Всем Привет! Не могу никак разобраться с настройками сервера
Есть сервер текущий рабочий, хочу перенести все на новый
- Письма хранятся в папках, по такому типу (почта на два доменных имени):
/var/www/administrator/data/email/site1/<username>
/var/www/administrator/data/email/site2/<username>
1. Перенес с помощью rsync, в такую же папку, создал такого же пользователя "administrator"
2. Также перенес файлы конфигов dovecot и postfix
файл main.cf
[spoiler]
soft_bounce = no
queue_directory = /var/spool/postfix
daemon_directory = /usr/libexec/postfix
command_directory = /usr/sbin
data_directory = /var/lib/postfix
mail_owner = postfix
default_privs = nobody
inet_interfaces = all
inet_protocols = ipv4
myhostname = site1.ru
mydomain = localdomain
myorigin = site1.ru
mydestination = $myhostname,localhost.$myhostname,localhost
local_recipient_maps = proxy:unix:passwd.byname $alias_maps
unknown_local_recipient_reject_code = 550
mynetworks = айпи.офиса.1.11/32
relay_domains =
alias_maps = hash:/etc/aliases
alias_database = hash:/etc/aliases
#mail_spool_directory = /var/mail
smtpd_banner = $myhostname ESMTP
debug_peer_level = 2
debug_peer_list = 127.0.0.1
debugger_command =
PATH=/bin:/usr/bin:/usr/local/bin:/usr/X11R6/bin
xxgdb $daemon_directory/$process_name $process_id & sleep 5
sendmail_path = /usr/sbin/sendmail.postfix
newaliases_path = /usr/bin/newaliases.postfix
mailq_path = /usr/bin/mailq.postfix
setgid_group = postdrop
html_directory = no
manpage_directory = /usr/local/man
sample_directory = /usr/share/doc/postfix-2.6.6/samples
config_directory = /etc/postfix
mailbox_size_limit = 0
virtual_alias_domains = /etc/mail/local-host-names
virtual_alias_maps = hash:/etc/mail/virtusertable
smtp_generic_maps = hash:/etc/mail/generic
broken_sasl_auth_clients = no
smtpd_tls_auth_only = no
smtp_use_tls = yes
smtpd_use_tls = yes
smtp_tls_note_starttls_offer = yes
tls_random_source = dev:/dev/urandom
#smtpd_tls_key_file = /etc/postfix/sslsmtpd.key
#smtpd_tls_cert_file = /etc/postfix/sslsmtpd.crt
smtpd_tls_CAfile = etc/postfix/postfix.pem
smtp_tls_CAfile = etc/postfix/postfix.pem
smtpd_tls_key_file = etc/postfix/postfix.pem
smtpd_tls_cert_file = etc/postfix/postfix.pem
smtpd_tls_received_header = yes
smtpd_tls_loglevel = 1
smtpd_sender_restrictions = permit_sasl_authenticated, check_sender_access hash:/etc/mail/access
smtpd_client_restrictions = permit_sasl_authenticated, check_client_access hash:/etc/mail/access
smtpd_recipient_restrictions = permit_sasl_authenticated, check_sender_access hash:/etc/mail/access, check_client_access hash:/etc/mail/access, check_recipient_access hash:/etc/mail/access, permit_mynetworks, reject_unauth_destination, reject_unlisted_recipient, reject_unverified_recipient, reject_unknown_client, check_policy_service inet:127.0.0.1:60000
smtpd_reject_unlisted_sender = yes
smtpd_milters = inet:127.0.0.1:8891
non_smtpd_milters = inet:127.0.0.1:8891
message_size_limit = 71200000
[/spoiler]
файл master.cf
[spoiler]
