/var/mailbox/',maildir)

1. courier-authlib添加服务启动脚本及其他

cp courier-authlib.sysvinit /etc/init.d/courier-authlib

chmod +x /etc/init.d/courier-authlib

chkconfig --add courier-authlib

chkconfig courier-authlib on

echo "/usr/local/courier-authlib/lib/courier-authlib" >> /etc/ld.so.conf.d/courier-authlib.conf

ldconfig

service courier-authlib start

1. smtp以及虚拟用户相关的配置

vim /usr/lib64/sasl2/smtpd.conf //文件不存在，要自己创建

pwcheck_method: authdaemond

log_level: 3

mech_list: PLAIN LOGIN

authdaemond_path:/usr/local/courier-authlib/var/spool/authdaemon/socket

 

vim /etc/postfix/main.cf

##postfix支持SMTP##

smtpd_sasl_auth_enable = yes

smtpd_sasl_local_domain = ''

smtpd_recipient_restrictions = permit_mynetworks,permit_sasl_authenticated,reject_unauth_destination

broken_sasl_auth_clients=yes

smtpd_client_restrictions = permit_sasl_authenticated

smtpd_sasl_security_options = noanonymous

##postfix支持虚拟用户##

virtual_mailbox_base = /var/mailbox

virtual_mailbox_maps = mysql:/etc/postfix/mysql_virtual_mailbox_maps.cf //这里的配置文件需在后面extman

里复制过来

virtual_mailbox_domains = mysql:/etc/postfix/mysql_virtual_domains_maps.cf

virtual_alias_domains =

virtual_alias_maps = mysql:/etc/postfix/mysql_virtual_alias_maps.cf

virtual_uid_maps = static:2525

virtual_gid_maps = static:2525

virtual_transport = virtual

 

6、安装extmail

tar xf extmail-1.2.tar.gz -C /var/www/extsuite/

mv /var/www/extsuite/extmail-1.2/ /var/www/extsuite/extmail

 

cd /var/www/extsuite/extmail

cp webmail.cf.default webmail.cf

vim webmail.cf

SYS_SESS_DIR = /tmp/extmail

SYS_UPLOAD_TMPDIR = /tmp/extmail/upload

SYS_USER_LANG = zh_CN

SYS_MIN_PASS_LEN = 8

SYS_MAILDIR_BASE = /var/mailbox

SYS_MYSQL_USER = extmail

SYS_MYSQL_PASS = extmail

SYS_MYSQL_DB = extmail

SYS_MYSQL_HOST = localhost

SYS_MYSQL_SOCKET = /var/lib/mysql/mysql.sock

SYS_MYSQL_TABLE = mailbox

SYS_MYSQL_ATTR_USERNAME = username

SYS_MYSQL_ATTR_DOMAIN = domain

SYS_MYSQL_ATTR_PASSWD = password

SYS_AUTHLIB_SOCKET = /usr/local/courier-authlib/var/spool/authdaemon/socket

 

1. 建立临时文件目录与session目录

mkdir -p /tmp/extmail/upload

chown -R postfix.postfix /tmp/extmail/

7、安装extman

tar xf extman-1.1.tar.gz -C /var/www/extsuite/

cd /var/www/extsuite/

mv extman-1.1/ extman

 

1. 更改extman配置文件

cd extman/

cp webman.cf.default webman.cf

1. 更改cgi目录属主属组

chown -R postfix.postfix /var/www/extsuite/extman/cgi/

chown -R postfix.postfix /var/www/extsuite/extmail/cgi/

1. 导入数据库

   由于数据库不能识别TYPE= MyISAM ，所以这里直接导入会出错，先编辑extmail.sql数据库文件，将TYPE=MyISAM更改为ENGINE=MyISAM

vim docs/extmail.sql

:% s/TYPE/ENGINE/g // 共有五处修改

1. 导入还是会报错

mysql -uroot < docs/extmail.sql

ERROR 1364 (HY000) at line 31: Field 'ssl_cipher' doesn't have a default value

此处需要修改my.cnf配置文件

vim /etc/my.cnf

# Recommended in standard MySQL setup

#sql_mode=NO_ENGINE_SUBSTITUTION,STRICT_TRANS_TABLES //将这行注视掉，重启mysql，这里需要注意的是，等数据库导入成功后，这项是不可以去掉注释的，不然mysql就启动不起来了。

再次导入数据库

 

mysql -uroot < docs/extmail.sql

mysql -uroot < docs/init.sql

1. 创建数据库用户extmail并授予权限

mysql> GRANT ALL ON extmail.* to extmail@'%' identified by 'extmail'; //这里直接在授权任何权限在任意地址上了

