History / Status

  • DONE

Introduction

First things first. If you are a novice at linux I don't think you should be trying to set this up. This is an advanced email server configuration. This configuration will allow you to serve multiple domains on one server. You will get the following features:

  • postfix: the workhorse behind the mail delivery
  • smtp authentication
  • cyrus imap: imap and pop3 mailbox service
  • clamav: antivirus checking for email
  • spamassassin: spam checking
  • mysql: haldle all the virtual domains and users
  • mail quotas
  • postgrey: grey listing support for postfix to reduce spam
  • squirrelmail: web mail access
  • mailman: mailing lists

Objectives

This howto will be divided into the following goals. You'll have to do item 1. items 2, 3, and 4 can be mixed and matched.

  1. Get the basic mail server running. This means that you will have a fully functional mail server for virtual hosting. Our big players are postfix, mysql, and cyrus-imap.
  2. Get mailman the mailing list manager installed.
  3. Install and configure spam and virus filtering.
  4. Setup grey listing. Drop the email from spam and virus servers before we waste our time checking a message.

Lets get started

First - Building the Post Office

Installing the easy stuff

  1. Lets start with Cyrus related stuff.
    > yum install cyrus-imapd cyrus-imapd-utils perl-Cyrus
  2. We need to add another repository
    > rpm -ivh http://rpm.livna.org/livna-release4.rpm
  3. Lets install a mysql module for pam
    > yum install pam_mysql
  4. install pam-devel

> yum install pam-devel

  1. Now for the web interface for cyrus imap. Download web-cyradm from http://www.web-cyradm.org
    > wget http://www.web-cyradm.org/web-cyradm-0.5.4-1.tar.gz
    > tar -xzvf web-cyradm-0.5.4-1.tar.gz
    > mv web-cyradm-0.5.4-1 /usr/share/

Installing postfix

Wouldn't you know it. the postfix rpm from fedora core does not include mysql support. So lets install the correct version.
> yum remove postfix
> rpm -ivh http://www.campworld.net/downloads/postfix-2.2.2-2.i386.rpm

Configure web-cyradm

  • We need to create the initial log file.
    > touch /var/log/web-cyradm.log
    > chown apache /var/log/web-cyradm.log
  • We need php5 to play nicely with web-cyradm. Add the following to /etc/php.ini
    Add them just below the [PHP] at the top.
 
; added for web-cyradm
allow_call_time_pass_reference on

  • Copy the default config file so we can customize it.
    > cd /usr/share/web-cyradm-0.5.4-1/config
    > cp conf.php.dist conf.php \\

> nano -w conf.php

  • First configure web-cyradm to access cyrus imap. Look for the following section in the file and enter the appropreate information.
 
# The Cyrus login stuff
$CYRUS = array(
        'HOST'  => 'localhost',
        'PORT'  => 143,
        'ADMIN' => 'cyrus',
        'PASS'  => 'secret'
);

  • We need to set the config file to connect to our database. So find the following in the file and edit it.
 
$DB = array(
        'TYPE'  => 'mysql',
        'USER'  => 'mail',
        'PASS'  => 'secret',
        'PROTO' => 'unix',      // set to "tcp" for TCP/IP
        'HOST'  => 'localhost',
        'NAME'  => 'mail'
);

  • find: $DOMAIN_AS_PREFIX = 0;
    change the 0 to a 1
  • We need a config file for apache
    > nano -w /etc/httpd/conf.d/webcyradm.conf
    past the following and save and exit.
  
alias /webcyradm /usr/share/web-cyradm-0.5.4-1
<Directory /usr/share/web-cyradm-0.5.4-1>
        php_flag allow_call_time_pass_reference on
</Directory> 

