CentOS7+extmail+postfix+saslauthd+dovecot+nginx+mysql搭建郵件服務器

最終效果

1. 環境清理工作

   1. 關閉Selinux

setenforce 0

永久關閉Selinux

vim /etc/selinux/config

1. 關閉防火牆

systemctl stop firewalld

永久關閉防火牆

chkconfig firewalld off

1. 清理iptables

Iptables –P INPUT ACCEPT

Iptables –F

Iptables –X

Iptables -L

1. 資源下載

   百度雲盤：鏈接: http://pan.baidu.com/s/1i3xrMzN 密碼: mcqd

3、安裝mysql

rpm -ivh mysql-community-release-el7-5.noarch.rpm

rpm -ivh epel-release-latest-7.noarch.rpm

rpm -ivh mysql-community-server-5.6.26-2.el7.x86_64.rpm

4、安裝 postfix

yum install nginx vim gcc gcc-c++ openssl openssl-devel db4-devel ntpdate mysql mysql-devel bzip2 php-mysql cyrus-sasl-md5 perl-GD perl-DBD-MySQL perl-GD perl-CPAN perl-CGI perl-CGI-Session cyrus-sasl-lib cyrus-sasl-plain cyrus-sasl cyrus-sasl-devel libtool-ltdl-devel telnet mail libicu-devel -y

 

1. 卸載系統自帶的postfix，刪除postfix用戶，重新指定uid、gid創建新用戶postfix，postdrop

yum remove postfix -y

userdel postfix

groupdel postdrop

groupadd -g 2525 postfix

useradd -g postfix -u 2525 -s /sbin/nologin -M postfix

groupadd -g 2526 postdrop

useradd -g postdrop -u 2526 -s /sbin/nologin -M postdrop

1. 編譯postfix

tar xf postfix-3.0.1.tar.gz

cd postfix-3.0.1

make makefiles 'CCARGS=-DHAS_MYSQL -I/usr/include/mysql -DUSE_SASL_AUTH -DUSE_CYRUS_SASL -I/usr/include/sasl -DUSE_TLS ' 'AUXLIBS=-L/usr/lib64/mysql -lmysqlclient -lz -lrt -lm -L/usr/lib64/sasl2 -lsasl2 -lssl -lcrypto'

make && make install

 

make install的時候會有個交互式的界面，自定義一些目錄，我們這里只更改第二項臨時文件目錄，其他的全部默認。

Please specify the prefix for installed file names. Specify this ONLY

if you are building ready-to-install packages for distribution to OTHER

machines. See PACKAGE_README for instructions.

install_root: [/]

Please specify a directory for scratch files while installing Postfix. You

must have write permission in this directory.

tempdir: [/root/postfix-3.0.1] /tmp/extmail

…………………………

…………………………

shlib_directory: [no]

Please specify the final destination directory for non-executable files

that are shared among multiple Postfix instances, such as postfix-files,

dynamicmaps.cf, as well as the multi-instance template files main.cf.proto

and master.cf.proto.

meta_directory: [/etc/postfix]

 

更改目錄屬主屬組

chown -R postfix:postdrop /var/spool/postfix

chown -R postfix:postdrop /var/lib/postfix/

chown root /var/spool/postfix

chown -R root /var/spool/postfix/pid

 

修改postfix配置文件

vim /etc/postfix/main.cf

myhostname = mail.everyoo.com //設置主機名

mydomain = everyoo.com //指定域名

myorigin = $mydomain //指明發件人所在的域名

inet_interfaces = //all指定postfix系統監聽的網絡接口

mydestination = $myhostname, localhost.$mydomain, localhost,$mydomain //指定postfix接收郵件時收件人的域名 [使用虛擬域需要禁用]

mynetworks_style = host //指定信任網段類型

mynetworks = 192.168.1.0/24, 127.0.0.0/8 //指定信任的客戶端

relay_domains = $mydestination //指定允許中轉郵件的域名

alias_maps = hash:/etc/aliases //設置郵件的別名

5、安裝dovecot

yum install -y dovecot dovecot-mysql

1. 配置dovecot

cd /etc/dovecot/

vim dovecot.conf

protocols = imap pop3

!include conf.d/*.conf

listen = *

base_dir = /var/run/dovecot/

cd conf.d/

vim 10-auth.conf

disable_plaintext_auth = no

vim 10-mail.conf

mail_location = maildir:~/Maildir

mail_location = maildir:/var/mailbox/%d/%n/Maildir

mail_privileged_group = mail

vim 10-ssl.conf

ssl = no

vim 10-logging.conf og_path = /var/log/dovecot.log

info_log_path = /var/log/dovecot.info

log_timestamp = "%Y-%m-%d %H:%M:%S "

