Skip to content
GitLab
Explore
Sign in
Primary navigation
Search or go to…
Project
G
GoikLectures
Manage
Activity
Members
Labels
Plan
Issues
Issue boards
Milestones
Wiki
Requirements
Code
Merge requests
Repository
Branches
Commits
Tags
Repository graph
Compare revisions
Locked files
Deploy
Releases
Container Registry
Model registry
Monitor
Incidents
Analyze
Value stream analytics
Contributor analytics
Repository analytics
Code review analytics
Issue analytics
Insights
Model experiments
Help
Help
Support
GitLab documentation
Compare GitLab plans
Community forum
Contribute to GitLab
Provide feedback
Terms and privacy
Keyboard shortcuts
?
Snippets
Groups
Projects
Show more breadcrumbs
Goik Martin
GoikLectures
Commits
8ef5e3a1
Commit
8ef5e3a1
authored
9 years ago
by
Goik Martin
Browse files
Options
Downloads
Patches
Plain Diff
Some cosmetics and links
parent
0401ffbc
No related branches found
Branches containing commit
No related tags found
No related merge requests found
Changes
1
Hide whitespace changes
Inline
Side-by-side
Showing
1 changed file
Doc/Sdi/mail.xml
+89
-70
89 additions, 70 deletions
Doc/Sdi/mail.xml
with
89 additions
and
70 deletions
Doc/Sdi/mail.xml
+
89
−
70
View file @
8ef5e3a1
...
...
@@ -13,38 +13,37 @@
<itemizedlist>
<listitem>
<para
xlink:href=
"http://www.w3.org"
>
Good starting point and
Installguide (in German) but for CentoOS
<link
xlink:href=
"
???
"
>
dokuwiki.nausch.org
</link>
.
</para>
<para
>
Good starting point and Installguide (in German) but for CentoOS
<link
xlink:href=
"
dokuwiki.nausch.org
"
>
dokuwiki.nausch.org
</link>
.
</para>
</listitem>
<listitem>
<para>
<link
xlink:href=
"???"
>
Installguide on Debian
</
link></
para>
<para>
Installguide on Debian
</para>
</listitem>
<listitem>
<para
><link
xlink:href=
"???
"
>
Postfix Dokumentation
</
link></
para>
<para
xml:lang=
"de
"
>
Postfix Dokumentation
</para>
</listitem>
<listitem>
<para>
Das Postfix-Buch : sichere Mailserver mit Linux
von Peer
Heinlein
</para>
<para
xml:lang=
"de"
>
Das Postfix-Buch : sichere Mailserver mit Linux
von Peer
Heinlein
</para>
</listitem>
<listitem>
<para><link
xlink:href=
"???"
>
Eigener Mailserver mit Postfix und
Dovecot
</link></para>
<para
xml:lang=
"de"
>
Eigener Mailserver mit Postfix und Dovecot
</para>
</listitem>
<listitem>
<para><link
xlink:href=
"???"
>
Postfix einrichten und
absichern
</link></para>
<para
xml:lang=
"de"
>
Postfix einrichten und absichern
</para>
</listitem>
<listitem>
<para>
Wikipedia eg.
<link
<para>
<orgname>
Wikipedia
</orgname>
:
<link
xlink:href=
"https://de.wikipedia.org/wiki/Simple_Mail_Transfer_Protocol"
>
SMTP
</link>
,
Mailserver, IMAP, Maildir
</para>
mail server,
<acronym>
IMAP
</acronym>
,
<acronym>
Maildir
</acronym></para>
</listitem>
</itemizedlist>
...
...
@@ -53,38 +52,53 @@
<itemizedlist>
<listitem>
<para>
What is an MTA, MDA and MUA?
</para>
<para>
What are:
<itemizedlist>
<listitem>
<para><acronym>
MTA
</acronym></para>
</listitem>
<listitem>
<para><acronym>
MDA
</acronym></para>
</listitem>
<listitem>
<para><acronym>
MUA
</acronym></para>
</listitem>
</itemizedlist></para>
</listitem>
<listitem>
<para>
difference between MBOX and Maildir
</para>
<para>
The difference between
<acronym>
MBOX
</acronym>
and
<acronym>
Maildir
</acronym></para>
</listitem>
<listitem>
<para>
What is
SASL
and where
to
use it?
</para>
<para>
What is
<acronym>
SASL
</acronym>
and where
do we
use it?
