[base]

name=CentOS-$releasever – Base

mirrorlist=http://mirrorlist.centos.org/?release=$releasever&arch=$basearch&repo=os

#baseurl=http://mirror.centos.org/centos/$releasever/os/$basearch/

gpgcheck=1

gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-5

exclude=postfix-*

#released updates

[updates]

name=CentOS-$releasever – Updates

mirrorlist=http://mirrorlist.centos.org/?release=$releasever&arch=$basearch&repo=updates

#baseurl=http://mirror.centos.org/centos/$releasever/updates/$basearch/

gpgcheck=1

gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-5

exclude=postfix-*

[centosplus]

name=CentOS-$releasever – Plus

mirrorlist=http://mirrorlist.centos.org/?release=$releasever&arch=$basearch&repo=centosplus

#baseurl=http://mirror.centos.org/centos/$releasever/centosplus/$basearch/

gpgcheck=1

enabled=1

gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-5

includepkgs=postfix-*

Dependencies Resolved

=================================================================================

 Package       Arch          Versio                     Repository          Size

=================================================================================

Installing:

 postfix     x86_64    2:2.3.3-2.3.centos.mysql_pgsql    centosplus         3.8 M

Updating:

 dovecot     x86_64    1.0.7-7.el5_7.1                    base              1.7 M

Installing for dependencies:

 postgresql  x86_64    8.1.23-1.el5_7.3                   base              2.9 M

Transaction Summary

=================================================================================

Install       2 Package(s)

Upgrade       1 Package(s)

btree

cidr

environ

hash

ldap

mysql

nis

pcre

pgsql

proxy

regexp

static

unix

cyrus

dovecot

[root@localhost ~]# cd /tmp

[root@localhost ~]# wget http://centos.alt.ru/repository/centos/5/x86_64/dovecot-1.2.17-2.el5.x86_64.rpm

[root@localhost ~]# wget http://centos.alt.ru/repository/centos/5/x86_64/dovecot-mysql-1.2.17-2.el5.x86_64.rpm

[root@localhost ~]# wget http://centos.alt.ru/repository/centos/5/x86_64/dovecot-devel-1.2.17-2.el5.x86_64.rpm

[root@localhost ~]# wget http://centos.alt.ru/repository/centos/5/x86_64/dovecot-pgsql-1.2.17-2.el5.x86_64.rpm

[root@localhost ~]# wget http://centos.alt.ru/repository/centos/5/x86_64/dovecot-pigeonhole-1.2.17-2.el5.x86_64.rpm

[root@localhost ~]# rpm -Uvh dovecot-1.2.17-2.el5.x86_64.rpm

[root@localhost ~]# rpm -Uvh dovecot-mysql-1.2.17-2.el5.x86_64.rpm

[root@localhost ~]# rpm -Uvh dovecot-devel-1.2.17-2.el5.x86_64.rpm

[root@localhost ~]# rpm -Uvh dovecot-pgsql-1.2.17-2.el5.x86_64.rpm

[root@localhost ~]# rpm -Uvh dovecot-pigeonhole-1.2.17-2.el5.x86_64.rpm

[root@localhost ~]# yum remove sendmail

[root@localhost ~]#  chkconfig mysqld on

[root@localhost ~]#  /usr/bin/mysql_secure_installation  

NOTE: RUNNING ALL PARTS OF THIS SCRIPT IS RECOMMENDED FOR ALL MySQL

      SERVERS IN PRODUCTION USE!  PLEASE READ EACH STEP CAREFULLY!

In order to log into MySQL to secure it, we’ll need the current

password for the root user.  If you’ve just installed MySQL, and

you haven’t set the root password yet, the password will be blank,

so you should just press enter here.

Enter current password for root (enter for none):    #如果還沒設過密碼請按ENTER

OK, successfully used password, moving on…

Setting the root password ensures that nobody can log into the MySQL

root user without the proper authorisation.

You already have a root password set, so you can safely answer ‘n’.

