|
|
<!doctype html>
|
|
|
<html class="no-js" lang="en">
|
|
|
<head>
|
|
|
<meta charset="utf-8">
|
|
|
<meta name="viewport" content="width=device-width, initial-scale=1">
|
|
|
<meta name="author" content="Lednerb">
|
|
|
<meta name="description" content="Bilberry Premium Theme for Hugo.">
|
|
|
<meta name="keywords" content="blog,personal,responsive,search,font awesome,pages,posts,multilingual,highlight.js,syntax highlighting,premium,shortcuts">
|
|
|
<meta name="generator" content="Hugo 0.50" />
|
|
|
<title> [筆記] Iredmail + Postfix Admin dovecot 的一些設定 | My cool new Blog</title>
|
|
|
<meta name="description" content="[筆記] Iredmail + Postfix Admin dovecot 的一些設定 - Bilberry Premium Theme for Hugo.">
|
|
|
<meta itemprop="name" content="[筆記] Iredmail + Postfix Admin dovecot 的一些設定">
|
|
|
<meta itemprop="description" content="[筆記] Iredmail + Postfix Admin dovecot 的一些設定 - Bilberry Premium Theme for Hugo.">
|
|
|
<meta property="og:title" content="[筆記] Iredmail + Postfix Admin dovecot 的一些設定">
|
|
|
<meta property="og:description" content="[筆記] Iredmail + Postfix Admin dovecot 的一些設定 - Bilberry Premium Theme for Hugo.">
|
|
|
<meta property="og:image" content="https://www.gravatar.com/avatar/88188b6cc451928eba90e8400bc68086?size=200">
|
|
|
<meta property="og:url" content="https://h.cowbay.org/article/e7-ad-86-e8-a8-98-iredmail-postfix-dovecot-e7-9a-84-e4-b8-80-e4-ba-9b-e8-a8-ad-e5-ae-9a/">
|
|
|
<meta property="og:site_name" content="My cool new Blog">
|
|
|
<meta property="og:type" content="article">
|
|
|
<link rel="icon" type="image/png" href="https://h.cowbay.org/favicon-32x32.png" sizes="32x32">
|
|
|
<link rel="icon" type="image/png" href="https://h.cowbay.org/favicon-16x16.png" sizes="16x16">
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
<link rel="stylesheet" href="https://h.cowbay.org/sass/combined.min.717098cb5503581e75f12e486a847ca410bf8367d4d8713f4c37affc868c5a1d.css">
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
</head>
|
|
|
<body class="bilberry-hugo-theme">
|
|
|
|
|
|
<nav>
|
|
|
|
|
|
<div class="container">
|
|
|
<ul class="topnav">
|
|
|
|
|
|
|
|
|
<li><a href="/page/about-bilberry/">About Bilberry</a></li>
|
|
|
|
|
|
|
|
|
|
|
|
<li><a href="https://github.com/Lednerb/bilberry-hugo-theme" target="_blank">Github</a></li>
|
|
|
|
|
|
|
|
|
</ul>
|
|
|
|
|
|
|
|
|
<div id="search-box" class="search">
|
|
|
<i class="fa fa-search"></i>
|
|
|
<input id="search" type="text" placeholder="Search ...">
|
|
|
</div>
|
|
|
|
|
|
</div>
|
|
|
</nav>
|
|
|
|
|
|
|
|
|
<header>
|
|
|
<div class="container">
|
|
|
<div class="logo">
|
|
|
<a href="/" class="logo">
|
|
|
|
|
|
<img src="https://www.gravatar.com/avatar/88188b6cc451928eba90e8400bc68086?d=mm&size=200" alt="">
|
|
|
|
|
|
|
|
|
<span class="overlay"><i class="fa fa-home"></i></span>
|
|
|
</a>
|
|
|
</div>
|
|
|
<div class="titles">
|
|
|
<h3 class="title"><a href="/">My cool new Blog</a></h3>
|
|
|
|
|
|
<span class="subtitle">Hello World! This is the most epic subtitle ever.</span>
|
|
|
|
|
|
</div>
|
|
|
|
|
|
<div class="languages">
|
|
|
|
|
|
|
|
|
<a href="/en" class="active">en</a>
|
|
|
|
|
|
|
|
|
|
|
|
<a href="/de">de</a>
|
|
|
|
|
|
|
|
|
</div>
|
|
|
|
|
|
|
|
|
|
|
|
<div class="toggler">
|
|
|
|
|
|
<i class="fa fa-bars" aria-hidden="true"></i>
|
|
|
</div>
|
|
|
</div>
|
|
|
</header>
|
|
|
|
|
|
|
|
|
<div class="main container">
|
|
|
|
|
|
|
|
|
<div class="article-wrapper u-cf single">
|
|
|
|
|
|
<a class="bubble" href="/article/e7-ad-86-e8-a8-98-iredmail-postfix-dovecot-e7-9a-84-e4-b8-80-e4-ba-9b-e8-a8-ad-e5-ae-9a/">
|
|
|
<i class="fa fa-fw fa-pencil"></i>
|
|
|
</a>
|
|
|
|
|
|
<article class="default article">
|
|
|
|
|
|
|
|
|
<div class="content">
|
|
|
<h3><a href="/article/e7-ad-86-e8-a8-98-iredmail-postfix-dovecot-e7-9a-84-e4-b8-80-e4-ba-9b-e8-a8-ad-e5-ae-9a/">[筆記] Iredmail + Postfix Admin dovecot 的一些設定</a></h3>
|
|
|
<div class="meta">
|
|
|
|
|
|
|
|
|
<span class="date moment">2016-05-05</span>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
<span class="categories">
|
|
|
|
|
|
<a href="/categories/%E5%85%B6%E4%BB%96">其他</a>
|
|
|
|
|
|
</span>
|
|
|
|
|
|
|
|
|
|
|
|
</div>
|
|
|
|
|
|
|
|
|
<p>/etc/dovecot/dovecot.conf</p>
|
|
|
|
|
|
<p>重點</p>
|
|
|
|
|
|
<p>disable_plaintext_auth = no</p>
|
|
|
|
|
|
<p>mail_location = maildir:/var/vmail/%d/%n:INDEX=/var/vmail/%d/%n/indexes</p>
|
|
|
|
|
|
<p> </p>
|
|
|
|
|
|
<p>
|
|
|
> #ssl_dh_parameters_length = 2048
|
|
|
>
|
|
|
> #ssl_prefer_server_ciphers = yes
|
|
|
>
|
|
|
>
|
|
|
> # IP ranges specified by login_trusted_networks setting are assumed to be secure.