</para>
</listitem>
<listitem>
<para>
What disadvantage or advantage is it when using Postfix in a
Chroot
</para>
<para>
What advantages and disadvantage are to be considered when
running Postfix in a
<command
xlink:href=
"http://linux.die.net/man/1/chroot"
>
chroot
</command>
environment?
</para>
</listitem>
<listitem>
<para>
Common Config Files like master.cf and main.cf. Which to use
when?
</para>
<para>
Which purposes are being addressed by the configuration files
<filename>
master.cf
</filename>
and
<filename>
main.cf
</filename>
?
</para>
</listitem>
<listitem>
<para>
What are local
domains
and virtual domains?
</para>
<para>
What are local and virtual domains?
</para>
</listitem>
<listitem>
<para>
What are smtpd_*_restrictions? Why are the used and what
for?
</para>
<para>
What do smtpd_*_restrictions account for?
</para>
</listitem>
<listitem>
<para>
w
hat is an open relay?
</para>
<para>
W
hat is an open relay?
</para>
</listitem>
</itemizedlist>
</section>
...
...
@@ -92,8 +106,8 @@
<section
xml:id=
"sdiMailExercises"
>
<title>
Exercises
</title>
<para>
Our aim is to install and configure the
MTA Postfix with many
features used in production today.
</para>
<para>
Our aim is to install and configure the
<acronym>
MTA
</acronym>
Postfix with many
features used in production today.
</para>
<section
xml:id=
"sdiMailBlah"
>
<title>
Install and send to local Users
</title>
...
...
@@ -101,7 +115,7 @@
<para>
Install postfix. If asked use "No Configuration". Later it is
maybe needed to install extra postfix-* packages.
</para>
<programlisting>
apt-get install postfix
</programlisting>
<programlisting
language=
"none"
>
apt-get install postfix
</programlisting>
<itemizedlist>
<listitem>
...
...
@@ -110,7 +124,9 @@
</listitem>
<listitem>
<para>
add a local linux user (eg. with useradd)
</para>
<para>
add a local
<productname>
Linux
</productname>
user (
<command
xlink:href=
"http://linux.die.net/man/8/useradd"
>
useradd
</command>
is
your friend!)
</para>
</listitem>
<listitem>
...
...
@@ -126,20 +142,21 @@
<listitem>
<para>
add an alias to
<filename>
/etc/aliases
</filename>
and try to
send an email to th
e
new alias
e
</para>
send an email to th
is
new
ly defined
alias
</para>
</listitem>
<listitem>
<para>
add mx records for both VMs to your DNS Setup
</para>
<para>
add
<acronym>
mx
</acronym>
records on both VMs to your
<xref
linkend=
"glo_DNS"
/>
Setup
</para>
</listitem>
<listitem>
<para>
try to send an email via your second
maschine
(sdiXb) to the
user on frist maschine
(sdXa)
</para>
<para>
try to send an email via your second
host
(sdiXb) to the
user
being defined on your first host
(sdXa)
.
</para>
<itemizedlist>
<listitem>
<para>
meaning use telnet
from
your local
maschine
to sdiXb and
<para>
meaning use telnet
on
your local
host system
to sdiXb and
send a mail to a user on sdXa
</para>
</listitem>
...
...
@@ -160,7 +177,8 @@
</listitem>
<listitem>
<para>
install a sasl implementation (cyrus or dovecot)
</para>
<para>
install a
<acronym>
sasl
</acronym>
implementation
(
<command>
cyrus
</command>
or
<command>
dovecot
</command>
)
</para>
<itemizedlist>
<listitem>
...
...
@@ -168,7 +186,8 @@
</listitem>
<listitem>
<para>
then bind your sasl auth to your existing ldap
</para>
<para>
then bind your
<acronym>
sasl
</acronym>
authentication to
your existing
<xref
linkend=
"glo_LDAP"
/>
.
</para>
</listitem>
</itemizedlist>
</listitem>
...
...