Change the root password? [Y/n] y  #詢問是否要更改密碼

New password:                                #輸入新密碼

Re-enter new password:                  #確認新密碼

Password updated successfully!

Reloading privilege tables..

 … Success!

By default, a MySQL installation has an anonymous user, allowing anyone

to log into MySQL without having to have a user account created for

them.  This is intended only for testing, and to make the installation

go a bit smoother.  You should remove them before moving into a

production environment.

Remove anonymous users? [Y/n] y   #詢問是否刪除匿名USER

 … Success!

Normally, root should only be allowed to connect from ‘localhost’.  This

ensures that someone cannot guess at the root password from the network.

Disallow root login remotely? [Y/n] y   #詢問MySQL是否只給本機連結

 … Success!

By default, MySQL comes with a database named ‘test’ that anyone can

access.  This is also intended only for testing, and should be removed

before moving into a production environment.

Remove test database and access to it? [Y/n] y  #詢問是否要刪除TEST資料庫

 - Dropping test database…

 … Success!

 - Removing privileges on test database…

 … Success!

Reloading the privilege tables will ensure that all changes made so far

will take effect immediately.

Reload privilege tables now? [Y/n] y    #是否要現在刷新權限

 … Success!

Cleaning up…

All done!  If you’ve completed all of the above steps, your MySQL

installation should now be secure.

Thanks for using MySQL!

[root@localhost ~]# /etc/init.d/mysqld restart

mysql> CREATE DATABASE mail;

mysql> GRANT ALL ON mail.* TO ‘mail_admin‘@’localhost’ IDENTIFIED BY ‘PASSWORD‘;

mysql> FLUSH PRIVILEGES;

mysql> quit;

[root@localhost ~]# wget http://sourceforge.net/projects/postfixadmin/files/latest/download?source=directory

[root@localhost ~]# tar -zxvpf postfixadmin-2.3.5.tar.gz

[root@localhost ~]# mv postfixadmin-2.3.5 /var/www/html/postfixadmin

#  Web application to manage Postfix email server

<Directory “/var/www/html/postfixadmin”>

Order Allow,Deny

Allow from all

</Directory>

Alias /postfixadmin /var/www/html/postfixadmin

Alias /PostFixAdmin /var/www/html/postfixadmin

Alias /PostfixAdmin /var/www/html/postfixadmin

[root@localhost ~]# chkconfig httpd on

#修改前

$CONF['configured'] =false;

#修改後

$CONF['configured'] =true;

#修改前

$CONF['database_type'] = ‘mysql’;

$CONF['database_host'] = ‘localhost’;

$CONF['database_user'] = ‘postfix’;

$CONF['database_password'] = ‘postfixadmin’;

$CONF['database_name'] = ‘postfix’;

#修改後

$CONF['database_type'] = ’mysqli‘;

$CONF['database_host'] = ‘localhost’;

$CONF['database_user'] = ’postfix‘;

$CONF['database_password'] = ’123456‘;

$CONF['database_name'] = ’mail‘;

#修改前

$CONF['admin_email'] = ‘postmaster@change-this-to-your.domain.tld’;

#修改後

$CONF['admin_email'] = ‘postmaster@faq-test.tk‘;

#修改前

$CONF['encrypt'] = ‘md5crypt’;

#修改後

$CONF['encrypt'] = ‘dovecot:CRAM-MD5‘;

#修改前

$CONF['default_language'] = ‘en’;

#修改後

$CONF['default_language'] = ’cn‘;

#修改前

$CONF['domain_path'] = ‘NO’;

$CONF['domain_in_mailbox'] = ‘YES’;

#修改後

$CONF['domain_path'] = ’YES‘;

$CONF['domain_in_mailbox'] = ’NO‘;

#修改前

$CONF['aliases'] = ’10′;

$CONF['mailboxes'] = ’10′;

$CONF['maxquota'] = ’10′;