|
|
|
>
|
|
|
> #login_trusted_networks = 127.0.0.1
|
|
|
>
|
|
|
>
|
|
|
> # With disable_plaintext_auth=yes AND ssl=required, STARTTLS is mandatory.
|
|
|
>
|
|
|
> # Set disable_plaintext_auth=no AND ssl=yes to allow plain password transmitted
|
|
|
>
|
|
|
> # insecurely.
|
|
|
>
|
|
|
> disable_plaintext_auth = no
|
|
|
>
|
|
|
> # Allow plain text password per IP address/net
|
|
|
>
|
|
|
> #remote 192.168.0.0/24 {
|
|
|
>
|
|
|
> # disable_plaintext_auth = no
|
|
|
>
|
|
|
> # }
|
|
|
>
|
|
|
>
|
|
|
> # Mail location and mailbox format.
|
|
|
>
|
|
|
> #mail_location = maildir:%Lh/Maildir/:INDEX=%Lh/Maildir/
|
|
|
>
|
|
|
> mail_location = maildir:/var/vmail/%d/%n:INDEX=/var/vmail/%d/%n/indexes
|
|
|
>
|
|
|
> # Authentication related settings.
|
|
|
>
|
|
|
> # Append this domain name if client gives empty realm.
|
|
|
>
|
|
|
> auth_default_realm = abc.org
|
|
|
>
|
|
|
>
|
|
|
> # Authentication mechanisms.
|
|
|
>
|
|
|
> auth_mechanisms = PLAIN LOGIN
|
|
|
>
|
|
|
>
|
|
|
> # Limits the number of users that can be logging in at the same time.
|
|
|
>
|
|
|
> # Default is 100. This can be overridden by <code>process_limit =</code> in
|
|
|
>
|
|
|
> # <code>service [protocol]</code> block.
|
|
|
>
|
|
|
> # e.g.
|
|
|
>
|
|
|
> # protocol imap-login {
|
|
|
>
|
|
|
> # …
|
|
|
>
|
|
|
> # process_limit = 500
|
|
|
>
|
|
|
> # }
|
|
|
>
|
|
|
> #default_process_limit = 100
|
|
|
>
|
|
|
>
|
|
|
> service auth {
|
|
|
>
|
|
|
>
|
|
|
> unix_listener /var/spool/postfix/private/dovecot-auth {
|
|
|
>
|
|
|
> user = postfix
|
|
|
>
|
|
|
> group = postfix
|
|
|
>
|
|
|
> mode = 0666
|
|
|
>
|
|
|
> }
|
|
|
>
|
|
|
> unix_listener auth-master {
|
|
|
>
|
|
|
> user = vmail
|
|
|
>
|
|
|
> group = vmail
|
|
|
>
|
|
|
> mode = 0666
|
|
|
>
|
|
|
> }
|
|
|
>
|
|
|
> unix_listener auth-userdb {
|
|
|
>
|
|
|
> user = vmail
|
|
|
>
|
|
|
> group = vmail
|
|
|
>
|
|
|
> mode = 0660
|
|
|
>
|
|
|
> }
|
|
|
>
|
|
|
> }
|
|
|
>
|
|
|
>
|
|
|
> # LMTP server (Local Mail Transfer Protocol).
|
|
|
>
|
|
|
> # Reference: <a href="http://wiki2.dovecot.org/LMTP">http://wiki2.dovecot.org/LMTP</a>
|
|
|
>
|
|
|
> service lmtp {
|
|
|
>
|
|
|
> user = vmail
|
|
|
>
|
|
|
>
|
|
|
> # For higher volume sites, it may be desirable to increase the number of
|
|
|
>
|
|
|
> # active listener processes. A range of 5 to 20 is probably good for most
|
|
|
>
|
|
|
> # sites.
|
|
|
>
|
|
|
> process_min_avail = 5
|
|
|
>
|
|
|
>
|
|
|
> # Logging.
|
|
|
>
|
|
|
> # Require ‘info_log_path =’ in ‘protocol lmtp { }’ block.
|
|
|
>
|
|
|
> executable = lmtp -L
|
|
|
>
|
|
|
>
|
|
|
> # Listening on socket file and TCP
|
|
|
>
|
|
|
> unix_listener /var/spool/postfix/private/dovecot-lmtp {
|
|
|
>
|
|
|
> user = postfix
|
|
|
>
|
|
|
>
|
|
|
> group = postfix
|
|
|
>
|
|
|
> mode = 0600
|
|
|
>
|
|
|
> }
|
|
|
>
|
|
|
>
|
|
|
> inet_listener lmtp {
|
|
|
>
|
|
|
> # Listen on localhost (ipv4)
|
|
|
>
|
|
|
> address = 127.0.0.1
|
|
|
>
|
|
|
> port = 24
|
|
|
>
|
|
|
> }
|
|
|
>
|
|
|
> }
|
|
|
>
|
|
|
>
|
|
|
> # Virtual mail accounts.
|
|
|
>
|
|
|
> userdb {
|
|
|
>
|
|
|
> args = /etc/dovecot/dovecot-mysql.conf
|
|
|
>
|
|
|
> driver = sql
|
|
|
>
|
|
|
> }
|
|
|
>
|
|
|
> passdb {
|
|
|
>
|
|
|
> args = /etc/dovecot/dovecot-mysql.conf
|
|
|
>
|
|
|
> driver = sql
|
|
|
>
|
|
|
> }
|
|
|
>
|
|
|
>
|
|
|
> # Master user.
|
|
|
>
|
|
|
> # Master users are able to log in as other users. It’s also possible to
|
|
|
>
|
|
|
> # directly log in as any user using a master password, although this isn’t
|
|
|
>
|
|
|
> # recommended.
