Posted by admin on 29 août 2010
Bonjour
cela y est j’ai fait ma migration vers la nouvelle version stable de dovecot à savoir version 2.0.0
pour les gens sans patience voici le resultat de la commande dovecot -n
[root@r13151 ~]# /usr/sbin/dovecot -n
# 2.0.0: /etc/dovecot/dovecot.conf
# OS: Linux 2.6.32.2-xxxx-grs-ipv4-32 i686 CentOS release 5.5 (Final)
auth_mechanisms = plain login
base_dir = /var/run/dovecot/
listen = [::]
log_path = /var/log/maillog
log_timestamp = %Y-%m-%d %H:%M:%S
login_log_format_elements = user=<%u> method=%m rip=%r lip=%l %c
mail_location = maildir:~/Maildir
managesieve_notify_capability = mailto
managesieve_sieve_capability = comparator-i;octet comparator-i;ascii-casemap fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date spamtest spamtestplus virustest
passdb {
driver = pam
}
plugin {
plugin = autocreate managesieve sieve
sieve = ~/.dovecot.sieve
sieve_before = /var/sieve-scripts/roundcube.sieve
sieve_dir = ~/sieve
sieve_global_path = whatever
}
protocols = sieve imap pop3
service auth {
unix_listener /var/spool/postfix/private/auth {
group = postfix
mode = 0666
user = postfix
}
unix_listener auth-master {
mode = 0666
}
vsz_limit = 256
}
service imap-login {
inet_listener imap {
port = 0
}
inet_listener imaps {
address = *
port = 993
}
process_limit = 128
vsz_limit = 64
}
service managesieve-login {
inet_listener managesieve-login {
address = *
port = 2000
}
process_limit = 128
vsz_limit = 64
}
service pop3-login {
inet_listener pop3 {
port = 0
}
inet_listener pop3s {
address = *
port = 995
}
process_limit = 128
vsz_limit = 64
}
ssl_ca =
ssl_cert =
ssl_key =
ssl_verify_client_cert = yes
userdb {
driver = passwd
}
version_ignore = yes
protocol imap {
imap_client_workarounds = delay-newmail tb-extra-mailbox-sep
imap_max_line_length = 65536
mail_plugins = autocreate
}
protocol pop3 {
mail_plugins = autocreate
pop3_client_workarounds = outlook-no-nuls oe-ns-eoh
pop3_logout_format = top=%t/%p, retr=%r/%b, del=%d/%m, size=%s
}
protocol lda {
hostname = r13151.ovh.net
mail_plugins = autocreate sieve
postmaster_address = postmaster@fakessh.eu
sendmail_path = /usr/lib/sendmail
}
protocol sieve {
managesieve_implementation_string = dovecot
managesieve_logout_format = bytes ( in=%i : out=%o )
managesieve_max_line_length = 65536
}
voci le saint graal pour les linuxiens sans patience
apres la technique pour obtenir la config est simple
maintenant dovecot auto genere presque bien la config dans la totalite
prerequis : installer sur la distrib tous les paquetages necessaire à dovecot
à savoir les paquets pigeonhole managesieve et sieve
ceci doit creer les 2 utilisateurs systemes ( prerequis souvent deja realisé dans la config des paquets )
comme decrit dans la manuel sur le wiki(2) de dovecot 2.0
http://wiki2.dovecot.org
et la on se rend donc dans /etc/dovecot/
la commande dovecot -n < dovecot.conf
doit ecrire toute la configuration à jour directement dans le fichier dovecot.conf
ne pas oublier de faire un backup de l ancien pour voir les modifications
cela est dans l ensemble suffisant pour avoir une config de dovecot qui marche et est pleinement fonctionnelle
Merci Timo pour son superbe travail de programmation
Posted by admin on 21 août 2010
Posted by admin on 10 juillet 2010
hello un petit coucou
le logiciel qui s’occupe de delivrer les emails dans les boites aux lettres ( LDA ou local delivery agent http://wiki.dovecot.org/LDA ) est en pleine evolution . il s’agit d’une mise à jour majeure le software va passer en version 2.0 . actuellement la version 2 n’est que une release candidat , c est à dire sont numero de version est le 2.0rc2 . ce n est pas la version stable il n’est pas recommande de l’utiliser sur un serveur en production ( risque de crash risque de comportement non conforme ) mais cette mise à jour s’annonce sous un bon soleil . elle contiendra un parser de fichier qui permettra de modifier facilement le fichier de configuration pour le faire evoluer vers la version superieure et toujours le language sieve qui permet le tri du courrier
Posted by admin on 27 juin 2010
je continue à vous parler de la vie de mon serveur …. 