#修改後

$CONF['aliases'] = ’100‘;            #設定一個網域的別名數

$CONF['mailboxes'] = ’100‘;       #設定一個網域信箱數量

$CONF['maxquota'] = ’50000‘;   #設定一個網域整個信箱最大容量限制 MB

$CONF['fetchmail'] = ‘YES‘;

#修改前

$CONF['quota'] = ‘NO’;

$CONF['used_quotas'] = ‘NO’;

$CONF['new_quota_table'] = ‘NO’;

#修改後

$CONF['quota'] = ’YES‘;                       #可使用配額

$CONF['used_quotas'] = ’YES‘;           #在PostfixAdmin顯示使用量

$CONF['new_quota_table'] = ’YES‘;    #若在上面有把Dovecot升級，就可使用新的配額表

#修改前

$CONF['setup_password'] = ‘changeme’;

#修改後

$CONF['setup_password'] = ‘899cdb7e38fc0c6b13bbc282165683fe:b17944045ffd005187beb093bdf87fbf2a0537dd‘;

[root@localhost ~]# rm -rf setup.php

#修改前

#myhostname = host.domain.tld

#mydomain = domain.tld

#myorigin = $mydomain

inet_interfaces = localhost

mydestination = $myhostname, localhost.$mydomain, localhost

#mynetworks = 168.100.189.0/28, 127.0.0.0/8

#修改後

myhostname = mail.faq-test.tk

mydomain = faq-test.tk

myorigin = $mydomain

inet_interfaces = all

mydestination = localhost, localhost.localdomain

mynetworks = 127.0.0.0/8

#=====================Vritual Mailbox settings (虛擬郵箱域配置)=============

# ADDRESS REDIRECTION (VIRTUAL DOMAIN)

#

# The VIRTUAL_README document gives information about the many forms

# of domain hosting that Postfix supports.

# The follwing lines connect Postfix with the MySQL database that contains information about

# the virtual users/accounts hosted. See proxymap(8) virtual(5) and mysql_table(5)

#

virtual_mailbox_domains = proxy:mysql:/etc/postfix/mysql_virtual_domains_maps.cf

virtual_alias_maps = proxy:mysql:/etc/postfix/mysql_virtual_alias_maps.cf

virtual_mailbox_maps = proxy:mysql:/etc/postfix/mysql_virtual_mailbox_maps.cf

#

# Additional for quota support

virtual_create_maildirsize = yes

virtual_mailbox_extended = yes

virtual_mailbox_limit_maps = mysql:/etc/postfix/mysql_virtual_mailbox_limit_maps.cf

virtual_mailbox_limit_override = yes

virtual_maildir_limit_message = Sorry, this user has exceeded their disk space quota, please try again later.

virtual_overquota_bounce = yes

#

#Specify the user/group that owns the mail folders. I’m not sure if this is strictly necessary when using Dovecot’s LDA.

virtual_uid_maps = static:5000

virtual_gid_maps = static:5000

#

#Specifies which tables proxymap can read: http://www.postfix.org/postconf.5.html#proxy_read_maps

proxy_read_maps = $local_recipient_maps $mydestination $virtual_alias_maps $virtual_alias_domains $virtual_mailbox_maps $virtual_mailbox_domains $relay_recipient_maps $relay_domains $canonical_maps $sender_canonical_maps $recipient_canonical_maps $relocated_maps $transport_maps $mynetworks $virtual_mailbox_limit_maps

user = postfix

password = 123456

hosts = localhost

dbname = mail

table = domain

select_field = domain

where_field = domain

query  = SELECT domain FROM domain WHERE domain=’%s’ AND active = ’1′

#optional query to use when relaying for backup MX

#query = SELECT domain FROM domain WHERE domain=’%s’ AND backupmx = ’0′ AND active = ’1′

user = postfix

password = 123456

hosts = localhost

dbname = mail

query = SELECT goto FROM alias WHERE address=’%s’ AND active = ’1′

user = postfix

password = 123456

hosts = localhost

dbname = mail

query = SELECT CONCAT(domain,’/',maildir) FROM mailbox WHERE username=’%s’ AND active = 1

