Category: Mail – Page 3

How to stop SPAM with Postfix RBL

Posted on October 1, 2020 by ServerOk

To stop spam using RBL in postfix, edit main.cf

vi /etc/postfix/main.cf

1	vi /etc/postfix/main.cf

Add

smtpd_recipient_restrictions =
    permit_mynetworks,
    permit_sasl_authenticated,
    reject_unauth_destination,
    reject_invalid_hostname,
    reject_unauth_pipelining,
    reject_non_fqdn_sender,
    reject_unknown_sender_domain,
    reject_non_fqdn_recipient,
    reject_unknown_recipient_domain,
    reject_rbl_client cbl.abuseat.org,
    reject_rbl_client bl.spamcop.net,
    reject_rbl_client sbl.spamhaus.org,
    reject_rbl_client zen.spamhaus.org,
    permit

smtpd_recipient_restrictions =

permit_mynetworks,

permit_sasl_authenticated,

reject_unauth_destination,

reject_invalid_hostname,

reject_unauth_pipelining,

reject_non_fqdn_sender,

reject_unknown_sender_domain,

reject_non_fqdn_recipient,

reject_unknown_recipient_domain,

reject_rbl_client cbl.abuseat.org,

reject_rbl_client bl.spamcop.net,

reject_rbl_client sbl.spamhaus.org,

reject_rbl_client zen.spamhaus.org,

permit

Restart postfix

systemctl restart postfix

1	systemctl restart postfix

See postfix […]

Postfix enable Maildir

Posted on September 28, 2020 (September 28, 2020) by ServerOk

To enable postfix, run

postconf -e "home_mailbox = Maildir/"
systemctl restart postfix

1 2	postconf -e "home_mailbox = Maildir/" systemctl restart postfix

You can do it by editing /etc/postfix/main.cf

vi /etc/postfix/main.cf

1	vi /etc/postfix/main.cf

Add

home_mailbox = Maildir/

1	home_mailbox = Maildir/

if home_mailbox entry already in main.cf file, then modify instead of adding a new entry. Virtual Mailbox If you are using virtual mailbox, make sure you spedify folder in your virtual_mailbox_maps. Here is what i have in main.cf

virtual_mailbox_maps = hash:/etc/postfix/vmailbox

1	virtual_mailbox_maps = hash:/etc/postfix/vmailbox

in […]

fatal: open /etc/postfix/main.cf: Permission denied

Posted on August 13, 2020 by ServerOk

On a CentOS server, when sending mail from PHP scripts, mail failed to work. On checking postfix log file (/var/log/maillog), i see following error.

Aug 11 01:41:53 forums postfix/sendmail[44463]: fatal: open /etc/postfix/main.cf: Permission denied

1	Aug 11 01:41:53 forums postfix/sendmail[44463]: fatal: open /etc/postfix/main.cf: Permission denied

To fix this, disable selinux

setenforce 0

1	setenforce 0

To permanantly disable SELinux, run

sed -i 's/SELINUX=enforcing/SELINUX=disabled/' /etc/selinux/config

1	sed -i 's/SELINUX=enforcing/SELINUX=disabled/' /etc/selinux/config

[…]

Postfix email forward

Posted on February 6, 2020 by ServerOk

On an Ubuntu Server, i done following to setup email forwarding. Install postfix

apt -y install postfix

1	apt -y install postfix

Edit /etc/postfix/main.cf, add following

vi /etc/postfix/main.cf

1	vi /etc/postfix/main.cf

Add

virtual_mailbox_domains = YOUR-DOMAIN_HERE.com
virtual_mailbox_base = /var/mail/vhosts
virtual_mailbox_maps = hash:/etc/postfix/vmailbox
virtual_minimum_uid = 100
virtual_uid_maps = static:5000
virtual_gid_maps = static:5000
virtual_alias_maps = hash:/etc/postfix/virtual

virtual_mailbox_domains = YOUR-DOMAIN_HERE.com

virtual_mailbox_base = /var/mail/vhosts

virtual_mailbox_maps = hash:/etc/postfix/vmailbox

virtual_minimum_uid = 100

virtual_uid_maps = static:5000

virtual_gid_maps = static:5000

virtual_alias_maps = hash:/etc/postfix/virtual

Create Virtual mailbox

vi /etc/postfix/vmailbox

1	vi /etc/postfix/vmailbox

Add

user1@YOUR-DOMAIN_HERE.com    YOUR-DOMAIN_HERE.com/user1

1	user1@YOUR-DOMAIN_HERE.com YOUR-DOMAIN_HERE.com/user1

Create alias file, used for mail forwarding

vi /etc/postfix/virtual

1	vi /etc/postfix/virtual

Add

admin@YOUR-DOMAIN_HERE.com YOU@gmail.com

1	admin@YOUR-DOMAIN_HERE.com YOU@gmail.com

Wth above configuration, mail coming to [email protected]_HERE.com will get forwarded to [email protected] Email coming to [email protected]_HERE.com get delivered […]