Create database and tables

  1. switch to the scripts dir
    > cd /usr/share/web-cyradm-0.5.4-1/scripts/
  2. edit the insertuser_mysql.sql and change the password
    > nano -w insertuser_mysql.sql
  3. edit create_mysql.sql and change the passwords at the bottom
  4. lets create the db and tables
    > mysql -u root -p < /usr/share/web-cyradm-0.5.4-1/scripts/insertuser_mysql.sql
    > mysql mail -u root -p < /usr/share/web-cyradm-0.5.4-1/scripts/create_mysql.sql

Configure PAM - Authentication that binds us all

  • edit /etc/pam.d/imap and replace the Fedora defaults with the following
  
auth       sufficient   pam_mysql.so user=mail passwd=secret host=localhost db=m
ail table=accountuser usercolumn=username passwdcolumn=password crypt=1 logtable
=log logmsgcolumn=msg logusercolumn=user loghostcolumn=host logpidcolumn=pid log
timecolumn=time
account    required     pam_mysql.so user=mail passwd=secret host=localhost db=m
ail table=accountuser usercolumn=username passwdcolumn=password crypt=1 logtable
=log logmsgcolumn=msg logusercolumn=user loghostcolumn=host logpidcolumn=pid log
timecolumn=time 
  • now lets fix up other pam files
    > mv smtp.postfix smtp.postfix.old
    > rm smtp
    > cp imap smtp
    > cp imap smtp.postfix
    > cp imap pop
    > cp imap sieve
    > cat smtp.postfix.old >> smtp.postfis
    > rm smtp.postfix.old

Configure saslauthd

Fedora doesn't start saslauthd with the right flags. Edit /etc/init.d/saslauthd. Look for the line that says 'MECH=shadow'. Change it to say 'MECH=pam'.

Replace /etc/syscnfig/saslauthd with the following.

 
# Directory in which to place saslauthd's listening socket, pid file, and so
# on.  This directory must already exist.
SOCKETDIR=/var/run/saslauthd

# Mechanism to use when checking passwords.  Run "saslauthd -v" to get a list
# of which mechanism your installation was compiled to use.
MECH=pam

# Additional flags to pass to saslauthd on the command line.  See saslauthd(8)
# for the list of accepted flags.
FLAGS=-r

Configure Cyrus IMAP

First we need to set the password for the cyrus user. > passwd cyrus

Below you will see the config files you need to create. Be sure to change things such as the server name.

/etc/imapd.conf

 
postmaster: postmaster
configdirectory: /var/lib/imap
partition-default: /var/spool/imap
admins: cyrus
sievedir: /var/lib/imap/sieve
sieve_maxscriptsize: 320
sieve_maxscripts: 5
unixhierarchysep: yes
altnamespace: yes
sendmail: /usr/sbin/sendmail
hashimapspool: true
sasl_pwcheck_method: saslauthd
sasl_mech_list: PLAIN
tls_cert_file: /etc/pki/cyrus-imapd/cyrus-imapd.pem
tls_key_file: /etc/pki/cyrus-imapd/cyrus-imapd.pem
tls_ca_file: /etc/pki/tls/certs/ca-bundle.crt
allowanonymouslogin: no
allowplaintext: yes
allowplainwithouttls: yes
autocreatequota: 10000
reject8bit: no
quotawarn: 90
timeout: 30
poptimeout: 10
dracinterval: 0
drachost: localhost
servername: host.example.com

/etc/imapd-local.conf

 
postmaster: postmaster
configdirectory: /var/lib/imap
partition-default: /var/spool/imap
admins: cyrus
sievedir: /var/lib/imap/sieve
sieve_maxscriptsize: 32
sieve_maxscripts: 5
unixhierarchysep: yes
sendmail: /usr/sbin/sendmail
hashimapspool: true
sasl_pwcheck_method: saslauthd
sasl_mech_list: PLAIN
tls_cert_file: /etc/pki/cyrus-imapd/cyrus-imapd.pem
tls_key_file: /etc/pki/cyrus-imapd/cyrus-imapd.pem
tls_ca_file: /etc/pki/tls/certs/ca-bundle.crt
allowanonymouslogin: no
allowplaintext: yes
autocreatequota: 10000
reject8bit: no
quotawarn: 90
timeout: 30
poptimeout: 10
dracinterval: 0
drachost: localhost
servername: host.example.com