|
|
|
>
|
|
|
> # Reference: <a href="http://wiki2.dovecot.org/Authentication/MasterUsers">http://wiki2.dovecot.org/Authentication/MasterUsers</a>
|
|
|
>
|
|
|
> auth_master_user_separator = *
|
|
|
>
|
|
|
> passdb {
|
|
|
>
|
|
|
> driver = passwd-file
|
|
|
>
|
|
|
> args = /etc/dovecot/dovecot-master-users
|
|
|
>
|
|
|
> master = yes
|
|
|
>
|
|
|
> }
|
|
|
>
|
|
|
>
|
|
|
> plugin {
|
|
|
>
|
|
|
>
|
|
|
> auth_socket_path = /var/run/dovecot/auth-master
|
|
|
>
|
|
|
>
|
|
|
> # Quota configuration.
|
|
|
>
|
|
|
> # Reference: <a href="http://wiki2.dovecot.org/Quota/Configuration">http://wiki2.dovecot.org/Quota/Configuration</a>
|
|
|
>
|
|
|
> quota = dict:user::proxy::quotadict
|
|
|
>
|
|
|
> quota_rule = *:storage=1G
|
|
|
>
|
|
|
> #quota_rule2 = <em>:messages=0
|
|
|
>
|
|
|
> #quota_rule3 = Trash:storage=1G
|
|
|
>
|
|
|
> #quota_rule4 = Junk:ignore
|
|
|
>
|
|
|
>
|
|
|
> # Quota warning.
|
|
|
>
|
|
|
> #
|
|
|
>
|
|
|
> # If user suddenly receives a huge mail and the quota jumps from
|
|
|
>
|
|
|
> # 85% to 95%, only the 95% script is executed.
|
|
|
>
|
|
|
> #
|
|
|
>
|
|
|
> # Only the command for the first exceeded limit is executed, so configure
|
|
|
>
|
|
|
> # the highest limit first.
|
|
|
>
|
|
|
> quota_warning = storage=100%% quota-warning 100 %u
|
|
|
>
|
|
|
> quota_warning2 = storage=95%% quota-warning 95 %u
|
|
|
>
|
|
|
> quota_warning3 = storage=90%% quota-warning 90 %u
|
|
|
>
|
|
|
> quota_warning4 = storage=85%% quota-warning 85 %u
|
|
|
>
|
|
|
>
|
|
|
> # allow user to become max 10% (or 50 MB) over quota
|
|
|
>
|
|
|
> quota_grace = 10%%
|
|
|
>
|
|
|
> #quota_grace = 50 M
|
|
|
>
|
|
|
>
|
|
|
> # Custom Quota Exceeded Message.
|
|
|
>
|
|
|
> # You can specify the message directly or read the message from a file.
|
|
|
>
|
|
|
> #quota_exceeded_message = Quota exceeded, please try again later.
|
|
|
>
|
|
|
> #quota_exceeded_message = </path/to/quota_exceeded_message.txt
|
|
|
>
|
|
|
>
|
|
|
> # Plugin: autocreate. Create and subscribe to default IMAP folders.
|
|
|
>
|
|
|
> autocreate = INBOX
|
|
|
>
|
|
|
> autocreate2 = Sent
|
|
|
>
|
|
|
>
|
|
|
> autocreate3 = Trash
|
|
|
>
|
|
|
> autocreate4 = Drafts
|
|
|
>
|
|
|
> autocreate5 = Junk
|
|
|
>
|
|
|
> autosubscribe = INBOX
|
|
|
>
|
|
|
> autosubscribe2 = Sent
|
|
|
>
|
|
|
> autosubscribe3 = Trash
|
|
|
>
|
|
|
> autosubscribe4 = Drafts
|
|
|
>
|
|
|
> autosubscribe5 = Junk
|
|
|
>
|
|
|
>
|
|
|
> # Plugin: expire.
|
|
|
>
|
|
|
> #expire = Trash 7 Trash/</em> 7 Junk 30
|
|
|
>
|
|
|
> #expire_dict = proxy::expire
|
|
|
>
|
|
|
>
|
|
|
> # ACL and share folder
|
|
|
>
|
|
|
> acl = vfile
|
|
|
>
|
|
|
> acl_shared_dict = proxy::acl
|
|
|
>
|
|
|
>
|
|
|
> # By default Dovecot doesn’t allow using the IMAP “anyone” or
|
|
|
>
|
|
|
> # “authenticated” identifier, because it would be an easy way to spam
|
|
|
>
|
|
|
> # other users in the system. If you wish to allow it,
|
|
|
>
|
|
|
> #acl_anyone = allow
|
|
|
>
|
|
|
>
|
|
|
> # Pigeonhole managesieve service.
|
|
|
>
|
|
|
> # Reference: <a href="http://wiki2.dovecot.org/Pigeonhole/Sieve/Configuration">http://wiki2.dovecot.org/Pigeonhole/Sieve/Configuration</a>
|
|
|
>
|
|
|
> # Per-user sieve settings.
|
|
|
>
|
|
|
> sieve_dir = %Lh/sieve
|
|
|
>
|
|
|
> sieve = %Lh/sieve/dovecot.sieve
|
|
|
>
|
|
|
>
|
|
|
> # Global sieve settings.
|
|
|
>
|
|
|
> sieve_global_dir = /var/vmail/sieve
|
|
|
>
|
|
|
> # Note: if user has personal sieve script, global sieve rules defined in
|
|
|
>
|
|
|
> # sieve_default will be ignored. Please use sieve_before or
|
|
|
>
|
|
|
> # sieve_after instead.
|
|
|
>
|
|
|
> #sieve_default =
|
|
|
>
|
|
|
> sieve_before = /var/vmail/sieve/dovecot.sieve
|
|
|
>
|
|
|
> #sieve_after =
|
|
|
>
|
|
|
>
|
|
|
> # The maximum number of redirect actions that can be performed during a
|
|
|
>
|
|
|
> # single script execution.
|
|
|
>
|
|
|
> # The meaning of 0 differs based on your version. For pigeonhole-0.3.0 and
|
|
|
>
|
|
|
> # beyond this means that redirect is prohibited. For older versions,
|
|
|
>
|
|
|
> # however, this means that the number of redirects is unlimited.
