nixCraft

rajuk · #1 (**permalink**) 05-05-2006, 11:36 AM

Dear All,

I want to setup Mail server for almost 200 users. I have Fedora core 2 linux. Which mail server is better (Sendmail OR Postscript) . Also please let me know which SPAM and Antivirus software i should prefer on this mail server.
Also if possible please give me the documentation for implement all these things. What type of security i should take to care this server?

Regards,
Raju

rockdalinux · #2 (**permalink**) 05-06-2006, 12:58 AM

1) Go for Postfix it is easy to use and configure

2) Go for SpamAssassin, a powerful open source spam filter http://spamassassin.apache.org/

3) Go for clamav http://www.clamav.net/ virus scanner, you can also use commercial anti virus for your mail server such as McAfee or others

4) You also need to setup IMAP and POP3 server such as dovecot http://www.dovecot.org/ or Cyrus IMAP http://asg.web.cmu.edu/cyrus/imapd/

5) Postfix Howtos and FAQs http://www.postfix.org/docs.html

If you have any other question related to configuration feel free to ask here and we will assist you.

llama · #3 (**permalink**) 05-10-2006, 10:26 PM

I'm also trying to set-up a similar system and have encountered a couple of small glitches. Hopefully, my situtaiton can help the original poster.

Situation: Network & ISP Details

I'm running FC5 on a machine that connects to the web through a router. I have a registered domain that is set-up through a dynamic DNS provider (no-ip.com). My router updates the IP automatically whenever it changes using its built-in update client. I have ports for POP and SMTP forwarded to the linux box, which has a single NIC and static internal/private IP.

Status & Problem

At present, I have postfix, dovecot, and squirellmail running. I'm able to log-in to squirrelmail. I'm also able to receive mail, view it on squirrel mail, and get it through the email client on my desktop. However, I'm unable to send mail to email addresses outside my ISP's domain.

For example, email sent via either my mail client or squirrelmail will reach addresses on my ISP's network, such as test@rogers.com. But mail to test@notrogers.com, or any address not on rogers.com, doesn't reache its destination.

Obviously, I can tell my desktop mail client to use my ISP's SMTP server and work around the problem, but (a) I'm not sure how to do that when using squirrelmail; and (b) I would like to avoid using my ISP's SMTP.

Situation: Current Software Config

I'm running:
- postfix 2.2.8-1.2
- dovecot 1.0-0.beta2.7
- squirrelmail 1.4.6-5

What I've done so far has been guided by the how-to found at http://www.linux.com/article.pl?sid=06/02/28/1515201

Here are the parameters that I've changed in /etc/postfix/main.cf:

Code:

myhostname = mail.nowhere.com
myorigin = $mydomain
inet_interfaces = all
mydestination = $myhostname, localhost.$mydomain, localhost, $mydomain
local_recipient_maps = unix:passwd.byname $alias_maps
mynetworks_style = host

and for /etc/dovecot.conf:

Code:

protocols = imap imaps pop3 pop3s

I ran the 'Quick DNS Check' at pingability.com and got the following results in respect of the mail server (I've blacked-out some info with the xxxx'

:

Code:

Mail Server: mail.nowhere.com
Server Name	mail.nowhere.com
IP	xxx.xxx.xxx.xxx
Location	Canada
Mail Server For	*@nowhere.com
MX Priority	5
Connect Response Time	463ms
Server 'Hello' Line	220 mail.nowhere.com ESMTP Postfix
Open Relay?	No Problems Found
RDNS Entry	XXXXXXXXXXXXXX.cpe.net.cable.rogers.com.
Mail Server Info
Info Type   	Message   
Information	The mail server accepted email for 'abuse@nowhere.com' email address as it should have (250 Ok).
Information	The mail server correctly rejected email to 'email_validation_service@domaincheckingservice.pingability.com' (554 <email_validation_service@domaincheckingservice.pingability.com>: Relay access denied)

Any and all help you can provide would be greatly appreciated.

N

rockdalinux · #4 (**permalink**) 05-10-2006, 11:43 PM

Hi there,

It look like from output of pingability.com email send was rejected. Most ISP blocks outgoing emails from (A)DSL/PPP internet connections.

However as you said you can configure your Postfix mail server to send email-using ISP authenticated gateway this is the best solution for both your desktop and squirrelmail webbased clients. Just add following line main.cf:

Code:

relayhost = smtp.yourispmailserver.com

And restart postfix service. If you have, more question feel free to hit reply button

tom · #5 (**permalink**) 05-10-2006, 11:59 PM

If your ISP requires SMTP AUTH to send out email then you need to add following lines to main.cf:

Code:

relayhost = smtp.yourispmailserver.com
smtp_sasl_auth_enable = yes
smtp_sasl_security_options =
smtp_sasl_password_maps = hash:/etc/postfix/smtp_passwd

Put SMTP username and password in /etc/postfix/smtp_passwd

Code:

smtp.yourispmailserver.com username:password

Build hash table (in /etc/postfix/ directory):

Code:

cd /etc/postfix/
postmap smtp_passwd

Restart postfix.

llama · #6 (**permalink**) 05-11-2006, 12:30 AM

Rockdalinux/Tom,

Thanks very much for your help. Your suggestions fixed the glitch and everything is working wtih postfix and squirrelmail.

Is there anything I should/can do to my postfix configuration to make it less vulnerable to spammers, etc?

Now on to configuring spamassassin and clamav.

Will report back on progress.

N

Update: Spamassassin and ClamAV installed. Testing soon.

tom · #7 (**permalink**) 05-11-2006, 01:23 AM

Deny all mails coming from Internet … use iptables

At least it works for me

sure let us know about your spamassassin and clamav config issues

llama · #8 (**permalink**) 05-11-2006, 07:26 AM

Quote:

Originally Posted by tom

Deny all mails coming from Internet … use iptables

At least it works for me

sure let us know about your spamassassin and clamav config issues

I followed the aforementioned tutorial and by the time I was done, the relay began to reject mail going out of rogers.com.

I've gone back to the beginning to try and see where the issue is. Could it be that my ISP has blocked postfix connecting to its smtp server?

N

monk · #9 (**permalink**) 05-11-2006, 08:52 AM

Many ISP blocks smtp port 25 connections. The best way to get more info is to paste log of /var/log/maillog or /var/log/mail.log file.

You can get live view with tail –f /var/log/mailog command. Then send mail using Client see what error message you get.

tom · #10 (**permalink**) 05-11-2006, 08:57 AM

But it was working earlier right? What is problem now…

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
Cent OS or Fedora for production server	abspm24	CentOS / RHEL / Fedora	4	09-03-2008 05:54 PM
amanda setup on fedora 7	Pdarrough	Linux software	7	05-06-2008 06:15 AM
Newbie needing help w/Fedora mail server setup	Drewsmoken	Mail Servers	1	03-28-2008 05:28 AM
script mail setup	MAFI	Shell scripting	0	03-02-2008 02:03 PM
about new mail server setup	jhn_daz@yahoo.com	Mail Servers	2	11-01-2007 10:43 AM

nixCraft

Mail server setup on fedora

Mail server setup on fedora

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)

Similar Threads