Francisco J. 曹 Tsao Santín : PostfixTLS

Principal :: Índice de Páginas :: Acceso
Oldest known version of this page was edited on 2011-04-17 10:20:02 by AdminTsao []
Page view:
Para ciertos servicios web (instalados en un servidor típico con Debian dentro de la red de la UDC), he tenido que configurar el cliente de SMTP del servidor de correo Postfix, con autenticación y cifrado TLS. Además del archivo de configuración adjunto, se han tenido que dar los siguientes pasos:

smtp.pepe.es usuario:password_usuario

~# postmap hash:/etc/postfix/saslpass


Y reiniciar el servicio, vaya.

Este es el main.cf:

 # See /usr/share/postfix/main.cf.dist for a commented, more complete version


# Debian specific:  Specifying a file name will cause the first
# line of that file to be used as the name.  The Debian default
# is /etc/mailname.
#myorigin = /etc/mailname

smtpd_banner = $myhostname ESMTP $mail_name (Debian/GNU)
biff = no

# appending .domain is the MUA's job.
append_dot_mydomain = no

# Uncomment the next line to generate "delayed mail" warnings
#delay_warning_time = 4h

# TLS parameters
smtpd_tls_cert_file=/etc/ssl/certs/ssl-cert-snakeoil.pem
smtpd_tls_key_file=/etc/ssl/private/ssl-cert-snakeoil.key
smtpd_tls_ask_ccert = yes
# Postfix 2.3 and later
smtpd_tls_security_level = may
#
smtpd_use_tls = yes
smtpd_tls_auth_only = yes
smtpd_tls_session_cache_database = btree:${queue_directory}/smtpd_scache
smtp_tls_session_cache_database = btree:${queue_directory}/smtp_scache
smtp_tls_cert_file =
smtp_tls_dcert_file =
smtp_tls_key_file =
smtp_tls_dkey_file =
smtp_tls_security_level = encrypt


# See /usr/share/doc/postfix/TLS_README.gz in the postfix-doc package for
# information on enabling SSL in the smtp client.

smtp_sasl_auth_enable = yes
smtp_sasl_password_maps = hash:/etc/postfix/saslpass
smtp_sasl_security_options = noanonymous

myhostname = myhost.pepe.es
alias_maps = hash:/etc/aliases
alias_database = hash:/etc/aliases
myorigin = /etc/mailname
mydestination = myhost.pepe.es, localhost
relayhost = smtp.udc.es:25
smtp_use_tls = yes
mynetworks = 127.0.0.0/8
mailbox_command = procmail -a "$EXTENSION"
mailbox_size_limit = 0
recipient_delimiter = +
inet_interfaces = all 
Valid XHTML 1.0 Transitional :: Valid CSS :: Powered by Wikka Wakka Wiki 1.1.6.3
Page was generated in 0.0119 seconds