看来老大的方案 越来越完善了

引用:

下面是引用qjlpn于2006-04-04 18:28发表的:
报告版主，我依照你给的方法试了，还是不行呀.是不是還有要改的地方？

版主老大，十分抱歉，您的方法是可行的。不好意思是我敲错字符了^

ethan兄弟,我main.cf加上
#virtual_transport = virtual
virtual_transport = maildrop:
maildrop_destination_concurrency_limit = 1
maildrop_destination_recipient_limit = 1
这段后就收不到邮件了，请问这是怎么回事，怎么才能解决。
以下是在extmail里发邮件产生的log:
Apr  5 18:27:45 mail postfix/cleanup[3493]: 44B7E932D3: message-id=<20060405102745.44B7E932D3@mail.liuQang.cn>
Apr  5 18:27:45 mail postfix/qmgr[3339]: 44B7E932D3: from=<mis@liuQang.cn>, size=1031, nrcpt=1 (queue active)
Apr  5 18:27:45 mail pipe[3496]: fatal: pipe_comand: execvp /usr/local/bin/maildrop: No such file or directory
Apr  5 18:27:46 mail postfix/pipe[3495]: 44B7E932D3: to=<wang@liuQang.cn>, relay=maildrop, delay=1, status=bounced (Command died with status 1: "/usr/local/bin/maildrop")
Apr  5 18:27:46 mail postfix/cleanup[3493]: 82EE5932D4: message-id=<20060405102746.82EE5932D4@mail.liuQang.cn>
Apr  5 18:27:46 mail postfix/qmgr[3339]: 82EE5932D4: from=<>, size=2711, nrcpt=1 (queue active)
Apr  5 18:27:46 mail postfix/qmgr[3339]: 44B7E932D3: removed
Apr  5 18:27:46 mail pipe[3500]: fatal: pipe_comand: execvp /usr/local/bin/maildrop: No such file or directory
Apr  5 18:27:47 mail postfix/pipe[3495]: 82EE5932D4: to=<mis@liuQang.cn>, relay=maildrop, delay=1, status=bounced (Command died with status 1: "/usr/local/bin/maildrop")
Apr  5 18:27:47 mail postfix/qmgr[3339]: 82EE5932D4: removed

谢谢!!

the maildrop is not at the /usr/local/bin/maildrop, if you install from my rpm file, the maildrop is at /usr/bin/maildrop.

So, vi /etc/postfix/master.cf, find the /usr/local/bin/maildrop, change it to /usr/bin/maildrop,

then

service postfix restart

谢谢ethan兄，谢谢版主，我的系统总算做完了。
就是有还有个问题：在我/etc/postfix/main.cf 中设置mynetworks=0.0.0.0/0才能使得我的用户用任何ip地址收发邮件，但这又是不是有此不安全呢?我該怎麽防範？

引用:

下面是引用qjlpn于2006-04-06 19:47发表的:
谢谢ethan兄，谢谢版主，我的系统总算做完了。
就是有还有个问题：在我/etc/postfix/main.cf 中设置mynetworks=0.0.0.0/0才能使得我的用户用任何ip地址收发邮件，但这又是不是有此不安全呢?我該怎麽防範？

当然是打开smtp认证了。设置mynetwork = 0.0.0.0/0那就成了open relay了!

这个是完全错误的做法啊。

you can use the sasl authentication inside my guide. If you set it up, then only authenticated user can send out email .

兄台，现在出outlook不能发邮件了，我的mynetwork = 127.0.0.0/8后.
目前:
saslauthd start , testsaslauthd -u wang@liuQang.cn -p 299480
0: OK "Success."
当outlook连接发信时出Relay access denied.相关log：NOQUEUE: reject: RCPT from unknown[192.168.119.2]: 554 <postmaster@liuQang.com.cn>: Relay access denied; from=<mis@liuQang.cn> to=<postmaster@liuQang.com.cn> proto=ESMTP helo=<liuQang>
telent的信息：
[root@mail postfix]# telnet
telnet> open jme.cn 25
Trying 201.93.163.18...
Connected to liuQang.cn (201.93.163.18).
Escape character is &#39;^]&#39;.
220 mail.liuQang.cn ESMTP
helo mail.liuQang..cn
250 mail.liuQang..cn
auth login
334 VXNlcm5hbWU6