/etc/cyrus.conf

 
# standard standalone server implementation

START {
  # do not delete this entry!
  recover       cmd="ctl_cyrusdb -r"

  # this is only necessary if using idled for IMAP IDLE
  idled         cmd="idled"
}

# UNIX sockets start with a slash and are put into /var/lib/imap/sockets
SERVICES {
  # add or remove based on preferences
  imap          cmd="imapd" listen="imap" prefork=5
  imaps         cmd="imapd -s" listen="imaps" prefork=1
  pop3          cmd="pop3d" listen="pop3" prefork=3
  pop3s         cmd="pop3d -s" listen="pop3s" prefork=1
  sieve         cmd="timsieved" listen="sieve" prefork=1

  # these are only necessary if receiving/exporting usenet via NNTP
#  nntp         cmd="nntpd" listen="nntp" prefork=3
#  nntps                cmd="nntpd -s" listen="nntps" prefork=1

  # at least one LMTP is required for delivery
#  lmtp         cmd="lmtpd" listen="lmtp" prefork=0
  lmtpunix      cmd="lmtpd" listen="/var/lib/imap/socket/lmtp" prefork=1

  # this is only necessary if using notifications
#  notify       cmd="notifyd" listen="/var/lib/imap/socket/notify" proto="udp" prefork=1
}

EVENTS {
  # this is required
  checkpoint    cmd="ctl_cyrusdb -c" period=30

  # this is only necessary if using duplicate delivery suppression,
  # Sieve or NNTP
  delprune      cmd="cyr_expire -E 3" at=0400

  # this is only necessary if caching TLS sessions
  tlsprune      cmd="tls_prune" at=0400
}

Configure Postfix

Here we go with more config files. You'll have to be sure to change some settings to match your host. The config files will have sections commented out. Don't worry about it. These sections are for spam/virus/sympa configuration. Just copy and past to create the config files. What ever you see here replaces what already exists.

/etc/postfix/main.cf

 
# postfix user/group
#soft_bounce=yes
mail_owner = postfix
setgid_group = postdrop
delay_warning_time = 4

# postfix paths
html_directory = no
command_directory = /usr/sbin
daemon_directory = /usr/libexec/postfix
queue_directory = /var/spool/postfix
sendmail_path = /usr/sbin/sendmail.postfix
newaliases_path = /usr/bin/newaliases.postfix
mailq_path = /usr/bin/mailq.postfix
manpage_directory = /usr/share/man
sample_directory = /usr/share/doc/postfix-2.2.2/samples
readme_directory = /usr/share/doc/postfix-2.2.2/README_FILES

# network settings
inet_interfaces = all
mydomain = yourdomain.com
myhostname = host.yourdomain.com
mynetworks = 192.168.0.0/16,
        127.0.0.0/24,
        69.239.170.72/29
mydestination = $myhostname, 
        localhost.$mydomain, 
        localhost, 
        mysql:/etc/postfix/mysql-mydestination.cf
relay_domains = $mydestination

# mail delivery
local_transport = cyrus
mailbox_transport = cyrus
recipient_delimiter = + 

# mappings
alias_maps = hash:/etc/aliases
alias_database = hash:/etc/aliases
sender_canonical_maps = mysql:/etc/postfix/mysql-canonical.cf
virtual_alias_maps = mysql:/etc/postfix/mysql-virtual.cf,
                regexp:/etc/postfix/virtual_regexp
transport_maps = mysql:/etc/postfix/mysql-transport.cf,
                regexp:/etc/postfix/transport_regexp
#local_recipient_maps = 