#
# Postfix master process configuration file. For details on the format
# of the file, see the master(5) manual page (command: "man 5 master").
#
# Do not forget to execute "postfix reload" after editing this file.
#
# ==========================================================================
# service type private unpriv chroot wakeup maxproc command + args
# (yes) (yes) (yes) (never) (100)
# ==========================================================================
smtp inet n - n - - smtpd
#submission inet n - n - - smtpd
# -o smtpd_tls_security_level=encrypt
# -o smtpd_sasl_auth_enable=yes
# -o smtpd_client_restrictions=permit_sasl_authenticated,reject
# -o milter_macro_daemon_name=ORIGINATING
smtps inet n - n - - smtpd
-o smtpd_tls_wrappermode=yes
-o smtpd_sasl_auth_enable=yes
-o smtpd_client_restrictions=permit_sasl_authenticated,reject
-o milter_macro_daemon_name=ORIGINATING
#628 inet n - n - - qmqpd
pickup fifo n - n 60 1 pickup
cleanup unix n - n - 0 cleanup
qmgr fifo n - n 300 1 qmgr
#qmgr fifo n - n 300 1 oqmgr
tlsmgr unix - - n 1000? 1 tlsmgr
rewrite unix - - n - - trivial-rewrite
bounce unix - - n - 0 bounce
defer unix - - n - 0 bounce
trace unix - - n - 0 bounce
verify unix - - n - 1 verify
flush unix n - n 1000? 0 flush
proxymap unix - - n - - proxymap
proxywrite unix - - n - 1 proxymap
smtp unix - - n - - smtp
# When relaying mail as backup MX, disable fallback_relay to avoid MX loops
relay unix - - n - - smtp
-o smtp_fallback_relay=
# -o smtp_helo_timeout=5 -o smtp_connect_timeout=5
showq unix n - n - - showq
error unix - - n - - error
retry unix - - n - - error
discard unix - - n - - discard
local unix - n n - - local
virtual unix - n n - - virtual
lmtp unix - - n - - lmtp
anvil unix - - n - 1 anvil
scache unix - - n - 1 scache
#
# ====================================================================
# Interfaces to non-Postfix software. Be sure to examine the manual
# pages of the non-Postfix software to find out what options it wants.
#
# Many of the following services use the Postfix pipe(8) delivery
# agent. See the pipe(8) man page for information about ${recipient}
# and other message envelope options.
# ====================================================================
#
# maildrop. See the Postfix MAILDROP_README file for details.
# Also specify in main.cf: maildrop_destination_recipient_limit=1
#
#maildrop unix - n n - - pipe
# flags=DRhu user=vmail argv=/usr/local/bin/maildrop -d ${recipient}
#
# ====================================================================
#
# The Cyrus deliver program has changed incompatibly, multiple times.
#
#old-cyrus unix - n n - - pipe
# flags=R user=cyrus argv=/usr/lib/cyrus-imapd/deliver -e -m ${extension} ${user}
#
# ====================================================================
#
# Cyrus 2.1.5 (Amos Gouaux)
# Also specify in main.cf: cyrus_destination_recipient_limit=1
#
#cyrus unix - n n - - pipe
# user=cyrus argv=/usr/lib/cyrus-imapd/deliver -e -r ${sender} -m ${extension} ${user}
#
# ====================================================================
#
# See the Postfix UUCP_README file for configuration details.
#
#uucp unix - n n - - pipe
# flags=Fqhu user=uucp argv=uux -r -n -z -a$sender - $nexthop!rmail ($recipient)
#
# ====================================================================
#
# Other external delivery methods.
#
#ifmail unix - n n - - pipe
# flags=F user=ftn argv=/usr/lib/ifmail/ifmail -r $nexthop ($recipient)
#
#bsmtp unix - n n - - pipe
# flags=Fq. user=bsmtp argv=/usr/local/sbin/bsmtp -f $sender $nexthop $recipient
#
#scalemail-backend unix - n n - 2 pipe
# flags=R user=scalemail argv=/usr/lib/scalemail/bin/scalemail-store
# ${nexthop} ${user} ${extension}
#
#mailman unix - n n - - pipe
# flags=FR user=list argv=/usr/lib/mailman/bin/postfix-to-mailman.py
# ${nexthop} ${user}
#smtps inet n - n - - smtpd
[/spoiler]
файл dovecot.conf
[spoiler]
## Dovecot configuration file# If you're in a hurry, see http://wiki.dovecot.org/QuickConfiguration
# "doveconf -n" command gives a clean output of the changed settings. Use it
# instead of copy&pasting files when posting to the Dovecot mailing list.
# '#' character and everything after it is treated as comments. Extra spaces
# and tabs are ignored. If you want to use either of these explicitly, put the
# value inside quotes, eg.: key = "# char and trailing whitespace "
# Default values are shown for each setting, it's not required to uncomment
# those. These are exceptions to this though: No sections (e.g. namespace {})
# or plugin settings are added by default, they're listed only as examples.
# Paths are also just examples with the real defaults being based on configure
# options. The paths listed here are for configure --prefix=/usr
# --sysconfdir=/etc --localstatedir=/var
# Protocols we want to be serving.
#protocols = imap pop3 lmtp
# A comma separated list of IPs or hosts where to listen in for connections.
# "*" listens in all IPv4 interfaces, "::" listens in all IPv6 interfaces.
# If you want to specify non-default ports or anything more complex,
# edit conf.d/master.conf.
#listen = *, ::
# Base directory where to store runtime data.
#base_dir = /var/run/dovecot/
# Greeting message for clients.
#login_greeting = Dovecot ready.