iredmail

Posted on February 3, 2020 (February 3, 2020) by ServerOk

iRedMail allow you to run your own mail server easily. It use postfix mail server for mail delivery. https://www.iredmail.org/ iredmail increase mail attachment size […]

iredmail increase mail attachment size

Posted on January 29, 2020 (January 29, 2020) by ServerOk

Default mail attachment size in iredmail is 10 MB. To increase mail attachment size, login to server as user root, run following commands

postconf -e message_size_limit=104857600
postconf -e mailbox_size_limit=104857600
systemctl restart postfix

postconf -e message_size_limit=104857600

postconf -e mailbox_size_limit=104857600

systemctl restart postfix

Here 104857600 is 100 MB in bytes (100 * 1024 * 1024). Change this as required. Sending very large file using mail attachment is not recommended, it is better use file […]

Zimbra webmail not working on port 80/443

Posted on September 6, 2019 (September 6, 2019) by ServerOk

On Zimbra mail server, webmail stopped working on Port 80/443. Admin interface worked properly on url https://hostname:7071/. There is no errors displayed under monitor tab of Zimbra Admin. To fix, run

su - zimbra
zmprov ms `zmhostname` zimbraReverseProxySSLToUpstreamEnabled FALSE
zmprov ms `zmhostname` zimbraMailMode both
zmprov ms `zmhostname` zimbraReverseProxyMailMode both
./libexec/zmproxyconfig -e -w -o -a 8080:80:8443:443 -x both -H `zmhostname`
zmcontrol restart

su - zimbra

zmprov ms `zmhostname` zimbraReverseProxySSLToUpstreamEnabled FALSE

zmprov ms `zmhostname` zimbraMailMode both

zmprov ms `zmhostname` zimbraReverseProxyMailMode both

./libexec/zmproxyconfig -e -w -o -a 8080:80:8443:443 -x both -H `zmhostname`

zmcontrol restart

After running this, netstat -lntp start showing nginx running on port 80 and 443

root@zim:~# netstat -lntp | egrep "80|443"
tcp        0      0 127.0.0.1:10663         0.0.0.0:*               LISTEN      10980/zmlogger: zmr
tcp        0      0 0.0.0.0:80              0.0.0.0:*               LISTEN      11354/nginx.conf
tcp        0      0 127.0.0.1:8080          0.0.0.0:*               LISTEN      11098/java      
tcp        0      0 116.203.102.86:8080     0.0.0.0:*               LISTEN      11098/java      
tcp        0      0 0.0.0.0:443             0.0.0.0:*               LISTEN      11354/nginx.conf
tcp6       0      0 :::7780                 :::*                    LISTEN      11707/httpd     
root@zim:~#

root@zim:~# netstat -lntp | egrep "80|443"

tcp 0 0 127.0.0.1:10663 0.0.0.0:* LISTEN 10980/zmlogger: zmr

tcp 0 0 0.0.0.0:80 0.0.0.0:* LISTEN 11354/nginx.conf

tcp 0 0 127.0.0.1:8080 0.0.0.0:* LISTEN 11098/java

tcp 0 0 116.203.102.86:8080 0.0.0.0:* LISTEN 11098/java

tcp 0 0 0.0.0.0:443 0.0.0.0:* LISTEN 11354/nginx.conf

tcp6 0 0 :::7780 :::* LISTEN 11707/httpd

root@zim:~#

[…]

Zimbra Mail Server CentOS firewall settings

Posted on August 9, 2019 (August 9, 2019) by ServerOk

On CentOS 7 server with firewalld running, used following command to open ports used by Zimbra Mail Server.

firewall-cmd --zone=public --permanent --add-service=http
firewall-cmd --zone=public --permanent --add-service=https
firewall-cmd --zone=public --permanent --add-service=ssh
firewall-cmd --zone=public --permanent --add-port=110/tcp
firewall-cmd --zone=public --permanent --add-port=11211/tcp
firewall-cmd --zone=public --permanent --add-port=143/tcp
firewall-cmd --zone=public --permanent --add-port=25/tcp
firewall-cmd --zone=public --permanent --add-port=443/tcp
firewall-cmd --zone=public --permanent --add-port=465/tcp
firewall-cmd --zone=public --permanent --add-port=5222/tcp
firewall-cmd --zone=public --permanent --add-port=5269/tcp
firewall-cmd --zone=public --permanent --add-port=587/tcp
firewall-cmd --zone=public --permanent --add-port=7025/tcp
firewall-cmd --zone=public --permanent --add-port=7071/tcp
firewall-cmd --zone=public --permanent --add-port=7072/tcp
firewall-cmd --zone=public --permanent --add-port=7073/tcp
firewall-cmd --zone=public --permanent --add-port=7110/tcp
firewall-cmd --zone=public --permanent --add-port=7143/tcp
firewall-cmd --zone=public --permanent --add-port=7993/tcp
firewall-cmd --zone=public --permanent --add-port=7995/tcp
firewall-cmd --zone=public --permanent --add-port=8443/tcp
firewall-cmd --zone=public --permanent --add-port=993/tcp
firewall-cmd --zone=public --permanent --add-port=995/tcp
firewall-cmd --reload