334 UGFzc3dvcmQ6

535 Error: authentication failed

请帮忙
谢谢

Put in this at the bottom of /etc/saslauthd.conf

引用:

ldap_default_realm: liuQang.cn

and do

引用:

service saslauthd restart

兄弟，我照你的方法做了,现在用outlook发送邮件的的log信息如下，
Apr  8 10:44:31 mail postfix/smtpd[8083]: connect from unknown[192.168.119.2]
Apr  8 10:44:31 mail postfix/smtpd[8083]: NOQUEUE: reject: RCPT from unknown[192.168.119.2]: 554 <postmaster@LiuQang.com.cn>: Relay access denied; from=<mis@LiuQiang.cn> to=<postmaster@LiuQang.com.cn> proto=ESMTP helo=<netstudio>
Apr  8 10:44:31 mail postfix/smtpd[8083]: disconnect from unknown[192.168.119.2]



测度sasl可以通过:testsaslauthd -u wang@liuQang.cn -p 299480
0: OK "Success."

From your log, postfix denied mis@liuqiang.cn

[qoute] Relay access denied; from=<mis@LiuQiang.cn> [/quote]


But from you test is wang@liuQang.cn. Beside that , in outlook , plese remember  to tick
[qoute] My server required authentication [/quote]

and please use username as wang@liuQang.cn, and password 299480

不好意思，我用了不是同一个账号，现在我改了账号.用outlook登陆后的log如下：
Apr  8 13:13:28 mail postfix/smtpd[8655]: connect from unknown[192.168.119.2]
Apr  8 13:13:28 mail postfix/smtpd[8655]: NOQUEUE: reject: RCPT from unknown[192    .168.119.2]: 554 <postmaster@liuQang.com.cn>: Relay access denied; from=<wang@liuqang.cn    > to=<postmaster@liuQang.com.cn> proto=ESMTP helo=<netstudio>
Apr  8 13:13:28 mail postfix/smtpd[8655]: disconnect from unknown[192.168.119.2]

sasl测试： testsaslauthd -u wang@liuQang.cn -p 299480
0: OK "Success."

兄弟帮忙呀....
从远端可以telnet并通过认证，但用outlook发信却不可以了。并且没有认证的调试信息。
以下是在远端telnet mail.liuqang.cn 25

220 mail.liuqang.cn ESMTP
helo mail.liuqang.cn
250 mail.liuqang.cn
ehlo mail.liuqang.cn
250-Requested mail action okay, completed
250-SIZE 10240000
250 8BITMIME
auth login
334 VXNlcm5hbWU6
d2FuZw==
334 UGFzc3dvcmQ6
Mjk5NDgw
235 Authentication successful
mail from: <wang@liuqang.cn>
553 Requested action not taken: mailbox name not allowed or chunk too large
mail from: <wang@liuqang.cn>
250 Ok
rcpt to: <postmaster@liuqang.com.cn>
250 Ok
data
354 End data with <CR><LF>.<CR><LF>
from :wang@liuqang.cn
to: postmaster@liuqang.com.cn
data: hi,test
This is test mail,you don&#39;t replay it.
.
250 Ok: queued as BEDD893960
quit
221 Bye
可以成功发送

