http://geoffl.blog.163.com/

作者: 富贵猫

前阵子开始要做Postfix邮件服务器，网上搜了好多文章，不过大部分文章只是作者自己安装步骤的罗列，只能算授人以鱼，所以我看了之后还是需要去看Postfix的手册，还要看很多官方的参考书，看完之后颇有心得，所以就打算写一个“授人以渔”的系列安装设置的文章，让你知其然也知其所以然。

--------------------------------------------------------------------------------

Postfix作邮箱，有4种设置方式，分别是共享域名+系统帐户、独立域名+系统帐户、独立域名+虚拟帐户和虚拟域名+特殊格式邮箱。鉴于通常我们不可能给每个用户设置一个系统帐户，所以第一第二种就不考虑不介绍了。既然是用Postfix来建立我们自己地邮箱系统，所以也没必要去兜很多圈子设置特殊格式邮箱，所以第四种也不考虑。剩下只有一种方式，就是独立域名+虚拟邮箱。

所谓独立域名，就是即使用户名是一样的，但如果域名不同其邮件也将放置在不同的目录。譬如info@abc.com和info@def.com，这二个e-mail地址都以info为用户名，但域名不同，如果是共享域名，他们的mail将被放置在同一个目录下，而独立域名将放置在不同目录下。如果你们公司是很大的集团，下面分好几个公司，分别有独立的域名，这难免有重名的员工，这种情况下，后者显然是我们希望看到的。而所谓虚拟帐户，既然那些邮箱用户只是使用mail服务，我们当然没有必要去给每个用户在Linux下面开设一个个系统帐户，所以我们就用一些数据库之类的东西来保存这些帐户信息，譬如用哈希表、SQL数据库或者LDAP。我使用的是独立域名+虚拟LDAP帐户。

Postfix的安装我就不说了，非常简单。不过如果不会也没关系，后面我会写一篇关于Postfix+mail quota的，那时候需要下载、补丁和编译，等于是Postfix的安装。

LDAP也不说了，要完全掌握LDAP不是这篇能解决的，我只假设你的LDAP服务器里已经有mail这个字段。

下面开始说Postfix如何设置。Postfix的配置文件是/etc/postfix/main.cf，这是独立域名+LDAP的设置

# ===== Basic Setting =====
mail_owner = postfix
myhostname = pop.test.com
inet_interfaces = all
queue_directory = /var/spool/postfix
mynetworks = 127.0.0.0/8

home_mailbox =

# ===== Virtual Mailbox =====
virtual_mailbox_domains = hash:/etc/postfix/v_domains
virtual_mailbox_maps = ldap:/etc/postfix/v_mailbox_maps

virtual_mailbox_base = /var/spool/vhosts/
virtual_minimum_uid = 500
virtual_uid_maps = static:5000
virtual_gid_maps = static:5000
virtual_transport = virtual

myhostname设置你的邮件服务器名字

inet_interfaces = all设置你在哪些网卡上监听

另外有几个是需要解释的：我们接受哪些域名的邮件？我们的域名下有哪些用户？他们的邮件存放在什么目录？

我们接受那些域名的邮件，这是由virtual_mailbox_domains来定义的。虽然我们可以直接使用

virtual_mailbox_domains = test.com, test2.com

这样的格式来定义这些域名，不过我还是建议如我这样使用一个表来存放，这样更方便日后的维护，表名是随意取的，有没有后缀都没关系，我用v_domains作为表的名字，在main.cf里定义是

virtual_mailbox_domains = hash:/etc/postfix/v_domains

v_domains的内容如下

test.com OK

test2.com OK

这是个text文件，仅仅包含域名，但为了满足哈希表的格式，所以在后面添加一个OK。然后我们还要把这个文件变成Postfix的数据库格式，因此用如下命令转变其格式

postmap v_domains

之后你会得到一个以db为后缀的文件v_domains.db。注意，每次修改完v_domains你都需要使用一次postmap。

我们有哪些用户，这是由virtual_mailbox_maps来决定。同样，你可以用哈希表，不过我还是用LDAP。为了方便你理解，我先说明一下如果用哈希表，它的格式应该是

user1@test.com test.com/user1_mailDirectory/

user2@test.com test.com/user2_mailDirectory/

user1@test2.com test2.com/user1_mailDirectory/

左边是用户的e-mail地址，空格之后是该用户的邮件存放目录。既然我们说了，独立域名代表info@abc.com和info@def.com的邮件放置在不同目录下，所以我们的定义里user1@test.com和user1@test2.com的目录是不同的。如果换成LDAP，我们要得到相同的结果，即用e-mail地址来搜索，得到其邮件存放目录