|
|
|
>
|
|
|
> #sieve_max_redirects = 4
|
|
|
>
|
|
|
> }
|
|
|
>
|
|
|
>
|
|
|
> service quota-warning {
|
|
|
>
|
|
|
> executable = script /usr/local/bin/dovecot-quota-warning.sh
|
|
|
>
|
|
|
> unix_listener quota-warning {
|
|
|
>
|
|
|
> user = vmail
|
|
|
>
|
|
|
> group = vmail
|
|
|
>
|
|
|
> mode = 0660
|
|
|
>
|
|
|
> }
|
|
|
>
|
|
|
> }
|
|
|
>
|
|
|
>
|
|
|
> service dict {
|
|
|
>
|
|
|
> unix_listener dict {
|
|
|
>
|
|
|
> mode = 0660
|
|
|
>
|
|
|
> user = vmail
|
|
|
>
|
|
|
> group = vmail
|
|
|
>
|
|
|
> }
|
|
|
>
|
|
|
> }
|
|
|
>
|
|
|
>
|
|
|
> dict {
|
|
|
>
|
|
|
> #expire = db:/var/lib/dovecot/expire/expire.db
|
|
|
>
|
|
|
> quotadict = mysql:/etc/dovecot/dovecot-used-quota.conf
|
|
|
>
|
|
|
> acl = mysql:/etc/dovecot/dovecot-share-folder.conf
|
|
|
>
|
|
|
> }
|
|
|
>
|
|
|
>
|
|
|
> }
|
|
|
>
|
|
|
>
|
|
|
> protocol lda {
|
|
|
>
|
|
|
> # Reference: <a href="http://wiki2.dovecot.org/LDA">http://wiki2.dovecot.org/LDA</a>
|
|
|
>
|
|
|
> mail_plugins = $mail_plugins sieve autocreate
|
|
|
>
|
|
|
> auth_socket_path = /var/run/dovecot/auth-master
|
|
|
>
|
|
|
> log_path = /var/log/dovecot-sieve.log
|
|
|
>
|
|
|
> lda_mailbox_autocreate = yes
|
|
|
>
|
|
|
> lda_mailbox_autosubscribe = yes
|
|
|
>
|
|
|
> postmaster_address = root
|
|
|
>
|
|
|
> }
|
|
|
>
|
|
|
>
|
|
|
> protocol lmtp {
|
|
|
>
|
|
|
> # Log file
|
|
|
>
|
|
|
> info_log_path = /var/log/dovecot-lmtp.log
|
|
|
>
|
|
|
>
|
|
|
> # Plugins
|
|
|
>
|
|
|
> mail_plugins = quota sieve
|
|
|
>
|
|
|
> postmaster_address = postmaster
|
|
|
>
|
|
|
>
|
|
|
> lmtp_save_to_detail_mailbox = yes
|
|
|
>
|
|
|
> recipient_delimiter = +
|
|
|
>
|
|
|
> }
|
|
|
>
|
|
|
>
|
|
|
> protocol imap {
|
|
|
>
|
|
|
> mail_plugins = $mail_plugins imap_quota autocreate imap_acl
|
|
|
>
|
|
|
> imap_client_workarounds = tb-extra-mailbox-sep
|
|
|
>
|
|
|
>
|
|
|
> # Maximum number of IMAP connections allowed for a user from each IP address.
|
|
|
>
|
|
|
> # NOTE: The username is compared case-sensitively.
|
|
|
>
|
|
|
> # Default is 10.
|
|
|
>
|
|
|
> # Increase it to avoid issue like below:
|
|
|
>
|
|
|
> # “Maximum number of concurrent IMAP connections exceeded”
|
|
|
>
|
|
|
> mail_max_userip_connections = 30
|
|
|
>
|
|
|
> }
|
|
|
>
|
|
|
>
|
|
|
> protocol pop3 {
|
|
|
>
|
|
|
> mail_plugins = $mail_plugins
|
|
|
>
|
|
|
> pop3_client_workarounds = outlook-no-nuls oe-ns-eoh
|
|
|
>
|
|
|
> pop3_uidl_format = %08Xu%08Xv
|
|
|
>
|
|
|
>
|
|
|
> # Maximum number of IMAP connections allowed for a user from each IP address.
|
|
|
>
|
|
|
> # NOTE: The username is compared case-sensitively.
|
|
|
>
|
|
|
> # Default is 10.
|
|
|
>
|
|
|
> mail_max_userip_connections = 30
|
|
|
>
|
|
|
> }
|
|
|
>
|
|
|
>
|
|
|
> # Login processes. Refer to Dovecot wiki for more details:
|
|
|
>
|
|
|
> # <a href="http://wiki2.dovecot.org/LoginProcess">http://wiki2.dovecot.org/LoginProcess</a>
|
|
|
>
|
|
|
> service imap-login {
|
|
|
>
|
|
|
> #inet_listener imap {
|
|
|
>
|
|
|
> # port = 143
|
|
|
>
|
|
|
> # }
|
|
|
>
|
|
|
> #inet_listener imaps {
|
|
|
>
|
|
|
> # port = 993
|
|
|
>
|
|
|
> # ssl = yes
|
|
|
>
|
|
|
> # }
|
|
|
>
|
|
|
>
|
|
|
> service_count = 1
|
|
|
>
|
|
|
>
|
|
|
> # To avoid startup latency for new client connections, set process_min_avail
|
|
|
>
|
|
|
> # to higher than zero. That many idling processes are always kept around
|
|
|
>
|
|
|
> # waiting for new connections.
|
|
|
>
|
|
|
> #process_min_avail = 0
|
|
|
>
|
|
|
>
|
|
|
> # number of simultaneous IMAP connections
|
|
|
>
|
|
|
> process_limit = 500
|
|
|
>
|
|
|
>
|
|
|
> # vsz_limit should be fine at its default 64MB value
|
|
|
>
|
|
|
>
|
|
|
>
|
|
|
>
|
|
|
>
|
|
|
> }
|
|
|
>
|
|
|
>
|
|
|
> service pop3-login {
|
|
|
>
|
|
|
> #inet_listener pop3 {
|
|
|
>
|
|
|
> # port = 110
|
|
|
>
|
|
|
> # }
|
|
|
>
|
|
|
> #inet_listener pop3s {
|
|
|
>
|
|
|
> # port = 995
|
|
|
>
|
|
|
> # ssl = yes
|
|
|
>
|
|
|
> # }
|
|
|
>
|
|
|
>
|
|
|
> service_count = 1
|
|
|
>
|
|
|
>
|
|
|
> # number of simultaneous POP3 connections
|
|
|
>
|
|
|
> #process_limit = 500
|
|
|
>
|
|
|
> }
|
|
|
>
|
|
|
>
|
|
|
> service managesieve-login {
|
|
|
>
|
|
|
> inet_listener sieve {
|
|
|
>
|
|
|
> # Listen on localhost (ipv4)
|
|
|
>
|
|
|
> address = 127.0.0.1
|
|
|
>
|
|
|
> port = 4190
|
|
|
>
|
|
|
> }
|
|
|
>
|
|
|
> }
|
|
|
>
|
|
|
>
|
|
|
> namespace {
|
|
|
>
|
|
|
> type = private
|
|
|
>
|
|
|
> separator = /
|
|
|
>
|
|
|
> prefix =
|
|
|
>
|
|
|
> #location defaults to mail_location.