user = postfix

password = 123456

hosts = localhost

dbname = mail

query = SELECT quota FROM mailbox WHERE username=’%s’ AND active = ’1′

#============SASL SMTP Authentication (SMTP認證配置)===================

#SASL SUPPORT FOR CLIENTS

#

# The following options set parameters needed by Postfix to enable

# SMTP AUTH support using Dovecot’s SASL component for authentication of mail clients.

# See: /usr/share/doc/postfix-2.3.3/README_FILES/SASL_README – http://www.postfix.org/SASL_README.html

# And /usr/share/doc/dovecot-1.0.7/wiki/HowTo.PostfixAndDovecotSASL.txt – http://wiki.dovecot.org/HowTo/PostfixAndDovecotSASL

# Turns on sasl authorization

smtpd_sasl_auth_enable = yes

#Use dovecot for authentication

smtpd_sasl_type = dovecot

# Path to UNIX socket for SASL

smtpd_sasl_path = /var/run/dovecot/auth-client

#Disable anonymous login. We don’t want to run an open relay for spammers.

smtpd_sasl_security_options = noanonymous

#Adds support for email software that doesn’t follow RFC 4954.

#This includes most versions of Microsoft Outlook before 2007.

broken_sasl_auth_clients = yes

smtpd_recipient_restrictions =  permit_sasl_authenticated, permit_mynetworks, reject_unauth_destination

# TRANSPORT MAP

virtual_transport = dovecot

dovecot_destination_recipient_limit = 1

# Dovecot LDA, as explained here: http://wiki.dovecot.org/LDA/Postfix

dovecot   unix  -       n       n       -       -       pipe flags=DRhu user=vmail:vmail argv=/usr/libexec/dovecot/deliver -f ${sender} -d {recipient}

submission inet n       -       n       -       -       smtpd

#修改前

#protocols = imap imaps pop3 pop3s

#disable_plaintext_auth = no

#listen = *, [::]

#修改後

protocols = imap imaps pop3 pop3s

disable_plaintext_auth = no

listen = *

#修改前

#mail_location =

#修改後

mail_location = maildir:%hMaildir

#修改前

#auth_debug_passwords = no

#auth_debug = no

#修改後

auth_debug_passwords = yes

auth_debug = yes

[root@localhost ~]# vim /etc/dovecot.conf

#修改前

#log_path =

#info_log_path =

#log_timestamp = “%b %d %H:%M:%S “

#修改後

log_path = /var/log/dovecot/dovecot.log

info_log_path = /var/log/dovecot/dovecot.info

log_timestamp = “%Y.%m.%d %H:%M:%S “

#修改前

#namespace private {

   # Hierarchy separator to use. You should use the same separator for all

   # namespaces or some clients get confused. ‘/’ is usually a good one.

   # The default however depends on the underlying mail storage format.

   #separator =

   # Prefix required to access this namespace. This needs to be different for

   # all namespaces. For example “Public/”.

   #prefix =

   # Physical location of the mailbox. This is in same format as

   # mail_location, which is also the default for it.

   #location =

   # There can be only one INBOX, and this setting defines which namespace

   # has it.

   #inbox = no

   # If namespace is hidden, it’s not advertised to clients via NAMESPACE

   # extension. You’ll most likely also want to set list=no. This is mostly

   # useful when converting from another server with different namespaces which

   # you want to deprecate but still keep working. For example you can create

   # hidden namespaces with prefixes “~/mail/”, “~%u/mail/” and “mail/”.

   #hidden = yes

   # Show the mailboxes under this namespace with LIST command. This makes the

   # namespace visible for clients that don’t support NAMESPACE extension.

   # “children” value lists child mailboxes, but hides the namespace prefix.

   #list = yes

   # Namespace handles its own subscriptions. If set to “no”, the parent

   # namespace handles them (empty prefix should always have this as “yes”)

   #subscriptions = yes

#}

#修改後

namespace private {

   # Hierarchy separator to use. You should use the same separator for all

   # namespaces or some clients get confused. ‘/’ is usually a good one.

   # The default however depends on the underlying mail storage format.

   separator = .