既然讲到邮件存放目录，就一并解释一下到底这个目录怎样定义的。邮件是存放在

virtual_mailbox_base\virtual_mailbox_maps\home_mailbox下，也就是说virtual_mailbox_base定义的目录下，postfix会根据virtual_mailbox_maps返回的用户目录自动创建该目录，然后如果home_mailbox也有定义，那么在用户目录下还会创建home_mailbox定义的名字。举例来说，按照上面的设置，邮件会存放在

/var/spool/vhosts/test.com/user1/下面。

如果home_mailbox不是空白而是Mail/，那么就会存放在

/var/spool/vhost/test/com/user1/Mail/下面。home_mailbox有什么用呢？举个例子，比方你已经有homeDirectory了，但那是你平时放文件的地方，那么再在同样目录下放邮件就变得很奇怪，所以需要home_mailbox来定义邮件放在你homeDirectory下的什么目录下

注意：地址的最后有没有"/"决定了使用mailbox格式还是maildir格式，没有"/"表示mailbox，有表示maildir。所以并不象大部分人认为的，home_mailbox定义为MailDir才表示使用maildir格式。再举几个例子

/var/spool/vhosts/test.com/user1/  表示使用MailDir格式

/var/spool/vhosts/test.com/user1  表示使用MailBox格式

/var/spool/vhosts/test.com/user1/Mail/  表示使用MailDir格式

/var/spool/vhosts/test.com/user1/MailDir/ 表示使用MailDir格式

/var/spool/vhosts/test.com/user1/MailDir 表示使用MailBox格式，即使home_mailbox是maildir，但没有最后的"/"，只能表示使用MailBox格式。同样道理

/var/spool/vhosts/test.com/user1/MailBox/ 表示使用MailDir格式，虽然home_mailbox是mailbox，但最后的"/"就说明了是使用MailDir格式。

回到virtual_mailbox_maps的LDAP定义，其格式是

virtual_mailbox_maps = ldap:/etc/postfix/v_mailbox_maps

v_mailbox_maps只是一个连接Postfix和LDAP的配置文件，同样文件名是随意取的。v_mailbox_maps的内容是

# LDAP Server的IP地址，我是设在和postfix同一电脑，所以是127.0.0.1

server_host = 127.0.0.1
# 下面这些关于LDAP Search的内容如果你不了解，请学习LDAP

search_base = ou=people,o=test
server_port = 389
bind = yes
bind_dn = cn=root,o=test
bind_pw = <rootpassword>
version = 3

# 下面是关键，我会额外解释

query_filter = (mail=%s)
result_attribute = mail
result_format = %d/%u/

query_filter = (mai=%s)里，query_filter表示搜索用的字段，mail是表示你LDAP里的字段名，%s表示要进入Postfix服务器的那封e-mail的收件人，mail=%s就是搜索LDAP里的mail字段等于收件人的结果。

result_attribute 是LDAP返回的字段，如果你已经在LDAP里定义了譬如homeDirectory或者mailDirectory这样的字段来存放邮件目录，那么你可以直接使用

result_attribute = homeDirectory

这样的格式来定义，那么它直接返回你定义的homeDirectory，而且不需要后面的result_format。我没有这个字段，但我想把用户邮件放在各自的域名下，就如user1@test.com在test.com/user1/下一样，所以我只需要它返回mail字段，然后用result_format来改变返回字段的格式。result_format顾名思义就是把结果format一下，其中%d表示e-mail地址@之后的域名，d应该是domain的首字母，%u表示e-mail地址@之前的用户名，想来u就是username之类的，所以返回的mail地址user1@test.com经过result_format之后就变成了test.com/user1/。注意，%d/%u/最后那个"/"表示我使用MailDir格式存放我的e-mail。

virtual_uid_maps = static:5000
virtual_gid_maps = static:5000

这2行表示邮件用什么身份的用户来存放，我定义了5000，所以你需要事先添加一个用户，并且其uid是5000

useradd postfixadmin –u 5000

名字是随意取的，只要注意uid和main.cf里这2行的定义相同就OK.

