Extmail邮件服务器部署

前言

extmail是一款开源的webmail系统。 现有的基于extmail的部署架构有如下两种模式： 第一种：postfix + extmail + devocot + courier-authdaemon 第二种：postfix + extmail + courier-authdaemon + courier-imap + courier-pop3 + maildrop 本次部署基于第二种模式进行配置

部署

部署环境

• OS：ubuntu 11.04 server
• Extmail：1.2
• Extman：1.1

依赖包安装

apt-get install mysql-client-5.1 mysql-server apache2 postfix postfix-mysql postfix-doc courier-authdaemon courier-authlib-mysql courier-pop courier-pop-ssl courier-imap courier-imap-ssl libsasl2-modules libsasl2-modules-sql sasl2-bin libpam-mysql openssl libapache2-mod-fastcgi libfcgi-perl build-essential libtool libnet-server-perl libnet-cidr-perl libberkeleydb-perl arc zoo lzop liblzo2-dev libstdc++5 libgd-gd2-perl libfile-tail-perl libdigest-sha1-perl libdigest-HMAC-perl libnet-ip-perl libnet-dns-perl libhtml-tagset-perl libhtml-parser-perl libio-stringy-perl libio-multiplex-perl libio-socket-ssl-perl libio-zlib-perl libnet-ssleay-perl libunix-syslog-perl libtimedate-perl libmailtools-perl libconvert-binhex-perl libconvert-tnef-perl libconvert-uulib-perl libcompress-zlib-perl libarchive-zip-perl libarchive-tar-perl perl-suid

下载extmail和extman

google一下即可找到官方下载地址，下载最新版本，可能看到文档的时候我这个版本已经不是最新，直接下最新的即可。 下载完毕之后将文档解压到/var/www/extsuite/extmail和/var/www/extsuite/extman 将postfix需要使用的虚拟主机的配置文件拷贝到postfix的etc文件夹下面

cp /var/www/extsuite/extman/docs/mysql_virtual_*.cf /etc/postfix/

用户分配

特别说明：因为extmail系统里面使用的用户的uid和gid都是1000，如果你使用的ubuntu系统初始化一个admin用户，这个用户的 uid和gid就是1000，但是你又不想用此用户作为extmail的运行用户，那就必须新建一个用户，然后将此用户的uid和gid与初始化用户替 换。

useradd -m -d /home/www -s /bin/bash www passwd www

以上新建用户的uid和pid都是1001，可以修改passwd文件和group文件进行替换。

文件属性修改

chmod 755 /etc/postfix/mysql_virtual_*.cf chgrp postfix /etc/postfix/mysql_virtual_*.cf chown -R www:www /var/www/extsuite/extmail/cgi/ chown -R www:www /var/www/extsuite/extman/cgi/ cd /var/www/extsuite/extmail/ cp webmail.cf.default webmail.cf cd /var/www/extsuite/extman/ cp webman.cf.default webman.cf

修改extmail配置文件

vim /var/www/extsuite/extmail/webmail.cf

SYS_USER_LANG = zh_CN  # 语言设置 SYS_MYSQL_USER = extmail # 默认访问数据库的用户名 SYS_MYSQL_PASS = extmail # 默认访问数据库的密码 SYS_MYSQL_DB = extmail  # 默认访问数据库的名字 SYS_MYSQL_SOCKET = /var/run/mysqld/mysqld.sock SYS_AUTHLIB_SOCKET = /var/run/courier/authdaemon/socket SYS_MAILDIR_BASE = /home/vmail SYS_MESSAGE_SIZE_LIMIT = 102400000

vim /var/www/extsuite/extman/webman.cf

SYS_CAPTCHA_ON = 0 ##用于关闭后台登录时的验证码 SYS_MAILDIR_BASE = /home/vmail SYS_MYSQL_SOCKET = /var/run/mysqld/mysqld.sock SYS_LANG = zh_CN SYS_GROUPMAIL_SENDER = [email protected]

vim /var/www/extsuite/extman/contrib/passwd2ext.pl

my $sock = '/var/run/mysqld/mysqld.sock';

Extmail 数据库初始化

直接导入sql脚本

mysql -u root -pgaojinbo.com < /var/www/extsuite/extman/docs/extmail.sql mysql -u root -pgaojinbo.com < /var/www/extsuite/extman/docs/init.sql