@@ -176,46 +195,48 @@
<itemizedlist>
<listitem>
<para>
try again sending an email via second
maschine
to a user on
the first
maschine and use your
authentication
</para>
<para>
try again sending an email via
your
second
host
to a user on
the first
host using
authentication
</para>
</listitem>
<listitem>
<para>
use an
E
mailclient (
MUA) like thunderbird to send
emails
</para>
<para>
use an
e
mail
client (
<acronym>
MUA
</acronym>
) like
<productname>
thunderbird
</productname>
for sending
emails
</para>
</listitem>
<listitem>
<para>
add an fantasie domain to your DNS Setup and set the mx record
to your mailservers
</para>
<para>
add an fantasy domain to your
<xref
linkend=
"glo_DNS"
/>
Setup
and let its
<acronym>
mx
</acronym>
record point to your
mailserver
</para>
</listitem>
<listitem>
<para>
add that domain to your mailsetup
</para>
<para>
add that domain to your mail
setup
</para>
</listitem>
<listitem>
<para>
now configure email
a
dresses with this domain
</para>
<para>
now configure email
ad
dresses with
in
this domain
</para>
<itemizedlist>
<listitem>
<para>
put this
virtual email
a
dresses in
<para>
define these
virtual email
ad
dresses in
<filename>
/etc/postfix/virtual
</filename></para>
</listitem>
<listitem>
<para>
configure a virtual email
a
dress
e
to your local
user
s
</para>
<para>
configure a virtual email
ad
dress
pointing
to your local
user
</para>
</listitem>
<listitem>
<para>
configure a virtual email
a
dress
e
to your own
hdm
emailadresse
</para>
<para>
configure a virtual email
ad
dress
pointing
to your own
<orgname>
HdM
</orgname>
mail account.
</para>
</listitem>
<listitem>
<tip>
<para>
Read about postmap
</para>
<para>
Read about
<command
xlink:href=
"http://linux.die.net/man/1/postmap"
>
postmap
</command>
.
</para>
</tip>
</listitem>
</itemizedlist>
...
...
@@ -223,7 +244,7 @@
</itemizedlist>
</section>
<section>
<section
xml:id=
"sdiSectSpamVirusDefense"
>
<title>
Spam and Virus defense
</title>
<para><itemizedlist>
...
...
@@ -232,28 +253,24 @@
</listitem>
<listitem>
<para/>
<programlisting
language=
"none"
>
</programlisting>
</listitem>
</itemizedlist></para>
<section>
<section
xml:id=
"sdiSectBlackGreyListing"
>
<title>
blacklisting and greylisting
</title>
<itemizedlist>
<listitem>
<para>
install
postgrey
and add it to
<para>
install
the
<code>
postgrey
</code>
package
and add it to
smtpd_recipient_restrictions
</para>
<itemizedlist>
<listitem>
<para>
test with sending emails eg. with an telnet or an MUA to
your virtual emailadresse
</para>
</listitem>
<para>
test sending emails using telnet or a
<acronym>
MUA
</acronym>
to your virtual email address
</para>
<listitem>
<tip>
<para>
this needs to be done without authentication
</para>
</tip>
...
...
@@ -268,39 +285,41 @@
</listitem>
<listitem>
<para>
send an email via your second mailserver to a email
account on the firsh and watch the logs. your mailserver will
try again until the mail is send to the mailaccount
</para>
<para>
send an email via your second mail server to an email
account on your first system and watch the logs. Your mail
server will try again until the mail is send to the intended
mail account
</para>
</listitem>
<listitem>
<para>
or use
<filename>
postfix restart
</filename>
oder
<filename>
postfix flush
</filename>
oder
<filename>
postsuper -r
QUEUEID
</filename>
to force resend
</para>
<para>
Use either of
<command>
postfix
</command>
<option>
restart
</option>
,
<command>
postfix
</command>
<option>
flush
</option>
or
<command>
postsuper
</command>
<option>
-r QUEUEID
</option>
to force resending
</para>
</listitem>
</itemizedlist>
</listitem>
<listitem>
<para>
add some blacklists to your
smtpd_recipient_restrictions
</para>
<code>
smtpd_recipient_restrictions
</
code></
para>
<itemizedlist>
<listitem>
<para>
this can't be tested very well expect building your own
blacklist server
but (out of scop
e)
</para>
blacklist server
(beyond scope of current exercis
e)
</para>
</listitem>
<listitem>
<para>
use add
some common blacklist
and belive the will work
:)
</para>
<para>
Supply
some common blacklist
entries and pretend these
will work.
</para>
</listitem>
</itemizedlist>
</listitem>
</itemizedlist>
</section>
<section>
<section
xml:id=
"sdiSectAmavisClamavSpamassassin"
>
<title>
Amavis, Clamav and Spamassasin
</title>
<itemizedlist>
...
...
@@ -336,7 +355,7 @@
</itemizedlist>
</section>
<section>
<section
xml:id=
"sdiSectSpf"
>
<title>
SPF (optional)
</title>
<para>
more Spamprevention technics like DMARC, DKIM, DANE
</para>
...
...
This diff is collapsed.
Click to expand it.
Preview
0%
Loading
Try again
or
attach a new file
.
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Save comment
Cancel
Please
register
or
sign in
to comment