好了，如果一切顺利，你应该已经可以收到mail了，收件人没有存在在你LDAP里的那些邮件，会被退回。

or if quot;devel&quot; sounds more exciting:

Move policyd-weight to the proper location for your operating system (example shows *BSD

):

Check the default settings

If these settings seem appropriate you don&#39;t need a configuration file at all. In case you like to change some settings, create a file (i.e. /usr/local/etc/policyd-weight.conf) and add only the variables that differ from the defaults. For example if you want only DNSBL checks and a different port use:

There is another option, which is not recommended:

This will write the default configuration to a file. However, this is not good practice, because it will make maintaining the configuration file difficult and changed defaults will not picked up automatically.
2.1 Add a system account for policyd-weight
Use the appropriate commands for your operating system to add a new user and a new group named polw. This unprivileged user does not need a valid shell.
2.2 Create an init script
Either create an rc-init script or manage otherwise that policyd-weight gets started at boot-time. The command to start policyd-weight in daemon mode is:

You need to be root to do that.
3. Edit Postfix main.cf
This example shows a minimal setup. Do NOT copy & paste, instead adjust your main.cf to meet the minimal requirements. Please keep old authentication restrictions (such as SASL) and so forth:

Lines 6: makes sure to only allow valid DNS Names (in terms of [RFC 2821] Sect. 2.3.5, [RFC 1123] Sect. 5.2.5 and [RFC 1035] Sect. 2.3.1) in the HELO command. reject_invalid_hostname (or reject_invalid_helo_hostname as of Postfix 2.3.x) makes sure that no bogus characters are used. It&#39;s a safety and RFC setting.

Line 20: calls the policy daemon on host 127.0.0.1 (localhost) at port 12525.
For whitelisting hosts read the FAQ.

To prevent that a proper MTA can use your own domain as sender please read and unterstand Ralf Hildebrandts receipe

If you don&#39;t understand some settings or don&#39;t know their meaning please read Postfix SMTP relay and access control first, respectively the postconf.5 manpage.
4. Score tuning and other configurations
To tune scores or turn on/off some features such as X-headers, read and edit /usr/local/etc/policyd-weight.conf
The configuration file is Perl syntax. If you make Perl syntax errors there, policyd-weight won&#39;t work.
It is not required to restart or reload postfix. Changes made to the configuration are picked up by each new policyd-weight instance. To have changes take effect immediately you can a) kill each policyd-weight instance, or b) restart Postfix if running in master.cf mode.

转载自：http://www.thismail.org/bbs/thread-2044-1-1.html

postconf -m 查看postfix支持的函数

postmap -q 测试任何种类的查询表

postmap -q hash:/etc/postfix/transport
postmap -q mysql:/etc/postfix/transport.cf

postalias

postfix check
检查配置文件是否有问题，文件与目录的拥有权是否正确，甚至帮你创建任何遗失的目录，

postfix的等效机制是定义在main.cf的queue_run_delay参数，默认值是1000秒

postfix -D 得出调试信息

/etc/services ---查看下文件内容

postsuper -h 保留邮件队列

postsuper -H 将保留的邮件队列重新激活

postsuper -r ALL 将被延迟了的邮件重新排队

postcat -q 邮件ID 查看一个队列文件的内容

要求postfix立刻投递滞留在队列里的邮件的操作成为清空（flush），
命令是 postqueue -f

postqueue -s 清空寄到特定站点的邮件

postconf -l 查看postfix支持的锁机制

最简单的虚拟网域模式，是每位用户都可以收到每个网域的邮件。就用户的感受而言，
就好像同一个邮箱有多个地址一样。这种模式的设定方法最简单，只要将所有虚拟网域名称都列在mydestination参数，并像平常一样为每一位用户（不管他们在哪一个网域）都创建自己的系统账户，他们就可以收到写给任何网域的邮件。