以下是在远端telnet mail.liuqang.cn 25时ldap 的调试信息
@(#) $OpenLDAP: slapd 2.2.13 (Oct 18 2005 10:08:34) $
       buildcentos@x8664-build:/home/buildcentos/rpmbuild/BUILD/openldap-2.2.13/openldap-2.2.13/build-servers/servers/slapd
bdb_initialize: Sleepycat Software: Berkeley DB 4.2.52: (December  3, 2003)
bdb_initialize: Sleepycat Software: Berkeley DB 4.2.52: (December  3, 2003)
bdb_db_init: Initializing BDB database
slapd starting
conn=0 fd=10 ACCEPT from IP=127.0.0.1:1509 (IP=0.0.0.0:389)
conn=0 op=0 BIND dn="mail=root@liuqang.cn,o=extmailManager,dc=liuqang,dc=cn" method=128
conn=0 op=0 BIND dn="mail=root@liuqang.cn,o=extmailManager,dc=liuqang,dc=cn" mech=SIMPLE ssf=0
conn=0 op=0 RESULT tag=97 err=0 text=
conn=0 op=1 SRCH base="o=extmailAccount,dc=liuqang,dc=cn" scope=2 deref=0 filter="(|(&(mail=wang@liuqang.cn)(active=1))(mail=wang@))"
conn=0 op=1 SRCH attr=dn
<= bdb_equality_candidates: (active) index_param failed (18)
conn=0 op=1 SEARCH RESULT tag=101 err=0 nentries=1 text=
conn=0 op=2 BIND anonymous mech=implicit ssf=0
conn=0 op=2 BIND dn="mail=wang@liuqang.cn,virtualDomain=liuqang.cn,o=extmailAccount,dc=liuqang,dc=cn" method=128
conn=0 op=2 BIND dn="mail=wang@liuqang.cn,virtualDomain=liuqang.cn,o=extmailAccount,dc=liuqang,dc=cn" mech=SIMPLE ssf=0
conn=0 op=2 RESULT tag=97 err=0 text=
conn=1 fd=13 ACCEPT from IP=127.0.0.1:1510 (IP=0.0.0.0:389)
conn=1 op=0 SRCH base="o=extmailAlias,dc=liuqang,dc=cn" scope=2 deref=0 filter="(&(&(objectClass=extmailAlias)(mailLocalAddress=postmaster@liuqang.com.cn))(active=1))"
conn=1 op=0 SRCH attr=mail
conn=1 op=0 SEARCH RESULT tag=101 err=0 nentries=0 text=
conn=1 op=1 SRCH base="o=extmailAlias,dc=liuqang,dc=cn" scope=2 deref=0 filter="(&(&(objectClass=extmailAlias)(mailLocalAddress=@liuqang.com.cn))(active=1))"
conn=1 op=1 SRCH attr=mail
conn=1 op=1 SEARCH RESULT tag=101 err=0 nentries=0 text=
conn=2 fd=14 ACCEPT from IP=127.0.0.1:1511 (IP=0.0.0.0:389)
conn=2 op=0 SRCH base="o=extmailAlias,dc=liuqang,dc=cn" scope=2 deref=0 filter="(&(&(objectClass=extmailAlias)(mailLocalAddress=postmaster@liuqang.com.cn))(active=1))"
conn=2 op=0 SRCH attr=mail
conn=2 op=0 SEARCH RESULT tag=101 err=0 nentries=0 text=
conn=2 op=1 SRCH base="o=extmailAlias,dc=liuqang,dc=cn" scope=2 deref=0 filter="(&(&(objectClass=extmailAlias)(mailLocalAddress=@liuqang.com.cn))(active=1))"
conn=2 op=1 SRCH attr=mail
conn=2 op=1 SEARCH RESULT tag=101 err=0 nentries=0 text=
conn=3 fd=15 ACCEPT from IP=127.0.0.1:1515 (IP=0.0.0.0:389)
conn=3 op=0 SRCH base="o=extmailAlias,dc=liuqang,dc=cn" scope=2 deref=0 filter="(&(&(objectClass=extmailAlias)(mailLocalAddress=liuqang.cn))(active=1))"
conn=3 op=0 SRCH attr=mail