j’ai installe sur mon serveur des systemes speciaux de blacklistage d’emetteurs de emails voir rbl http://www.google.com/search?q=liste+rbl
je vous cite mes logs que je consulte avec la commande logwatch
Messages rejected using anti spam site 2 time(s)
b.barracudacentral.org 1 spam messages
webmail.perfor****taff.com [216.122.145.***] : : 1 time(s)
ips.backscattered..org 1 spam messages
20.mail-***.ovh.net [ 91.121.***.***] : : 1 times(s)
cela montre des emails rejetes par les systemes de rbls
on voit que meme des pros sont victimes de leurs politique de mails qui les amenent à envoyer des mails en boucle à des listes de mails qu’ils achetent à d’autres entreprises ( j’ai entendu parler de outsourcing … no comment )
question email on est jamais mieux servi que tout seul . avec son serveur son ip distincte et tout le tralala
Posted by admin on 10 juin 2010
voici la configuration de mon postfix et la version
[root@r***** ~]# rpm -aq | grep postfix
postfix-pflogsumm-2.5.4-1
postfix-2.5.4-1
voici son fichier de configuration postconf -n
[root@r***** ~]# postconf -n
alias_database = hash:/etc/aliases , hash:/etc/postfix/aliases
alias_maps = hash:/etc/aliases , hash:/etc/postfix/aliases
body_checks = regexp:/etc/postfix/body_checks.cf
broken_sasl_auth_clients = yes
command_directory = /usr/sbin
config_directory = /etc/postfix
content_filter = dkimproxy:[127.0.0.1]:10029
daemon_directory = /usr/libexec/postfix
data_directory = /var/lib/postfix
debug_peer_level = 2
default_privs = nobody
double_bounce_sender = no
header_checks = regexp:/etc/postfix/header_checks.cf
home_mailbox = Maildir/
in_flow_delay = 10
inet_interfaces = all
local_recipient_maps = unix:passwd.byname $alias_maps
mail_owner = postfix
mail_spool_directory = /var/spool/mail
mailbox_command = /usr/libexec/dovecot/deliver
mailq_path = /usr/bin/mailq.postfix
manpage_directory = /usr/share/man
message_size_limit = 20480000
mime_header_checks = regexp:/etc/postfix/mime_header_checks.cf
mydestination = $myhostname , localhost.$mydomain, r13151.ovh.net
mydomain = r13151.ovh.net
mynetworks = 127.0.0.0/8 ,87.98.186.232
myorigin = $mydomain
newaliases_path = /usr/bin/newaliases.postfix
queue_directory = /var/spool/postfix
queue_run_delay = 200s
readme_directory = /usr/share/doc/postfix-2.5.4/README_FILES
recipient_delimiter = +
relay_domains =
sample_directory = /usr/share/doc/postfix-2.5.4/samples
sendmail_path = /usr/sbin/sendmail.postfix
setgid_group = postdrop
smtp_sasl_security_options = noanonymous
smtp_sasl_tls_security_options = noanonymous
smtp_sender_dependent_authentication = yes
smtp_tls_loglevel = 3
smtp_tls_note_starttls_offer = yes
smtp_tls_session_cache_database = btree:/var/lib/postfix/smtp_tls_session_cache
smtpd_banner = $myhostname ESMTP $mail_name ($mail_version)
smtpd_client_restrictions = permit_mynetworks,reject_unknown_reverse_client_hostname,reject_unauth_pipelining, reject_non_fqdn_recipient , permit
smtpd_milters = inet:[127.0.0.1]:10040