默认情况下，flush只管理relay_domains所列的网域。如果还有其他网域也需要快速清空服务，你可以将它们的网域名称列在fast_flush_domains

系统：CentOS5.2，无桌面，安装开发工具，开发库

一、禁用SELinux
# vi /etc/selinux/config
将
SELINUX=enforcing
修改为
SELINUX=disabled

# vi /etc/sysconfig/network
将HOSTNAME修改为
HOSTNAME=test.test.com

iptables没必要禁了，ispCP安装好后，会生成防火墙规则，并启用iptables

重启系统
# init 6

二、安装ispCP所需基本软件
1、下载ispcp-omega：
# mkdir /root/download
# cd /root/download
# wget http://nchc.dl.sourceforge.net/sourceforge/ispcp/ispcp-omega-1.0.0.tar.gz
# tar xzf ispcp-omega-1.0.0.tar.gz
# cd ispcp-omega-1.0.0

2、安装rpm包：
# yum install `cat ./docs/CentOS/centos-packages`
这个过程会提示很多包都没有，没有关系，呆会激活另外一个更新源时，再重复以上yum的步骤。
（由于是这样，在考虑干脆在这一步就用那个源，免得重复）

3、安装一个perl会用到的软件
# cd /root/download
# wget ftp://ftp.pbone.net/mirror/centos.karan.org/el5/extras/testing/i386/RPMS/ncftp-3.2.0-3.el5.kb.i386.rpm
# rpm -Uvh ncftp-3.2.0-3.el5.kb.i386.rpm

4、初始化perl模块安装环境
# perl -MCPAN -e shell
# /usr/lib/perl5/5.8.8/CPAN/Config.pm initialized.

CPAN is the world-wide archive of perl resources. It consists of about
100 sites that all replicate the same contents all around the globe.
Many countries have at least one CPAN site already. The resources
found on CPAN are easily accessible with the CPAN.pm module. If you
want to use CPAN.pm, you have to configure it properly.

If you do not want to enter a dialog now, you can answer 'no' to this
question and I'll try to autoconfigure. (Note: you can revisit this
dialog anytime later by typing 'o conf init' at the cpan prompt.)

Are you ready for manual configuration? [yes] 直接回车

The following questions are intended to help you with the
configuration. The CPAN module needs a directory of its own to cache
important index files and maybe keep a temporary mirror of CPAN files.
This may be a site-wide directory or a personal directory.

First of all, I'd like to create this directory. Where?

CPAN build and cache directory? [/root/.cpan] 直接回车

If you want, I can keep the source files after a build in the cpan
home directory. If you choose so then future builds will take the
files from there. If you don't want to keep them, answer 0 to the
next question.

How big should the disk cache be for keeping the build directories
with all the intermediate files?

Cache size for build directory (in MB)? [10] 直接回车

By default, each time the CPAN module is started, cache scanning
is performed to keep the cache size in sync. To prevent from this,
disable the cache scanning with 'never'.

Perform cache scanning (atstart or never)? [atstart] atstart

To considerably speed up the initial CPAN shell startup, it is
possible to use Storable to create a cache of metadata. If Storable
is not available, the normal index mechanism will be used.

Cache metadata (yes/no)? [yes] 直接回车

The next option deals with the charset your terminal supports. In
general CPAN is English speaking territory, thus the charset does not
matter much, but some of the aliens out there who upload their
software to CPAN bear names that are outside the ASCII range. If your
terminal supports UTF-8, you say no to the next question, if it
supports ISO-8859-1 (also known as LATIN1) then you say yes, and if it
supports neither nor, your answer does not matter, you will not be
able to read the names of some authors anyway. If you answer no, names
will be output in UTF-8.

Your terminal expects ISO-8859-1 (yes/no)? [yes] 直接回车

If you have one of the readline packages (Term::ReadLine::Perl,
Term::ReadLine::Gnu, possibly others) installed, the interactive CPAN
shell will have history support. The next two questions deal with the
filename of the history file and with its size. If you do not want to
set this variable, please hit SPACE RETURN to the following question.

