���[���T�[�o�[�\�z(Postfix+Dovecot)

�ŏI�X�V���F 2023.02.23

[root@centos ~]# yum -y install postfix�@���@Postfix�C���X�g�[��

[root@centos ~]# vi /etc/postfix/main.cf�@���@Postfix�ݒ�t�@�C���ҏW
# INTERNET HOST AND DOMAIN NAMES
#
# The myhostname parameter specifies the internet hostname of this
# mail system. The default is to use the fully-qualified domain name
# from gethostname(). $myhostname is used as a default value for many
# other configuration parameters.
#
#myhostname = host.domain.tld
#myhostname = virtual.domain.tld
myhostname = mail.centossrv.com�@���@�lj�(��FQDN�����w��)

# The mydomain parameter specifies the local internet domain name.
# The default is to use $myhostname minus the first component.
# $mydomain is used as a default value for many other configuration
# parameters.
#
#mydomain = domain.tld
mydomain = centossrv.com�@���@�lj�(���h���C�������w��)

# SENDING MAIL
#
# The myorigin parameter specifies the domain that locally-posted
# mail appears to come from. The default is to append $myhostname,
# which is fine for small sites.  If you run a domain with multiple
# machines, you should (1) change this to $mydomain and (2) set up
# a domain-wide alias database that aliases each user to
# user@that.users.mailhost.
#
# For the sake of consistency between sender and recipient addresses,
# myorigin also specifies the default domain name that is appended
# to recipient addresses that have no @domain part.
#
#myorigin = $myhostname
#myorigin = $mydomain
myorigin = $mydomain�@���@�lj�(���[�J������̃��[�����M���̑��M�����[���A�h���X@�ȍ~�Ƀh���C������t��)

# The inet_interfaces parameter specifies the network interface
# addresses that this mail system receives mail on.  By default,
# the software claims all active interfaces on the machine. The
# parameter also controls delivery of mail to user@[ip.address].
#
# See also the proxy_interfaces parameter, for network addresses that
# are forwarded to us via a proxy or network address translator.
#
# Note: you need to stop/start Postfix when this parameter changes.
#
#inet_interfaces = all
#inet_interfaces = $myhostname
#inet_interfaces = $myhostname, localhost
inet_interfaces = localhost
��
inet_interfaces = all�@���@�ύX(�O������̃��[����M������)

# The mydestination parameter specifies the list of domains that this# machine considers itself the final destination for.
#
# These domains are routed to the delivery agent specified with the
# local_transport parameter setting. By default, that is the UNIX
# compatible delivery agent that lookups all recipients in /etc/passwd
# and /etc/aliases or their equivalent.
#
# The default is $myhostname + localhost.$mydomain.  On a mail domain
# gateway, you should also include $mydomain.
#
# Do not specify the names of virtual domains - those domains are
# specified elsewhere (see VIRTUAL_README).
#
# Do not specify the names of domains that this machine is backup MX
# host for. Specify those names via the relay_domains settings for
# the SMTP server, or use permit_mx_backup if you are lazy (see
# STANDARD_CONFIGURATION_README).
#
# The local machine is always the final destination for mail addressed
# to user@[the.net.work.address] of an interface that the mail system
# receives mail on (see the inet_interfaces parameter).
#
# Specify a list of host or domain names, /file/name or type:table
# patterns, separated by commas and/or whitespace. A /file/name
# pattern is replaced by its contents; a type:table is matched when
# a name matches a lookup key (the right-hand side is ignored).
# Continue long lines by starting the next line with whitespace.
#
# See also below, section "REJECTING MAIL FOR UNKNOWN LOCAL USERS".
#
mydestination = $myhostname, localhost.$mydomain, localhost
��
mydestination = $myhostname, localhost.$mydomain, localhost, $mydomain�@���@�ύX(���h���C�������[������M�ł���悤�ɂ���)
#mydestination = $myhostname, localhost.$mydomain, localhost, $mydomain
#mydestination = $myhostname, localhost.$mydomain, localhost, $mydomain,
#       mail.$mydomain, www.$mydomain, ftp.$mydomain