临时文件夹建立

mkdir /tmp/extman chown -R www:www /tmp/extman

初始化[email protected]帐户的Maildir文件夹

cd /var/www/extsuite/extman/tools ./maildirmake.pl /home/vmail/extmail.org/postmaster/Maildir chown -R www:www /home/vmail/extmail.org/

postfix配置

# See /usr/share/postfix/main.cf.dist for a commented, more complete version # Debian specific:  Specifying a file name will cause the first # line of that file to be used as the name.  The Debian default # is /etc/mailname. #myorigin = /etc/mailname smtpd_banner = $myhostname ESMTP $mail_name (Ubuntu) biff = no # appending .domain is the MUA's job. append_dot_mydomain = no # Uncomment the next line to generate "delayed mail" warnings #delay_warning_time = 4h readme_directory = /usr/share/doc/postfix # TLS parameters smtpd_tls_cert_file=/etc/ssl/certs/ssl-cert-snakeoil.pem smtpd_tls_key_file=/etc/ssl/private/ssl-cert-snakeoil.key smtpd_use_tls=no smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache # See /usr/share/doc/postfix/TLS_README.gz in the postfix-doc package for # information on enabling SSL in the smtp client. mydomain = 1k8k.com myhostname = mail.1k8k.com alias_maps = hash:/etc/aliases alias_database = hash:/etc/aliases myorigin = /etc/mailname mydestination = 127.0.0.1,mail.1k8k.com relayhost = mynetworks = 127.0.0.1 mailbox_size_limit = 0 recipient_delimiter = + inet_interfaces = loopback-only html_directory = /usr/share/doc/postfix/html ######### virtual config############ virtual_alias_domains = virtual_alias_maps = mysql:/etc/postfix/mysql_virtual_alias_maps.cf virtual_mailbox_domains = mysql:/etc/postfix/mysql_virtual_domains_maps.cf virtual_mailbox_maps = mysql:/etc/postfix/mysql_virtual_mailbox_maps.cf virtual_mailbox_limit_maps = mysql:/etc/postfix/mysql_virtual_limit_maps.cf virtual_mailbox_base = /home/vmail virtual_uid_maps = static:1000 virtual_gid_maps = static:1000 virtual_create_maildirsize = yes virtual_mailbox_extended = yes virtual_overquota_bounce = yes virtual_mailbox_limit_override = yes virtual_maildir_limit_message = Sorry, the your Maildir has overdrawn your diskspace quota, please free up some of spaces of your ma ilbox try again. proxy_read_maps = $local_recipient_maps $mydestination $virtual_alias_maps $virtual_alias_domains $virtual_mailbox_maps $virtual_mai lbox_domains $relay_recipient_maps $relay_domains $canonical_maps $sender_canonical_maps $recipient_canonical_maps $relocated_maps $ transport_maps $mynetworks $virtual_mailbox_limit_maps ###########SMTP AUTH config############### broken_sasl_auth_clients = yes smtpd_sasl_auth_enable = yes #smtpd_sasl_local_domain = $myhostname smtpd_sasl_security_options = noanonymous ###########smtpd related config############ smtpd_client_restrictions = permit_sasl_authenticated smtpd_recipient_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_unauth_destination #smtpd_recipient_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_unknown_sender_domain, reject_non_fqdn_hostname , reject_non_fqdn_sender, reject_non_fqdn_recipient, reject_unknown_recipient_domain, reject_unauth_destination, reject_unauth_pipel ining, reject_invalid_hostname, check_recipient_maps ###### Maildrop config ######## maildrop_destination_recipient_limit = 1 virtual_transport = maildrop:

重启postfix，检查是否有语法错误

/etc/init.d/postfix restart

SMTP身份认证

cd /etc/postfix openssl req -new -outform PEM -out smtpd.cert -newkey rsa:2048 -nodes -keyout smtpd.key -keyform PEM -days 365 -x509

apache2配置

注意：apache2的配置不通的版本有很大的区别，这里配置可能需要根据你使用的版本调整，这个使用是2.2版本 vim /etc/apache2/sites-enabled/mail