File to save your history? [/root/.cpan/histfile] 直接回车
Number of lines to save? [100] 直接回车

The CPAN module can detect when a module that which you are trying to
build depends on prerequisites. If this happens, it can build the
prerequisites for you automatically ('follow'), ask you for
confirmation ('ask'), or just ignore them ('ignore'). Please set your
policy to one of the three values.

Policy on building prerequisites (follow, ask or ignore)? [ask] ask

The CPAN module will need a few external programs to work properly.
Please correct me, if I guess the wrong path for a program. Don't
panic if you do not have some of them, just press ENTER for those. To
disable the use of a download program, you can type a space followed
by ENTER.

Where is your gzip program? [/bin/gzip] 直接回车
Where is your tar program? [/bin/tar] 直接回车
Where is your unzip program? [/usr/bin/unzip] /直接回车
Where is your make program? [/usr/bin/make] 直接回车
Where is your links program? [/usr/bin/links] 直接回车
Where is your wget program? [/usr/bin/wget] 直接回车
Where is your ncftp program? [/usr/bin/ncftp] 直接回车
Where is your ftp program? [/usr/kerberos/bin/ftp] 直接回车
Where is your gpg program? [/usr/bin/gpg] 直接回车
What is your favorite pager program? [/usr/bin/less] 直接回车
What is your favorite shell? [/bin/bash] 直接回车

Every Makefile.PL is run by perl in a separate process. Likewise we
run 'make' and 'make install' in processes. If you have any
parameters (e.g. PREFIX, LIB, UNINST or the like) you want to pass
to the calls, please specify them here.

If you don't understand this question, just press ENTER.

Parameters for the 'perl Makefile.PL' command?
Typical frequently used settings:

PREFIX=~/perl       non-root users (please see manual for more hints)

Your choice:  [] 直接回车
Parameters for the 'make' command?
Typical frequently used setting:

-j3              dual processor system

Your choice:  [] 直接回车
Parameters for the 'make install' command?
Typical frequently used setting:

UNINST=1         to always uninstall potentially conflicting files

Your choice:  [] 直接回车

Sometimes you may wish to leave the processes run by CPAN alone
without caring about them. As sometimes the Makefile.PL contains
question you're expected to answer, you can set a timer that will
kill a 'perl Makefile.PL' process after the specified time in seconds.

If you set this value to 0, these processes will wait forever. This is
the default and recommended setting.

Timeout for inactivity during Makefile.PL? [0] 直接回车

If you're accessing the net via proxies, you can specify them in the
CPAN configuration or via environment variables. The variable in
the $CPAN::Config takes precedence.

Your ftp_proxy?
Your http_proxy?
Your no_proxy?
You have no /root/.cpan/sources/MIRRORED.BY
I'm trying to fetch one
CPAN: LWP::UserAgent loaded ok
Fetching with LWP:
ftp://ftp.perl.org/pub/CPAN/MIRRORED.BY

Now we need to know where your favorite CPAN sites are located. Push
a few sites onto the array (just in case the first on the array won't
work). If you are mirroring CPAN to your local workstation, specify a
file: URL.

First, pick a nearby continent and country (you can pick several of
each, separated by spaces, or none if you just want to keep your
existing selections). Then, you will be presented with a list of URLs
of CPAN mirrors in the countries you selected, along with previously
selected URLs. Select some of those URLs, or just keep the old list.
Finally, you will be prompted for any extra URLs -- file:, ftp:, or
http: -- that host a CPAN mirror.

(1) Africa
(2) Asia
(3) Central America
(4) Europe
(5) North America
(6) Oceania
(7) South America
Select your continent (or several nearby continents) [] 2
Sorry! since you don't have any existing picks, you must make a
geographic selection.

(1) China
(2) Hong Kong
(3) Indonesia
(4) Israel
(5) Japan
(6) Republic of Korea
(7) Russia
(8) Singapore
(9) Taiwan
(10) Thailand
(11) Turkey
(12) Viet Nam
Select your country (or several nearby countries) [] 1
Sorry! since you don't have any existing picks, you must make a
geographic selection.