cp auth-sql.conf.ext auth-sql.conf

vim auth-sql.conf

passdb { driver = sql # Path for SQL configuration file, see example-config/dovecot-sql.conf.ext args = /etc/dovecot/dovecot-sql.conf.ext}

userdb { driver = sql args = /etc/dovecot/dovecot-sql.conf.ext}

1. 編輯dovecot通過mysql認證的配置文件

vim /etc/dovecot-mysql.conf

driver = mysql

connect = host=localhost dbname=extmail user=extmail password=extmail

default_pass_scheme = CRYPT

password_query = SELECT username AS user,password AS password FROM mailbox WHERE username = '%u'

user_query = SELECT maildir, uidnumber AS uid, gidnumber AS gid FROM mailbox WHERE username = '%u'

 

6、安裝courier-authlib

tar xf courier-authlib-0.66.2.tar.bz2

cd courier-authlib-0.66.2

./configure \

--prefix=/usr/local/courier-authlib \

--sysconfdir=/etc \

--without-authpam \

--without-authshadow \

--without-authvchkpw \

--without-authpgsql \

--with-authmysql \

--with-mysql-libs=/usr/lib64/mysql \

--with-mysql-includes=/usr/include/mysql \

--with-redhat \

--with-authmysqlrc=/etc/authmysqlrc \

--with-authdaemonrc=/etc/authdaemonrc \

--with-mailuser=postfix

這里會報錯： configure: error: The Courier Unicode Library 1.2 appears not to be installed

（1）安裝courier-unicode

tar xf courier-unicode-1.2.tar.bz2

cd courier-unicode-1.2

./configure

make && make install

再次編譯安裝courier-authlib

1. 配置courier-authlib

chmod 755 /usr/local/courier-authlib/var/spool/authdaemon

cp /etc/authdaemonrc.dist /etc/authdaemonrc

cp /etc/authmysqlrc.dist /etc/authmysqlrc

 

vim /etc/authdaemonrc

//配置文件里的驗證方法比較多，我們這里只使用authmysql

authmodulelist="authmysql"

authmodulelistorig="authmysql"

 

vim /etc/authmysqlrc

//直接添加到配置文件尾部，然后去上面將響應系統默認的注視掉，或者刪除即可

MYSQL_SERVER localhost

MYSQL_USERNAME extmail

MYSQL_PASSWORD extmail

MYSQL_SOCKET /var/lib/mysql/mysql.sock

MYSQL_PORT 3306

MYSQL_DATABASE extmail

MYSQL_USER_TABLE mailbox

MYSQL_CRYPT_PWFIELD password

DEFAULT_DOMAIN test.com

MYSQL_UID_FIELD '2525'

MYSQL_GID_FIELD '2525'

MYSQL_LOGIN_FIELD username

MYSQL_HOME_FIELD concat('/var/mailbox/',homedir)

MYSQL_NAME_FIELD name

MYSQL_MAILDIR_FIELD concat('/var/mailbox/',maildir)

1. courier-authlib添加服務啟動腳本及其他

cp courier-authlib.sysvinit /etc/init.d/courier-authlib

chmod +x /etc/init.d/courier-authlib

chkconfig --add courier-authlib

chkconfig courier-authlib on

echo "/usr/local/courier-authlib/lib/courier-authlib" >> /etc/ld.so.conf.d/courier-authlib.conf

ldconfig

service courier-authlib start

1. smtp以及虛擬用戶相關的配置

vim /usr/lib64/sasl2/smtpd.conf //文件不存在，要自己創建

pwcheck_method: authdaemond

log_level: 3

mech_list: PLAIN LOGIN

authdaemond_path:/usr/local/courier-authlib/var/spool/authdaemon/socket

 

vim /etc/postfix/main.cf

##postfix支持SMTP##

smtpd_sasl_auth_enable = yes

smtpd_sasl_local_domain = ''

smtpd_recipient_restrictions = permit_mynetworks,permit_sasl_authenticated,reject_unauth_destination

broken_sasl_auth_clients=yes

smtpd_client_restrictions = permit_sasl_authenticated

smtpd_sasl_security_options = noanonymous

##postfix支持虛擬用戶##

virtual_mailbox_base = /var/mailbox

virtual_mailbox_maps = mysql:/etc/postfix/mysql_virtual_mailbox_maps.cf //這里的配置文件需在后面extman

