DISCONTINUED: Switched to a mail hoster as I had not enough time to keep everything running smoothly and secure. (Switched to mailbox.org)

.

Tested for Ubuntu 16.04

Requires MySQL Server installed

Installing Dovecot (MDA) and Postfix (MTA) connected to a MySQL server.

General

• Check if sendmail & fetchmail are installed, if so remove them apt-get --purge remove sendmail sendmail-bin sendmail-base sendmail-cf sendmail-doc fetchmail
• Create new user for mail server

    useradd vmail
    chown -R vmail:vmail /var/vmail
    chmod -R 770 /var/vmail/

Dovecot

• Install Dovecot apt-get install dovecot-core dovecot-imapd dovecot-mysql dovecot-lmtpd dovecot-sieve dovecot-managesieved
• Setup Mysql Database and suitable user TODO
• Test Dovecot TODO
• Setup MySQL data TODO doveadm pw -s SHA512-CRYPT

Postfix

• Prepare dovecot database access config (/etc/dovecot/dovecot-sql.conf.ext) TODO
• Prepare dovecot config TODO
• Install Postfix apt-get install postfix postfix-mysql
• Prepare postfix database access TODO

    /etc/postfix/virtual-mysql-aliases.cf
    /etc/postfix/virtual-mysql-domains.cf
    /etc/postfix/virtual-mysql-maps.cf

• Prepare postfix config TODO

    /etc/postfix/main.cf
    /etc/postfix/master.cf

Additional

• Config Sieve TODO
• Install spamhaus blacklist TODO
• Install SPAM filter TODO

Migration from one IMAP to another IMAP server

• Get imapsync: Link
• install dependencies (Perl & packages) apt-get install perl libmail-imapclient-perl libfile-copy-recursive-perl libio-tee-perl libunicode-string-perl
• Run ./imapsync --host1 mail.serverOld.de --user1 user@serverOld.de --password1 'password' --host2 mail.serverNew.de --user2 mail@serverNew.de --password2 'password' --tls1 --tls2

Additional stuff

• SPF DNS Records: See (link: blog/vserver-prerequisites-setup text: blog/vserver-prerequisites-setup)
• DKIM Signing TODO
• https://help.ubuntu.com/community/Postfix/DKIM (Archive)
• https://www.exratione.com/2014/07/setting-up-spf-and-dkim-for-an-ubuntu-1404-mail-server/ (Archive)

Fixes

• Fixing Google's new IPv6 mail policy with Postfix TODO

Regular commands

• Connect to rspamd webinterface ssh -L 8080:localhost:11334 benutzer@mail.mysystems.tld -N

Whitelisting

There are several manual whitelists I manage, whenever my logs told me that there was a mail rejected I was expecting...

• Postfix
  • Unknown Helo: Allow specific IP addresses with unknown helo hostname
    /etc/postfix/whitelist_unknown_helo_hostname
  • Invalid PTR: Allow specific IP addresses without valid PTR entrys
    • Error: 450 4.7.25 Client host rejected: cannot find your hostname
    • Whitelist file: /etc/postfix/without_ptr
• Rspamd
  • Greylist: Allow certain Servers (by IP or Domain) to not be subject to greylisting
    • /etc/rspamd/local.d/greylist.conf

        whitelisted_ip = [
            "$LOCAL_CONFDIR/local.d/greylist-whitelist-ips.inc",
        ];

    • /etc/rspamd/local.d/greylist-whitelist-ips.inc is a list of ips seperated by new lines
    • /etc/rspamd/local.d/greylist-whitelist-domains.inc is a list of domains/subdomains seperated by new lines
  • Whitelist: Rate mails based on their sending domain, in conjunction with SPF/DKIM/...
    • /etc/rspamd/local.d/maps.d/spf_dkim_whitelist.inc.local

References

• Sieve
  • http://sieve.mozdev.org/reference.html (Archive)
  • https://wiki2.dovecot.org/Pigeonhole/Sieve/Examples (Archive)
• SPAM
  • Archived: https://thomas-leister.de/internet/postfix-annahme-von-spam-e-mails-blockieren-mit-spamhaus/
  • Archived: https://thomas-leister.de/open-source/linux/ubuntu/postfix-amavis-spamfilter-spamassassin-sieve/
  • Blacklist Monitor: https://www.intra2net.com/de/support/antispam/index.php
• General
  • https://thomas-leister.de/mailserver-debian-stretch/ (Archive)
  • https://thomas-leister.de/mailserver-unter-ubuntu-16.04/ (Archive)
  • Archived: https://thomas-leister.de/internet/mailserver-ubuntu-server-dovecot-postfix-mysql/
  • http://www.postfix.org/postconf.5.html (Archive)
• Mail Sync
  • http://imapsync.lamiral.info/ (Archive)
• Fail2ban (AUTH DoS attacks)
  • https://forum.iredmail.org/topic8172-iredmail-support-howto-protect-against-postfix-auth-dos-attacks.html (Archive)