conn=3 op=0 SEARCH RESULT tag=101 err=0 nentries=0 text=
conn=3 op=1 SRCH base="o=extmailAccount,dc=liuqang,dc=cn" scope=2 deref=0 filter="(&(objectClass=extmailDomain)(virtualDomain=liuqang.cn))"
conn=3 op=1 SRCH attr=virtualDomain
<= bdb_equality_candidates: (virtualDomain) index_param failed (18)
conn=3 op=1 SEARCH RESULT tag=101 err=0 nentries=1 text=
conn=3 op=2 SRCH base="o=extmailAlias,dc=liuqang,dc=cn" scope=2 deref=0 filter="(&(&(objectClass=extmailAlias)(mailLocalAddress=liuqang.com.cn))(active=1))"
conn=3 op=2 SRCH attr=mail
conn=3 op=2 SEARCH RESULT tag=101 err=0 nentries=0 text=
conn=3 op=3 SRCH base="o=extmailAccount,dc=liuqang,dc=cn" scope=2 deref=0 filter="(&(objectClass=extmailDomain)(virtualDomain=liuqang.com.cn))"
conn=3 op=3 SRCH attr=virtualDomain
<= bdb_equality_candidates: (virtualDomain) index_param failed (18)
conn=3 op=3 SEARCH RESULT tag=101 err=0 nentries=0 text=
conn=4 fd=16 ACCEPT from IP=127.0.0.1:1516 (IP=0.0.0.0:389)
conn=4 op=0 SRCH base="o=extmailAlias,dc=liuqang,dc=cn" scope=2 deref=0 filter="(&(&(objectClass=extmailAlias)(mailLocalAddress=postmaster@liuqang.com.cn))(active=1))"
conn=4 op=0 SRCH attr=mail
conn=4 op=0 SEARCH RESULT tag=101 err=0 nentries=0 text=
conn=4 op=1 SRCH base="o=extmailAlias,dc=liuqang,dc=cn" scope=2 deref=0 filter="(&(&(objectClass=extmailAlias)(mailLocalAddress=@liuqang.com.cn))(active=1))"
conn=4 op=1 SRCH attr=mail
conn=4 op=1 SEARCH RESULT tag=101 err=0 nentries=0 text=
conn=2 op=2 SRCH base="o=extmailAlias,dc=liuqang,dc=cn" scope=2 deref=0 filter="(&(&(objectClass=extmailAlias)(mailLocalAddress=postmaster@liuqang.com.cn))(active=1))"
conn=2 op=2 SRCH attr=mail
conn=2 op=2 SEARCH RESULT tag=101 err=0 nentries=0 text=
conn=2 op=3 SRCH base="o=extmailAlias,dc=liuqang,dc=cn" scope=2 deref=0 filter="(&(&(objectClass=extmailAlias)(mailLocalAddress=@liuqang.com.cn))(active=1))"
conn=2 op=3 SRCH attr=mail
conn=2 op=3 SEARCH RESULT tag=101 err=0 nentries=0 text=
conn=3 op=4 SRCH base="o=extmailAlias,dc=liuqang,dc=cn" scope=2 deref=0 filter="(&(&(objectClass=extmailAlias)(mailLocalAddress=liuqang.com.cn))(active=1))"
conn=3 op=4 SRCH attr=mail
conn=3 op=4 SEARCH RESULT tag=101 err=0 nentries=0 text=
conn=3 op=5 SRCH base="o=extmailAccount,dc=liuqang,dc=cn" scope=2 deref=0 filter="(&(objectClass=extmailDomain)(virtualDomain=liuqang.com.cn))"
conn=3 op=5 SRCH attr=virtualDomain
<= bdb_equality_candidates: (virtualDomain) index_param failed (18)
conn=3 op=5 SEARCH RESULT tag=101 err=0 nentries=0 text=
conn=0 fd=10 closed
conn=1 fd=13 closed
conn=2 fd=14 closed
conn=3 fd=15 closed
conn=4 fd=16 closed
slapd shutdown: waiting for 0 threads to terminate
slapd stopped.