(1) ftp://www.perl87.cn/CPAN/
(2) http://mirrors.xueron.com/CPAN/
Select as many URLs as you like (by number),
put them on one line, separated by blanks, e.g. '1 4 5' [] 1 2

Enter another URL or RETURN to quit: [] 直接回车
New set of picks:
ftp://www.perl87.cn/CPAN/

commit: wrote /usr/lib/perl5/5.8.8/CPAN/Config.pm
Terminal does not support AddHistory.

cpan shell -- CPAN exploration and modules installation (v1.7602)
ReadLine support available (try 'install Bundle::CPAN')

cpan> exit

5、安装perl模块
cat ./docs/CentOS/centos-perl | xargs -I {} perl -MCPAN -e 'install {}'

6、激活另外两个源，用于更新php
# wget http://download.fedora.redhat.com/pub/epel/5/i386/epel-release-5-2.noarch.rpm
# wget http://rpms.famillecollet.com/el5.i386/remi-release-5-4.el5.remi.noarch.rpm
# rpm -Uvh remi-release-5*.rpm epel-release-5*.rpm
# vi /etc/yum.repos.d/remi.repo
# vi /etc/yum.repos.d/epel.repo
# vi /etc/yum.repos.d/epel-testing.repo
在这三个文件最后添加
priority=1
保存退出

7、使用remi源，安装刚才找不到的软件包
yum --enablerepo=remi install `cat ./docs/CentOS/centos-packages`

8、删除sendmail
# yum -y remove sendmail

9、删除 mysql-5.0.45-7.el5
# yum -y remove mysql-5.0.45-7.el5

这里记住它删除了那些包，呆会用remi源重新安装跟MySQL相关的软件包
至于为什么要删除，因为yum --enablerepo=remi update php*时，会安装一个依赖包mysql-libs-5.1.34-1.el5.remi.i386.rpm
这个包与mysql-5.0.45-7.el5冲突，所以要卸载mysql-5.0.45-7.el5。
用新源重新安装
# yum --enablerepo=remi install mysql amavisd-new libdbi-dbd-mysql mod_auth_mysql mysql-server perl-DBD-MySQL php-mysql proftpd-mysql mysql-devel postgresql-devel

10、ispCP安装文档说CentOS官方源里的PHP有问题，所以这里需要更新PHP
# yum --enablerepo=remi update php*

11、安装Courier IMAP server
由于INSTALL安装文档中所给出的地址已经失效，我们手动创建相关rpm包
# yum -y --enablerepo=remi install libtool*
# yum -y --enablerepo=remi install gamin-devel
# useradd -m -s /bin/bash compileuser
# passwd compileuser
# visudo

在root行添加以下内容：
compileuser   ALL=(ALL)       ALL
保存退出

# su compileuser
$ mkdir $HOME/rpm
$ mkdir $HOME/rpm/SOURCES
$ mkdir $HOME/rpm/SPECS
$ mkdir $HOME/rpm/BUILD
$ mkdir $HOME/rpm/SRPMS
$ mkdir $HOME/rpm/RPMS
$ mkdir $HOME/rpm/RPMS/i386
$ echo "%_topdir $HOME/rpm" >> $HOME/.rpmmacros
$ cd /tmp
$ wget http://prdownloads.sourceforge.net/courier/courier-authlib-0.62.1.tar.bz2
$ wget http://prdownloads.sourceforge.net/courier/courier-imap-4.4.1.tar.bz2
$ sudo rpmbuild -ta courier-authlib-0.62.1.tar.bz2
$ cd $HOME/rpm/RPMS/i386
$ sudo rpm -Uvh courier-authlib-0.62.1-1.i386.rpm courier-authlib-userdb-0.62.1-1.i386.rpm
$ cd /tmp
$ rpmbuild -ta courier-imap-4.4.1.tar.bz2
$ cd $HOME/rpm/RPMS/i386
$ sudo rpm -ivh courier-imap-4.4.1-1.i386.rpm
退出compileuser，切换为root
$ exit
# groupadd courier -g 3000
# useradd -u 3000 -c 'Courier Mail Server' -d /dev/null -g courier -s /bin/false courier
# service mysqld start
# /usr/bin/mysql_secure_installation

