Mail Server

Cyrus

Installation

Install Cyrus Package

apt-get install cyrus-admin cyrus-clients cyrus-common cyrus-doc cyrus-imapd cyrus-nntpd cyrus-pop3d cyrus-sasl2-doc libcyrus-imap-perl

Install Sasl auth

apt-get install libauthen-sasl-perl libgsasl7 libsasl2-2 libsasl2-modules libsasl2-modules-db sasl2-bin

Validate / Adjust the configuration

/etc/default/saslauthd

START=yes
##Postfix Rooted
OPTIONS="-c -m /var/spool/postfix/var/run/saslauthd"

/etc/imapd.conf

admins: cyrus
sasl_mech_list: PLAIN LOGIN
defaultdomain: objclt.com
sasl_pwcheck_method: saslauthd
tls_cert_file: /etc/ssl/certs/ssl-cert-snakeoil.pem
tls_key_file: /etc/ssl/private/ssl-cert-snakeoil.key

Security

• Create user cyrus in Sasl Database

saslpasswd2 -c cyrus 

• Add group sasl and ssl-cert to cyrus

usermod -a -G sasl,ssl-cert cyrus

Postfix

Web site PostFix

Installation

apt-get install postfix

Configuration

1. /etc/postfix/main.cf

mailbox_transport = cyrus

1. /etc/postfix/master.cf

# The Cyrus deliver program has changed incompatibly, multiple times.
cyrus     unix  -   n   n   -   -   pipe
  flags=R user=cyrus argv=/usr/sbin/cyrdeliver -e -m "${extension}" ${user}

mailbox_transport = lmtp:unix:/var/run/lmtp

lmtp      unix  -       -       n       -       -       lmtp

adduser postfix mail

Security

• Add group sasl opendkim spamass-milter

usermod -a -G sasl,opendkim,spamass-milter postfix

Spamassassin

Web site SpamAssassin

Installation

apt-get install spamassassin spamass-milter

Setup

• /etc/default/spamassassin

###Nr001ENABLED=0
ENABLED=1

###Nr001 OPTIONS="--create-prefs --max-children 5 --helper-home-dir"
OPTIONS="--create-prefs --max-children 5 --helper-home-dir -u spamass-milter"

###Nr001 CRON=0
CRON=1

Open DKIM

Web site Open DKIM

Installation

apt-get install opendkim

Setup

• /etc/default/opendkim Modify Socket

###Nr001 SOCKET="local:/var/run/opendkim/opendkim.sock"
SOCKET="inet:12301@localhost"

• /etc/postfix/main.cf add inet:localhost:12301

smtpd_milters = unix:/batv-milter/batv-milter.sock, unix:spamass/spamass.sock, inet:localhost:12301
non_smtpd_milters = unix:/batv-milter/batv-milter.sock, unix:spamass/spamass.sock, inet:localhost:12301

Add new domain

• Create folder

  mkdir /etc/opendkim/keys/domain_name 

• Update configuration file /etc/opendkim/KeyTable
• Generate Key

  opendkim-genkey -s mail -d domain_name

• Change Owner

  chown opendkim: /etc/opendkim/KeyTable/domaine_name/mail.private

• Copy the key (mail.txt) into the dns record.

batv-milter

WebSite agwa.name

Installation

• Download source from https://www.agwa.name/projects/batv-tools/
• Install prerequisite

apt-get install libmilter-dev

• Build and install

make

• Install

make install PREFIX=/usr

Unbound

Web site Unbound

Not tested yet