# Space separated list of trusted network ranges. Connections from these
# IPs are allowed to override their IP addresses and ports (for logging and
# for authentication checks). disable_plaintext_auth is also ignored for
# these networks. Typically you'd specify your IMAP proxy servers here.
#login_trusted_networks =
# Sepace separated list of login access check sockets (e.g. tcpwrap)
#login_access_sockets =
# Show more verbose process titles (in ps). Currently shows user name and
# IP address. Useful for seeing who are actually using the IMAP processes
# (eg. shared mailboxes or if same uid is used for multiple accounts).
#verbose_proctitle = no
# Should all processes be killed when Dovecot master process shuts down.
# Setting this to "no" means that Dovecot can be upgraded without
# forcing existing client connections to close (although that could also be
# a problem if the upgrade is e.g. because of a security fix).
#shutdown_clients = yes
# If non-zero, run mail commands via this many connections to doveadm server,
# instead of running them directly in the same process.
#doveadm_worker_count = 0
# UNIX socket or host:port used for connecting to doveadm server
#doveadm_socket_path = doveadm-server
##
## Dictionary server settings
##
# Dictionary can be used to store key=value lists. This is used by several
# plugins. The dictionary can be accessed either directly or though a
# dictionary server. The following dict block maps dictionary names to URIs
# when the server is used. These can then be referenced using URIs in format
# "proxy::<name>".
dict {
#quota = mysql:/etc/dovecot/dovecot-dict-sql.conf.ext
#expire = sqlite:/etc/dovecot/dovecot-dict-sql.conf.ext
}
# Most of the actual configuration gets included below. The filenames are
# first sorted by their ASCII value and parsed in that order. The 00-prefixes
# in filenames are intended to make it easier to understand the ordering.
!include conf.d/*.conf
# A config file can also tried to be included without giving an error if
# it's not found:
#!include_try /etc/dovecot/local.conf
listen = *
# Месторасположение пользовательских почтовых ящиков. Это такой же параметр
# как и старый default_mail_env. Значение по умолчанию отсутствует, это
# означает, что Dovecot попытается найти ящики автоматически. Это не будет
# работать, если у пользователя до сих пор нет никакой почты, поэтому вы
# должны непосредственно указать Dovecot полный путь к ящику.
#
# Если вы используете mbox, указание пути к INBOX файлу (например, /var/mail/%u)
# недостаточно. Вам также необходимо указать Dovecot где находятся другие ящики
# и где Dovecot может расположить файлы с индексами. Это называется "корневая
# почтовая директория", и она должна быть указана первой в параметре mail_location.
#
# Существует несколько специальных переменных, которые вы можете использовать:
#
# %u - имя пользователя
# %n - пользовательская часть в user@domain, то же самое что и %u
# если не задана доменная часть
# %d - доменая часть в user@domain, пустая, если не указан домен
# %h - домашняя директория
#
# Смотрите doc/variables.txt для полного списка переменных.
#
# Некоторые примеры:
# mail_location = maildir:~/Maildir
# mail_location = mbox:~/mail:INBOX=/var/mail/%u
# mail_location = mbox:/var/mail/%d/%1n/%n:INDEX=/var/indexes/%d/%1n/%n
#
mail_location = maildir:/var/www/administrator/data/email/%d/%n
# Настройка пространства имен почтового ящика
# Указывает разделитель в пути, префикс для всех папок, и наличие отдельной папки Входящие
namespace private {
separator = /
prefix = [TESTMAIL]/
inbox = yes
}
[/spoiler]
В файле dovecot.passwd записи в таком виде:
[spoiler]
manager@site1.ru:{CRAM-MD5}61f2a1axc3345a2f7788c9741b857834xxc1237597dfcae13a8e1443b843206a4:648:502::/var/www/administrator/data/email/site1/mananger:::maildir:/var/www/administrator/data/email/site1.ru/manager/.maildir
[/spoiler]
файл /etc/aliases
[spoiler]