   # Prefix required to access this namespace. This needs to be different for

   # all namespaces. For example “Public/”.

   prefix = INBOX.

   # Physical location of the mailbox. This is in same format as

   # mail_location, which is also the default for it.

   #location =

   # There can be only one INBOX, and this setting defines which namespace

   # has it.

   inbox = yes

   # If namespace is hidden, it’s not advertised to clients via NAMESPACE

   # extension. You’ll most likely also want to set list=no. This is mostly

   # useful when converting from another server with different namespaces which

   # you want to deprecate but still keep working. For example you can create

   # hidden namespaces with prefixes “~/mail/”, “~%u/mail/” and “mail/”.

   #hidden = yes

   # Show the mailboxes under this namespace with LIST command. This makes the

   # namespace visible for clients that don’t support NAMESPACE extension.

   # “children” value lists child mailboxes, but hides the namespace prefix.

   #list = yes

   # Namespace handles its own subscriptions. If set to “no”, the parent

   # namespace handles them (empty prefix should always have this as “yes”)

   #subscriptions = yes

}

#請找到此段開頭

protocol imap {

#加入以下設定

mail_plugins = quota imap_quota 

#請找到此段開頭

protocol pop3 {

#取消下列參數的註解

pop3_uidl_format = %08Xu%08Xv

#修改下列參數

mail_plugins = quota

#請找到此段開頭

protocol lda {

#修改下列參數

#修改前

protocol lda {

  # Address to use when sending rejection mails (e.g. postmaster@example.com).

  #postmaster_address =

  # Hostname to use in various parts of sent mails, eg. in Message-Id.

  # Default is the system’s real hostname.

  #hostname =

  # Support for dynamically loadable plugins. mail_plugins is a space separated

  # list of plugins to load.

  #mail_plugins =

  #mail_plugin_dir = /usr/lib/dovecot/lda

  # If user is over quota, return with temporary failure instead of

  # bouncing the mail.

  #quota_full_tempfail = no

  # Format to use for logging mail deliveries. You can use variables:

  #  %$ – Delivery status message (e.g. “saved to INBOX”)

  #  %m – Message-ID

  #  %s – Subject

  #  %f – From address

  #deliver_log_format = msgid=%m: %$

  # Binary to use for sending mails.

  #sendmail_path = /usr/lib/sendmail

  # Subject: header to use for rejection mails. You can use the same variables

  # as for rejection_reason below.

  #rejection_subject = Rejected: %s

  # Human readable error message for rejection mails. You can use variables:

  #  %n = CRLF, %r = reason, %s = original subject, %t = recipient

  #rejection_reason = Your message to <%t> was automatically rejected:%n%r

  # UNIX socket path to master authentication server to find users.

  #auth_socket_path = /var/run/dovecot/auth-master

}

#修改後

protocol lda {

  # Address to use when sending rejection mails (e.g. postmaster@example.com).

  postmaster_address = postmaster@faq-test.tk

  # Hostname to use in various parts of sent mails, eg. in Message-Id.

  # Default is the system’s real hostname.

  #hostname =

  # Support for dynamically loadable plugins. mail_plugins is a space separated

  # list of plugins to load.

  mail_plugins = quota

  #mail_plugin_dir = /usr/lib/dovecot/lda

  # If user is over quota, return with temporary failure instead of

  # bouncing the mail.

  #quota_full_tempfail = no

  # Format to use for logging mail deliveries. You can use variables:

  #  %$ – Delivery status message (e.g. “saved to INBOX”)

  #  %m – Message-ID

  #  %s – Subject

  #  %f – From address

  #deliver_log_format = msgid=%m: %$

  # Binary to use for sending mails.

  #sendmail_path = /usr/lib/sendmail

  # Subject: header to use for rejection mails. You can use the same variables

  # as for rejection_reason below.

  #rejection_subject = Rejected: %s

  # Human readable error message for rejection mails. You can use variables:

  #  %n = CRLF, %r = reason, %s = original subject, %t = recipient

  #rejection_reason = Your message to <%t> was automatically rejected:%n%r

  # UNIX socket path to master authentication server to find users.

  #auth_socket_path = /var/run/dovecot/auth-master

}

#請找到此段開頭

auth default {

#修改參數

#修改前

mechanisms = plain

#修改後

mechanisms = plain login cram-md5

#請找到此段開頭

passdb pam {

#修改參數(請把此參數的頭尾都註解掉)

#passdb pam {

#}

#修改前

#passdb sql {

    # Path for SQL configuration file, see doc/dovecot-sql-example.conf

    #args =

 #}

#修改後(將頭尾註解拿掉並告知到那找資料庫訊息)

passdb sql {

    # Path for SQL configuration file, see doc/dovecot-sql-example.conf

    args = /etc/dovecot-sql.conf

 }

#修改前

#userdb prefetch {

#}

# System users (NSS, /etc/passwd, or similiar). In many systems nowadays this

  # uses Name Service Switch, which is configured in /etc/nsswitch.conf.

  # <doc/wiki/AuthDatabase.Passwd.txt>

  userdb passwd {

    # [blocking=yes] – By default the lookups are done in the main dovecot-auth

    # process. This setting causes the lookups to be done in auth worker

    # proceses. Useful with remote NSS lookups that may block.

    # NOTE: Be sure to use this setting with nss_ldap or users might get

    # logged in as each others!

    #args =

  }

#修改後 (拿掉userdb prefetch的註解，把userdb passwd註解起來)

