SMTP (二)

SMTP（二）
telnet远程链接：(谁都可以链接，存在安全隐患)

telnet:禁止谁远程链接我的主机发送邮件（任何我主机的用户都不能被链接）
vim /etc/postfix/access
172.25.254.131REJECT
postmap access（生成access.db加密文件）

postconf -d | grep client

postconf-e "smtpd_client_restrictions =check_client_accesshash:/etc/postfix/access"（check_client_access：检测客户）

vim /etc/postfix/main.cf

systemctl restart postfix.service

测试：

删除此设置
vim /etc/postfix/access（删除禁止）
postmap access（重新加密）
systemctl restart postfix.service

设置我的哪个主机用户不能被远程链接（本地可以）发送邮件,但是这个用户可以收到邮件（没用被禁止的主机用户可以链接）
vim /etc/postfix/sender

postmap sender(写完整的用户名)
postconf -d | grep sender

postconf-e "smtpd_client_restrictions =check_sender_accesshash:/etc/postfix/sender"(check_sender_access:检测用户)

systemctl restart postfix.service

测试：

我的哪一个主机用户不能收邮件（远程登陆的不可以，本地发送的也不可以收到）

修改之前（student用户可以收邮件）

vim /etc/postfix/recip

postconf -d | grep recip

postconf-e "smtpd_recipient_restrictions = check_recipient_accesshash:/etc/postfix/recip"

systemctl restart postfix.service

测试：

登陆验证用户接收邮件：

yum install dovecot –y

vim /etc/dovecot/dovecot.conf

disable_plaintext_auth = no

cd /etc/dovecot/conf.d
vim 10-mail.conf
mail_location = mbox:~/mail:INBOX=/var/mail/%u

测试：mutt -f imap://[email protected]（前提是在/home/studnet下有/mail/.iamp/INDOX这个文件存在）

数据库连接邮箱：
网页管理数据库：

创建数据库：mail
创建表格：muser

创建用户：
给权限：

查询：
cd /etc/postfix
vim mysql-user.cf

hosts = localhost
user = postfix
password = postfix
dbname = email
table = muser
select_field = username
where_field = username

查询测试：postmap -q "[email protected]" /etc/postfix/mysql-user.cf

vim mysql-domain.cf
hosts = localhost
user = postfix
password = postfix
dbname = email
table = muser
select_field = domain
where_field = domain

查询测试：postmap -q "dd.org" /etc/postfix/mysql-domain.cf

vim mysql-maildri.cf
hosts = localhost
user = postfix
password = postfix
dbname = email
table = muser
select_field = mailder
where_field = username

查询测试：postmap -q "[email protected]" /etc/postfix/mysql-maildir.cf

给数据库里面的虚拟用户发送邮件
groupadd -g 666 vmail
useradd -g 666 -u 666 vmain

virtual_gid_maps = static:666
virtual_uid_maps = static:666
virtual_mailbox_base = /home/vmail
virtual_alias_maps = mysql:/etc/postfix/mysql-user.cf
virtual_mailbox_domains = mysql:/etc/postfix/mysql-domain.cf
virtual_mailbox_maps = mysql:/etc/postfix/mysql-maildir.cf

cd /home/vmail

数据库里面的虚拟用户收邮件

vim dovecot.conf

protocols = imap pop3 lmtp
disable_plaintext_auth = no

vim dovecot-sql.conf.ext

driver = mysql
connect = host=localhost dbname=email user=postfix password=postfix
default_pass_scheme = PLAIN

password_query = \
SELECT username, domain, password \
FROM muser WHERE username = ‘%u‘ AND domain =‘%d‘
user_query = SELECT mailder, 666 AS uid, 666 AS gid FROM muserWHERE username = ‘%u‘