|
|
|
>
|
|
|
> inbox = yes
|
|
|
>
|
|
|
> }
|
|
|
>
|
|
|
> namespace {
|
|
|
>
|
|
|
> type = shared
|
|
|
>
|
|
|
> separator = /
|
|
|
>
|
|
|
> prefix = Shared/%%u/
|
|
|
>
|
|
|
> location = maildir:%%Lh/Maildir/:INDEX=%%Lh/Maildir/Shared/%%u
|
|
|
>
|
|
|
> # this namespace should handle its own subscriptions or not.
|
|
|
>
|
|
|
> subscriptions = yes
|
|
|
>
|
|
|
> list = children
|
|
|
>
|
|
|
> }
|
|
|
>
|
|
|
>
|
|
|
> # Public mailboxes.
|
|
|
>
|
|
|
> # Refer to Dovecot wiki page for more details:
|
|
|
>
|
|
|
> # <a href="http://wiki2.dovecot.org/SharedMailboxes/Public">http://wiki2.dovecot.org/SharedMailboxes/Public</a>
|
|
|
>
|
|
|
> #namespace {
|
|
|
>
|
|
|
> # type = public
|
|
|
>
|
|
|
> # separator = /
|
|
|
>
|
|
|
> # prefix = Public/
|
|
|
>
|
|
|
> #
|
|
|
>
|
|
|
> # # CONTROL=: Mark this public folder as read-only mailbox
|
|
|
>
|
|
|
> # # INDEX=: Per-user \Seen flag
|
|
|
>
|
|
|
> # location = maildir:/var/vmail/public/:CONTROL=~/Maildir/public:INDEX=~/Maildir/public
|
|
|
>
|
|
|
> #
|
|
|
>
|
|
|
> # # Allow users to subscribe to the public folders.
|
|
|
>
|
|
|
> # subscriptions = yes
|
|
|
</p>
|
|
|
|
|
|
<p>/etc/dovecot/dovecot-mysql.conf</p>
|
|
|
|
|
|
<p>有 # 的是iredmail 自動做好的設定</p>
|
|
|
|
|
|
<p>註解掉之後新增最後面的幾行，改成自己的DB、帳號、密碼、確認一下uid 跟 postfix的main.cf 一樣
|
|
|
> #driver = mysql
|
|
|
>
|
|
|
> #default_pass_scheme = CRYPT
|
|
|
>
|
|
|
> #connect = host=127.0.0.1 dbname=vmail user=vmail password=NP5eaW3VSRogGT5bx0qaHMm7CKemRY
|
|
|
>
|
|
|
> # Required by ‘doveadm mailbox …’.
|
|
|
>
|
|
|
> #iterate_query = SELECT username AS user FROM mailbox
|
|
|
>
|
|
|
> #password_query = SELECT password, allow_nets FROM mailbox WHERE username=‘%u’ AND enable%Ls%Lc=1 AND active=1
|
|
|
>
|
|
|
> #user_query = SELECT <br />
|
|
|
>
|
|
|
> # ‘%u’ AS master_user, <br />
|
|
|
>
|
|
|
> # CONCAT(mailbox.storagebasedirectory, ‘/’, mailbox.storagenode, ‘/’, mailbox.maildir) AS home, <br />
|
|
|
>
|
|
|
> # CONCAT(’*:bytes=‘, mailbox.quota*1048576) AS quota_rule <br />
|
|
|
>
|
|
|
> #FROM mailbox,domain <br />
|
|
|
>
|
|
|
> #WHERE mailbox.username=‘%u’ <br />
|
|
|
>
|
|
|
> # AND mailbox.domain=‘%d’ <br />
|
|
|
>
|
|
|
> # AND mailbox.<code>enable%Ls%Lc</code>=1 <br />
|
|
|
>
|
|
|
> # AND mailbox.domain=domain.domain <br />
|
|
|
>
|
|
|
> # AND domain.backupmx=0 <br />
|
|
|
>
|
|
|
> # AND domain.active=1 <br />
|
|
|
>
|
|
|
> # AND mailbox.active=1
|
|
|
>
|
|
|
>
|
|
|
> driver = mysql
|
|
|
>
|
|
|
> connect = host=127.0.0.1 dbname=postfix user=postfix password=postfixadmin
|
|
|
>
|
|
|
> default_pass_scheme = MD5-CRYPT
|
|
|
>
|
|
|
> user_query = SELECT ‘/var/vmail/%d/%n’ as home, 2000 AS uid, 2000 AS gid FROM mailbox WHERE username = ‘%u’
|
|
|
>
|
|
|
> password_query = SELECT password FROM mailbox WHERE username = ‘%u’
|
|
|
</p>
|
|
|
|
|
|
<p> </p>
|
|
|
|
|
|
<p>postfix main.cf</p>
|
|
|
|
|
|
<p>重點 uid 設定要一樣 都是 2000</p>
|
|
|
|
|
|
<p>原則上就是在原本的 proxy:mysql 這些設定後面，加入 postfixadmin 的設定</p>
|
|
|
|
|
|
<p>然後有一些只有 iredmail 有， postfix admin 沒有的，都先註解掉</p>
|
|
|
|
|
|
<p>像是底下這部分
|
|
|
> #
|
|
|
>
|
|
|
> # Lookup virtual mail accounts
|
|
|
>
|
|
|
> #
|
|
|
>
|
|
|
> #transport_maps =
|
|
|
>
|
|
|
> # proxy:mysql:/etc/postfix/mysql/transport_maps_user.cf
|
|
|
>
|
|
|
> # proxy:mysql:/etc/postfix/mysql/transport_maps_domain.cf
|
|
|
>
|
|
|
>
|
|
|
> #sender_dependent_relayhost_maps =
|
|
|
>
|
|
|
> # proxy:mysql:/etc/postfix/mysql/sender_dependent_relayhost_maps.cf
|
|
|
>
|
|
|
>
|
|
|
> # Lookup table with the SASL login names that own the sender (MAIL FROM) addresses.
