Sommaire
Installer un serveur de messagerie sur ubuntu 14.04 ( POSTFIX – DOVECOT -ROUNDCUBE)
Requis:
- Serveur : Ubuntu 14.04 LTS
Ce tutoriel explique commant creer un serveur de mail sous ubuntu 14.04
Voici les paquets que nous allons utiliser
Etape 1 – Installer le server de mail
Installer l’hôte dans /etc/hosts
192.168.0.1 mail.bsymedia.com
Installer et configurer postfix
|
1 2 3 |
<span class="hljs-built_in">sudo</span> apt-get install postfix <span class="hljs-built_in">sudo</span> dpkg-reconfigure postfix |
Maintenant vous pourrez afficher ces détails. Choisissez vos informations et remplacer bsymedia.com par votre nom de domaine.
|
1 2 3 4 5 6 7 8 9 10 |
<span class="hljs-bullet">1. </span>Internet Site <span class="hljs-bullet">2. </span>bsymedia.com <span class="hljs-bullet">3. </span>postmaster@bsymedia.com <span class="hljs-bullet">4. </span>bsymedia.com, second-domain.com, localhost.localdomain, localhost <span class="hljs-bullet">5. </span>No <span class="hljs-bullet">6. </span>127.0.0.0/8 [::ffff:127.0.0.0]/104 [::1]/128 <span class="hljs-bullet">7. </span>0 <span class="hljs-bullet">8. </span>+ <span class="hljs-bullet">9. </span>all |
Step 3
Configure postfix for SMTP-AUTH using Dovecot SASL by adding the below lines to postfix config file /etc/postfix/main.cf.
|
1 2 3 4 5 6 7 8 9 10 11 12 13 14 |
<span class="hljs-setting">home_mailbox = <span class="hljs-value">Maildir/ </span></span> <span class="hljs-setting">smtpd_sasl_type = <span class="hljs-value">dovecot </span></span> <span class="hljs-setting">smtpd_sasl_path = <span class="hljs-value">private/auth </span></span> <span class="hljs-setting">smtpd_sasl_local_domain = </span> <span class="hljs-setting">smtpd_sasl_security_options = <span class="hljs-value">noanonymous </span></span> <span class="hljs-setting">broken_sasl_auth_clients = <span class="hljs-value"><span class="hljs-keyword">yes</span> </span></span> <span class="hljs-setting">smtpd_sasl_auth_enable = <span class="hljs-value"><span class="hljs-keyword">yes</span> </span></span> <span class="hljs-setting">smtpd_recipient_restrictions = <span class="hljs-value">permit_sasl_authenticated,permit_mynetworks,reject_unauth_destination </span></span> <span class="hljs-setting">smtp_tls_security_level = <span class="hljs-value">may </span></span> <span class="hljs-setting">smtpd_tls_security_level = <span class="hljs-value">may </span></span> <span class="hljs-setting">smtp_tls_note_starttls_offer = <span class="hljs-value"><span class="hljs-keyword">yes</span> </span></span> <span class="hljs-setting">smtpd_tls_loglevel = <span class="hljs-value"><span class="hljs-number">1</span> </span></span> <span class="hljs-setting">smtpd_tls_received_header = <span class="hljs-value"><span class="hljs-keyword">yes</span> </span></span> |
Step 4
Now generate a digital certificate for tls. Issue the commands one by one and provide details as per your domain.
|
1 2 3 4 5 6 7 8 9 |
openssl genrsa -des3 -<span class="hljs-keyword">out</span> server.key <span class="hljs-number">2048</span> openssl rsa -<span class="hljs-keyword">in</span> server.key -<span class="hljs-keyword">out</span> server.key.insecure mv server.key server.key.secure mv server.key.insecure server.key openssl req -<span class="hljs-keyword">new</span> -key server.key -<span class="hljs-keyword">out</span> server.csr openssl x509 -req -days <span class="hljs-number">365</span> -<span class="hljs-keyword">in</span> server.csr -signkey server.key -<span class="hljs-keyword">out</span> server.crt sudo cp server.crt /etc/ssl/certs sudo cp server.key /etc/ssl/<span class="hljs-keyword">private</span> |
Step 5
Now configure certificate path :
|
1 2 3 |
<span class="hljs-built_in">sudo</span> postconf <span class="hljs-operator">-e</span> <span class="hljs-string">'smtpd_tls_key_file = /etc/ssl/private/server.key'</span> <span class="hljs-built_in">sudo</span> postconf <span class="hljs-operator">-e</span> <span class="hljs-string">'smtpd_tls_cert_file = /etc/ssl/certs/server.crt'</span> |
Step 6
Now enable submission for smtp access through 587. Open /etc/postfix/master.cf file and uncomment below lines.
|
1 2 3 4 5 6 7 |
<span class="hljs-title">submission</span> inet n - - - - smtpd -o syslog_name=postfix/submission -o smtpd_tls_security_level=encrypt -o smtpd_sasl_auth_enable=<span class="hljs-built_in">yes</span> -o smtpd_relay_restrictions=permit_sasl_authenticated,reject -o milter_macro_daemon_name=ORIGINATING |
Step 7
Now install Dovecot SASL by typing the below command. sudo apt-get install dovecot-common
Step 8
Make changes to the files as follows.
