Sendmail+dovecot+saslauth+rainloop

环境：CentOS 6.4（最小化安装）

关闭防火墙和selinux

Sendmail的配置文件

/etc/mail/sendmail.cf :Sendmail的主配置文件；

/etc/mail/access :中继访问控制；

/etc/mail/domaintable ;域名映射；

/etc/mail/local-host-names ;本地主机别名；

/etc/mail/mailertable :为特定的域指定特殊的路由规则；

/etc/mail/virtusertable :虚拟域配置

Sendmail为发送服务器

[root@localhost ~]# yum -y install sendmail sendmail-cf openssl-devel dovecot cyrus*
[root@localhost ~]# nslookup
> mail.com
Server: 192.168.100.243
Address:192.168.100.243#53
Name:mail.com
Address: 192.168.100.243
> 192.168.100.243
Server: 192.168.100.243
Address:192.168.100.243#53
243.100.168.192.in-addr.arpaname = com.
243.100.168.192.in-addr.arpaname = mail.com.
243.100.168.192.in-addr.arpaname = aa.com.
> exit
[root@localhost ~]#

或者

[root@localhost ~]# tail -1 /etc/hosts
192.168.100.243 mail.com mail mail.com.com localhost localhost.localdomain
[root@localhost ~]#
[root@localhost ~]# sed -i '/^\:OUTPUT ACCEPT/a\-A INPUT \-m state \-\-state NEW \-m tcp \-p tcp \-\-dport 25 \-j ACCEPT' /etc/sysconfig/iptables
[root@localhost ~]# sed -i '/^\:OUTPUT ACCEPT/a\-A INPUT \-m state \-\-state NEW \-m tcp \-p tcp \-\-dport 110 \-j ACCEPT' /etc/sysconfig/iptables
[root@localhost ~]# /etc/init.d/iptables restart
iptables: Flushing firewall rules:                         [  OK  ]
iptables: Setting chains to policy ACCEPT: filter          [  OK  ]
iptables: Unloading modules:                               [  OK  ]
iptables: Applying firewall rules:                         [  OK  ]
[root@localhost ~]# chkconfig iptables on
[root@localhost ~]# setenforce 0
[root@localhost ~]# /etc/init.d/postfix stop
Shutting down postfix:                                     [  OK  ]
[root@localhost ~]# chkconfig postfix off

[root@localhost ~]# echo 'mail.com RELAY' >>/etc/mail/access
[root@localhost ~]# echo '192.168.100. RELAY' >>/etc/mail/access
[root@localhost ~]# sed -i "/confCACERT_PATH/s/^dnl//g" /etc/mail/sendmail.mc
[root@localhost ~]# sed -i "/confCACERT_PATH/s/^[ \t]//g" /etc/mail/sendmail.mc
[root@localhost ~]# sed -i "/ca-bundle.crt/s/^dnl//g" /etc/mail/sendmail.mc
[root@localhost ~]# sed -i "/ca-bundle.crt/s/^[ \t]//g" /etc/mail/sendmail.mc
[root@localhost ~]# sed -i "/confSERVER_CERT/s/^dnl//g" /etc/mail/sendmail.mc
[root@localhost ~]# sed -i "/confSERVER_CERT/s/^[ \t]//g" /etc/mail/sendmail.mc
[root@localhost ~]# sed -i "/confSERVER_KEY/s/^dnl//g" /etc/mail/sendmail.mc
[root@localhost ~]# sed -i "/confSERVER_KEY/s/^[ \t]//g" /etc/mail/sendmail.mc
[root@localhost ~]# sed -i "/TRUST_AUTH_MECH/s/^dnl//g" /etc/mail/sendmail.mc
[root@localhost ~]# sed -i "/TRUST_AUTH_MECH/s/^[ \t]//g" /etc/mail/sendmail.mc
[root@localhost ~]# sed -i "/confAUTH_MECHANISMS/s/^dnl//g" /etc/mail/sendmail.mc
[root@localhost ~]# sed -i "/confAUTH_MECHANISMS/s/^[ \t]//g" /etc/mail/sendmail.mc
[root@localhost ~]# sed -i '/^DAEMON_OPTIONS/s/127\.0\.0\.1/0\.0\.0\.0/g' /etc/mail/sendmail.mc
[root@localhost ~]# sed -i '/UUCP_MAILER_MAX/s/2/4/g' /etc/mail/sendmail.mc      //限制附件的大小
[root@localhost ~]# cd /etc/mail/
[root@localhost mail]# m4 sendmail.mc > sendmail.cf

限制邮件的大小：

[root@localhost ~]# sed -i '/MaxMessageSize/s/^#//g' /etc/mail/sendmail.cf
[root@localhost ~]# sed -i '/MaxMessageSize/s/0/4000000/g' /etc/mail/sendmail.cf

配置DOVECOT：

[root@localhost ~]# sed -i '/protocols/s/^#//g' /etc/dovecot/dovecot.conf

如果不做下面的操作，会报：-ERR Plaintext authentication disallowed on non-secure (SSL/TLS) connections错误