#
# Aliases in this file will NOT be expanded in the header from
# Mail, but WILL be visible over networks or from /bin/mail.
#
# >>>>>>>>>> The program "newaliases" must be run after
# >> NOTE >> this file is updated for any changes to
# >>>>>>>>>> show through to sendmail.
## Basic system aliases -- these MUST be present.
mailer-daemon: postmaster
postmaster: root
# General redirections for pseudo accounts.
bin: root
daemon: root
adm: root
lp: root
sync: root
shutdown: root
halt: root
mail: root
news: root
uucp: root
operator: root
games: root
gopher: root
ftp: root
nobody: root
radiusd: root
nut: root
dbus: root
vcsa: root
canna: root
wnn: root
rpm: root
nscd: root
pcap: root
apache: root
webalizer: root
dovecot: root
fax: root
quagga: root
radvd: root
pvm: root
amanda: root
privoxy: root
ident: root
named: root
xfs: root
gdm: root
mailnull: root
postgres: root
sshd: root
smmsp: root
postfix: root
netdump: root
ldap: root
squid: root
ntp: root
mysql: root
desktop: root
rpcuser: root
rpc: root
nfsnobody: root
ingres: root
system: root
toor: root
manager: root
dumper: root
abuse: root
newsadm: news
newsadmin: news
usenet: news
ftpadm: ftp
ftpadmin: ftp
ftp-adm: ftp
ftp-admin: ftp
www: webmaster
webmaster: root
noc: root
security: root
hostmaster: root
info: postmaster
marketing: postmaster
sales: postmaster
support: postmaster
# trap decode to catch security attacks
decode: root
virtuser_503: \virtuser_503
virtuser_504: \virtuser_504
virtuser_505: \virtuser_505,marketing3@site1.ru
virtuser_506: \virtuser_506
virtuser_507: \virtuser_507
virtuser_508: \virtuser_508
virtuser_509: \virtuser_509
virtuser_510: \virtuser_510
virtuser_511: \virtuser_511
virtuser_512: \virtuser_512
virtuser_513: \virtuser_513
virtuser_515: \virtuser_515
virtuser_516: \virtuser_516
virtuser_517: \virtuser_517
virtuser_518: \virtuser_518
virtuser_519: \virtuser_519
virtuser_520: \virtuser_520
virtuser_521: \virtuser_521
virtuser_522: \virtuser_522
virtuser_523: \virtuser_523
virtuser_524: \virtuser_524
virtuser_525: \virtuser_525
virtuser_526: \virtuser_526
virtuser_527: \virtuser_527
virtuser_528: \virtuser_528
virtuser_529: \virtuser_529
virtuser_530: \virtuser_530
virtuser_532: \virtuser_532,sales2@site2.ru
virtuser_533: \virtuser_533
virtuser_534: \virtuser_534
virtuser_535: \virtuser_535
virtuser_536: \virtuser_536
virtuser_538: \virtuser_538
virtuser_539: \virtuser_539
virtuser_540: \virtuser_540
virtuser_541: \virtuser_541
virtuser_542: \virtuser_542
virtuser_543: \virtuser_543
virtuser_544: \virtuser_544
virtuser_545: \virtuser_545
virtuser_546: \virtuser_546
virtuser_547: \virtuser_547
virtuser_548: \virtuser_548
virtuser_549: \virtuser_549
virtuser_550: \virtuser_550
virtuser_551: \virtuser_551
virtuser_552: \virtuser_552
virtuser_553: \virtuser_553
virtuser_554: \virtuser_554
virtuser_555: \virtuser_555
virtuser_556: \virtuser_556
virtuser_557: \virtuser_557
virtuser_558: \virtuser_558
virtuser_559: \virtuser_559
virtuser_560: \virtuser_560
virtuser_561: \virtuser_561
virtuser_562: \virtuser_562
virtuser_563: \virtuser_563
virtuser_564: \virtuser_564
virtuser_565: \virtuser_565
virtuser_566: \virtuser_566
virtuser_567: \virtuser_567
virtuser_568: \virtuser_568
virtuser_569: \virtuser_569
virtuser_570: \virtuser_570,|"/usr/local/ispmgr/sbin/vacation -f /var/www/administrator/data/email/site1.ru/site1cloud/.vacation.db -m /var/www/administrator/data/email/site1.ru/site1cloud/.vacation.msg site1cloud"
virtuser_572: \virtuser_572
virtuser_573: \virtuser_573
virtuser_574: \virtuser_574
virtuser_575: \virtuser_575
virtuser_576: \virtuser_576
virtuser_577: \virtuser_577
virtuser_578: \virtuser_578
