实战postfix邮件发送

实验环境：               服务器端server： willis.com   172.25.254.1               客户端desktop：  desktop.com   172.25.254.2实验内容： 1.邮件远程发送                 2.邮件别名                 3.邮件群发                 4.空壳邮件服务搭建                 5.不同服务器之间邮件传送（DNS邮件解析）                 6.出栈地址伪装                  7.客户端主机名/地址限制 :（通过IP限制发件)                   8.通过发件人地址进行限制 :（通过地址限制发件）                 9.通过收件人地址进行过滤 :（限制收件）                             1.邮件远程发送
  1.1服务端                 1.1-1   systemctl stop firewalld           yum install postfix        1.1-2vim /etc/postfix/main.cf                   mydomain = willis.com          #收件方看到的方邮件方主机名                  myorigin = $mydomain                  inet_interfaces = all          #开启接口                 #inet_interfaces = localhost   #关闭只允许本地访问                  mydestination = $myhostname, $mydomain, localhost  #         1.1-3.systemctl restart  postfix                   netstat antlpe |grep master  #查看端口 [[email protected] ~]# netstat -antple |grep mastertcp        0      0 0.0.0.0:25              0.0.0.0:*               LISTEN      0          43632      2497/master         tcp6       0      0 :::25                   :::*                    LISTEN      0          43633      2497/master              1.2.远程发送端(客户端)[[email protected] ~]# yum install telnet -y[[email protected] ~]# telnet 172.25.254.1 25
Trying 172.25.254.1...
Connected to 172.25.254.1.
Escape character is ‘^]‘.
220 linux.com ESMTP Postfixehlo hello250-linux.com
250-PIPELINING
250-SIZE 10240000
250-VRFY
250-ETRN
250-ENHANCEDSTATUSCODES
250-8BITMIME
250 DSN
2.邮件别名            2.1.vim /etc/aliases                 最后添加  admin:    root    ###给root一个别名为admin         2.2.postalias /etc/aliases     ###重读别名文件          2.3.systemctl restart  postfix          2.4.id admin       ###可查看到admin用户不存在                   mail admin     ###相当于给root用户发送邮件                   mail        ###查看root用户的邮件[[email protected] ~]# vim /etc/aliases[[email protected] ~]# postalias  /etc/aliases[[email protected] ~]# systemctl restart postfix.service [[email protected] ~]# id willisid: willis: no such user[[email protected] ~]# mail willisSubject: hellohello , my name is willis,how are you..EOT[[email protected] ~]# mailHeirloom Mail version 12.5 7/5/10.  Type ? for help."/var/spool/mail/root": 1 message 1 new>N  1 root                  Fri Sep  9 10:36  18/567   "hello"& 1Message  1:From [email protected]  Fri Sep  9 10:36:54 2016Return-Path: <[email protected]>X-Original-To: willisDelivered-To: [email protected]Date: Fri, 09 Sep 2016 10:36:54 +0800To: [email protected]Subject: helloUser-Agent: Heirloom mailx 12.5 7/5/10Content-Type: text/plain; charset=us-asciiFrom: [email protected] (root)Status: Rhello , my name is willis,how are you.& qHeld 1 message in /var/spool/mail/root