# sympa parameters
# sympa_destination_recipient_limit = 1
# sympabounce_destination_recipient_limit = 1

# debugging
debug_peer_level = 2
debugger_command =
         PATH=/bin:/usr/bin:/usr/local/bin:/usr/X11R6/bin
         xxgdb $daemon_directory/$process_name $process_id & sleep 5

# authentication
smtpd_sasl_auth_enable = yes
smtpd_sasl_security_options = noanonymous
smtpd_sasl_local_domain = 
broken_sasl_auth_clients = yes

# rules restrictions 
# smtpd_client_restrictions = reject_rbl_client sb1.spamhaus.org
smtpd_helo_restrictions = permit_sasl_authenticated,
        permit_mynetworks,
        reject_non_fqdn_hostname
smtpd_sender_restrictions = reject_non_fqdn_sender, 
        reject_unknown_sender_domain
smtpd_recipient_restrictions = permit_sasl_authenticated, 
        permit_mynetworks, 
        reject_unauth_destination,
        reject_non_fqdn_recipient, 
        reject_unknown_recipient_domain
smtpd_helo_required = yes
unknown_local_recipient_reject_code = 550
disable_vrfy_command = yes
smtpd_data_restrictions = reject_unauth_pipelining

/etc/postfix/master.cf

 
#
# Postfix master process configuration file.  For details on the format
# of the file, see the Postfix master(5) manual page.
#
# ==========================================================================
# service type  private unpriv  chroot  wakeup  maxproc command + args
#               (yes)   (yes)   (yes)   (never) (100)
# ==========================================================================
smtp      inet  n       -       n       -       -       smtpd
#  -o content_filter=smtp-amavis:127.0.0.1:10024
#  -o receive_override_options=no_address_mappings
#submission inet n      -       n       -       -       smtpd
#       -o smtpd_etrn_restrictions=reject
#       -o smtpd_client_restrictions=permit_sasl_authenticated,reject
#smtps    inet  n       -       n       -       -       smtpd
#  -o smtpd_tls_wrappermode=yes -o smtpd_sasl_auth_enable=yes
#submission   inet    n       -       n       -       -       smtpd
#  -o smtpd_etrn_restrictions=reject
#  -o smtpd_enforce_tls=yes -o smtpd_sasl_auth_enable=yes
#628      inet  n       -       n       -       -       qmqpd
pickup    fifo  n       -       n       60      1       pickup
  -o content_filter= 
  -o receive_override_options=no_header_body_checks
cleanup   unix  n       -       n       -       0       cleanup
qmgr      fifo  n       -       n       300     1       qmgr
#qmgr     fifo  n       -       n       300     1       oqmgr
tlsmgr    unix  -       -       n       1000?   1       tlsmgr
rewrite   unix  -       -       n       -       -       trivial-rewrite
bounce    unix  -       -       n       -       0       bounce
defer     unix  -       -       n       -       0       bounce
trace     unix  -       -       n       -       0       bounce
verify    unix  -       -       n       -       1       verify
flush     unix  n       -       n       1000?   0       flush
proxymap  unix  -       -       n       -       -       proxymap
smtp      unix  -       -       n       -       -       smtp
# When relaying mail as backup MX, disable fallback_relay to avoid MX loops
relay     unix  -       -       n       -       -       smtp
        -o fallback_relay=
#       -o smtp_helo_timeout=5 -o smtp_connect_timeout=5
showq     unix  n       -       n       -       -       showq
error     unix  -       -       n       -       -       error
discard   unix  -       -       n       -       -       discard
local     unix  -       n       n       -       -       local
