Difference between revisions of "Mail Setup (Wheezy)"

Revision as of 12:29, 6 May 2014

The basics given here are pretty much identical for any *nix setup.

Virtual Mail User

addgroup --gid 999 vmail
useradd -d /var/vmail -s /usr/sbin/nologin -g 999 -r -u 999 --disabled-password --gecos "" vmail
chmod 2770 /var/vmail

Keep track of what ids you use for vmail's user/group.

Mailing Certificate(s)

Make a 2048 bit rsa certificate for your IMAP and/or SMTP Submission domain

Make a private directory in /etc/ that is chmod 0700
openssl genrsa -out keyname.key 2048
chmod 600 keyname.key
Either leave as snake-oil certs or get it signed by a 'real' signer. The latter is more of a convenience, really.

/etc/aliases

mailer-daemon: postmaster
postmaster: root
nobody: root
hostmaster: root
usenet: root
news: root
webmaster: root
www: root
ftp: root
noc: root
security: root
logcheck: root
clamav: root
root: administrator

Debian Wheezy

Initial: Designing a Server - IPMI Installation

Core: Network - OpenSSH - Packages - sysctl.conf - Iptables - Security - User Management

Stack: Unbound - MySQL - Nginx - PHP (5.4)

Mail

Mail Setup - Mail Tables - OpenDKIM - Mail and DNS - Spamassassin - ClamAV - Postfix - Dovecot - Reputation Management