| View previous topic :: View next topic |
| Author |
Message |
CurtE
Guru
Joined: 17 Apr 2004
Posts: 364
Location: Minneapolis, MN
|
 Posted: Sun Aug 30, 2009 11:13 pm Post subject: Problem with Postfix setup. |
 |
|
The directions in "Virtual Mailhosting System with Postfix Guide" at
6. Adding SSL and SASL support to Postfix it says to:
# nano -w /etc/postfix/main.cf
smtpd_sasl_auth_enable = yes
smtpd_sasl2_auth_enable = yes
smtpd_sasl_security_options = noanonymous
broken_sasl_auth_clients = yes
smtpd_sasl_local_domain =
(The broken_sasl_auth_clients option and the login auth method
are for outlook and outlook express only and are undocumented.
Isn't having to hack software for stupid, broken, M$ BS great?
smtpd_sasl_local_domain appends a domain name to clients using
smtp-auth. Make sure it's blank or your user names will get
mangled by postfix and be unable to auth.)
smtpd_recipient_restrictions =
permit_sasl_authenticated,
permit_mynetworks,
reject_unauth_destination
(The next two options enable outgoing encryption.)
smtp_use_tls = yes
smtp_tls_note_starttls_offer = yes
smtpd_use_tls = yes
#smtpd_tls_auth_only = yes
smtpd_tls_key_file = /etc/postfix/newkey.pem
smtpd_tls_cert_file = /etc/postfix/newcert.pem
smtpd_tls_CAfile = /etc/postfix/cacert.pem
smtpd_tls_loglevel = 3
smtpd_tls_received_header = yes
smtpd_tls_session_cache_timeout = 3600s
tls_random_source = dev:/dev/urandom
My problem, none of these were in my "main.cf". Is this normal for this file and I'm just suppose to add these lines to the file? Does it matter where they are added? |
|
| Back to top |
|
 |
CurtE
Guru
Joined: 17 Apr 2004
Posts: 364
Location: Minneapolis, MN
|
| Posted: Mon Aug 31, 2009 3:39 am Post subject: |
|
|
I added the fields and continued.
The setup procedure says to emerge PHPMYADMIN.
What is the reason for that? Is this necessary or an option? |
|
| Back to top |
|
|
CurtE
Guru
Joined: 17 Apr 2004
Posts: 364
Location: Minneapolis, MN
|
| Posted: Mon Aug 31, 2009 10:03 pm Post subject: |
|
|
In /etc/postfix/main.cf:
alias_maps = mysql:/etc/postfix/mysql-aliases.cf
relocated_maps = mysql:/etc/postfix/mysql-relocated.cf
local_transport = local
local_recipient_maps = $alias_maps $virtual_mailbox_maps unix:passwd.byname
virtual_transport = virtual
virtual_mailbox_domains = flitezimz.com, blue-moose-gifts.com
In the line with the bold section, is passwd:byname suppose to be changed to something or is it verbatim? |
|
| Back to top |
|
|
CurtE
Guru
Joined: 17 Apr 2004
Posts: 364
Location: Minneapolis, MN
|
| Posted: Tue Sep 01, 2009 6:36 am Post subject: |
|
|
In the How-To, it says to add this to /etc/apache2/vhosts.d/ssl_vhost.conf
| Code: | (Change the following parameters)
NameVirtualHost host.domain.name:443
<VirtualHost host.domain.name:443>
ServerName host.domain.name
ServerAdmin your@email.address
DocumentRoot "/var/www/localhost/htdocs/phpmyadmin";
<Directory "/var/www/localhost/htdocs/phpmyadmin">
...
</Directory>
SSLCertificateFile /etc/apache2/ssl/new.cert.cert
SSLCertificateKeyFile /etc/apache2/ssl/new.cert.key
SSLEngine on
...
</VirtualHost> |
What is the purpose of this entry and of phpmyadmin? Is it to modify MySQL statements in a GUI window? If so, I already do that with SQLyog or am I mixing Apples and Oranges?
The next question, is the '...' in the code above suppose to have something there? Or just '...'? |
|
| Back to top |
|
|
CurtE
Guru
Joined: 17 Apr 2004
Posts: 364
Location: Minneapolis, MN
|
| Posted: Thu Sep 03, 2009 3:49 pm Post subject: |
|
|
This is the /etc/apache2/vhosts.d/ssl_vhost.conf as I have it now. I'm a little confused whether I should have 443 on the other web sites too.
| Code: | <IfDefine DEFAULT_VHOST>
Listen 443
NameVirtualHost csmn1.cs-mn.com:443
<VirtualHost *:80>
ServerName localhost
Include /etc/apache2/vhosts.d/default_vhost.include
<IfModule mpm_peruser_module>
ServerEnvironment apache apache
</IfModule>
</VirtualHost>
<VirtualHost www.cs-mn.com:443>
ServerName csmn1.cs-mn.com
ServerAlias *.cs-mn.com cs-mn.com
<Directory "/var/www/www.cs-mn.com">
Allow from all
</Directory>
SSLCertificateFile /etc/apache2/ssl/new.cert.cert
SSLCertificateKeyFile /etc/apache2/ssl/new.cert.key
SSLEngine on
</VirtualHost>
<VirtualHost *:80>
ServerName www.flitezimz.com
ServerAlias *.flitezimz.com flitezimz.com
<Directory "/var/www/www.flitezimz.com/">
Allow from all
</Directory>
#Include /etc/apache2/vhosts.d/default_vhost.include
ServerPath /var/www/www.flitezimz.com
DocumentRoot /var/www/www.flitezimz.com
</VirtualHost>
<VirtualHost *:80>
ServerName www.reunions-with-flair.com
ServerAlias *.reunions-with-flair.com reunions-with-flair.com
<Directory "/var/www/www.reunions-with-flair.com/">
Allow from all
</Directory>
#Include /etc/apache2/vhosts.d/default_vhost.include
ServerPath /var/www/www.reunions-with-flair.com
DocumentRoot /var/www/www.reunions-with-flair.com
</VirtualHost>
<VirtualHost *:80>
ServerName www.blue-moose-gifts.com
ServerAlias *.blue-moose-gifts.com blue-moose-gifts.com
<Directory "/var/www/www.blue-moose-gifts.com">
Allow from all
</Directory>
#Include /etc/apache2/vhosts.d/default_vhost.include
ServerPath /var/www/www.blue-moose-gifts.com
DocumentRoot /var/www/www.blue-moose-gifts.com
</VirtualHost>
</IfDefine> |
|
|
| Back to top |
|
|
|
Networking & Security
