Forum Debian Users Gang

apt-get install postfix libsasl2 libsasl2-modules sasl2-bin ipopd-ssl

nano /etc/postfix/main.cf

smtpd_banner = $myhostname ESMTP Exim4 (GENTOO/GNU)
biff = no

# appending .domain is the MUA's job.
append_dot_mydomain = no

# Uncomment the next line to generate "delayed mail" warnings
#delay_warning_time = 4h

myhostname = serwer.com.pl
alias_maps = hash:/etc/aliases
alias_database = hash:/etc/aliases
myorigin = /etc/mailname
mydestination = serwer.com.pl, serwer.com.pl, localhost.com.pl, localhost
relayhost =
mynetworks = 127.0.0.0/8 #TU WPISUJEMY NASZA ZAUFANA SIEC !!
mailbox_size_limit = 0
recipient_delimiter = +
inet_interfaces = all

newaliases

smtpd_banner = $myhostname ESMTP Postfix (Debian/GNU)
biff = no

append_dot_mydomain = no

myhostname = pfoteam.eu
alias_maps = hash:/etc/aliases
alias_database = hash:/etc/aliases
myorign = /etc/mailname
mydestination = $myhostname, $transport_maps
relayhost = 
mynetworks = 127.0.0.1/32, *.*.*.*/28
local_recipient_maps = 
mailbox_size_limit = 0
recipient_delimiter = +
inet_interfaces = all

Dec  9 12:00:59 ns22995 postfix/master[4461]: daemon started -- version 2.3.8, configuration /etc/postfix
Dec  9 12:01:03 ns22995 postfix/smtpd[4482]: connect from adol135.neoplus.adsl.tpnet.pl[79.185.93.135]
Dec  9 12:01:04 ns22995 postfix/smtpd[4482]: NOQUEUE: reject: RCPT from adol135.neoplus.adsl.tpnet.pl[79.185.93.135]: 554 5.7.1 <m.mewald@gmail.com>: Relay access denied; from=<testftp@pfoteam.eu> to=<m.mewald@gmail.com> proto=SMTP helo=<home>
Dec  9 12:01:04 ns22995 postfix/smtpd[4482]: disconnect from adol135.neoplus.adsl.tpnet.pl[79.185.93.135]
Dec  9 12:01:04 ns22995 courierpop3login: Connection, ip=[::ffff:79.185.93.135]
Dec  9 12:01:04 ns22995 courierpop3login: LOGIN, user=testftp, ip=[::ffff:79.185.93.135]
Dec  9 12:01:04 ns22995 courierpop3login: LOGOUT, user=testftp, ip=[::ffff:79.185.93.135], top=0, retr=0, rcvd=12, sent=39, time=0
Dec  9 12:04:25 ns22995 postfix/anvil[4483]: statistics: max connection rate 1/60s for (smtp:79.185.93.135) at Dec  9 12:01:03
Dec  9 12:04:25 ns22995 postfix/anvil[4483]: statistics: max connection count 1 for (smtp:79.185.93.135) at Dec  9 12:01:03
Dec  9 12:04:25 ns22995 postfix/anvil[4483]: statistics: max cache size 1 at Dec  9 12:01:0

Dec  9 10:51:08 ns22995 postfix/smtpd[1559]: connect from py-out-1112.google.com[64.233.166.176]
Dec  9 10:51:08 ns22995 postfix/smtpd[1559]: C2E974CE9E: client=py-out-1112.google.com[64.233.166.176]
Dec  9 10:51:09 ns22995 postfix/cleanup[1626]: C2E974CE9E: message-id=<2e8c042c0712090151m406bb7b3tda07a739478bd873@mail.gmail.com>
Dec  9 10:51:09 ns22995 postfix/qmgr[1555]: C2E974CE9E: from=<m.mewald@gmail.com>, size=2141, nrcpt=1 (queue active)
Dec  9 10:51:09 ns22995 postfix/local[1627]: C2E974CE9E: to=<testftp@pfoteam.eu>, relay=local, delay=0.36, delays=0.35/0.01/0/0, dsn=2.0.0, status=sent (delivered to mailbox)
Dec  9 10:51:09 ns22995 postfix/qmgr[1555]: C2E974CE9E: removed

#SASL
smtpd_sasl_auth_enable = yes
smtpd_sasl2_auth_enable = yes
smtpd_sasl_security_options = noanonymous
broken_sasl_auth_clients = yes
smtpd_sasl_local_domain = $myhostname

smtpd_recipient_restrictions =
    permit_sasl_authenticated
    permit_mynetworks
    reject_unauth_destination

kliwer:~# telnet localhost 25
Trying 127.0.0.1...
Connected to localhost.
Escape character is '^]'.
220 xxx.pl ESMTP Postfix
EHLO xxx.pl
250-xxx.pl
250-PIPELINING
250-SIZE 10240000
250-VRFY
250-ETRN
250-AUTH LOGIN PLAIN
250-AUTH=LOGIN PLAIN
250-ENHANCEDSTATUSCODES
250-8BITMIME
250 DSN