[root@localhost ~]# sed -i '/login_trusted_networks/s/^#//g' /etc/dovecot/dovecot.conf
[root@localhost ~]# sed -i '/login_trusted_networks/s/\=/\= 0\.0\.0\.0\/0/g' /etc/dovecot/dovecot.conf
[root@localhost ~]# sed -i '/INBOX\=/s/^#//g' /etc/dovecot/conf.d/10-mail.conf
[root@localhost ~]# sed -i '/INBOX\=/s/^[ \t]*//g' /etc/dovecot/conf.d/10-mail.conf
[root@localhost ~]# echo 'mail.com' >> /etc/mail/local-host-names
[root@localhost ~]# sed -i '/MECH\=/s/pam/shadow/' /etc/sysconfig/saslauthd
[root@localhost ~]# chkconfig sendmail on
[root@localhost ~]# chkconfig dovecot on
[root@localhost ~]# chkconfig saslauthd on
[root@localhost ~]# /etc/init.d/sendmail restart
[root@localhost ~]# /etc/init.d/dovecot restart
[root@localhost ~]# /etc/init.d/saslauthd restart

如果报-ERR [IN-USE] Couldn't open INBOX: Internal error occurred. Refer to server log for more information. 错误则

[yfshare@aa ~]$ mkdir -p /home/yfshare/mail/.imap/INBOX即可

在这里添加上即可（执行上面脚本也可）：

[root@localhost ~]# tail -n 5 /etc/skel/.bashrc |head -n 3
if [ ! -d ~/mail/.imap/INBOX ];then
mkdir -p ~/mail/.imap/INBOX
fi
[root@localhost ~]#

[root@localhost ~]# useradd yfshare
[root@localhost ~]# useradd bob
[root@localhost ~]# useradd jerry
[root@localhost ~]# passwd yfshare
[root@localhost ~]# passwd bob
[root@localhost ~]# passwd jerry

[root@localhost ~]# echo -e "group1:\tyfshare,bob" >>/etc/aliases
[root@localhost ~]# newaliases
/etc/aliases: 77 aliases, longest 11 bytes, 782 bytes total
[root@localhost ~]# /etc/init.d/sendmail restart
Shutting down sm-client:                                   [  OK  ]
Shutting down sendmail:                                    [  OK  ]
Starting sendmail:                                         [  OK  ]
Starting sm-client:                                        [  OK  ]
[root@localhost ~]#

[root@localhost ~]# saslauthd -v                //查看是否支持pam或shadow
saslauthd 2.1.23
authentication mechanisms: getpwent kerberos5 pam rimap shadow ldap
[root@localhost ~]# testsaslauthd -u yfshare -p wang1024**
0: OK "Success."
[root@localhost ~]# testsaslauthd -u bob -p wang1024**
0: OK "Success."
[root@localhost ~]# testsaslauthd -u jerry -p wang1024**
0: OK "Success."
[root@localhost ~]#
如果显示0: OK “Success.”则表明saslauthd工作正常
[root@localhost ~]# mailq             //查看sendmail队列
/var/spool/mqueue is empty
  Total requests: 0
[root@localhost ~]#
[root@localhost ~]# mailstats        //查看邮件系统的状态
Statistics from Wed Sep  9 17:41:02 2015
 M   msgsfr  bytes_from   msgsto    bytes_to  msgsrej msgsdis msgsqur  Mailer
=====================================================================
 T        0          0K        0          0K        0       0       0
 C        0                    0                    0
[root@localhost ~]#

验证：

[root@localhost ~]# telnet mail.com 25
Trying 192.168.100.243...
Connected to mail.com.
Escape character is '^]'.
220 aa.com ESMTP Sendmail 8.14.4/8.14.4; Thu, 10 Sep 2015 14:03:34 +0800
mail from:[email protected]
250 2.1.0 [email protected]... Sender ok
rcpt to:[email protected]
250 2.1.5 [email protected]... Recipient ok
data
354 Enter mail, end with "." on a line by itself
this is test mail~~~!!
.
250 2.0.0 t8A63Yf6002353 Message accepted for delivery
quit
221 2.0.0 aa.com closing connection
Connection closed by foreign host.
[root@localhost ~]#

[bob@aa ~]$ mail
Heirloom Mail version 12.4 7/29/08.  Type ? for help.
"/var/spool/mail/bob": 1 message
>   1 [email protected]      Thu Sep 10 14:05  13/471  
&

注：如果用IMAP来接收邮件，在邮件帐号里面直接写用户名，不加@mail.com

上面搭建的邮件服务器是使用明文传输的，不安全。

下面给邮件服务器弄个SSL：（dovecot默认就支持pop3s和imaps）

pop3	110	pop3s	995
smtp	25	smtps	465
imap	143	imaps	993

生成sendmail.pem文件 

[root@localhost ~]# cd /etc/pki/tls/certs/
[root@localhost certs]# make sendmail.pem