userdb prefetch {

}

# System users (NSS, /etc/passwd, or similiar). In many systems nowadays this

  # uses Name Service Switch, which is configured in /etc/nsswitch.conf.

  # <doc/wiki/AuthDatabase.Passwd.txt>

  #userdb passwd {

    # [blocking=yes] – By default the lookups are done in the main dovecot-auth

    # process. This setting causes the lookups to be done in auth worker

    # proceses. Useful with remote NSS lookups that may block.

    # NOTE: Be sure to use this setting with nss_ldap or users might get

    # logged in as each others!

    #args =

  #}

#修改前

  # SQL database <doc/wiki/AuthDatabase.SQL.txt>

  #userdb sql {

    # Path for SQL configuration file, see doc/dovecot-sql-example.conf

    #args =

  #}

#修改後

  # SQL database <doc/wiki/AuthDatabase.SQL.txt>

  userdb sql {

    # Path for SQL configuration file, see doc/dovecot-sql-example.conf

  args = /etc/dovecot-sql.conf

  }

#修改前

# User to use for the process. This user needs access to only user and

# password databases, nothing else. Only shadow and pam authentication

# requires roots, so use something else if possible. Note that passwd

# authentication with BSDs internally accesses shadow files, which also

# requires roots. Note that this user is NOT used to access mails.

# That user is specified by userdb above.

user = root

#修改後

# User to use for the process. This user needs access to only user and

# password databases, nothing else. Only shadow and pam authentication

# requires roots, so use something else if possible. Note that passwd

# authentication with BSDs internally accesses shadow files, which also

# requires roots. Note that this user is NOT used to access mails.

# That user is specified by userdb above.

#user = root

user = vmail

#修改前

# It’s possible to export the authentication interface to other programs:

#socket listen {

    #master {

      # Master socket provides access to userdb information. It’s typically

      # used to give Dovecot’s local delivery agent access to userdb so it

      # can find mailbox locations.

      #path = /var/run/dovecot/auth-master

      #mode = 0600

      # Default user/group is the one who started dovecot-auth (root)

      #user =

      #group =

    #}

    #client {

      # The client socket is generally safe to export to everyone. Typical use

      # is to export it to your SMTP server so it can do SMTP AUTH lookups

      # using it.

      #path = /var/run/dovecot/auth-client

      #mode = 0660

    #}

  #}

#修改後

# It’s possible to export the authentication interface to other programs:

  socket listen {

    master {

      # Master socket provides access to userdb information. It’s typically

      # used to give Dovecot’s local delivery agent access to userdb so it