virtual   unix  -       n       n       -       -       virtual
lmtp      unix  -       -       n       -       -       lmtp
anvil     unix  -       -       n       -       1       anvil
scache    unix  -       -       n       -       1       scache
#
# ====================================================================
# Interfaces to non-Postfix software. Be sure to examine the manual
# pages of the non-Postfix software to find out what options it wants.
#
# Many of the following services use the Postfix pipe(8) delivery
# agent.  See the pipe(8) man page for information about ${recipient}
# and other message envelope options.
# ====================================================================
#
# maildrop. See the Postfix MAILDROP_README file for details.
# Also specify in main.cf: maildrop_destination_recipient_limit=1
#
maildrop  unix  -       n       n       -       -       pipe
  flags=DRhu user=vmail argv=/usr/local/bin/maildrop -d ${recipient}
#
# The Cyrus deliver program has changed incompatibly, multiple times.
#
old-cyrus unix  -       n       n       -       -       pipe
  flags=R user=cyrus argv=/usr/lib/cyrus-imapd/deliver -e -m ${extension} ${user}
# Cyrus 2.1.5 (Amos Gouaux)
# Also specify in main.cf: cyrus_destination_recipient_limit=1
cyrus     unix  -       n       n       -       -       pipe
  user=cyrus argv=/usr/lib/cyrus-imapd/deliver -r ${sender} -m ${extension} ${user}
#
# See the Postfix UUCP_README file for configuration details.
#
uucp      unix  -       n       n       -       -       pipe
  flags=Fqhu user=uucp argv=uux -r -n -z -a$sender - $nexthop!rmail ($recipient)
#
# Other external delivery methods.
#
ifmail    unix  -       n       n       -       -       pipe
  flags=F user=ftn argv=/usr/lib/ifmail/ifmail -r $nexthop ($recipient)
bsmtp     unix  -       n       n       -       -       pipe
  flags=Fq. user=foo argv=/usr/local/sbin/bsmtp -f $sender $nexthop $recipient
#
# spam/virus section
#
#smtp-amavis  unix  -    -       y       -       2       smtp
#  -o smtp_data_done_timeout=1200
#  -o disable_dns_lookups=yes
#  -o smtp_send_xforward_command=yes
#127.0.0.1:10025 inet n  -       y       -       -       smtpd
#  -o content_filter=
#  -o smtpd_helo_restrictions=
#  -o smtpd_sender_restrictions=
#  -o smtpd_recipient_restrictions=permit_mynetworks,reject
#  -o mynetworks=127.0.0.0/8
#  -o smtpd_error_sleep_time=0
#  -o smtpd_soft_error_limit=1001
#  -o smtpd_hard_error_limit=1000
#  -o receive_override_options=no_header_body_checks
#  -o smtpd_bind_address=127.0.0.1
#  -o smtpd_helo_required=no
#  -o smtpd_client_restrictions=
#  -o smtpd_restriction_classes=
#  -o disable_vrfy_command=no
#  -o strict_rfc821_envelopes=yes
#
# transport entry for the mailing lists
#
#sympa        unix  -       n       n       -       -       pipe
#  flags=R user=sympa argv=/home/sympa/bin/queue ${recipient}
#sympabounce  unix  -       n       n       -       -       pipe
#  flags=R user=sympa argv=/home/sympa/bin/bouncequeue ${user}

/usr/lib/sasl2/smtpd.conf

 
pwcheck_method: saslauthd
mech_list: plain login

/etc/postfix/mysql-canonical.cf

 
# mysql config file for canonical lookups on postfix
# comments are ok.
#

# the user name and password to log into the mysql server
hosts = 127.0.0.1
user = mail
password = secret

# the database name on the servers
dbname = mail

# the table name
table = virtual
#
select_field = alias
where_field = username
# Return the first match only
additional_conditions = and status = '1' limit 1