[root@localhost ~]# head -n 63 /etc/mail/sendmail.mc |tail -n 4
define(`confCACERT_PATH', `/etc/pki/tls/certs')dnl
define(`confCACERT', `/etc/pki/tls/certs/ca-bundle.crt')dnl
define(`confSERVER_CERT', `/etc/pki/tls/certs/sendmail.pem')dnl
define(`confSERVER_KEY', `/etc/pki/tls/certs/sendmail.pem')dnl
[root@localhost ~]#

开启SMTPS：

[root@localhost ~]# sed -i '/TLSMTA/s/^dnl//g' /etc/mail/sendmail.mc
[root@localhost ~]# sed -i '/TLSMTA/s/^[ \t]*//g' /etc/mail/sendmail.mc
[root@localhost ~]# cd /etc/mail/
[root@localhost mail]# cp sendmail.cf sendmail.cf.bak
[root@localhost mail]# m4 sendmail.mc > sendmail.cf
[root@localhost ~]# yum -y install xinetd
[root@localhost ~]# /etc/init.d/xinetd restart
[root@localhost ~]# ll /etc/pki/tls/certs/sendmail.pem
-rw------- 1 root root 2913 Sep 10 11:45 /etc/pki/tls/certs/sendmail.pem
[root@localhost ~]#
[root@localhost ~]# /etc/init.d/sendmail restart
Shutting down sm-client:                                   [  OK  ]
Shutting down sendmail:                                    [  OK  ]
Starting sendmail:                                         [  OK  ]
Starting sm-client:                                        [  OK  ]
[root@localhost ~]#
[root@localhost ~]# /etc/init.d/dovecot restart
Stopping Dovecot Imap:                                     [  OK  ]
Starting Dovecot Imap:                                     [  OK  ]
[root@localhost ~]#
[root@localhost ~]# /etc/init.d/saslauthd restart
Stopping saslauthd:                                        [  OK  ]
Starting saslauthd:                                        [  OK  ]
[root@localhost ~]#

[root@localhost ~]# netstat -anp|grep dovecot|head -n 4
tcp        0      0 0.0.0.0:110                 0.0.0.0:*                   LISTEN      2642/dovecot        
tcp        0      0 0.0.0.0:143                 0.0.0.0:*                   LISTEN      2642/dovecot        
tcp        0      0 0.0.0.0:993                 0.0.0.0:*                   LISTEN      2642/dovecot        
tcp        0      0 0.0.0.0:995                 0.0.0.0:*                   LISTEN      2642/dovecot        
[root@localhost ~]#
[root@localhost ~]# netstat -anp|grep sendmail
tcp        0      0 0.0.0.0:465                 0.0.0.0:*                   LISTEN      2621/sendmail       
tcp        0      0 0.0.0.0:25                  0.0.0.0:*                   LISTEN      2621/sendmail       
unix  2      [ ]         DGRAM                    15538  2629/sendmail: Queu
unix  2      [ ]         DGRAM                    15523  2621/sendmail      
[root@localhost ~]#

测试成功：a/b/c三个用户，group包含a/b用户，c给a发送邮件并抄送给group，这时a只会收到一封邮件，Sendmail会过滤掉相同mailID的邮件。而Postfix则会给a发送两封一模一样的邮件

[root@localhost ~]# mailstats
Statistics from Thu Sep 10 14:05:06 2015
 M   msgsfr  bytes_from   msgsto    bytes_to  msgsrej msgsdis msgsqur  Mailer
 4        4         12K        0          0K        0       0       0  esmtp
 9       10         27K       16         40K        3       0       0  local
=====================================================================
 T       14         39K       16         40K        3       0       0
 C       16                    0                    3
[root@localhost ~]#

如果把这行注释掉，Sendmail就不支持smtp发送邮件了，只支持smtps发送邮件

安装rainloop：

[root@localhost ~]# yum -y install php*
[root@localhost ~]# unzip rainloop-latest.zip  -d /var/www/html/
[root@localhost ~]# chown apache:apache /var/www/html/* -R
[root@localhost ~]# sed -i '/^DirectoryIndex/s/html/html index.php/g' /etc/httpd/conf/httpd.conf
[root@localhost ~]# sed -i '/post_max_size/s/8/4/g' /etc/php.ini
[root@localhost ~]# sed -i '/upload_max_filesize/s/2/3/g' /etc/php.ini
[root@localhost ~]# /etc/init.d/httpd restart
Stopping httpd:                                            [  OK  ]
Starting httpd:                                            [  OK  ]
[root@localhost ~]# chkconfig httpd on

访问：http://192.168.100.243/?admin进入后台管理

不允许用户添加其他的账户

添加个性化标题：

访问：http://192.168.100.243进入web mail

如果出现无法载入邮件，把下面这个改成off，保存配置后再登录即可

[root@localhost ~]# grep autocreate_system_folders /var/www/html/data/_data_/_default_/configs/application.ini
autocreate_system_folders = On
[root@localhost ~]#

你应该知道的最好Webmail邮件客户端

Postfix+dovecot+saslauth

本文出自 “鹏城-酱油瓶” 博客，谢绝转载！