<VirtualHost *> ServerAdmin [email protected] ServerName mail.1k8k.com DocumentRoot /var/www/extsuite/extmail/html Alias /extmail/cgi/ /var/www/extsuite/extmail/dispatch.fcgi/ Alias /extmail /var/www/extsuite/extmail/html <Ifmodule mod_fastcgi.c> FastCgiExternalServer /var/www/extsuite/extmail/dispatch.fcgi -host 127.0.0.1:8888 -idle-timeout 240 </Ifmodule> <Location "/extmail/cgi"> SetHandler fastcgi-script </Location> ScriptAlias /extman/cgi/ /var/www/extsuite/extman/cgi/ Alias /extman /var/www/extsuite/extman/html ErrorLog /var/log/apache2/error.log # Possible values include: debug, info, notice, warn, error, crit, # alert, emerg. LogLevel warn CustomLog /var/log/apache2/access.log combined SuexecUserGroup vuser vgroup </VirtualHost>

SMTP认证设置

更改saslauthd vim /etc/default/saslauth 更改如下几项

START=yes    //设置开机自动启动 OPTIONS="-c -m /var/spool/postfix/var/run/saslauthd -r"

创建文件/etc/pam.d/smtp 内容如下：

auth    required   pam_mysql.so user=extmail passwd=extmail host=127.0.0.1 db=extmail table=mailbox usercolumn=username passwdcolumn=password crypt=1 account sufficient pam_mysql.so user=extmail passwd=extmail host=127.0.0.1 db=extmail table=mailbox usercolumn=username passwdcolumn=password crypt=1

解释一下：其实就是定义一个查询的方式 crypt=1或者0表示加密或者不加密 注意对照你的数据库 还有用户名密码 请保持跟自己的一致 由于postfix处于chroot，要想调用到saslauthd 必须更改socket文件

mkdir -p /var/spool/postfix/var/run/saslauthd

创建smtpd.conf，并且内容如下：

pwcheck_method:saslauthd mech_list:plain login allow_plaintext: true auxprop_plugin: mysql sql_hostnames: 127.0.0.1 sql_user: extmail sql_password: extmail sql_database: extmail log_level:7 sql_select: SELECT password FROM mailbox WHERE username='%u@%r' and domain='%r'

修改的内容已经在前面添加进去，SMTP AUTH config和smtpd related config两个部分的配置文件

检测smtp(25)

telnet localhost 25 Trying 127.0.0.1… Connected to localhost. Escape character is ‘^]’. 220 mail.extmail.org ESMTP Postfix ehlo localhost  # 输入内容 250-mail.extmail.org 250-PIPELINING 250-SIZE 102400000 250-VRFY 250-ETRN 250-STARTTLS 250-AUTH PLAIN LOGIN 250-AUTH=PLAIN LOGIN 250-ENHANCEDSTATUSCODES 250-8BITMIME 250 DSN auth login # 输入内容 334 VXNlcm5hbWU6 cG9zdG1hc3RlckBleHRtYWlsLm9yZw== # 输入内容 334 UGFzc3dvcmQ6 ZXh0bWFpbA== # 输入内容 235 2.7.0 Authentication successful # 显示认证成功 quit 221 2.0.0 Bye Connection closed by foreign host.

如果出现Authentication successful 表示成功咯

POP验证

vim /etc/courier/authdaemonrc

authmodulelist="authmysql"

cp /etc/courier/authmysqlrc /etc/courier/authmysqlrc_orig cat /dev/null > /etc/courier/authmysqlrc vim /etc/courier/authmysqlrc

DEFAULT_DOMAIN          1k8k.com MYSQL_SERVER            127.0.0.1 MYSQL_USERNAME          extmail MYSQL_PASSWORD          extmail MYSQL_SOCKET            /var/run/mysqld/mysqld.sock MYSQL_PORT              3306 MYSQL_OPT               0 MYSQL_DATABASE          extmail MYSQL_USER_TABLE        mailbox MYSQL_CRYPT_PWFIELD     password MYSQL_UID_FIELD         104 MYSQL_GID_FIELD         112 MYSQL_LOGIN_FIELD       username MYSQL_HOME_FIELD        /home/vmail MYSQL_NAME_FIELD        name MYSQL_MAILDIR_FIELD     /home/vmail MYSQL_QUOTA_FIELD       quota MYSQL_SELECT_CLAUSE     SELECT username,password,domain,                uidnumber,gidnumber,                            CONCAT('/home/vmail/',homedir),          CONCAT('/home/vmail/',maildir),          quota,                                          name                                            FROM mailbox                                    WHERE username = '$(local_part)@$(domain)'      AND active = 1