/etc/postfix/mysql-mydestination.cf

 
# mysql config file for local domain (like sendmail's sendmail.cw) lookups on postfix
# comments are ok.
#

# the user name and password to log into the mysql server
hosts = 127.0.0.1
user = mail
password = secret

# the database name on the servers
dbname = mail

# the table name
table = domain
#
select_field = domain_name
where_field = domain_name

/etc/postfix/mysql-relay.cf

 
#
# mysql config file for transport lookups on postfix
# comments are ok.
#

# the user name and password to log into the mysql server
hosts = 127.0.0.1
user = mail
password = secret

# the database name on the servers
dbname = mail

# the table name
table = domain

#
select_field = transport
where_field = domain_name

/etc/postfix/mysql-transport.cf

 
#
# mysql config file for transport lookups on postfix
# comments are ok.
#

# the user name and password to log into the mysql server
hosts = 127.0.0.1
user = mail
password = secret

# the database name on the servers
dbname = mail

# the table name
table = domain

#
select_field = transport
where_field = domain_name

/etc/postfix/mysql-virtual.cf

 
#
# mysql config file for alias lookups on postfix
# comments are ok.
#

# the user name and password to log into the mysql server
hosts = 127.0.0.1
user = mail
password = secret

# the database name on the servers
dbname = mail

# the table name
table = virtual

#
select_field = dest
where_field = alias
additional_conditions = and status = '1'

/etc/postfix/transport_regexp

 
# /^.*+owner\@lists\..*$/ sympabounce:
# /^.*\@lists\..*$/       sympa:

/etc/postfix/virtual_regexp

 
# This will be used to deal with the mailing lists
#/^(.*)-owner\@lists\.(.*)$/    $1+owner@lists.$2

Configuring the Little Things That Drive You MAD

Be sure your /etc/hosts looks similar to the following.

 
# Do not remove the following line, or various programs
# that require network functionality will fail.
127.0.0.1       localhost
192.168.11.21   host.domain.com

Preparing and Testing the Postoffice

First things first. Reboot the system. If everything went well we all should be at the same point. We need to start some services that are not started yet.

> /etc/init.d/cyrus-imap start
> /etc/init.d/saslauthd start

No errors? Lets keep going. Log into webmin or use ntsysv and set saslauthd and cyrus-imap to start on boot.

Setup a test domain and account. Setup your favorit mail client and send some test emails.

Webmail Client

We should next give our users a web interface to their mail. This is an optional install. The program we're going to install is SquirrelMail. So just type:
>yum install squirrelmail

The easy part is over. Now we need to do some configuration. Luckilly squirrelmail has a configuration utility. So type: > /usr/share/squirrelmail/config/conf.pl

Here's the settings to be changed

  • Under server settings change sendmail to SMTP
  • Under update IMAP settings change the software to cyrus and the delimiter to '.'.
  • Other config changes are optional.

You should now be able to login to your mailserver. The usr would be 'host.domain.com/webmail'. Remember your username is in the format: user.domain.com

Virus and Spam checking

This is another optional item. I suggest that you install this as well.

Installing the software

Do the following:
> yum install amavisd-new clamav clamav-update spamassassin

Configuring ClamAV

Type
> nano -w /etc/freshclam.conf
The line that has the word example on it needs to be commented out or deleted. The config file explaines.

Let's bring the virus definiations up to date.
> freshclam

Configuring Razor

You need to register to use Razor. So type the following.
> razor-admin -register -user=some_user -pass=somepass

Configuring Amavisd-new

You need to edit /etc/amavisd/amavisd.conf
Here is a list of items you should change. just scroll through the file to find each item.

  • $mydomain = 'example.com'; # set to your domain name
  • $log_level = 1; # set the log leve to one
  • $sa_tag_level_deflt = -99; # i want to see the headers so change to -99
  • $sa_tag2_level_deflt = 5.0; # start with 5
  • $sa_kill_level_deflt = 9; # change to 9
  • $sa_dsn_cutoff_level = 9; # change to 9
  • $sa_quarantine_cutoff_level = 50; # remove the starting # and change to 50
  • $myhostname = 'lightning.campworld.net'; # remove the starting # and enter your host name
  • $notify_method = 'smtp:[127.0.0.1]:10025'; # uncomment the line
  • $forward_method = 'smtp:[127.0.0.1]:10025'; # uncomment the line
  • $final_banned_destiny = D_DISCARD; # change to D_DISCARD

Here are some settings I added in. Use them if you wish.