 3.邮件群发     1.vim /etc/postfix/moreuser             root             student       2.vim /etc/aliases             最后添加 more:  :include:/etc/postfix/moreuser       3.postalias /etc/aliases       4.systemctl restart  postfix        5.mail more       ###群发邮件             mail         ###查看root用户的邮件             mail -u student ###查看student用户的邮件  [[email protected] ~]# >/var/spool/mail/root [[email protected] ~]# useradd student[[email protected] ~]# vim /etc/postfix/moreuser                             root                             student[[email protected] ~]# vim /etc/aliases[[email protected] ~]# postalias /etc/aliases[[email protected] ~]# systemctl restart postfix.service [[email protected] ~]# mail moreSubject: hello-worldhello world..EOT[[email protected] ~]# mailHeirloom Mail version 12.5 7/5/10.  Type ? for help."/var/spool/mail/root": 1 message 1 new>N  1 root                  Fri Sep  9 10:42  21/661   "hello-world"& qHeld 1 message in /var/spool/mail/root[[email protected] ~]# mail -u studentHeirloom Mail version 12.5 7/5/10.  Type ? for help."/var/mail/student": 1 message 1 new>N  1 root                  Fri Sep  9 10:42  21/664   "hello-world"& qHeld 1 message in /var/mail/student      
4.空壳邮件服务搭建        4.1.在desktop（另外一台仅中转邮件的服务器,空壳端）上          postconf -e "inet_interfaces = all"          postconf -e "mydomain = willis.com"          postconf -e ‘myorigin = $mydomain‘          postconf -e "mydestination = "          postconf -e "relayhost = 172.25.254.1"          postconf -e "local_transport = error:local delivery disabled "          systemctl restart postfix.service
（附注：火墙要关闭systemctl stop firewalld  selinux要置0 setenforce 0 ）[[email protected] ~]# postconf -e "mydomain = willis.com" [[email protected] ~]# postconf -e ‘myorigin = $mydomain‘[[email protected] ~]# postconf -e "mydestination = "[[email protected] ~]#  postconf -e "relayhost = 172.25.254.1"[[email protected] ~]# postconf -e "local_transport = error:local delivery disabled "[[email protected] ~]# systemctl restart postfix.service     4.2.在主服务器server上          postconf -e "mynetworks = 127.0.0.0/8 172.25.254.0/24"         #接受来自那个网段的邮件          systemctl restart postfix.service
（附注：火墙要关闭systemctl stop firewalld        selinux要置0 setenforce 0 ）[[email protected] ~]# postconf -e "mynetworks = 127.0.0.0/8 172.25.254.0/24" You have mail in /var/spool/mail/root[[email protected] ~]# systemctl restart postfix.service      4.3.实验验证    在desktop（另外一台仅中转邮件的服务器）上（> /var/log/maillog       ###清空邮件日志）   mail root    ###发送文件[[email protected] ~]# >/var/log/maillog [[email protected] ~]# mail rootSubject: beautiful worldThrer are many beautiful things..EOT[[email protected] ~]# mailNo mail for root    在主服务器server上（ > /var/spool/mail/root ###清空邮件）   mail         ###查看文件
[[email protected] ~]# >/var/spool/mail/root [[email protected] ~]# mailHeirloom Mail version 12.5 7/5/10.  Type ? for help."/var/spool/mail/root": 1 message 1 new>N  1 root                  Fri Sep  9 10:54  21/756   "beautiful world"& qHeld 1 message in /var/spool/mail/root

5.不同服务器之间的邮件传送(DNS邮件解析记录)  
  将前面做实验的环境恢复到初始状态。    vim /etc/postfix/main.cf                   mydomain = willis.com                           myorigin = $mydomain                  inet_interfaces = all                          #inet_interfaces = localhost                    mydestination = $myhostname, $mydomain, localhost      5-1server端配置dnshostnamectl set-hostname mail.willis.com安装DNS：yum install bind -y1)vim /etc/resolv.conf            search willis.com        nameserver 172.25.254.12)vim /etc/named.rfc1912.zoneszone "willis.com" IN {        type master;        file "willis.com.zone";        allow-update { none; };};