12、安装mod_fcgid
# cd /root/download/
# wget http://centos.karan.org/el5/extras/testing/i386/RPMS/mod_fcgid-2.2-4.el5.kb.i386.rpm
# rpm -Uvh mod_fcgid-2.2-4.el5.kb.i386.rpm

13、删除无用的Apache文件
# rm -f /etc/httpd/conf.d/*

三、安装ispCP OMEGA

1、编译ispCP OMEGA:
# cd /root/download/ispcp-omega-1.0.0
# make -f Makefile.centos install

2、复制生成的目录到系统：
# cp -RLf /tmp/ispcp/* /
# cp -Rv /tmp/ispcp/etc/init.d /etc/rc.d/
# ln -s /etc/rc.d/init.d /etc/init.d
# mkdir /var/mail/virtual

3、配置BIND:
# mv /var/named/data /var/named/data2
# ln -s /var/named/chroot/var/named/data /var/named/data
vi /var/named/chroot/etc/named.caching-nameserver.conf after line:
在include "/etc/named.rfc1912.zones";后添加以下内容

include "/etc/named-ispcp.conf";

保存退出

4、 创建SASL database 目录并配置使Postfix调用SASL的配置文件：
# touch /etc/sasldb2
# mkdir -p /var/spool/postfix/etc
# cp /etc/sasldb2 /var/spool/postfix/etc/sasldb2
# mv /usr/lib/sasl2/smtpd.conf /usr/lib/sasl2/smtpd.conf.OLD
# vi /usr/lib/sasl2/smtpd.conf
添加以下内容：

pwcheck_method: auxprop
auxprop_plugin: sasldb
mech_list: PLAIN LOGIN CRAM-MD5 DIGEST-MD5

保存退出

5、添加Apache配置文件:

# echo 'include vhosts/*.conf' >> /etc/httpd/conf/httpd.conf
# chown apache:apache /var/www/ispcp/gui/tools/webmail/data

6、安装:
# cd /var/www/ispcp/engine/setup
# perl ispcp-setup

7、设置系统参数:
# chmod 777 /var/www/ispcp/gui/phptmp

8、安装服务:
# chkconfig --add ispcp_daemon
# chkconfig --add ispcp_network
# chkconfig --levels 345 ispcp_daemon on
# chkconfig --levels 345 ispcp_network on
# service ispcp_daemon start
# service ispcp_network start

9、清楚临时文件目录，安装完成:
# rm -R /tmp/ispcp

至此安装完成，此时需要做的工作是service iptables save，否则，防火墙或系统重启，ispCP所生成的规则会丢失。

四、主要参考资料：
1、ispcp-omega安装包里的安装手册
2、http://www.howtoforge.com/perfect-server-centos-5.2-ispconfig-3-p4

五、一些提示：
1、yum安装都需要比较长的时间，yum那里有个小窍门，当源比较慢时，可以按下Ctrl+c，这样yum会尝试另外一个源，如果一直慢，就再Ctrl+c,总有个源是比较快的，如果这样做了，yum只会下载所有的包，不会安装，所以需要重新运行下yum install `cat ./docs/CentOS/centos-packages`，这时候才会安装

2、DNS功能暂时只能在localhost用，因为以下：
Modify /var/named/chroot/etc/named.caching-nameserver.conf according your needs (default it binds only to localhost)

3、ispcp的配置文件在：/etc/ispcp/ispcp.conf，将管理所用的域名改为了IP地址，phpMyAdmin可以实现免密码自动登录，哈哈。

4、刚访问http://www.thatfleminggent.com/，发现是软件包更新了，courier相关包可以到上面下载

http://www.thatfleminggent.com/packages/centos/5/i386/repoview/

5、登录进后台
settings--Internationalisation--Install new languages选择本地的语言文件，点击Install，
Install languages哪里，选择简体中文(Chinese Simplified)，点击Save，再随便点击任何一个链接，界面就变成中文了

6、此方法同样适用于CentOS5.3

7、ispcp邮局问题请参考这篇文章：http://www.187299.com/archives/1049

8、Proftpd启动失败及登录失败请参考这篇文章：

http://www.187299.com/archives/1052

I'm sorry to have to inform you that the message returned
below could not be delivered to one or more destinations.