|
|
|
>
|
|
|
> #smtpd_sender_login_maps =
|
|
|
>
|
|
|
> # proxy:mysql:/etc/postfix/mysql/sender_login_maps.cf
|
|
|
</p>
|
|
|
|
|
|
<p>其他的設定如下</p>
|
|
|
|
|
|
<p>
|
|
|
> alias_database = hash:/etc/postfix/aliases
|
|
|
>
|
|
|
> alias_maps = hash:/etc/postfix/aliases
|
|
|
>
|
|
|
> allow_min_user = no
|
|
|
>
|
|
|
> allow_percent_hack = no
|
|
|
>
|
|
|
> biff = no
|
|
|
>
|
|
|
> body_checks = pcre:/etc/postfix/body_checks.pcre
|
|
|
>
|
|
|
> command_directory = /usr/sbin
|
|
|
>
|
|
|
> config_directory = /etc/postfix
|
|
|
>
|
|
|
> daemon_directory = /usr/libexec/postfix
|
|
|
>
|
|
|
> data_directory = /var/lib/postfix
|
|
|
>
|
|
|
> debug_peer_level = 2
|
|
|
>
|
|
|
> disable_vrfy_command = yes
|
|
|
>
|
|
|
> enable_original_recipient = no
|
|
|
>
|
|
|
> header_checks = pcre:/etc/postfix/header_checks
|
|
|
>
|
|
|
> home_mailbox = Maildir/
|
|
|
>
|
|
|
> inet_interfaces = all
|
|
|
>
|
|
|
> inet_protocols = ipv4
|
|
|
>
|
|
|
> lmtp_tls_mandatory_protocols = !SSLv2 !SSLv3
|
|
|
>
|
|
|
> lmtp_tls_protocols = !SSLv2 !SSLv3
|
|
|
>
|
|
|
> mail_owner = postfix
|
|
|
>
|
|
|
> mailbox_command = /usr/libexec/dovecot/deliver
|
|
|
>
|
|
|
> mailq_path = /usr/bin/mailq.postfix
|
|
|
>
|
|
|
> message_size_limit = 15728640
|
|
|
>
|
|
|
> mydestination = $myhostname, localhost, localhost.localdomain
|
|
|
>
|
|
|
> mydomain = iredmail.cowbay.org
|
|
|
>
|
|
|
> myhostname = iredmail.cowbay.org
|
|
|
>
|
|
|
> mynetworks = 127.0.0.1
|
|
|
>
|
|
|
> myorigin = iredmail.cowbay.org
|
|
|
>
|
|
|
> newaliases_path = /usr/bin/newaliases.postfix
|
|
|
>
|
|
|
> proxy_read_maps = $canonical_maps $lmtp_generic_maps $local_recipient_maps $mydestination $mynetworks $recipient_bcc_maps $recipient_canonical_maps $relay_domains $rela
|
|
|
>
|
|
|
> y_recipient_maps $relocated_maps $sender_bcc_maps $sender_canonical_maps $smtp_generic_maps $smtpd_sender_login_maps $transport_maps $virtual_alias_domains $virtual_ali
|
|
|
>
|
|
|
> as_maps $virtual_mailbox_domains $virtual_mailbox_maps $smtpd_sender_restrictions $sender_dependent_relayhost_maps
|
|
|
>
|
|
|
> queue_directory = /var/spool/postfix
|
|
|
>
|
|
|
> recipient_bcc_maps = proxy:mysql:/etc/postfix/mysql/recipient_bcc_maps_user.cf proxy:mysql:/etc/postfix/mysql/recipient_bcc_maps_domain.cf
|
|
|
>
|
|
|
> recipient_delimiter = +
|
|
|
>
|
|
|
> relay_domains = $mydestination proxy:mysql:/etc/postfix/mysql/relay_domains.cfsender_bcc_maps = proxy:mysql:/etc/postfix/mysql/sender_bcc_maps_user.cf proxy:mysql:/etc/postfix/mysql/sender_bcc_maps_domain.cf
|
|
|
>
|
|
|
> sendmail_path = /usr/sbin/sendmail.postfix
|
|
|
>
|
|
|
> setgid_group = postdrop
|
|
|
>
|
|
|
> smtp_tls_CAfile = $smtpd_tls_CAfile
|
|
|
>
|
|
|
> smtp_tls_loglevel = 1
|
|
|
>
|
|
|
> smtp_tls_mandatory_protocols = !SSLv2 !SSLv3
|
|
|
>
|
|
|
> smtp_tls_note_starttls_offer = yes
|
|
|
>
|
|
|
> smtp_tls_protocols = !SSLv2 !SSLv3
|
|
|
>
|
|
|
> smtp_tls_security_level = may
|
|
|
>
|
|
|
> smtpd_data_restrictions = reject_unauth_pipelining
|
|
|
>
|
|
|
> smtpd_end_of_data_restrictions = check_policy_service inet:127.0.0.1:7777
|
|
|
>
|
|
|
> smtpd_helo_required = yes
|
|
|
>
|
|
|
> smtpd_helo_restrictions = permit_mynetworks permit_sasl_authenticated reject_non_fqdn_helo_hostname reject_invalid_helo_hostname check_helo_access pcre:/etc
|
|
|
>
|
|
|
> /postfix/helo_access.pcre
|
|
|
>
|
|
|
> smtpd_recipient_restrictions = reject_unknown_recipient_domain reject_non_fqdn_recipient reject_unlisted_recipient check_policy_service inet:127.0.0.1:7777
|
|
|
>
|
|
|
> permit_mynetworks permit_sasl_authenticated reject_unauth_destination
|
|
|
>
|
|
|
> smtpd_reject_unlisted_recipient = yes
|
|
|
>
|
|
|
> smtpd_reject_unlisted_sender = yes
|
|
|
>
|
|
|
> smtpd_sasl_path = private/dovecot-auth
|
|
|
>
|
|
|
> smtpd_sasl_type = dovecot
|
|
|
>
|
|
|
> smtpd_sender_restrictions = reject_unknown_sender_domain reject_non_fqdn_sender reject_unlisted_sender permit_mynetworks permit_sasl<em>authenticated check</em>
|
|
|
>
|
|
|
> sender_access pcre:/etc/postfix/sender_access.pcre