 
# added in settings RC
@whitelist_sender_maps = read_hash("$MYHOME/white.lst");
@blacklist_sender_maps = read_hash("$MYHOME/black.lst");
$spam_quarantine_to = "spam\@$mydomain";
$virus_quarantine_to = "virus\@$mydomain";
$banned_quarantine_to = "spam\@$mydomain";
$hdrfrom_notify_admin = "Content Filter <postmaster\@$mydomain>";

Since I have white and black list files they need to be created.
> touch /var/spool/amavisd/black.lst
> touch /var/spool/amavisd/white.lst
> chown amavis:amavis /var/spool/amavisd/black.lst
> chown amavis:amavis /var/spool/amavisd/white.lst

Let's start amavisd
> /etc/init.d/amavisd start

Configuring Postfix

We need to tell postfix about amavisd. If you copied and pasted the postfix files from abouve than you are in good shape. All we need to do is uncomment some lines.

Uncomment the two lines below the smtp

 
smtp      inet  n       -       n       -       -       smtpd
#  -o content_filter=smtp-amavis:127.0.0.1:10024
#  -o receive_override_options=no_address_mappings

OK. Restart postfix
> /etc/init.d/postfix restart

Testing it out

Now send yourself some test emails. Lets hope it went well.

Mailing lists

I've used both mailman and sympa. Both are good and bad. Neither of them have all the features I want. I decided to use mailman. It will at least meet my modest needs. It kinda handles virtual domains. The mailing list names must be unique. Well lets get started.

Installing MailMan

Just type the following
> yum install mailman

Configuring MailMan

We are going to do a setup that dowsn't require you to modify postfix files for every list. I found the following script. It contains all the info we need. Past the following into a file called /var/lib/mailman/bin/postfix-to-mailman.py

 
#! /usr/bin/env python

# Configuration variables - Configured for Fedora Core 4.
MailmanHome = "/usr/bin/mailman"; # Mailman home directory.
MailmanOwner = "postmaster@example.com"; # Postmaster and abuse mail recepient.
# End of configuration variables.

# postfix-to-mailman.py
#
# Interface mailman to a postfix with a mailman transport. Does not require
# the creation of _any_ aliases to connect lists to your mail system.
#
# Richard Camp, richard@campworld.net, Feb 2005.
# updated to fedora core and to work with the howto
#
# Dax Kelson, dkelson@gurulabs.com, Sept 2002.
# coverted from qmail to postfix interface
#
# Lee Marzke, lee@marzke.net, Nov 2003
# updated for Mailman 2.1
#
# This script was originally qmail-to-mailman.py by:
# Bruce Perens, bruce@perens.com, March 1999.
# This is free software under the GNU General Public License.
#
# This script is meant to be called from ~mailman/postfix-to-mailman.py. 
# It catches all mail to a virtual domain, eg "lists.example.com".
# It looks at the  recepient for each mail message and decides if the mail is
# addressed to a valid list or not, and bounces the message with a helpful
# suggestion if it's not addressed to a list. It decides if it is a posting, 
# a list command, or mail to the list administrator, by checking for the
#  -admin, -owner, and -request addresses. It will recognize a list as soon
# as the list is created, there is no need to add _any_ aliases for any list.
# It recognizes mail to postmaster, mailman-owner, abuse, mailer-daemon, root,
# and owner, and routes those mails to MailmanOwner as defined in the
# configuration variables, above.
#
# INSTALLATION:
#
# Install this file as ~mailman/postfix-to-mailman.py
#
# To configure a virtual domain to connect to mailman, edit Postfix thusly:
#
# /etc/postfix/main.cf:
#    relay_domains = ... lists.example.com
#    mailman_destination_recipient_limit = 1
#
# /etc/postfix/transport_regexp:
#   /^.*\@lists\..*$/       mailman:
#
# /etc/postfix/master.cf
#    mailman unix  -       n       n       -       -       pipe
#      flags=FR user=mailman:mailman 
#      argv=/var/mailman/postfix-to-mailman.py ${nexthop} ${mailbox}
# 
#
# Note that _all_ mail to that domain will go to Mailman, so you
# don't want to put the name of your main domain here. Typically a virtual
# domain lists.domain.com is used for Mailman, and domain.com for regular
# email.
#