For further assistance, please send mail to <postmaster>

If you do so, please include this problem report. You can
delete your own text from the message returned below.

The Postfix program

<lam5566@gmail.com>: host gmail-smtp-in.l.google.com[209.85.143.114] said:
550-5.7.1 [220.122.76.91] The IP you're using to send mail is not
authorized to 550-5.7.1 send email directly to our servers. Please use the
SMTP relay at your 550-5.7.1 service provider instead. Learn more at
http://mail.google 550 5.7.1 .com/support/bin/answer.py?answer=10336
a14si240039tia.7 (in reply to end of DATA command)

Reporting-MTA: dns; www.example.net
Arrival-Date: Tue, 14 Apr 2009 13:03:51 +0800 (CST)

Final-Recipient: rfc822;lam5566@gmail.com
Action: failed
Status: 5.0.0
Diagnostic-Code: X-Postfix; host gmail-smtp-in.l.google.com[209.85.143.114]
said: 550-5.7.1 [220.122.76.91] The IP you're using to send mail is not
authorized to 550-5.7.1 send email directly to our servers. Please use the
SMTP relay at your 550-5.7.1 service provider instead. Learn more at
http://mail.google 550 5.7.1 .com/support/bin/answer.py?answer=10336
a14si240039tia.7 (in reply to end of DATA command)

昨天用公司的邮件服务器发信到Gmail，被退信，退信原因如上所述，网上搜索了一下，发现这篇文章
这是解决办法一：
轉換到 Google Apps, localhost信寄不出去的解法

自從之前轉換到Google Apps後, localhost的信就寄不出去,昨天花點時間解決掉,解法很簡單,果然是自己耍豬頭 XD

剛開始查就是看 Mail Log, 和被退的信, 發現被退的信大概寫如下:

The IP you're using to send email is not authorized
550-5.7.1 to send email directly to our servers.
Please use 550 5.7.1 the SMTP relay at your service provider instead.

然後不假思索的就拿這些 keyword 去找, 然後找到的意思是, 查看看自己的 IP 是不是進了 Spam List, 然後算算看進 spam list 有沒有很多... (原來有這麼多家在做 spam list),再來去請他們解開 spam 清單, 查 spam list 可由下兩個網站查(基本上查到的地方都一樣):

* DNS Stuff Tools
* 郵件系統常用查詢工具

然後試一試, 還是沒有什麼用處, 一樣寄不出去, 後來想想, 查查是不是被自己給擋掉了, 於是把 spam filter都先拿掉, 還是不行~

再直接 telnet localhost 25 port, 來寄信試試:

helo USERNAME
mail from:USERNAME@DOMAIN_NAME
rcpt to:GMAIL_USERNAME@gmail.com;
data
subject:test
test
.
quit

結果 localhost 寄信出去很正常, 於是就知道自己錯在哪邊了. XD

解法:

1. vim /etc/postfix/main.cf
2. 將 mydestination = DOMAIN_NAME, localhost 改成 mydestination = localhost, DOMAIN_NAME 即可.

DOMAIN_NAME 請換成你自己的 DOMAIN_NAME, 或者直接拿掉即可, 主要是透過 localhost 發信, 所以 localhost 要擺前面.

主要是因為 Google Apps 設定轉換時, 已經把 DOMAIN_NAME的 MX 指到 gmail去了,而那行設定信就往 gmail smtp跑, 沒開放 open relay,當然就寄不出去囉

解决办法二：把Google Apps上的邮件服务删除掉，等一天时间，等Google把相关数据删除掉就可以了，如果不行，就把在Google Apps上所有应用删除掉。

大概两个星期前把公司的邮件服务迁移到Google Apps上，Gmail的smtp是要求SSL的，公司某个应用不支持SSL，所以最后只能把邮件服务迁移回来，发信一直没什么问题，直到昨天，想用公司帐号发一份资料到自己的Gmail上才看到这个退信，幸好，把Google Apps上的所有服务都删除后，今天早上回来一测试，OK了。

参考文章：

http://plog.longwin.com.tw/my_note-app-setting/2007/07/06/google_apps_localhost_mail_problem_2007