smtpd_recipient_restrictions = permit_mynetworks permit_inet_interfaces permit_sasl_authenticated reject_unverified_recipient reject_non_fqdn_sender reject_non_fqdn_recipient reject_unknown_sender_domain reject_unknown_recipient_domain reject_unknown_reverse_client_hostname reject_unauth_destination reject_unauth_pipelining reject_rbl_client zen.spamhaus.org reject_sender_login_mismatch check_policy_service unix:postgrey/socket check_sender_access hash:/etc/postfix/check_backscatterer check_sender_access hash:/etc/postfix/check_spamcannibal check_policy_service unix:private/spfpolicy reject_rhsbl_sender dbl.spamhaus.org reject_rbl_client bl.spamcop.net reject_rbl_client cbl.abuseat.org reject_rbl_client b.barracudacentral.org check_client_access hash:/etc/postfix/whitelist reject_rhsbl_helo dbl.spamhaus.org reject_rhsbl_client dbl.spamhaus.org reject_unknown_helo_hostname reject_invalid_helo_hostname reject_non_fqdn_helo_hostname check_client_access pcre:/etc/postfix/ptr-tld.pcre check_client_access cidr:/etc/postfix/sinokorea.cidr check_client_access cidr:/etc/postfix/taiwancidr.cidr check_client_access regexp:/etc/postfix/blacklist_clients check_client_access cidr:/etc/postfix/asian-ip.cidr reject_rbl_client relays.orbs.org check_client_access regexp:/etc/postfix/blacklist_clients check_client_access cidr:/etc/postfix/IN_cidr.cidr check_client_access cidr:/etc/postfix/BR_cidr.cidr check_client_access cidr:/etc/postfix/CN_cidr.cidr check_client_access cidr:/etc/postfix/UA_cidr.cidr check_client_access cidr:/etc/postfix/TR_cidr.cidr check_client_access cidr:/etc/postfix/VE_cidr.cidr check_client_access cidr:/etc/postfix/VN_cidr.cidr check_client_access cidr:/etc/postfix/postfix-dnswl-permit check_client_access cidr:/etc/postfix/postfix-dnswl-header check_client_access cidr:/etc/postfix/perso_cidr.cidr reject_rbl_client dnsbl.sorbs.net
smtpd_reject_unlisted_sender = no
smtpd_sasl_auth_enable = yes
smtpd_sasl_authenticated_header = yes
smtpd_sasl_local_domain = $myhostname
smtpd_sasl_path = private/auth
smtpd_sasl_type = dovecot
smtpd_tls_CAfile = /etc/pki/tls/certs/class3.crt
smtpd_tls_ask_ccert = yes
smtpd_tls_auth_only = yes
smtpd_tls_cert_file = /etc/pki/tls/certs/r13151.ovh.net.crt
smtpd_tls_key_file = /etc/pki/tls/private/r13151.ovh.net.key
smtpd_tls_received_header = yes
smtpd_tls_req_ccert = no
smtpd_tls_session_cache_database = btree:/var/lib/postfix/smtpd_tls_session_cache
smtpd_use_tls = yes
soft_bounce = no
tls_random_source = dev:/dev/urandom
unknown_local_recipient_reject_code = 550
virtual_alias_domains = renelacroute.fr , nicolaspichot.fr , fakessh.eu
virtual_alias_maps = hash:/etc/postfix/virtual
virtual_transport = dovecot
voici la version de mon dovecot
[root@r***** ~]# rpm -aq | grep dovecot
dovecot-managesieve-0.11.11-0_4.el5
dovecot-sieve-devel-0.1.15-4.el5
dovecot-sieve-0.1.15-4.el5
dovecot-devel-1.2.11-3_108.el5
dovecot-1.2.11-3_108.el5
dovecot-sieve-cmu-1.1.8-11.el5
et la configuration de dovecot : dovecot -n
[root@r***** ~]# dovecot -n