import sys, os, re, string

def main():
    os.nice(5)  # Handle mailing lists at non-interactive priority.
		# delete this if you wish

    os.chdir(MailmanHome + "/lists")

    try:
        local = sys.argv[2]
    except:
        # This might happen if we're not using Postfix
        sys.stderr.write("LOCAL not set?\n")
        sys.exit(1)

    local = string.lower(local)
    local = re.sub("^mailman-","",local)

    names = ("root", "postmaster", "mailer-daemon", "mailman-owner", "owner",
             "abuse")
    for i in names:
        if i == local:
            os.execv("/usr/sbin/sendmail",
                     ("/usr/sbin/sendmail", MailmanOwner))
            sys.exit(0)

    type = "post"
    types = (("-post$"	, 	"post"),
	     ("-admin$"	, 	"admin"),
	     ("-bounces$", 	"bounces"),
	     ("-confirm$", 	"confirm"),
	     ("-join$"	,	"join"),
	     ("-leave$"	,	"leave"),
             ("-owner$"	, 	"owner"),
             ("-request$",	"request"),
	     ("-subscribe$",	"subscribe"),
	     ("-unsubscribe$",	"unsubscribe"))

    for i in types:
        if re.search(i[0],local):
            type = i[1]
            local = re.sub(i[0],"",local)

    if os.path.exists(local):
        os.execv(MailmanHome + "/mail/mailman",
                 (MailmanHome + "/mail/mailman", type, local))
    else:
        bounce()
    sys.exit(75)

def bounce():
    bounce_message = """\
TO ACCESS THE MAILING LIST SYSTEM: Start your web browser on
http://%s/
That web page will help you subscribe or unsubscribe, and will
give you directions on how to post to each mailing list.\n"""
    sys.stderr.write(bounce_message % (sys.argv[1]))
    sys.exit(1)

try:
    sys.exit(main())
except SystemExit, argument:
    sys.exit(argument)

except Exception, argument:
    info = sys.exc_info()
    trace = info[2]
    sys.stderr.write("%s %s\n" % (sys.exc_type, argument))
    sys.stderr.write("Line %d\n" % (trace.tb_lineno))
    sys.exit(75)       # Soft failure, try again later. 

Add the following line to /etc/postfix/main.cf
mailman_destination_recipient_limit = 1

Add the following lines to /etc/postfix/master.cf
mailman unix - n n - - pipe

  flags=FR user=mailman:mailman 
  argv=/var/mailman/postfix-to-mailman.py ${nexthop} ${mailbox}

Add the following line to /etc/postfix/transport_regexp
/^.*\@lists\..*$/ mailman:

Now lets create the site mailing list. Type the following
> cd /usr/lib/mailman
> bin/newlist mailman
> bin/config_list -i /var/lib/mailman/data/sitelist.cfg mailman

Be sure to go through the web and modify settings as needed.

Now create the site wide passowrd
> cd /usr/lib/mailman
> bin/mmsitepass <your-site-password>

Ok now start everything up
> /etc/init.d/mailman start

Conclusion

With a bit of work you come out with a robust server.

Comments

Add Comment 
Sign as Author 
Enter code 265

Philippe?23 August 2007, 03:55

logging doesn´t work. the log table in the mysql database is empty. why?


Custom Search