      # can find mailbox locations.

      path = /var/run/dovecot/auth-master

      mode = 0600

      # Default user/group is the one who started dovecot-auth (root)

      user = vmail

      #group =

    }

    client {

      # The client socket is generally safe to export to everyone. Typical use

      # is to export it to your SMTP server so it can do SMTP AUTH lookups

      # using it.

      path = /var/run/dovecot/auth-client

      mode = 0660

      user = postfix

      group = postfix

    }

  }

#修改前

#driver =

#修改後

driver = mysql

#修改前

#connect =

#修改後

connect = host=localhost dbname=mail user=postfix password=123456

#修改前

#default_pass_scheme = MD5

#修改後

default_pass_scheme = CRAM-MD5

#修改前

#user_query = \

#修改後

user_query = SELECT CONCAT(‘/var/mail/vhosts/’, maildir) AS home, 5000 AS uid, 5000 AS gid, CONCAT(‘*:bytes=’, quota) as quota_rule FROM mailbox WHERE username = ‘%u’ AND active=’1′

#修改前(約為倒數第4行)

#password_query = \

#修改後

password_query = SELECT username AS user, password, CONCAT(‘/var/mail/vhosts/’, maildir) AS userdb_home, 5000 AS userdb_uid, 5000 AS userdb_gid, CONCAT(‘*:bytes=’, quota) as userdb_quota_rule FROM mailbox WHERE username = ‘%u’ AND active=’1′

#修改前

dict {

#quota = mysql:/etc/dovecot-dict-quota.conf

#expire = db:/var/lib/dovecot/expire.db

}

#修改後

dict {

  #quota = mysql:/etc/dovecot-dict-quota.conf

  #expire = db:/var/lib/dovecot/expire.db

  quotadict = mysql:/etc/dovecot-dict-quota.conf

}

#請找到此段開頭

plugin {

#請在plugin {}之間找空白處加入以下內容

plugin {

  # Quota setting per /usr/share/postfixadmin/DOCUMENTS/DOVECOT.txt

  # http://wiki.dovecot.org/Quota/Dict

  quota = dict:user::proxy::quotadict

}

connect = host=localhost dbname=mail user=postfix password=123456

map {

pattern = priv/quota/storage

table = quota2

username_field = username

value_field = bytes

}

map {

pattern = priv/quota/messages

table = quota2

username_field = username

value_field = messages

}

[root@localhost ~]# /etc/init.d/postfix start

[root@localhost ~]# chkconfig dovecot on

[root@localhost ~]# chkconfig postfix on

Trying 127.0.0.1…

Connected to localhost.localdomain (127.0.0.1).

Escape character is ‘^]’.

220 mail.faq-test.tk ESMTP Postfix

EHLO mail.faq-test.tk     

250-mail.faq-test.tk

250-PIPELINING

250-SIZE 10240000

250-VRFY

250-ETRN

250-AUTH PLAIN LOGIN CRAM-MD5

250-AUTH=PLAIN LOGIN CRAM-MD5

250-ENHANCEDSTATUSCODES

250-8BITMIME

250 DSN

Trying 127.0.0.1…

Connected to localhost.localdomain (127.0.0.1).

Escape character is ‘^]’.

+OK Dovecot ready.

Trying 127.0.0.1…

Connected to localhost.localdomain (127.0.0.1).

Escape character is ‘^]’.

* OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE STARTTLS AUTH=PLAIN AUTH=LOGIN AUTH=CRAM-MD5] Dovecot ready.