virtuser_579: \virtuser_579
virtuser_580: \virtuser_580
virtuser_581: \virtuser_581
virtuser_582: \virtuser_582
virtuser_583: \virtuser_583
virtuser_584: \virtuser_584
virtuser_585: \virtuser_585
virtuser_586: \virtuser_586
virtuser_587: \virtuser_587
virtuser_588: \virtuser_588
virtuser_589: \virtuser_589
virtuser_591: \virtuser_591
virtuser_593: \virtuser_593
virtuser_595: \virtuser_595,virtuser_572@site1.ru
virtuser_596: \virtuser_596
virtuser_597: \virtuser_597
virtuser_598: \virtuser_598
virtuser_599: \virtuser_599
virtuser_600: \virtuser_600
virtuser_601: \virtuser_601,sklad-4@site1.ru
virtuser_602: \virtuser_602
virtuser_603: \virtuser_603
virtuser_604: \virtuser_604
virtuser_605: \virtuser_605
virtuser_606: \virtuser_606
virtuser_607: \virtuser_607
virtuser_610: \virtuser_610
virtuser_611: \virtuser_611
virtuser_612: \virtuser_612
virtuser_613: \virtuser_613
virtuser_614: \virtuser_614
virtuser_616: \virtuser_616
virtuser_618: \virtuser_618
virtuser_619: \virtuser_619
virtuser_620: \virtuser_620,urist@site2.ru
virtuser_621: \virtuser_621
virtuser_622: \virtuser_622
virtuser_623: \virtuser_623
virtuser_624: \virtuser_624
virtuser_625: \virtuser_625
virtuser_626: \virtuser_626
virtuser_627: \virtuser_627
virtuser_628: \virtuser_628
virtuser_629: \virtuser_629
virtuser_630: \virtuser_630
virtuser_631: \virtuser_631
virtuser_632: \virtuser_632
virtuser_633: \virtuser_633
virtuser_634: \virtuser_634
virtuser_635: \virtuser_635
virtuser_636: \virtuser_636
virtuser_637: \virtuser_637
virtuser_638: \virtuser_638
virtuser_639: \virtuser_639
virtuser_640: \virtuser_640
virtuser_641: \virtuser_641
virtuser_642: \virtuser_642
virtuser_643: \virtuser_643
virtuser_644: \virtuser_644
virtuser_645: \virtuser_645
virtuser_646: \virtuser_646
virtuser_647: \virtuser_647
virtuser_648: \virtuser_648
virtuser_649: \virtuser_649
virtuser_650: \virtuser_650
virtuser_651: \virtuser_651
virtuser_652: \virtuser_652
virtuser_653: \virtuser_653
virtuser_654: \virtuser_654
# Person who should get root's mail
#root: marc
[/spoiler]
В папке /etc/mail/ файлы "access, access.db, domainips, generic, generic.db, local-host-names, virtusertable, virtusertable.db".
файл /etc/mail/virtusertable в таком виде.
[spoiler]
username@site1.ru virtuser_503
username2@site1.ru virtuser_504
username@site2.ru virtuser_502
username2@site2.ru virtuser_508
[/spoiler]
Тестирую логин IMAP
[spoiler]
[amtyyes@domain ~]# telnet 127.0.0.1 143
Trying 127.0.0.1...
Connected to 127.0.0.1.
Escape character is '^]'.
* OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE STARTTLS AUTH=PLAIN AUTH=LOGIN AUTH=DIGEST-MD5 AUTH=CRAM-MD5] Dovecot ready.
1 LOGIN username@site1.ru *пароль*
1 OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS MULTIAPPEND UNSELECT CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRES WITHIN CONTEXT=SEARCH LIST-STATUS] Logged in
1 SELECT INBOX
* FLAGS (\Answered \Flagged \Deleted \Seen \Draft $Forwarded $MDNSent Junk NonJunk)
* OK [PERMANENTFLAGS (\Answered \Flagged \Deleted \Seen \Draft $Forwarded $MDNSent Junk NonJunk \*)] Flags permitted.
* 3543 EXISTS
* 0 RECENT
* OK [UNSEEN 19] First unseen.
* OK [UIDVALIDITY 1411968184] UIDs valid
* OK [UIDNEXT 7968] Predicted next UID
* OK [HIGHESTMODSEQ 2685] Highest
1 OK [READ-WRITE] Select completed.
[/spoiler]
Тестирую SMTP без авторизации
[spoiler]
[bloood@domain ~]# telnet 127.0.0.1 25
Trying 127.0.0.1...
Connected to 127.0.0.1.
Escape character is '^]'.
220 site1.ru ESMTP
helo darling
250 site1.ru
MAIL FROM: root@localhost
451 4.7.1 Service unavailable - try again later
[/spoiler]
не могу понять, что я не так делаю.
Вариант для распечатки
