在CentOS Stream 8上搭建邮件服务器,你可以选择使用Postfix作为MTA(邮件传输代理),Dovecot作为MDA(邮件交付代理)。以下是详细的步骤:
首先,更新你的系统并安装所需的软件包:
sudo dnf update -y
sudo dnf install -y postfix dovecot dovecot-pgsql dovecot-sieve dovecot-managesieved
/etc/postfix/main.cf
编辑 /etc/postfix/main.cf
文件,添加或修改以下内容:
myhostname = mail.example.com
mydomain = example.com
myorigin = $mydomain
inet_interfaces = all
inet_protocols = ipv4
mydestination = $myhostname, localhost.$mydomain, $mydomain
mynetworks = 127.0.0.0/8 [::1]/128
home_mailbox = Maildir/
smtpd_relay_restrictions = permit_mynetworks permit_sasl_authenticated defer_unauth_destination
smtpd_sasl_auth_enable = yes
smtpd_sasl_security_options = noanonymous
smtpd_sasl_local_domain = $myhostname
smtpd_recipient_restrictions = permit_sasl_authenticated,permit_mynetworks,reject_unauth_destination
smtpd_tls_security_level = may
smtpd_tls_cert_file = /etc/pki/tls/certs/smtpd.crt
smtpd_tls_key_file = /etc/pki/tls/private/smtpd.key
smtpd_use_tls = yes
如果你还没有SSL证书,可以使用Let’s Encrypt生成:
sudo yum install -y certbot python3-certbot-postfix
sudo certbot --postfix -d mail.example.com
按照提示完成证书的生成和配置。
/etc/dovecot/dovecot.conf
编辑 /etc/dovecot/dovecot.conf
文件,确保包含以下内容:
protocols = imap pop3
listen = *
mail_location = maildir:~/Maildir
ssl = yes
ssl_cert = </etc/pki/tls/certs/smtpd.crt
ssl_key = </etc/pki/tls/private/smtpd.key
编辑 /etc/dovecot/conf.d/10-auth.conf
文件,确保包含以下内容:
disable_plaintext_auth = no
auth_mechanisms = plain login
编辑 /etc/dovecot/conf.d/10-mail.conf
文件,确保包含以下内容:
mail_plugins = $mail_plugins sieve
创建Sieve脚本目录并设置权限:
sudo mkdir -p /var/spool/dovecot/sieve
sudo chown -R vmail:vmail /var/spool/dovecot/sieve
创建一个简单的Sieve脚本 /var/spool/dovecot/sieve/default.sieve
:
require ["fileinto", "imap4flags", "envelope"];
if header :contains "subject" "urgent" {
fileinto "Urgent";
} else {
fileinto "Inbox";
}
启动并启用Postfix和Dovecot服务:
sudo systemctl start postfix
sudo systemctl enable postfix
sudo systemctl start dovecot
sudo systemctl enable dovecot
确保防火墙允许SMTP、IMAP和POP3端口:
sudo firewall-cmd --permanent --add-service=smtp
sudo firewall-cmd --permanent --add-service=imap
sudo firewall-cmd --permanent --add-service=pop3
sudo firewall-cmd --reload
你可以使用 telnet
或 openssl
命令测试邮件服务器是否正常工作:
telnet mail.example.com 25
输入以下命令进行测试:
HELO localhost
MAIL FROM:<sender@example.com>
RCPT TO:<recipient@example.com>
DATA
Subject: Test Email
This is a test email.
.
QUIT
如果一切配置正确,你应该能够成功发送和接收邮件。
确保你的DNS记录中包含MX记录,指向你的邮件服务器地址。例如:
example.com. IN MX 10 mail.example.com.
完成以上步骤后,你的CentOS Stream 8邮件服务器应该已经搭建完成并可以正常使用了。