firewall-cmd --zone=public --permanent --add-service=http

firewall-cmd --zone=public --permanent --add-service=https

firewall-cmd --zone=public --permanent --add-service=ssh

firewall-cmd --zone=public --permanent --add-port=110/tcp

firewall-cmd --zone=public --permanent --add-port=11211/tcp

firewall-cmd --zone=public --permanent --add-port=143/tcp

firewall-cmd --zone=public --permanent --add-port=25/tcp

firewall-cmd --zone=public --permanent --add-port=443/tcp

firewall-cmd --zone=public --permanent --add-port=465/tcp

firewall-cmd --zone=public --permanent --add-port=5222/tcp

firewall-cmd --zone=public --permanent --add-port=5269/tcp

firewall-cmd --zone=public --permanent --add-port=587/tcp

firewall-cmd --zone=public --permanent --add-port=7025/tcp

firewall-cmd --zone=public --permanent --add-port=7071/tcp

firewall-cmd --zone=public --permanent --add-port=7072/tcp

firewall-cmd --zone=public --permanent --add-port=7073/tcp

firewall-cmd --zone=public --permanent --add-port=7110/tcp

firewall-cmd --zone=public --permanent --add-port=7143/tcp

firewall-cmd --zone=public --permanent --add-port=7993/tcp

firewall-cmd --zone=public --permanent --add-port=7995/tcp

firewall-cmd --zone=public --permanent --add-port=8443/tcp

firewall-cmd --zone=public --permanent --add-port=993/tcp

firewall-cmd --zone=public --permanent --add-port=995/tcp

firewall-cmd --reload

See Zimbra, firewall-cmd […]

Zimbra redirect webmail http to https

Posted on August 9, 2019 (August 9, 2019) by ServerOk

After Zimbra mail server installed, webmail work on url https://SERVER-HOSTNAME-HERE/ If you access webmail with out HTTPS, it won’t work. To set HTTP to redirect to HTTPS, login to server as root, switch to user zimbra

su - zimbra

1	su - zimbra

Run

zmprov ms SERVER_HOSTNAME_HERE zimbraReverseProxyMailMode redirect

1	zmprov ms SERVER_HOSTNAME_HERE zimbraReverseProxyMailMode redirect

Wait few minutes, HTTP link will redirect to HTTPS.

[root@correo ~]# netstat -lntp | grep 80                                                                                                                                                                    
tcp        0      0 0.0.0.0:8080            0.0.0.0:*               LISTEN      22891/java                                                                                                                  
tcp6       0      0 :::7780                 :::*                    LISTEN      24005/httpd                                                                                                                 
[root@correo ~]# su - zimbra                                                                                                                                                                                
Last login: Thu Aug  8 21:33:52 CST 2019 on pts/0                                                                                                                                                           
[zimbra@correo ~]$ zmprov ms correo.net.gt zimbraReverseProxyMailMode redirect                                                                                                                              
[zimbra@correo ~]$

[root@correo ~]# netstat -lntp | grep 80

tcp 0 0 0.0.0.0:8080 0.0.0.0:* LISTEN 22891/java

tcp6 0 0 :::7780 :::* LISTEN 24005/httpd

[root@correo ~]# su - zimbra

Last login: Thu Aug 8 21:33:52 CST 2019 on pts/0

[zimbra@correo ~]$ zmprov ms correo.net.gt zimbraReverseProxyMailMode redirect

[zimbra@correo ~]$

You need to wait few minutes […]

Install SSL Certificate on Zimbra mail server

Posted on August 9, 2019 by ServerOk

To install SSL certificate for Zimbra Mail Server, login to server, switch to user zimbra

su - zimbra

1	su - zimbra

Now create file commercial.key, paste your Private key.

vi /opt/zimbra/ssl/zimbra/commercial/commercial.key

1	vi /opt/zimbra/ssl/zimbra/commercial/commercial.key

In commercial.crt, paste your SSL certificate.

vi /opt/zimbra/ssl/zimbra/commercial/commercial.crt

1	vi /opt/zimbra/ssl/zimbra/commercial/commercial.crt

Create commercial_ca.crt with content of your ca-bundle file.

vi /opt/zimbra/ssl/zimbra/commercial/commercial_ca.crt

1	vi /opt/zimbra/ssl/zimbra/commercial/commercial_ca.crt

Verify SSL cerificate

/opt/zimbra/bin/zmcertmgr verifycrt comm /opt/zimbra/ssl/zimbra/commercial/commercial.key  /opt/zimbra/ssl/zimbra/commercial/commercial.crt

1	/opt/zimbra/bin/zmcertmgr verifycrt comm /opt/zimbra/ssl/zimbra/commercial/commercial.key /opt/zimbra/ssl/zimbra/commercial/commercial.crt

If SSL verified sucessfully, you can install it with command […]