ihmblog

Human-Computer Interaction, IT and More!

Dovecot configuration

Configuring dovecot to let postfix using it to authenticate clients. Here is my complete dovecot.conf the postfix needed section stand just with the definition of the listening socket

protocols = imap imaps pop3 pop3s
disable_plaintext_auth = no
log_timestamp = "%Y-%m-%d %H:%M:%S "
ssl_disable = no
mail_privileged_group = mail
protocol imap {
}
protocol pop3 {
  pop3_uidl_format = %08Xu%08Xv
}
auth default {
  mechanisms = plain login
  passdb pam {
  }
  user = root
  socket listen {
      path = /var/spool/postfix/private/auth
      mode = 0660
      user = postfix
      group = postfix
    }
  }
}
dict {
}
plugin {
}

Testing a postfix server

Never forget ho to test a postfix server, both in plain and in ssl:

Original Website

Configuring PostFix

Once postfix is running… it is better to store the main.cf in a post! I spent to much time


# See /usr/share/postfix/main.cf.dist for a commented, more complete version
# Debian specific:  Specifying a file name will cause the first
# line of that file to be used as the name.  The Debian default
# is /etc/mailname.
#myorigin = /etc/mailname

smtpd_banner = $myhostname ESMTP $mail_name (Debian/GNU)
biff = no

# appending .domain is the MUA's job.
append_dot_mydomain = no

# Uncomment the next line to generate "delayed mail" warnings
#delay_warning_time = 4h

readme_directory = no

# TLS parameters
smtpd_sasl_auth_enable = yes
smtpd_use_tls = yes
smtpd_tls_auth_only = yes
broken_sasl_auth_clients = yes
smtpd_sasl_local_domain =
smtpd_sasl_type = dovecot
smtpd_sasl_path = private/auth
smtpd_tls_cert_file = /etc/postfix/ssl/smtpd.crt
smtpd_tls_key_file = /etc/postfix/ssl/smtpd.key
smtpd_tls_CAfile = /etc/postfix/ssl/cacert.pem
smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache
smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache
smtpd_tls_loglevel = 1
smtpd_tls_received_header = yes
smtpd_tls_session_cache_timeout = 3600s
tls_random_source = dev:/dev/urandom

smtp_use_tls = no
#smtp_tls_note_starttls_offer = yes
#smtp_sasl_auth_enable = no
#smtp_sasl_password_maps = hash:/etc/postfix/sasl_passwd
#smtp_sasl_security_options = noanonymous

# See /usr/share/doc/postfix/TLS_README.gz in the postfix-doc package for
# information on enabling SSL in the smtp client.

myhostname = server
alias_maps = hash:/etc/aliases
alias_database = hash:/etc/aliases
myorigin = /etc/mailname
mydestination = scoditti.com, server, localhost.localdomain, localhost
#relayhost = [smtp.free.fr]:submission
relayhost = smtp.free.fr
mynetworks = 127.0.0.0/8 [::ffff:127.0.0.0]/104 [::1]/128
mailbox_command = procmail -a "$EXTENSION"
mailbox_size_limit = 0
recipient_delimiter = +
inet_interfaces = all
relay_domains = scoditti.com, mail.scoditti.com

#
# anti-spam: smtp restrictions
#
#smtpd_recipient_restrictions = reject_invalid_hostname, reject_unauth_destination, reject_rbl_client sbl.spamhaus.org, permit
smtpd_recipient_restrictions = permit_sasl_authenticated,permit_mynetworks,check_relay_domains
smtpd_helo_restrictions = reject_invalid_helo_hostname, reject_non_fqdn_helo_hostname, reject_unknown_helo_hostname
#
# anti-spam: Using RBL Lists
# RBL list is a lists domains and whether they are spammers or not.
#
smtpd_client_restrictions = reject_rbl_client dnsbl.sorbs.net