Query OK, 0 rows affected (0.00 sec)

mysql> FLUSH PRIVILEGES;

Query OK, 0 rows affected (0.00 sec)

1. 复制配置文件

cd /var/www/extsuite/extman/docs/

cp mysql_virtual_* /etc/postfix/

1. 为extman创建临时文件目录

mkdir /tmp/extman

chown -R postfix.postfix /tmp/extman/

8、启动postfix、dovecot、sasaulthd服务

ss -tnluo | grep :25

ps aux | grep dovecot

ps aux | grep saslauthd

 

9、测试

（1）测试虚拟用户

/usr/local/courier-authlib/sbin/authtest -s login [e-mail] extmail

 

1. 测试smtp发信

printf "[e-mail]" | openssl base64

printf "extmail" | openssl base64

telnet localhost 25

 

10、创建mailbox，不创建会报错

mkdir /var/mailbox

chown -R postfix.postfix /var/mailbox/

 

11、安装Unix-Syslog

tar xf Unix-Syslog-1.1.tar.gz

cd Unix-Syslog-1.1[root@localhost Unix-Syslog-1.1]# perl Makefile.PL

make && make install

 

12、启动nginx实现web访问

vim /var/www/extsuite/extmail/dispatch-init

SU_UID=postfix

SU_GID=postfix

 

// 启动dispatch-init

/var/www/extsuite/extmail/dispatch-init start

Starting extmail FCGI server...

 

// 启动cmdserver

/var/www/extsuite/extman/daemon/cmdserver -v -d

loaded ok

 

1. 添加nginx虚拟主机

vim /etc/nginx/conf.d/extmail.conf

server {

listen     8080;

server_name mail.everyoo.com;

index index.html index.htm index.php index.cgi;

root /var/www/extsuite/extmail/html/;

location /extmail/cgi/ {

fastcgi_pass        127.0.0.1:8888;

fastcgi_index     index.cgi;

fastcgi_param SCRIPT_FILENAME /var/www/extsuite/extmail/cgi/$fastcgi_script_name;

include            fcgi.conf;

}

location /extmail/ {

alias /var/www/extsuite/extmail/html/;

}

location /extman/cgi/ {

fastcgi_pass        127.0.0.1:8888;

fastcgi_index     index.cgi;

fastcgi_param SCRIPT_FILENAME /var/www/extsuite/extman/cgi/$fastcgi_script_name;

include         fcgi.conf;

}

location /extman/ {

alias /var/www/extsuite/extman/html/;

}

access_log /var/log/extmail_access.log;

}

    生成fcgi.conf

vim /etc/nginx/fcgi.conf

fastcgi_param GATEWAY_INTERFACE CGI/1.1;

fastcgi_param SERVER_SOFTWARE nginx;

fastcgi_param QUERY_STRING $query_string;

fastcgi_param REQUEST_METHOD $request_method;

fastcgi_param CONTENT_TYPE $content_type;

fastcgi_param CONTENT_LENGTH $content_length;

fastcgi_param SCRIPT_NAME $fastcgi_script_name;

fastcgi_param REQUEST_URI $request_uri;

fastcgi_param DOCUMENT_ROOT $document_root;

fastcgi_param SERVER_PROTOCOL $server_protocol;

fastcgi_param REMOTE_ADDR $remote_addr;

fastcgi_param REMOTE_PORT $remote_port;

fastcgi_param SERVER_ADDR $server_addr;

fastcgi_param SERVER_PORT $server_port;

fastcgi_param SERVER_NAME $server_name;

 

13、重启nginx，访问192.168.1.105:8080

 

14、问题解决

（1）错误：DBD::mysql::st execute failed: Incorrect integer value: '' for column 'can_signup' at row 1 at /usr/local/apache/htdocs/extsuite/extman/libs/Ext/Mgr/MySQL.pm line 397

解决办法：将198行can_sign改成can_signup

# vim /usr/local/apache/htdocs/extsuite/extman/libs/Ext/MgrApp/Domain.pm

198 can_signup => $q->cgi('cansignup') ? 1 : 0

15、参考

http://www.tuicool.com/articles/eEfyAbv

http://www.tuicool.com/articles/Irq2mq

http://wenku.baidu.com/link?url=UlSDPmN8LiH6vNDOMFu-bp64EDJUXIHibs3QxKjNAs6Tpc9d6y2KsYP8vpi7BLazIMFO3_7G6diyKD2zHnzgc_-YiqdyGDS3fvPYXjHOk6G