# DELIVERY TO MAILBOX
#
# The home_mailbox parameter specifies the optional pathname of a
# mailbox file relative to a user's home directory. The default
# mailbox file is /var/spool/mail/user or /var/mail/user.  Specify
# "Maildir/" for qmail-style delivery (the / is required).
#
#home_mailbox = Mailbox
#home_mailbox = Maildir/
home_mailbox = Maildir/�@���@�lj�(���[���i�[�`����Maildir�`���ɂ���)

# SHOW SOFTWARE VERSION OR NOT
#
# The smtpd_banner parameter specifies the text that follows the 220
# code in the SMTP server's greeting banner. Some people like to see
# the mail version advertised. By default, Postfix shows no version.
#
# You MUST specify $myhostname at the start of the text. That is an
# RFC requirement. Postfix itself does not care.
#
#smtpd_banner = $myhostname ESMTP $mail_name
#smtpd_banner = $myhostname ESMTP $mail_name ($mail_version)
smtpd_banner = $myhostname ESMTP unknown�@���@�lj�(���[���T�[�o�[�\�t�g���̉B����)

�ȉ����ŏI�s�֒lj�(SMTP�F�ؐݒ�)
smtpd_sasl_auth_enable = yes

smtpd_recipient_restrictions =
    permit_mynetworks
    permit_sasl_authenticated
    reject_unauth_destination

�ȉ����ŏI�s�֒lj�(��M���[���T�C�Y����)
message_size_limit = 10485760�@���@�lj�(��M���[���T�C�Y��10MB=10*1024*1024�ɐ���)

[root@centos ~]# vi /etc/postfix/master.cf�@���@master.cf�ҏW
submission inet n       -       n       -       -       smtpd�@���@�s����#���폜���ăR�����g����(SUBMISSION�|�[�g�L����)
#  -o syslog_name=postfix/submission
#  -o smtpd_tls_security_level=encrypt
  -o smtpd_sasl_auth_enable=yes�@���@�s����#���폜���ăR�����g����(SUBMISSION�|�[�g��SMTP�F�ؗL����)

[root@centos ~]# yum -y install cyrus-sasl�@���@cyrus-sasl�C���X�g�[��

[root@centos ~]# systemctl start saslauthd�@���@saslauthd�N��

[root@centos ~]# systemctl enable saslauthd�@���@saslauthd�����N���ݒ�

[root@centos ~]# vi /etc/sasl2/smtpd.conf�@���@SMTP�F�ؐݒ�t�@�C���ҏW
pwcheck_method: saslauthd
��
pwcheck_method: auxprop�@���@�ύX

[root@centos ~]# vi /etc/postfix/main.cf�@���@Postfix�ݒ�t�@�C���ҏW
�ȉ����ŏI�s�֒lj�(���݂��Ȃ����[�U�[�����[����unknown_user�֔z��)
local_recipient_maps =
luser_relay = unknown_user@localhost

[root@centos ~]# echo unknown_user: /dev/null >> /etc/aliases�@���@unknown_user�����[����j��

[root@centos ~]# newaliases�@���@/etc/aliases�ύX���f

[root@centos ~]# systemctl restart postfix�@���@Postfix�ċN��

[root@centos ~]# systemctl enable postfix�@���@Postfix�����N���ݒ�

[root@centos ~]# yum -y install dovecot�@���@Dovecot�C���X�g�[��

[root@centos ~]# vi /etc/dovecot/conf.d/10-mail.conf�@���@10-mail.conf�ҏW
# Location for users' mailboxes. The default is empty, which means that Dovecot
# tries to find the mailboxes automatically. This won't work if the user
# doesn't yet have any mail, so you should explicitly tell Dovecot the full
# location.
#
# If you're using mbox, giving a path to the INBOX file (eg. /var/mail/%u)
# isn't enough. You'll also need to tell Dovecot where the other mailboxes are
# kept. This is called the "root mail directory", and it must be the first
# path given in the mail_location setting.
#
# There are a few special variables you can use, eg.:
#
#   %u - username
#   %n - user part in user@domain, same as %u if there's no domain
#   %d - domain part in user@domain, empty if there's no domain
#   %h - home directory
#
# See doc/wiki/Variables.txt for full list. Some examples:
#
#   mail_location = maildir:~/Maildir
#   mail_location = mbox:~/mail:INBOX=/var/mail/%u
#   mail_location = mbox:/var/mail/%d/%1n/%n:INDEX=/var/indexes/%d/%1n/%n
#
# 
#
#mail_location =
mail_location = maildir:~/Maildir�@���@�lj�(���[���i�[�`����Maildir�`���ɂ���)