里復制過來

virtual_mailbox_domains = mysql:/etc/postfix/mysql_virtual_domains_maps.cf

virtual_alias_domains =

virtual_alias_maps = mysql:/etc/postfix/mysql_virtual_alias_maps.cf

virtual_uid_maps = static:2525

virtual_gid_maps = static:2525

virtual_transport = virtual

 

6、安裝extmail

tar xf extmail-1.2.tar.gz -C /var/www/extsuite/

mv /var/www/extsuite/extmail-1.2/ /var/www/extsuite/extmail

 

cd /var/www/extsuite/extmail

cp webmail.cf.default webmail.cf

vim webmail.cf

SYS_SESS_DIR = /tmp/extmail

SYS_UPLOAD_TMPDIR = /tmp/extmail/upload

SYS_USER_LANG = zh_CN

SYS_MIN_PASS_LEN = 8

SYS_MAILDIR_BASE = /var/mailbox

SYS_MYSQL_USER = extmail

SYS_MYSQL_PASS = extmail

SYS_MYSQL_DB = extmail

SYS_MYSQL_HOST = localhost

SYS_MYSQL_SOCKET = /var/lib/mysql/mysql.sock

SYS_MYSQL_TABLE = mailbox

SYS_MYSQL_ATTR_USERNAME = username

SYS_MYSQL_ATTR_DOMAIN = domain

SYS_MYSQL_ATTR_PASSWD = password

SYS_AUTHLIB_SOCKET = /usr/local/courier-authlib/var/spool/authdaemon/socket

 

1. 建立臨時文件目錄與session目錄

mkdir -p /tmp/extmail/upload

chown -R postfix.postfix /tmp/extmail/

7、安裝extman

tar xf extman-1.1.tar.gz -C /var/www/extsuite/

cd /var/www/extsuite/

mv extman-1.1/ extman

 

1. 更改extman配置文件

cd extman/

cp webman.cf.default webman.cf

1. 更改cgi目錄屬主屬組

chown -R postfix.postfix /var/www/extsuite/extman/cgi/

chown -R postfix.postfix /var/www/extsuite/extmail/cgi/

1. 導入數據庫

   由於數據庫不能識別TYPE= MyISAM ，所以這里直接導入會出錯，先編輯extmail.sql數據庫文件，將TYPE=MyISAM更改為ENGINE=MyISAM

vim docs/extmail.sql

:% s/TYPE/ENGINE/g // 共有五處修改

1. 導入還是會報錯

mysql -uroot < docs/extmail.sql

ERROR 1364 (HY000) at line 31: Field 'ssl_cipher' doesn't have a default value

此處需要修改my.cnf配置文件

vim /etc/my.cnf

# Recommended in standard MySQL setup

#sql_mode=NO_ENGINE_SUBSTITUTION,STRICT_TRANS_TABLES //將這行注視掉，重啟mysql，這里需要注意的是，等數據庫導入成功后，這項是不可以去掉注釋的，不然mysql就啟動不起來了。

再次導入數據庫

 

mysql -uroot < docs/extmail.sql

mysql -uroot < docs/init.sql

1. 創建數據庫用戶extmail並授予權限

mysql> GRANT ALL ON extmail.* to extmail@'%' identified by 'extmail'; //這里直接在授權任何權限在任意地址上了

Query OK, 0 rows affected (0.00 sec)

mysql> FLUSH PRIVILEGES;

Query OK, 0 rows affected (0.00 sec)