以下是在远端telnet mail.liuqang.cn 25时的maillog:

Apr  8 14:52:50 mail postfix/smtpd[9231]: connect from unknown[192.168.119.2]
Apr  8 14:54:13 mail postfix/smtpd[9231]: 57B7A93960: client=unknown[192.168.119.2], sasl_method=login, sasl_username=wang
Apr  8 14:54:41 mail postfix/cleanup[9233]: 57B7A93960: message-id=<20060408065402.57B7A93960@mail.liuqang.cn>
Apr  8 14:54:41 mail postfix/qmgr[8074]: 57B7A93960: from=<wang@liuqang.cn>, size=360, nrcpt=1 (queue active)
Apr  8 14:54:47 mail postfix/smtpd[9231]: disconnect from unknown[192.168.119.2]
Apr  8 14:54:51 mail postfix/smtpd[9237]: starting TLS engine
Apr  8 14:54:51 mail postfix/smtpd[9237]: unable to get private key from &#39;/etc/postfix/newreq.pem&#39;
Apr  8 14:54:51 mail postfix/smtpd[9237]: 9237:error:0906406DEM routinesEF_CALLBACK:problems getting password:pem_lib.c:105:
Apr  8 14:54:51 mail postfix/smtpd[9237]: 9237:error:0906A068EM routinesEM_do_header:bad password read:pem_lib.c:399:
Apr  8 14:54:51 mail postfix/smtpd[9237]: 9237:error:140B0009:SSL routines:SSL_CTX_use_PrivateKey_file:PEM lib:ssl_rsa.c:707:
Apr  8 14:54:51 mail postfix/smtpd[9237]: TLS engine: cannot load RSA cert/key data
Apr  8 14:54:51 mail postfix/smtpd[9237]: connect from localhost.localdomain[127.0.0.1]
Apr  8 14:54:53 mail postfix/smtpd[9237]: D6AC693961: client=localhost.localdomain[127.0.0.1]
Apr  8 14:54:53 mail postfix/cleanup[9233]: D6AC693961: message-id=<20060408065402.57B7A93960@mail.liuqang.cn>
Apr  8 14:54:53 mail postfix/smtpd[9237]: disconnect from localhost.localdomain[127.0.0.1]
Apr  8 14:54:53 mail postfix/qmgr[8074]: D6AC693961: from=<wang@liuqang.cn>, size=792, nrcpt=1 (queue active)
Apr  8 14:54:53 mail amavis[2132]: (02132-03) Passed CLEAN, LOCAL [192.168.119.2] [192.168.119.2] <wang@liuqang.cn> -> <postmaster@liuqang.com.cn>, Message-ID: <20060408065402.57B7A93960@mail.liuqang.cn>, mail_id: ngtNXx5qfNbs, Hits: 0.55, 11380 ms
Apr  8 14:54:53 mail postfix/smtp[9234]: 57B7A93960: to=<postmaster@liuqang.com.cn>, relay=localhost[127.0.0.1], delay=51, status=sent (250 2.6.0 Ok, id=02132-03, from MTA([127.0.0.1]:10025): 250 Ok: queued as D6AC693961)
Apr  8 14:54:53 mail postfix/qmgr[8074]: 57B7A93960: removed
Apr  8 14:54:53 mail postfix/smtp[9238]: D6AC693961: to=<postmaster@liuqang.com.cn>, relay=mail.liuqang.com.cn[201.93.134.58], delay=2, status=sent (250 ok I will take care of that right away sir 1144479517 qp 19146)
Apr  8 14:54:53 mail postfix/qmgr[8074]: D6AC693961: removed