zone "redhat.com" IN {        type master;        file "redhat.com.zone";        allow-update { none; };};3)cd /var/named/       cp -p named.localhost willis.com.zone4)vim willis.com.zone$TTL 1D@       IN SOA  dns.willis.com. root. (                                        0       ; serial                                        1D      ; refresh                                        1H      ; retry                                        1W      ; expire                                        3H )    ; minimum        NS      dns.willis.com.dns     A       172.25.254.1willis.com.  MX 1    172.25.254.1.5)cp -p willis.com.zone redhat.com.zone       vim redhat.com.zone$TTL 1D@       IN SOA  dns.redhat.com. root. (                                        0       ; serial                                        1D      ; refresh                                        1H      ; retry                                        1W      ; expire                                        3H )    ; minimum        NS      dns.redhat.com.dns     A       172.25.254.1redhat  MX 1    172.25.254.2.                             6)systemctl start named 
    5-2 . desktop端配置   hostnamectl set-hostname mail.redhat.com      1)vim /etc/resolv.conf            search   redhat.com              nameserver  172.25.254.1    2)测试          mail [email protected]         mail [email protected]
[[email protected] ~]# mail [email protected]Subject: hello-willishello . you are a good boy..EOT[[email protected] ~]# mail [email protected]Subject: hello goog boyAre you ok now? .EOTYou have new mail in /var/spool/mail/root[[email protected] ~]# mail[[email protected] ~]# mail [email protected]Subject: hello good boy.Are you OK now?.EOT[[email protected] ~]# mailHeirloom Mail version 12.5 7/5/10.  Type ? for help."/var/spool/mail/root": 1 message 1 new>N  1 root                  Fri Sep  9 12:24  18/569   "hello good boy."& 1Message  1:From [email protected]  Fri Sep  9 12:24:07 2016Return-Path: <[email protected]>X-Original-To: [email protected]Delivered-To: [email protected]Date: Fri, 09 Sep 2016 12:24:07 +0800To: [email protected]Subject: hello good boy.User-Agent: Heirloom mailx 12.5 7/5/10Content-Type: text/plain; charset=us-asciiFrom: [email protected] (root)Status: R

Are you OK now?         6.出栈地址伪装
    6.1服务器端（伪装端）    vim /etc/postfix/generic
    增加
    [email protected]     [email protected]
    postmap generic        ###生成generic.db文件
    postconf -d | grep generic
    postconf -e "smtp_generic_maps = hash:/etc/postfix/generic"
    systemctl restart postfix.service    测试        mail [email protected][[email protected] postfix]# mail [email protected]Subject: hello.你好呀.EOT    6.2 接受端[[email protected] ~]# mailHeirloom Mail version 12.5 7/5/10.  Type ? for help."/var/spool/mail/root": 1 message 1 new>N  1 root                  Fri Sep  9 12:47  21/733   "hello."& 1Message  1:From [email protected]  Fri Sep  9 12:47:10 2016Return-Path: <[email protected]>X-Original-To: [email protected]Delivered-To: [email protected]Date: Fri, 09 Sep 2016 12:47:11 +0800To: [email protected]Subject: hello.User-Agent: Heirloom mailx 12.5 7/5/10Content-Type: text/plain; charset=utf-8From: [email protected] (root)Status: R

你好呀

7.客户端主机名/地址限制 :（通过IP限制发件)      postconf -e "smtpd_client_restrictions                                     = check_client_access hash:/etc/postfix/access"      vim /etc/postfox/main.cf    smtpd_client_restrictions = check_client_access hash:/etc/postfix/access,      vim /etc/postfox/access               192.168.0.4   REJECT               192.168.0     REJECT    postmap access     systemctl restart postfix
8.通过发件人地址进行限制 :（通过地址限制发件）     postconf -e "smtpd_sender_restrictions                                    = check_sender_access hash:/etc/postfix/sender"     vim /etc/postfox/main.cf         smtpd_sender_restrictions =                                        check_sender_access hash:/etc/postfix/sender      vim /etc/postfix/sender                       [email protected] REJECT(OK、RELAY)     postmap sender     systemctl restart postfix9.通过收件人地址进行过滤 :（限制收件）         postconf -e "smtpd_recipient_restrictions = check_recipient_access
                                    hash:/etc/postfix/recipient"            vim /etc/postfox/main.cf    
                    smtpd_recipient_restrictions = check_recipient_access
                                    hash:/etc/postfix/recipient           vim /etc/postfix/recipient    
                        [email protected]  REJECT(OK、RELAY,DISCARDED)          postmap recipient