1. 復制配置文件

cd /var/www/extsuite/extman/docs/

cp mysql_virtual_* /etc/postfix/

1. 為extman創建臨時文件目錄

mkdir /tmp/extman

chown -R postfix.postfix /tmp/extman/

8、啟動postfix、dovecot、sasaulthd服務

ss -tnluo | grep :25

ps aux | grep dovecot

ps aux | grep saslauthd

 

9、測試

（1）測試虛擬用戶

/usr/local/courier-authlib/sbin/authtest -s login [e-mail] extmail

 

1. 測試smtp發信

printf "[e-mail]" | openssl base64

printf "extmail" | openssl base64

telnet localhost 25

 

10、創建mailbox，不創建會報錯

mkdir /var/mailbox

chown -R postfix.postfix /var/mailbox/

 

11、安裝Unix-Syslog

tar xf Unix-Syslog-1.1.tar.gz

cd Unix-Syslog-1.1[root@localhost Unix-Syslog-1.1]# perl Makefile.PL

make && make install

 

12、啟動nginx實現web訪問

vim /var/www/extsuite/extmail/dispatch-init

SU_UID=postfix

SU_GID=postfix

 

// 啟動dispatch-init

/var/www/extsuite/extmail/dispatch-init start

Starting extmail FCGI server...

 

// 啟動cmdserver

/var/www/extsuite/extman/daemon/cmdserver -v -d

loaded ok

 

1. 添加nginx虛擬主機

vim /etc/nginx/conf.d/extmail.conf

server {

listen     8080;

server_name mail.everyoo.com;

index index.html index.htm index.php index.cgi;

root /var/www/extsuite/extmail/html/;

location /extmail/cgi/ {

fastcgi_pass        127.0.0.1:8888;

fastcgi_index     index.cgi;

fastcgi_param SCRIPT_FILENAME /var/www/extsuite/extmail/cgi/$fastcgi_script_name;

include            fcgi.conf;

}

location /extmail/ {

alias /var/www/extsuite/extmail/html/;

}

location /extman/cgi/ {

fastcgi_pass        127.0.0.1:8888;

fastcgi_index     index.cgi;

fastcgi_param SCRIPT_FILENAME /var/www/extsuite/extman/cgi/$fastcgi_script_name;

include         fcgi.conf;

}

location /extman/ {

alias /var/www/extsuite/extman/html/;

}

access_log /var/log/extmail_access.log;

}

    生成fcgi.conf

vim /etc/nginx/fcgi.conf

fastcgi_param GATEWAY_INTERFACE CGI/1.1;

fastcgi_param SERVER_SOFTWARE nginx;

fastcgi_param QUERY_STRING $query_string;

fastcgi_param REQUEST_METHOD $request_method;

fastcgi_param CONTENT_TYPE $content_type;

fastcgi_param CONTENT_LENGTH $content_length;

fastcgi_param SCRIPT_NAME $fastcgi_script_name;

fastcgi_param REQUEST_URI $request_uri;

fastcgi_param DOCUMENT_ROOT $document_root;

fastcgi_param SERVER_PROTOCOL $server_protocol;

fastcgi_param REMOTE_ADDR $remote_addr;

fastcgi_param REMOTE_PORT $remote_port;

fastcgi_param SERVER_ADDR $server_addr;

fastcgi_param SERVER_PORT $server_port;

fastcgi_param SERVER_NAME $server_name;

 

13、重啟nginx，訪問192.168.1.105:8080

 

14、問題解決

（1）錯誤：DBD::mysql::st execute failed: Incorrect integer value: '' for column 'can_signup' at row 1 at /usr/local/apache/htdocs/extsuite/extman/libs/Ext/Mgr/MySQL.pm line 397

解決辦法：將198行can_sign改成can_signup

# vim /usr/local/apache/htdocs/extsuite/extman/libs/Ext/MgrApp/Domain.pm

198 can_signup => $q->cgi('cansignup') ? 1 : 0

15、參考

http://www.tuicool.com/articles/eEfyAbv

http://www.tuicool.com/articles/Irq2mq

http://wenku.baidu.com/link?url=UlSDPmN8LiH6vNDOMFu-bp64EDJUXIHibs3QxKjNAs6Tpc9d6y2KsYP8vpi7BLazIMFO3_7G6diyKD2zHnzgc_-YiqdyGDS3fvPYXjHOk6G