Postfix + SASL2 + TLS + dovecot + RoundCube webmail

以下為採用 本機 passwd 認證，非虛擬帳號方式

重要 conf 設定如下：

Postfix ~ Mailbox 配合 dovecot 採用 Maildir 設定

==============================================

[main.cf]

myhostname = HOST+DomainName

mydomain = DomainName

mydestination = $myhostname, localhost.$mydomain, localhost, $mydomain

local_recipient_maps = unix:passwd.byname $alias_maps

mynetworks_style = host

mynetworks = 192.168.0.0/24, 127.0.0.0/8, WanFixIP

relay_domains = $mydestination

home_mailbox = Maildir/

mail_spool_directory = /var/mail

smtpd_banner = $myhostname ESMTP

# SASL 2

broken_sasl_auth_clients = yes

smtpd_sasl_auth_enable = yes

smtpd_sasl_local_domain = $mydomain

smtpd_recipient_restrictions = permit_mynetworks permit_sasl_authenticated reject_unauth_destination

# TLS

smtp_use_tls = yes

smtpd_use_tls = yes

smtp_tls_note_starttls_offer = yes

smtpd_tls_key_file = /usr/local/etc/postfix/CA/server.key

smtpd_tls_cert_file = /usr/local/etc/postfix/CA/server.crt

smtpd_tls_CAfile = /usr/local/etc/postfix/CA/ca.crt

smtpd_tls_loglevel = 1

smtpd_tls_received_header = yes

smtpd_tls_session_cache_timeout = 3600s

tls_random_source = dev:/dev/urandom

# All mail will bcc to SomeAccount for backup

always_bcc = mailbak

==============================================

[master.cf]

smtps inet n - n - - smtpd

-o smtpd_tls_wrappermode=yes

-o smtpd_sasl_auth_enable=yes

==============================================

SASL2 ~ 需自行新增 smtpd.conf 於 /usr/local/lib/sasl2/ 下

==============================================

[/usr/local/lib/sasl2/smtpd.conf]

pwcheck_method: saslauthd

mechlist: plain login crammd5 digestmd5

==============================================

dovecot ~ IMAP, IMAPs, POP3, POP3s 可執行 doveconf 參考基本設定來產生 dovecot.conf

==============================================

[dovecot.conf]

auth_default_realm =

auth_mechanisms = plain login

auth_username_format = %n

disable_plaintext_auth = no

protocols = imap pop3

ssl_cert = server.crt

ssl_key = server.key

userdb {

driver = passwd

}

passdb {

driver = passwd

}

ssl = yes

mail_location = maildir:~/Maildir

mail_privileged_group = mail

==============================================

Roundcube Webmail ~ 請先於 MySQL 建立相對的資料庫及權限，用 Broswer 開啓 installer 目錄進行安裝設定，便可產生 main.inc.php & db.inc.php

==============================================

[main.inc.php]

$rcmail_config['db_dsnw'] = 'mysql://user:password@host/database';

//其他依預設值即可

==============================================

[db.inc.php]

// IMAP

$rcmail_config['default_host'] = 'DomainName';

$rcmail_config['default_port'] = 143;

$rcmail_config['imap_auth_type'] = '';

// SMTP

$rcmail_config['smtp_server'] = 'localhost';

$rcmail_config['smtp_port'] = 25;

$rcmail_config['smtp_auth_type'] = 'LOGIN, PLAIN';

// USER INTERFACE

$rcmail_config['junk_mbox'] = 'Spam';

$rcmail_config['default_imap_folders'] = array('INBOX', 'Drafts', 'Sent', 'Spam', 'Trash');

$rcmail_config['create_default_folders'] = true;

// USER PREFERENCES

$rcmail_config['default_charset'] = 'UTF-8';

//其他依預設值即可

==============================================

/etc/rc.conf 需添加的設置如下

==============================================

# Postfix

postfix_enable="YES"

# dovecot

dovecot_enable="YES"

# Sendmail

sendmail_enable="NONE"

sendmail_submit_enable="NO"

sendmail_outbound_enable="NO"

sendmail_msp_queue_enable="NO"

# SASL2

saslauthd_enable="YES"

==============================================