[root@localhost ~]# chown vmail.vmail dovecot.info dovecot.log

768 semi-random bytes loaded

Generating RSA private key, 1024 bit long modulus

………………..++++++

……….++++++

e is 65537 (0×10001)

#====================TLS (SSL) Encryption==========================

#TLS CERTIFICATE SETTINGS

#See CentOS wiki at http://wiki.centos.org/HowTos/postfix_sasl

#Enables, but does not require use of TLS

smtpd_tls_security_level = may

#Location of private key

smtpd_tls_key_file = /etc/pki/tls/private/mail.faq-test.tk.key

#Public certificate

smtpd_tls_cert_file = /etc/pki/tls/certs/mail.faq-test.tk.cert

#Certificate atuhority certificate, if you need this for a commercial certificate.

# smtpd_tls_CAfile = /etc/pki/tls/root.crt

#Log TLS sessions

smtpd_tls_loglevel = 1

#Cache TLS sessions for 1 hour to reduce CPU load

smtpd_tls_session_cache_timeout = 3600s

#Location to store cache

smtpd_tls_session_cache_database = btree:/var/spool/postfix/smtpd_tls_cache

#Raondom data source

tls_random_source = dev:/dev/urandom

#Require TLS security before allowing plaintext authentication

#smtpd_tls_auth_only = no

#修改前

#ssl_cert_file = /etc/pki/dovecot/certs/dovecot.pem

#ssl_key_file = /etc/pki/dovecot/private/dovecot.pem

#修改後

ssl_cert_file = /etc/pki/tls/certs/mail.faq-test.tk.cert

ssl_key_file = /etc/pki/tls/private/mail.faq-test.tk.key

#修改前

#ssl_cipher_list = ALL:!LOW:!SSLv2

#修改後

ssl_cipher_list = ALL:!LOW:!SSLv2

[root@localhost ~]# /etc/init.d/dovecot restart

#修改前

#auth_debug = no

#auth_debug_passwords = no

#修改後

auth_debug = yes

auth_debug_passwords = yes

IModule loaded: /usr/lib64/dovecot/imap/lib10_quota_plugin.so

IModule loaded: /usr/lib64/dovecot/imap/lib11_imap_quota_plugin.so

IEffective uid=99, gid=99, home=/tmp

IQuota root: name=user backend=dict args=:proxy::quotadict

Last died with error (see error log for more information): Auth process died too early – shutting down

#修改前

mail_debug = yes

#修改後

#mail_debug = yes

[root@localhost ~]# wget http://centos.alt.ru/repository/centos/5/x86_64/dovecot-mysql-1.2.17-2.el5.x86_64.rpm

[root@localhost ~]# rpm -Uvh dovecot-mysql-1.2.17-2.el5.x86_64.rpm

I’m sorry to have to inform you that your message could not

be delivered to one or more recipients. It’s attached below.

For further assistance, please send mail to <postmaster>

If you do so, please include this problem report. You can

delete your own text from the attached returned message.

                  The mail system

<derek@faq-test.tk>: unknown user: “derek”

Final-Recipient: rfc822; derek@faq-test.tk

Original-Recipient: rfc822;derek@faq-test.tk

Action: failed

Status: 5.1.1

Diagnostic-Code: X-Postfix; unknown user: “derek”

———- 轉寄訊息 ———-

From: XXX <xxxxxxxxx@gmail.com>

To: derek <derek@faq-test.tk>

Cc:

Date: Fri, 23 Mar 2012 22:21:14 +0800

Subject: Re: test

test

derek <derek@faq-test.tk> 於 2012年3月23日下午10:20 寫道：

test

#修改前

mydestination = localhost, localhost.localdomain, faq-test,tk

#修改後

mydestination = localhost, localhost.localdomain

(temporary failure. Command output: Can’t open log file /var/log/dovecot.log: Permission denied )

[root@localhost ~]# chown vmail.vmail dovecot.info dovecot.log

[root@localhost ~]# chmod 700 dovecot.log dovecot.info