以下是远端用Outlook收发邮件的信息：
Apr  8 15:01:49 mail postfix/smtpd[9240]: connect from unknown[192.168.119.2]
Apr  8 15:01:49 mail postfix/smtpd[9240]: NOQUEUE: reject: RCPT from unknown[192.168.119.2]: 554 <postmaster@liuqang.com.cn>: Relay access denied; from=<wang@liuqang.cn> to=<postmaster@liuqang.com.cn> proto=ESMTP helo=<netstudio>
Apr  8 15:01:49 mail postfix/smtpd[9240]: disconnect from unknown[192.168.119.2]
Apr  8 15:01:49 mail pop3d: Connection, ip=[::ffff:192.168.119.2]
Apr  8 15:01:49 mail pop3d: LOGIN: ip=[::ffff:192.168.119.2], command=USER
Apr  8 15:01:49 mail pop3d: LOGIN: ip=[::ffff:192.168.119.2], command=PASS
Apr  8 15:01:49 mail pop3d: LOGIN: ip=[::ffff:192.168.119.2], username=wang
Apr  8 15:01:49 mail pop3d: LOGIN: ip=[::ffff:192.168.119.2], password=299480
Apr  8 15:01:49 mail authdaemond: received auth request, service=pop3, authtype=login
Apr  8 15:01:49 mail authdaemond: authldap: trying this module
Apr  8 15:01:49 mail authdaemond: using search filter: (&(active=1)(mail=wang@liuqang.cn))
Apr  8 15:01:49 mail authdaemond: one entry returned, DN: mail=wang@liuqang.cn,virtualDomain=liuqang.cn,o=extmailAccount,dc=liuqang,dc=cn
Apr  8 15:01:49 mail authdaemond: raw ldap entry returned:
Apr  8 15:01:49 mail authdaemond: | mail: wang@liuqang.cn
Apr  8 15:01:49 mail authdaemond: | cn: wang
Apr  8 15:01:49 mail authdaemond: | mailQuota: 10485760S
Apr  8 15:01:49 mail authdaemond: | userPassword: {CRYPT}J2i4ZoIvxBjLQ
Apr  8 15:01:49 mail authdaemond: | homeDirectory: liuqang.cn/wang
Apr  8 15:01:49 mail authdaemond: authldaplib: sysusername=<null>, sysuserid=500, sysgroupid=500, homedir=/home/vmail/domains/liuqang.cn/wang, address=wang, fullname=wang, maildir=<null>, quota=10485760S, options=<null>
Apr  8 15:01:49 mail authdaemond: authldaplib: clearpasswd=<null>, passwd={CRYPT}J2i4ZoIvxBjLQ
Apr  8 15:01:49 mail authdaemond: rebinding with DN &#39;mail=wang@liuqang.cn,virtualDomain=liuqang.cn,o=extmailAccount,dc=liuqang,dc=cn&#39; to validate password
Apr  8 15:01:49 mail authdaemond: authentication bind successful
Apr  8 15:01:49 mail authdaemond: Authenticated: sysusername=<null>, sysuserid=500, sysgroupid=500, homedir=/home/vmail/domains/liuqang.cn/wang, address=wang, fullname=wang, maildir=<null>, quota=10485760S, options=<null>
Apr  8 15:01:49 mail authdaemond: Authenticated: clearpasswd=299480, passwd={CRYPT}J2i4ZoIvxBjLQ
Apr  8 15:01:49 mail pop3d: LOGIN, user=wang, ip=[::ffff:192.168.119.2]
Apr  8 15:01:49 mail pop3d: LOGOUT, user=wang, ip=[::ffff:192.168.119.2], top=0, retr=0, rcvd=12, sent=39, time=0
Apr  8 15:02:36 mail postfix/smtpd[9240]: connect from unknown[192.168.119.2](此处为发信时的連接)
Apr  8 15:02:36 mail postfix/smtpd[9240]: NOQUEUE: reject: RCPT from unknown[192.168.119.2]: 554 <postmaster@liuqang.com.cn>: Relay access denied; from=<wang@liuqang.cn> to=<postmaster@liuqang.com.cn> proto=ESMTP helo=<netstudio>
Apr  8 15:02:36 mail postfix/smtpd[9240]: disconnect from unknown[192.168.119.2]
以下是用outlook收信时的ldap 调试信息，发信时没有出现任何ldap调试信息
slapd starting
conn=0 fd=10 ACCEPT from IP=127.0.0.1:2231 (IP=0.0.0.0:389)
conn=0 op=0 BIND dn="mail=root@liuqang.cn,o=extmailManager,dc=liuqang,dc=cn" method=128
conn=0 op=0 BIND dn="mail=root@liuqang.cn,o=extmailManager,dc=liuqang,dc=cn" mech=SIMPLE ssf=0
conn=0 op=0 RESULT tag=97 err=0 text=
conn=0 op=1 SRCH base="o=extmailAccount,dc=liuqang,dc=cn" scope=2 deref=0 filter="(&(active=1)(mail=wang@liuqang.cn))"
conn=0 op=1 SRCH attr=homeDirectory cn clearPassword userPassword mail mailquota
<= bdb_equality_candidates: (active) index_param failed (18)
conn=1 fd=13 ACCEPT from IP=127.0.0.1:2232 (IP=0.0.0.0:389)
conn=0 op=1 SEARCH RESULT tag=101 err=0 nentries=1 text=
conn=1 op=0 BIND dn="mail=wang@liuqang.cn,virtualDomain=liuqang.cn,o=extmailAccount,dc=liuqang,dc=cn" method=128
conn=1 op=0 BIND dn="mail=wang@liuqang.cn,virtualDomain=liuqang.cn,o=extmailAccount,dc=liuqang,dc=cn" mech=SIMPLE ssf=0
conn=1 op=0 RESULT tag=97 err=0 text=


请你们帮我看看，谢谢

楼主，我按文档做到登录extman后，添加域这一步，提示“Add abc.com fail, reason: transport: value #0 invalid per syntax ”