基于postfix邮件网关搭建

操作系统：Centos 5.X

准备以下系列软件
mysql-5.1.59.tar.gz  
postfix-2.8.2.tar.gz
clamav-0.97.2-1.el5.rf.x86_64.rpm       
clamav-db-0.97.2-1.el5.rf.x86_64.rpm    
clamav-devel-0.97.2-1.el5.rf.x86_64.rpm 
clamd-0.97.2-1.el5.rf.x86_64.rpm
MailScanner-4.84.3-1.rpm.tar.gz

准备条件
删除相关的软件包

rpm -e --nodeps mysql rpm -e --nodeps cyrus-sasl-* rpm -e --nodeps httpd rpm -e --nodeps sendmail

安装rpm依赖包(已安装的就不需要安装啦)

rpm -ivh vim-common-6.3.046-0.40E.7.i386.rpm vim-enhanced-6.3.046-0.40E.7.i386.rpm rpm -ivh pcre-devel-4.5-3.2.RHEL4.i386.rpm yum -y install gcc ncurses-devel autoconf automake libtool g++ db4-devel

新建用户

groupadd -g 789 postfix useradd -u 789 -g 789 -d/dev/null -s/sbin/nologin postfix groupadd -g 13579 postdrop

开始安装
安装mysql

autoreconf --force --install ./configure \          "--prefix=/usr/local/mysql" \          "--localstatedir=/usr/local/mysql/data" \          "--with-comment=Source" \          "--with-server-suffix=-Slevin" \          "--with-mysqld-user=mysql" \          "--without-debug" \          "--with-big-tables" \          "--with-charset=utf8" \          "--with-collation=utf8_general_ci" \          "--with-extra-charsets=all" \          "--with-pthread" \          "--enable-assembler" make&&make install echo "/usr/local/mysql/lib/mysql/"  >> /etc/ld.so.conf ldconfig

安装postfix

make makefiles \      'CCARGS=-DHAS_MYSQL -I/usr/local/mysql/include/mysql ' \      'AUXLIBS=-L/usr/local/mysql/lib/mysql -lmysqlclient -lz -lm ' make install /usr/bin/newaliases

这里贴出我自己的配置文件
cat /etc/postfix/main.cf

command_directory = /usr/sbin config_directory = /etc/postfix daemon_directory = /usr/libexec/postfix data_directory = /var/lib/postfix debug_peer_level = 2 html_directory = no mail_owner = postfix mailq_path = /usr/bin/mailq manpage_directory = /usr/local/man newaliases_path = /usr/bin/newaliases queue_directory = /var/spool/postfix readme_directory = no sample_directory = /etc/postfix sendmail_path = /usr/sbin/sendmail setgid_group = postdrop unknown_local_recipient_reject_code = 550 alias_maps = hash:/etc/aliases # hostname mynetworks = 127.0.0.1 myhostname = mail.xxx.com mydomains = mail.xxx.com mydestination = $mynetworks $myhostname inet_interfaces = all # banner mail_name = Postfix - by make a slevin smtpd_banner = $myhostname ESMTP $mail_name # response immediately smtpd_error_sleep_time = 0s # Message and return code control message_size_limit = 104857600 mailbox_size_limit = 524288000 show_user_unknown_table_name = no # Queue lifetime control bounce_queue_lifetime = 1d maximal_queue_lifetime = 1d debug_peer_list=1 relay_domains=xxx.cn   设置过滤的域名 transport_maps=hash:/etc/postfix/transport   邮件路由配置文件 relay_recipient_maps=mysql:/etc/postfix/mysql_list_user.cf  收件人限制配置 #smtpd_recipient_restrictions =permit_mynetworks,reject_non_fqdn_hostname,reject_non_fqdn_sender,reject_non_fqdn_recipient,reject_unauth_destination,reject_unauth_pipelining,reject_invalid_hostname,reject_unknown_recipient_domain,reject_rbl_client cblless.anti-spam.org.cn header_checks = regexp:/etc/postfix/header_checks  MailScanner靠这个参数来对邮件进行过滤

下面贴出上面所用到的配置文件
cat /etc/postfix/transport

xxx.com        smtp:[192.168.0.25]:25

cat /etc/postfix/mysql_list_user.cf

user = test password = 000000 hosts = 192.168.0.25 dbname = email query= SELECT email FROM user WHERE email='%s'

cat  /etc/postfix/header_checks

/^Received:/    HOLD    中间空格必须是table键

运行命令

postmap /etc/postfix/transport

暂时把header_checks参数注释然后启动postfix来测试简单的路由转发是否成功

启动命令：postfix  start

假设上面测试成功，那接着配置下一步的过滤

安装杀毒过滤

rpm -ivh clamav-0.97.2-1.el5.rf.x86_64.rpm   \          clamav-db-0.97.2-1.el5.rf.x86_64.rpm     \          clamav-devel-0.97.2-1.el5.rf.x86_64.rpm   \          clamd-0.97.2-1.el5.rf.x86_64.rpm

配置杀毒

ln -s /usr/bin/freshclam /usr/local/bin/freshclam /usr/local/bin/freshclam

安装spamassassin

yum -y  install  spamassassin

配置spamassassin

wget -N -P /usr/share/spamassassin www.ccert.edu.cn/spam/sa/Chinese_rules.cf crontab -e 0 0 1 * * wget -N -P /usr/share/spamassassin www.ccert.edu.cn/spam/sa/Chinese_rules.cf;/etc/init.d/MailScanner restart

安装MailScanner

tar xvf MailScanner-4.84.3-1.rpm.tar.gz cd MailScanner-4.84.3-1 ./install.sh  (这个过程要很久)

安装完之后 修改配置文件，里面选项很多，我只把几个关键的写出来
vi /etc/MailScanner/MailScanner.conf

%org-name% = yoursite  自己定义 %org-long-name% = Your Organisation Name Here  自己定义 %web-site% = http://www.your-organisation.com/  自己定义 Run As User = postfix Run As Group = postfix Incoming Queue Dir = /var/spool/postfix/hold Outgoing Queue Dir = /var/spool/postfix/incoming MTA = postfix Incoming Work User = postfix Incoming Work Group = clamav Incoming Work Permissions = 0640 Clamd Socket = /var/run/clamav/clamd.sock Is Definitely Spam = %rules-dir%/spam.blacklist.rules  默认没这个文件，必须要新建这个文件

给上面配置选项的目录赋予权限

cd /var/spool/MailScanner/ mkdir spamassassin mkdir .spamassassin chown -R postfix:clamav /var/spool/MailScanner/incoming chown -R postfix:postfix /var/spool/MailScanner/quarantine chown -R postfix:postfix /var/spool/MailScanner/spamassassin

接着取消postfix的main.cf文件的header_checks注释

启动所有程序

chkconfig spamassassin on chkconfig MailScanner on /etc/init.d/clamd start /etc/init.d/spamassassin start /etc/init.d/MailScanner start

查看/var/log/maillog,自己测试发送邮件，如果日志没报错并且能够成功过滤 就说明发送成功了