postfix 完整搭建

搭建Postfix邮件服务器 1 将sendmail服务停止 [root@mail ~]# service sendmail stop //停止sendmail服务 Shutting down sm-client: [ OK ] Shutting down sendmail: [ OK ]

2 设置主机名为mail.cyq.com

[root@localhost Server]#vim /etc/sysconfig/network HOSTNAME=mail.cyq.com//主机名 [root@localhost Server]#reboot //重启系统使修改生效

3 安装postfix和bind ，配置dns

[root@localhost Server]# rpm -ivh postfix-2.3.3-2.1.el5_2.i386.rpm [root@mail Server]# rpm -ivh postfix-2.3.3-2.1.el5_2.i386.rpm [root@mail Server]# rpm -ivh bind-9.3.6-4.P1.el5_4.2.i386.rpm Warning: bind-9.3.6-4.P1.el5_4.2.i386.rpm: Header V3 DSA signature: NOKEY, keyD 37017186 Preparing... ########################################### [100%] 1:bind ########################################### [100%] [root@mail Server]# rpm -ivh bind-chroot-9.3.6-4.P1.el5_4.2.i386.rpm warning: bind-chroot-9.3.6-4.P1.el5_4.2.i386.rpm: Header V3 DSA signature: NOK, key ID 37017186 Preparing... ########################################### [100%] 1:bind-chroot ########################################### [100%] [root@mail ~]# cp /usr/share/doc/bind-9.3.6/sample/etc/named.conf /var/named/chroot/etc/ [root@mail ~]# vim /var/named/chroot/etc/named.conf options { directory "/var/named"; }; zone "cyq.com"{ type master; file "cyq.com.zone"; };

[root@mail~]#cp/usr/share/doc/bind-9.3.6/sample/var/named/localhost.zone /var/named/chroot/var/named/cyq.com.zone [root@mail ~]# vim /var/named/chroot/var/named/cyq.com.zone //设置dns @ IN NS linux.cyq.com. linux IN A 192.168.1.104 cyq.com.IN MX 10 mail.cyq.com. mail IN CNAME linux.cyq.com. [root@mail ~]# service named start Starting named: [ OK ] [root@mail ~]# chkconfig named on [root@mail ~]# host mail.cyq.com //尝试dns解析 mail.cyq.com is an alias for linux.cyq.com. linux.cyq.com has address 192.168.1.103 [root@mail ~]# nslookup > mail.cyq.com Server: 127.0.0.1 Address: 127.0.0.1#53

mail.cyq.com canonical name = linux.cyq.com. Name: linux.cyq.com Address: 192.168.1.103

4 配置postfix [root@mail ~]# vim /etc/postfix/main.cf myhostname = mail.cyq.com mydomain = cyq.com myorigin = $mydomain inet_interfaces = all mydestination = $myhostname, $mydomain mynetworks = 192.168.1.0, 127.0.0.0/8 relay_domains = cyq.com wq—退出

5 在postfix配置虚拟别名

#virtual virtual_alias_domains = sina.com virtual_alias_maps = hash:/etc/postfix/virtual //在main.cf文件中写入这两天 [root@mail ~]# vim /etc/postfix/virtual //配置virtual

[root@mail ~]# postfix reload postfix/postfix-script: refreshing the Postfix mail system [root@mail ~]# vim /etc/postfix/main.cf alias_maps = hash:/etc/aliases alias_database = hash:/etc/aliases//检查postfix配置文件中有这两条

[root@mail ~]# vim /etc/aliases//配置用户别名 mail: mail,mail1,mail2,mail3 [root@mail ~]# postalias /etc/aliases [root@mail ~]# postfix reload postfix/postfix-script: refreshing the Postfix mail system

6 配置smtp

[root@mail ~]# rpm -qa | grepsasl cyrus-sasl-plain-2.1.22-5.el5_4.3 cyrus-sasl-lib-2.1.22-5.el5_4.3 cyrus-sasl-2.1.22-5.el5_4.3 [root@mail ~]# saslauthd -v saslauthd 2.1.22 authentication mechanisms: getpwent kerberos5 pam rimap shadow ldap [root@mail ~]# vim /etc/sysconfig/saslauthd MECH=shadow //将认证方式改为shadow [root@mail ~]# /etc/init.d/saslauthd start Starting saslauthd: [ OK ] [root@mail ~]# chkconfig --level 35 saslauthd on [root@mail ~]# useradd mail1 //创建一个mail1用户，用来测试 [root@mail ~]# passwd mail1 Changing password for user mail1. New UNIX password: BAD PASSWORD: it is too simplistic/systematic Retype new UNIX password: passwd: all authentication tokens updated successfully. [root@mail ~]# testsaslauthd -u mail1 -p '123456' 0: OK "Success." //验证成功 在main.cf 中加入如下配置。 smtpd_sasl_auth_enable = yes smtpd_sasl_local_domain = '' smtpd_recipient_restrictions = permit_mynetworks,permit_sasl_authenticated, reject_unauth_destination broken_sasl_auth_clients = yes smtpd_client_restrictions = permit_sasl_authenticated smtpd_sasl_security_options = noanonymous [root@mail ~]# postfix reload //重新加载postfix [root@mail ~]# telnet mail.cyq.com 25 //测试 Trying 192.168.1.104... Connected to mail.cyq.com (192.168.1.104). Escape character is '^]'. 220 mail.cyq.com ESMTP Postfix ehlo cyq.com 250-mail.cyq.com 250-PIPELINING 250-SIZE 10240000 250-VRFY 250-ETRN 250-AUTH PLAIN LOGIN 250-AUTH=PLAIN LOGIN 250-ENHANCEDSTATUSCODES 250-8BITMIME