# ':' separated list of directories under which chrooting is allowed for mail
# processes (ie. /var/mail will allow chrooting to /var/mail/foo/bar too).
# This setting doesn't affect login_chroot, mail_chroot or auth chroot
# settings. If this setting is empty, "/./" in home dirs are ignored.
# WARNING: Never add directories here which local users can modify, that
# may lead to root exploit. Usually this should be done only if you don't
# allow shell access for users. 
#valid_chroot_dirs =
valid_chroot_dirs = /home�@���@�lj���OpenSSH+Chroot�𓱓����Ă���ꍇ�̂�

[root@centos ~]# vi /etc/dovecot/conf.d/10-auth.conf�@���@10-auth.conf�ҏW
# Disable LOGIN command and all other plaintext authentications unless
# SSL/TLS is used (LOGINDISABLED capability). Note that if the remote IP
# matches the local IP (ie. you're connecting from the same computer), the
# connection is considered secure and plaintext authentication is allowed.
#disable_plaintext_auth = yes
disable_plaintext_auth = no�@���@�lj�(�v���C���e�L�X�g�F�؂�����)
�����[���T�[�o�[�ԒʐM���e�Í�����������

[root@centos ~]# vi /etc/dovecot/conf.d/10-ssl.conf�@���@10-ssl.conf�ҏW
# SSL/TLS support: yes, no, required. 
# disable plain pop3 and imap, allowed are only pop3+TLS, pop3s, imap+TLS and imaps
# plain imap and pop3 are still allowed for local connections
ssl = no�@���@SSL�ڑ�����
�����[���T�[�o�[�ԒʐM���e�Í�����������

[root@centos ~]# systemctl start dovecot�@���@Dovecot�N��

[root@centos ~]# systemctl enable dovecot�@���@Dovecot�����N���ݒ�

[root@centos ~]# useradd centos�@���@���[�U�[�lj���SSH�ɂ�郊���[�g�ڑ����ł���悤�ɂ���ꍇ
[root@centos ~]# useradd -s /sbin/nologin centos�@���@���[�U�[�lj���SSH�ɂ�郊���[�g�ڑ��͂ł��Ȃ��悤�ɂ���ꍇ

[root@centos ~]# passwd centos�@���@�p�X���[�h�ݒ�
Changing password for user centos.
New UNIX password: �@���@�p�X���[�h����
Retype new UNIX password: �@���@�p�X���[�h����(�m�F)
passwd: all authentication tokens updated successfully.

�ȉ���SMTP�F�؂Ɍ•ʂ̃��[�U�[���A�p�X���[�h���g�p����ꍇ�̂�
[root@centos ~]# echo "�p�X���[�h" | saslpasswd2 -p -u centos.centossrv.com -c centos�@���@SMTP�F�ؗp���[�U�[�^�p�X���[�h�o�^

[root@centos ~]# sasldblistusers2�@���@SMTP�F�ؗp���[�U�[�^�p�X���[�h�m�F
centos@centos.centossrv.com: userPassword

[root@centos ~]# chgrp postfix /etc/sasldb2�@���@/etc/sasldb2���L�O���[�v��postfix�ɕύX���ŏ���1��̂�

��SMTP�F�ؗp���[�U�[�^�p�X���[�h���폜����ꍇ
[root@centos ~]# saslpasswd2 -d centos -u centos.centossrv.com�@���@SMTP�F�ؗp���[�U�[�^�p�X���[�h�폜