|
|
|
>
|
|
|
> smtpd_tls_CAfile = /etc/pki/tls/certs/iRedMail.crt
|
|
|
>
|
|
|
> smtpd_tls_cert_file = /etc/pki/tls/certs/iRedMail.crt
|
|
|
>
|
|
|
> smtpd_tls_dh1024_param_file = /etc/pki/tls/dh2048_param.pem
|
|
|
>
|
|
|
> smtpd_tls_dh512_param_file = /etc/pki/tls/dh512_param.pem
|
|
|
>
|
|
|
> smtpd_tls_exclude_ciphers = aNULL, eNULL, EXPORT, DES, RC4, MD5, PSK, aECDH, EDH-DSS-DES-CBC3-SHA, EDH-RSA-DES-CDC3-SHA, KRB5-DE5, CBC3-SHA
|
|
|
>
|
|
|
> smtpd_tls_key_file = /etc/pki/tls/private/iRedMail.key
|
|
|
>
|
|
|
> smtpd_tls_loglevel = 1
|
|
|
>
|
|
|
> smtpd_tls_mandatory_protocols = !SSLv2 !SSLv3
|
|
|
>
|
|
|
> smtpd_tls_protocols = !SSLv2 !SSLv3
|
|
|
>
|
|
|
> swap_bangpath = no
|
|
|
>
|
|
|
> tls_random_source = dev:/dev/urandom
|
|
|
>
|
|
|
> unknown_local_recipient_reject_code = 550
|
|
|
>
|
|
|
> virtual_alias_domains =
|
|
|
>
|
|
|
> virtual_alias_maps = proxy:mysql:/etc/postfix/mysql/virtual_alias_maps.cf proxy:mysql:/etc/postfix/mysql/domain_alias_maps.cf proxy:mysql:/etc/postfix/mysql/catchall_maps.cf proxy:mysql:/etc/postfix/mysql/domain_alias_catchall_maps.cf proxy:mysql:/etc/postfix/sql/mysql_virtual_alias_maps.cf proxy:mysql:/etc/postfix
|
|
|
>
|
|
|
> /sql/mysql_virtual_alias_domain_maps.cf proxy:mysql:/etc/postfix/sql/mysql_virtual_alias_domain_catchall_maps.cf
|
|
|
>
|
|
|
> virtual_gid_maps = static:2000
|
|
|
>
|
|
|
> virtual_mailbox_base = /var/vmail
|
|
|
>
|
|
|
> virtual_mailbox_domains = proxy:mysql:/etc/postfix/mysql/virtual_mailbox_domains.cf proxy:mysql:/etc/postfix/sql/mysql_virtual_domains_maps.cf
|
|
|
>
|
|
|
> virtual_mailbox_maps = proxy:mysql:/etc/postfix/mysql/virtual_mailbox_maps.cf proxy:mysql:/etc/postfix/sql/mysql_virtual_mailbox_maps.cf proxy:mysql:/etc/postfix/sql/mysql_virtual_alias_domain_mailbox_maps.cf
|
|
|
>
|
|
|
> virtual_minimum_uid = 2000
|
|
|
>
|
|
|
> virtual_transport = virtual
|
|
|
>
|
|
|
> virtual_uid_maps = static:2000
|
|
|
</p>
|
|
|
|
|
|
<p> </p>
|
|
|
|
|
|
|
|
|
</div>
|
|
|
|
|
|
|
|
|
<div class="footer no-tags">
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
</div>
|
|
|
|
|
|
</article>
|
|
|
|
|
|
|
|
|
</div>
|
|
|
|
|
|
|
|
|
<div id="disqus_thread"></div>
|
|
|
<script type="application/javascript">
|
|
|
var disqus_config = function () {
|
|
|
|
|
|
|
|
|
|
|
|
};
|
|
|
(function() {
|
|
|
if (["localhost", "127.0.0.1"].indexOf(window.location.hostname) != -1) {
|
|
|
document.getElementById('disqus_thread').innerHTML = 'Disqus comments not available by default when the website is previewed locally.';
|
|
|
return;
|
|
|
}
|
|
|
var d = document, s = d.createElement('script'); s.async = true;
|
|
|
s.src = '//' + "bilberry-hugo-theme" + '.disqus.com/embed.js';
|
|
|
s.setAttribute('data-timestamp', +new Date());
|
|
|
(d.head || d.body).appendChild(s);
|
|
|
})();
|
|
|
</script>
|
|
|
<noscript>Please enable JavaScript to view the <a href="https://disqus.com/?ref_noscript">comments powered by Disqus.</a></noscript>
|
|
|
<a href="https://disqus.com" class="dsq-brlink">comments powered by <span class="logo-disqus">Disqus</span></a>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
</div>
|
|
|
|
|
|
|
|
|
<footer>
|
|
|
<div class="container">
|
|
|
|
|
|
|
|
|
<div class="recent-posts">
|
|
|
<strong>Latest posts</strong>
|
|
|
<ul>
|
|
|
|
|
|
<li>
|
|
|
<a href="/article/google-550-5-7-1-sloution/">寄信給google被退信 錯誤 550-5.7.1的解法</a>
|
|
|
</li>
|
|
|
|
|
|
<li>
|
|
|
<a href="/article/netdata-linux-system-performance-monitor-dashboard/">Netdata Linux System Performance Monitor Dashboard</a>
|
|
|
</li>
|
|
|
|
|
|
<li>
|
|
|
<a href="/article/linux-performance-monitor-dashboard-netdata-md/">Linux 底下極其詳細的System performace Monitor Dashboard - Netdata</a>
|
|
|
</li>
|
|
|
|
|
|
<li>
|
|
|
<a href="/article/syntax-test/">Syntax Test</a>
|
|
|
</li>
|
|
|
|
|
|
<li>
|
|
|
<a href="/article/psql-create-role-and-assign-priviledges/">psql create role and assign priviledges</a>
|
|
|
</li>
|
|
|
|
|
|
<li>
|
|
|
<a href="/article/study-url/">Study URL</a>
|
|
|
</li>
|
|
|
|
|
|
<li>
|
|