#TLS
smtpd_tls_auth_only = yes
smtp_use_tls = yes
smtpd_use_tls = yes
smtp_tls_note_starttls_offer = yes
smtpd_tls_key_file = /etc/postfix/ssl/smtpd.pem
smtpd_tls_cert_file = /etc/postfix/ssl/smtpd.pem
smtpd_tls_CAfile = /etc/postfix/ssl/smtpd.pem
smtpd_tls_log_level = 1
smtpd_tls_received_header = yes
smtpd_tls_session_cache_timeout = 3600s
smtpd_tls_session_cache_database = btree:${queue_directory}/smtpd_scache
smtp_tls_session_cache_database = btree:${queue_directory}/smtp_scache
tls_random_source = dev:/dev/urandom

kliwer:~# telnet localhost 25
Trying 127.0.0.1...
Connected to localhost.
Escape character is '^]'.
220 xxx.pl ESMTP Postfix
EHLO xxx.pl
250-xxx.pl
250-PIPELINING
250-SIZE 10240000
250-VRFY
250-ETRN
250-STARTTLS
250-ENHANCEDSTATUSCODES
250-8BITMIME
250 DSN

# W pliku /etc/postfix/main.cf dopisać lub zmodyfikować:
Kod:
smtpd_restriction_classes =
  has_our_domain_as_sender

has_our_domain_as_sender =
  check_sender_access hash:/etc/postfix/our_domain_as_sender
  reject

smtpd_recipient_restrictions =
  check_client_access hash:/etc/postfix/internal_networks
  check_sender_access hash:/etc/postfix/not_our_domain_as_sender
  reject_unauth_destination
   ...TU MOGĄ BYĆ INNE RESTRYKCJE...
  permit


# Stworzyć w katalogu postfixa (/etc/postfix/) plik internal_networks i wpisać:
Kod:
10.10.1                 has_our_domain_as_sender
192.168.1              has_our_domain_as_sender
...oraz inne adresy ip (zakresy), które mogą wysyłać pocztę......


# Stworzyć w katalogu postfixa (/etc/postfix/) plik our_domain_as_sender: i wpisać:
Kod:
example.com       OK
example.com.pl    OK
example.eu     OK
<>               OK
...oraz inne domeny...


# Stworzyć w katalogu postfixa (/etc/postfix/) plik not_our_domain_as_sender: i wpisać:
Kod:
example.com       554 Don't use my domain name
example.com.pl    554 Don't use my domain name
example.eu     554 Don't use my domain name
...oraz inne domeny...


Po tych wszystkich modyfikacjach trzeba z konsoli wykonać trzy polecenia postmapa:
Kod:
postmap hash:/etc/postfix/our_domain_as_sender
postmap hash:/etc/postfix/internal_networks
postmap hash:/etc/postfix/not_our_domain_as_sender

command_directory = /usr/sbin
mail_owner = postfix
mydomain = mojadomena.com
myhostname = debian
myorigin = /etc/mailname
alias_maps = hash:/etc/aliases
alias_database = hash:/etc/aliases
mydestination = $mydomain, $myhostname, localhost, localhost.localdomain,
mynetworks = 127.0.0.0/8 168.100.189.2/32
inet_interfaces = all
inet_protocols = ipv4
home_mailbox = Maildir/
 
mail_spool_directory = /home/
smtpd_banner = ESMTP on $myhostname !
mailbox_size_limit = 0
recipient_delimiter = +
biff = no
append_dot_mydomain = no
relayhost =
#AUTH SMTP
smtpd_sasl_type = dovecot
smtpd_sasl_path = private/auth
smtpd_sasl_auth_enable = yes
smtpd_sasl2_auth_enable = yes
smtpd_sasl_security_options = noanonymous
broken_sasl_auth_clients = yes
smtpd_sasl_local_domain = $myhostname
smtpd_recipient_restrictions =
    permit_mynetworks,
    permit_sasl_authenticated,
    reject_unauth_destination,
     reject_unknown_recipient_domain,
    reject_non_fqdn_recipient
smtpd_client_restrictions =
    permit_sasl_authenticated,
    #reject_unknown_client,
    reject_rbl_client dul.dnsbl.sorbs.net,
    reject_rbl_client list.dsbl.org,
    reject_rbl_client sbl.spamhaus.org,
    reject_rbl_client cbl.abuseat.org
smtpd_sender_restrictions =
    permit_sasl_authenticated,
    reject_unknown_sender_domain,
    reject_non_fqdn_sender,
    reject_unknown_address,
 spam mailbox_command = procmailrc -a "$EXTENSION"
 
smtpd_sasl_local_domain = $myhostname
#TLS
smtpd_tls_auth_only = yes
smtp_use_tls = yes
smtpd_use_tls = yes
smtp_tls_note_starttls_offer = yes
smtpd_tls_key_file = /etc/postfix/ssl/mail.pem
smtpd_tls_cert_file = /etc/postfix/ssl/mail.pem
smtpd_tls_CAfile = /etc/postfix/ssl/mail.pem
smtpd_tls_loglevel = 1
smtpd_tls_received_header = yes
smtpd_tls_session_cache_timeout = 3600s
smtpd_tls_session_cache_database = btree:${queue_directory}/smtpd_scache
smtp_tls_session_cache_database = btree:${queue_directory}/smtp_scache
tls_random_source = dev:/dev/urandom
#odrzuca meile z naszejdomeny

smtpd_restriction_classes =
  has_our_domain_as_sender 
has_our_domain_as_sender =
  check_sender_access hash:/etc/postfix/our_domain_as_sender
  reject
smtpd_recipient_restrictions =
  check_client_access hash:/etc/postfix/internal_networks
  check_sender_access hash:/etc/postfix/not_our_domain_as_sender
  reject_unauth_destination

Message not sent. Server replied:

    Requested action aborted: error in processing
    451 4.3.5 Server configuration error