Open /etc/dovecot/conf.d/10-master.conf file and find # Postfix smtp-auth line ( line no:95 ) and add the below lines .
|
1 2 3 4 5 6 7 |
<span class="hljs-comment"># Postfix smtp-auth</span> unix_listener /var/spool/postfix/private/auth { <span class="hljs-constant">mode</span> = 0660 <span class="hljs-constant">user</span> = postfix <span class="hljs-constant">group</span> = postfix } |
Open /etc/dovecot/conf.d/10-auth.conf file and find (line no:100) auth_mechanisms = plain and replace auth_mechanisms = plain login
Step 9
Restart postfix and dovecot services
|
1 2 3 |
<span class="hljs-built_in">sudo</span> service postfix restart <span class="hljs-built_in">sudo</span> service dovecot restart |
INSTALLING AND CONFIGURING DOVECOT
Step 1
Install dovecot using the below command :
sudo apt-get install dovecot-imapd dovecot-pop3d
Step 2
Now configure mailbox. Open /etc/dovecot/conf.d/10-mail.conf file and find (Line no:30 ) mail_location = mbox:~/mail:INBOX=/var/mail/%u Replace with mail_location = maildir:~/Maildir
Step 3
Now change pop3uidlformat . Open /etc/dovecot/conf.d/20-pop3.conf file and find and uncomment the below line ( Line no : 50 )
pop3_uidl_format = %08Xu%08Xv
Step 4
Now enable SSL . Open /etc/dovecot/conf.d/10-ssl.conf file and find and uncomment the below line ( Line no : 6 )
ssl = yes
Step 5
Restart dovecot service.
sudo service dovecot restart
INSTALLING AND CONFIGURING ROUNDCUBE WEBMAIL
Step 1
Download RoundCube from following Link :
RoundCube Download Page
Unzip and copy the whole folder to document_root of http server.
Make sure that the following directories (and the files within) are writable by the web server user:
- temp
- logs
Step 2 Database Configuration
Next thing we need to do is decide what database backend we’ll use. The most common is MySQL but others are PostgreSQL and SQLite. So once you decide, create a database with any name you want and grant privileges to a separate database user. It’s recommended not to use an existing user or root.
With MySQL you can set up the database by issuing the following commands:
|
1 2 3 4 |
<span class="hljs-operator"><span class="hljs-keyword">CREATE</span> <span class="hljs-keyword">DATABASE</span> roundcubemail;</span> <span class="hljs-operator"><span class="hljs-keyword">GRANT</span> <span class="hljs-keyword">ALL</span> <span class="hljs-keyword">PRIVILEGES</span> <span class="hljs-keyword">ON</span> roundcubemail.* <span class="hljs-keyword">TO</span> username@localhost <span class="hljs-keyword">IDENTIFIED</span> <span class="hljs-keyword">BY</span> <span class="hljs-string">'password'</span>;</span> <span class="hljs-operator"><span class="hljs-keyword">FLUSH</span> <span class="hljs-keyword">PRIVILEGES</span>;</span> |
(of course you have to replace the database, username and password accordingly)
Step 3 Configuring RoundCube
After uploading the files point your browser to http://url-to-roundcube/installer/ to start the install wizard.
In case you see some red NOT OK messages, you need to install or enable something. Follow the links or find out more by searching your web site for your server’s operating system or http://www.php.net.
If the mail server supports SSL connection for imap and TLS for SMTP, then SMTPServer will be tls://localhost and IMAPServer will be ssl://localhost.
Step 4 Protect your installation
Access through your webserver to at least the following directories should be denied:
- /config
- /temp
- /logs
Roundcube use .htaccess files to protect this directories, be sure to allow override of the Limit directives to get them taken into account.
Last but not least you have to remove the whole installer directory from the webserver. If this remains active it can expose the configuration including passwords.
ETC
Add user account
|
1 2 3 |
<span class="hljs-built_in">sudo</span> useradd -m username <span class="hljs-operator">-s</span> /sbin/nologin <span class="hljs-built_in">sudo</span> passwd username |
Mail forwarding
- Using aliases file
|
1 2 3 4 |
<span class="hljs-title">vi</span> /etc/aliases master: root, user00, root<span class="hljs-variable">@bsymedia</span>.com newaliases |
- Making
.forwardfile in user home directory
|
1 2 |
<span class="hljs-title">vi</span> <span class="hljs-variable">$HOME</span>/.forward user00<span class="hljs-variable">@forward</span>.mail.com |