|
<a href="/article/rsync-time-backup/">[筆記] Linux 底下好用的備份工具 rsync-time-backup</a>
|
|
|
</li>
|
|
|
|
|
|
</ul>
|
|
|
</div>
|
|
|
|
|
|
|
|
|
|
|
|
<div class="categories">
|
|
|
<a href="/categories/"><strong>Categories</strong></a>
|
|
|
<ul>
|
|
|
|
|
|
<li>
|
|
|
<a href="/categories/%E6%9C%AA%E5%88%86%E9%A1%9E">未分類 (86)</a>
|
|
|
</li>
|
|
|
|
|
|
<li>
|
|
|
<a href="/categories/%E5%B7%A5%E4%BD%9C%E7%AD%86%E8%A8%98">工作筆記 (68)</a>
|
|
|
</li>
|
|
|
|
|
|
<li>
|
|
|
<a href="/categories/%E5%85%B6%E4%BB%96">其他 (46)</a>
|
|
|
</li>
|
|
|
|
|
|
<li>
|
|
|
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (30)</a>
|
|
|
</li>
|
|
|
|
|
|
<li>
|
|
|
<a href="/categories/%E5%89%AA%E5%A0%B1">剪報 (18)</a>
|
|
|
</li>
|
|
|
|
|
|
<li>
|
|
|
<a href="/categories/starting">Starting (5)</a>
|
|
|
</li>
|
|
|
|
|
|
<li>
|
|
|
<a href="/categories/blog">Blog (4)</a>
|
|
|
</li>
|
|
|
|
|
|
</ul>
|
|
|
</div>
|
|
|
|
|
|
|
|
|
<div class="right">
|
|
|
|
|
|
<div class="external-profiles">
|
|
|
<strong>Social media</strong>
|
|
|
|
|
|
|
|
|
|
|
|
<a href="https://twitter.com/TheRealLednerb" target="_blank"><i class="fa fa-twitter-adblock-proof"></i></a>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
<a href="https://github.com/Lednerb" target="_blank"><i class="fa fa-github"></i></a>
|
|
|
|
|
|
|
|
|
</div>
|
|
|
|
|
|
|
|
|
<div class="languages">
|
|
|
<strong>Other languages</strong>
|
|
|
|
|
|
|
|
|
<a href="/en" class="active">en</a>
|
|
|
|
|
|
|
|
|
|
|
|
<a href="/de">de</a>
|
|
|
|
|
|
|
|
|
</div>
|
|
|
|
|
|
</div>
|
|
|
</div>
|
|
|
</footer>
|
|
|
|
|
|
|
|
|
<div class="credits">
|
|
|
<div class="container">
|
|
|
<div class="copyright">
|
|
|
<a href="https://github.com/Lednerb" target="_blank">
|
|
|
©
|
|
|
|
|
|
2017
|
|
|
|
|
|
by Lednerb
|
|
|
</a>
|
|
|
|
|
|
</div>
|
|
|
<div class="author">
|
|
|
<a href="https://github.com/Lednerb/bilberry-hugo-theme" target="_blank">Bilberry Hugo Theme</a>
|
|
|
</div>
|
|
|
</div>
|
|
|
</div>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
<script type="text/javascript" src="https://h.cowbay.org/js/externalDependencies.39c47e10e241eae2947b3fe21809c572.js" integrity="md5-OcR+EOJB6uKUez/iGAnFcg=="></script>
|
|
|
|
|
|
|
|
|
|
|
|
<script type="text/javascript" src="https://h.cowbay.org/js/theme.ff50ae6dc1bfc220b23bf69dbb41b54e.js" integrity="md5-/1CubcG/wiCyO/adu0G1Tg=="></script>
|
|
|
|
|
|
<script>
|
|
|
$(".moment").each(function() {
|
|
|
$(this).text(
|
|
|
moment( $(this).text() )
|
|
|
.locale( "en" )
|
|
|
.format('LL')
|
|
|
);
|
|
|
});
|
|
|
|
|
|
$(".footnote-return sup").html("");
|
|
|
</script>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
<script>
|
|
|
var client = algoliasearch("Y2C4RWMPXW", "50ea7f8c41c0ad233926e0be2b769ed1");
|
|
|
var index = client.initIndex("default-content");
|
|
|
|
|
|
$('#search').autocomplete({ hint: false, autoselect: true, debug: false },
|
|
|
[
|
|
|
{
|
|
|
|
|
|
source: $.fn.autocomplete.sources.hits(index, { hitsPerPage: 5, filters: 'language: en' }),
|
|
|
|
|
|
displayKey: function(suggestion) {
|
|
|
return suggestion.title || suggestion.author
|
|
|
},
|
|
|
templates: {
|
|
|
suggestion: function(suggestion) {
|
|
|
return "<span class='entry " + suggestion.type + "'>"
|
|
|
+ "<span class='title'>" + suggestion.title + "</span>"
|
|
|
+ "<span class='fa fa-fw " + suggestion.iconClass + "'></span>"
|
|
|
+ "</span>"
|
|
|
;
|
|
|
},
|
|
|
empty: function() {
|
|
|
return "<span class='empty'>Nothing found.</span>"
|
|
|
},
|
|
|
footer: function() {
|
|
|
return '<div class="branding">Powered by <img src="https:\/\/h.cowbay.org\/dist\/algolia-logo-light.svg" /></div>'
|
|
|
}
|
|
|
|
|
|
},
|
|
|
}
|
|
|
])
|
|
|
.on('autocomplete:selected', function(event, suggestion, dataset) {
|
|
|
window.location = (suggestion.url);
|
|
|
})
|
|
|
.keypress(function (event, suggestion) {
|
|
|
if (event.which == 13) {
|
|
|
window.location = (suggestion.url);
|
|
|
}
|
|
|
});
|
|
|
</script>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
</body>
|
|
|
</html>
|