配置Courier-POP3

vim /etc/courier/pop3d MAILDIRPATH=/home/vmail

配置Courier-IMAP

vi /etc/courier/imapd MAILDIRPATH=/home/vmail/

重启服务

/etc/init.d/courier-authdaemon restart /etc/init.d/courier-imap restart /etc/init.d/courier-imap-ssl restart /etc/init.d/courier-pop restart /etc/init.d/courier-pop-ssl restart

测试Courier- Authlib是否能成功连接mysql

authtest -s login [email protected] extmail

如果成功会显示如下：

Authentication succeeded. Authenticated: [email protected]  (uid 1000, gid 1000) Home Directory: /home/vmail/extmail.org/postmaster Maildir: /home/vmail/extmail.org/postmaster/Maildir/ Quota: 104857600S Encrypted Password: $1$phz1mRrj$3ok6BjeaoJYWDBsEPZb5C0 Cleartext Password: extmail Options: disablesmtpd=0,disablesmtp=0,disablewebmail=0,disablenetdisk=0, disableimap=0,disablepop3=0,netdiskquota=52428800S

测试pop3

telnet localhost 110 Trying 127.0.0.1… Connected to localhost.localdomain (127.0.0.1). Escape character is ‘^]’. +OK Hello there. user [email protected]  # 输入内容 +OK Password required. pass extmail # 输入内容 +OK logged in. list # 输入内容 +OK POP3 clients that break here, they violate STD53. . quit # 输入内容 +OK Bye-bye. Connection closed by foreign host. 图形日志配置 以下配置我未安装，所以正确与否并未论证 apt-get install mailgraph cp -r /var/www/extsuite/extman/addon/mailgraph_ext/ /usr/local/mailgraph_ext vi /usr/local/mailgraph_ext/mailgraph-init为：

MAIL_LOG=/var/log/mail.log

cp /var/www/extsuite/extman/addon/mailgraph_ext/mailgraph-init /etc/init.d/mailgraph cp /var/www/extsuite/extman/addon/mailgraph_ext/qmonitor.pl /etc/init.d/qmonitor 启动服务

/etc/init.d/mailgraph start

安装Maildrop

apt-get install maildrop

vi /etc/maildropmysql.config //创建一个文件

hostname localhost port 3306 database extmail dbuser extmail dbpw extmail dbtable mailbox default_uidnumber 1000 default_gidnumber 1000 uidnumber_field uidnumber gidnumber_field gidnumber uid_field username homedirectory_field concat('/home/vmail/',homedir,'/') maildir_field concat('/home/vmail/',maildir) quota_field quota mailstatus_field active

修改/etc/maildroprc

vi /etc/maildroprc

logfile "/var/log/maildrop.log"

vi /var/log/maildrop.log

chown vuser:vgroup /var/log/maildrop.log chmod 766 /var/log/maildrop.log

vi /etc/logrotate.d/maildrop

/var/log/maildrop.log { daily notifempty missingok rotate 5 compress create 766 www www sharedscripts }

vi /etc/postfix/master.cf,注释掉原来maildrop的配置内容并改为:

maildrop   unix  -       n        n       -       -        pipe flags=DRhu  user=www argv=maildrop -w 90 -d ${user}@${nexthop} ${recipient} ${user}  ${extension} {nexthop} #flags前面必须空2格

由于maildrop不支持一次接收多个收件人，因此必须在/etc/postfix/main.cf增加参数，已经在前面main.cnf里面添加，就是Maildrop config里面的配置

创建vi /etc/quotawarnmsg，为邮箱空间超过配额时的警告邮件内容：

 X-Comment: Rename/Copy this file to quotawarnmsg, and make appropriate changes X-Comment: See deliverquota man page for more information From: Mail Delivery System <[email protected]> Reply-To: [email protected] To: Valued Customer:; Subject: Mail quota warning Mime-Version: 1.0 Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: 7bit Your mailbox on the server is now more than 90% full. So that you can continue to receive mail you need to remove some messages from your mailbox.

启动extman服务

/var/www/extsuite/extman/daemon/cmdserver -v -d

写入启机服务

echo "/var/www/extsuite/extman/daemon/cmdserver -v -d" >>/etc/rc.local

完成部署

登录http://mail.1k8k.com/extmail/ 前台，http://mail.1k8k.com/extman/后台

后台默认用户名 [email protected] 默认密码 extmail*123*,登录前台需要自己先添加一个用户