# 1.2.11: /etc/dovecot.conf
# OS: Linux 2.6.24.5-grsec-xxxx-grs-ipv4-32 i686 CentOS release 5.5 (Final)
base_dir: /var/run/dovecot/
log_path: /var/log/maillog
log_timestamp: %Y-%m-%d %H:%M:%S
protocols: imap imaps pop3 pop3s managesieve
listen(default): [::]
listen(imap): [::]
listen(pop3): [::]
listen(managesieve): *:2000
ssl_listen(default): *:993
ssl_listen(imap): *:993
ssl_listen(pop3): *:995
ssl_listen(managesieve):
ssl_ca_file: /etc/pki/tls/certs/root.crt
ssl_cert_file: /etc/pki/tls/certs/r13151.ovh.net.crt
ssl_key_file: /etc/pki/tls/private/r13151.ovh.net.key
ssl_verify_client_cert: yes
version_ignore: yes
login_dir: /var/run/dovecot//login
login_executable(default): /usr/libexec/dovecot/imap-login
login_executable(imap): /usr/libexec/dovecot/imap-login
login_executable(pop3): /usr/libexec/dovecot/pop3-login
login_executable(managesieve): /usr/libexec/dovecot/managesieve-login
mail_location: maildir:~/Maildir
mail_executable(default): /usr/libexec/dovecot/imap
mail_executable(imap): /usr/libexec/dovecot/imap
mail_executable(pop3): /usr/libexec/dovecot/pop3
mail_executable(managesieve): /usr/libexec/dovecot/managesieve
mail_plugins(default): autocreate
mail_plugins(imap): autocreate
mail_plugins(pop3): autocreate
mail_plugins(managesieve):
mail_plugin_dir(default): /usr/lib/dovecot/imap
mail_plugin_dir(imap): /usr/lib/dovecot/imap
mail_plugin_dir(pop3): /usr/lib/dovecot/pop3
mail_plugin_dir(managesieve): /usr/lib/dovecot/managesieve
imap_client_workarounds(default): delay-newmail outlook-idle netscape-eoh tb-extra-mailbox-sep
imap_client_workarounds(imap): delay-newmail outlook-idle netscape-eoh tb-extra-mailbox-sep
imap_client_workarounds(pop3):
imap_client_workarounds(managesieve):
pop3_client_workarounds(default):
pop3_client_workarounds(imap):
pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh
pop3_client_workarounds(managesieve):
managesieve_logout_format(default): bytes=%i/%o
managesieve_logout_format(imap): bytes=%i/%o
managesieve_logout_format(pop3): bytes=%i/%o
managesieve_logout_format(managesieve): bytes ( in=%i : out=%o )
lda:
postmaster_address: postmaster@fakessh.eu
hostname: r13151.ovh.net
mail_plugins: autocreate cmusieve sieve
mail_plugin_dir: /usr/lib/dovecot/lda
sieve_global_path: /var/sieve/globalc
sendmail_path: /usr/lib/sendmail
auth_socket_path: /var/run/dovecot/auth-master
auth default:
mechanisms: plain login
passdb:
driver: pam
userdb:
driver: passwd
socket:
type: listen
client:
path: /var/spool/postfix/private/auth
mode: 438
user: postfix
group: postfix
master:
path: /var/run/dovecot/auth-master
mode: 438
plugin:
plugin: autocreate managesieve cmusieve sieve
sieve_before: /var/sieve-scripts/roundcube.sieve
sieve: ~/.dovecot.sieve
sieve_dir: ~/sieve
Posted by admin on 10 juin 2010
MES EMAILS
je possède des compétences professionnelles dans la configuration et le paramétrage de serveur smtp et pop3(s) et imap(s)
j’ai configurer sur les domaines qui sont hébergés sur mon serveur l’ensemble des différentes technologies présentes dans les standard web , à savoir