mirror of
https://github.com/iredmail/iRedMail
synced 2026-06-08 14:51:59 +00:00
Zhang Huangbin
bdfa10915a
- Use MySQL 8.4. - Fix postfix config deprecation warnings. - Replace dialog by cdialog.
458 lines
21 KiB
Bash
458 lines
21 KiB
Bash
#!/usr/bin/env bash
|
|
|
|
# Author: Zhang Huangbin <zhb _at_ iredmail.org>
|
|
|
|
#---------------------------------------------------------------------
|
|
# This file is part of iRedMail, which is an open source mail server
|
|
# solution for Red Hat(R) Enterprise Linux, CentOS, Debian and Ubuntu.
|
|
#
|
|
# iRedMail is free software: you can redistribute it and/or modify
|
|
# it under the terms of the GNU General Public License as published by
|
|
# the Free Software Foundation, either version 3 of the License, or
|
|
# (at your option) any later version.
|
|
#
|
|
# iRedMail is distributed in the hope that it will be useful,
|
|
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
# GNU General Public License for more details.
|
|
#
|
|
# You should have received a copy of the GNU General Public License
|
|
# along with iRedMail. If not, see <http://www.gnu.org/licenses/>.
|
|
#---------------------------------------------------------------------
|
|
|
|
# -------------------------------------------------------
|
|
# ---------------------- Postfix ------------------------
|
|
# -------------------------------------------------------
|
|
|
|
postfix_config_basic()
|
|
{
|
|
ECHO_INFO "Configure Postfix (MTA)."
|
|
|
|
if [ X"${DISTRO}" == "DEBIAN" -o X"${DISTRO}" == X"UBUNTU" ]; then
|
|
# Store FQDN in /etc/mailname.
|
|
# FYI: https://wiki.debian.org/EtcMailName
|
|
echo "${HOSTNAME}" > /etc/mailname
|
|
fi
|
|
|
|
#
|
|
# main.cf
|
|
#
|
|
export queue_directory="$(postconf -d queue_directory | awk '{print $NF}')"
|
|
export command_directory="$(postconf -d command_directory | awk '{print $NF}')"
|
|
export daemon_directory="$(postconf -d daemon_directory | awk '{print $NF}')"
|
|
export data_directory="$(postconf -d data_directory | awk '{print $NF}')"
|
|
|
|
export sendmail_path="$(postconf -d sendmail_path | awk '{print $NF}')"
|
|
export newaliases_path="$(postconf -d newaliases_path | awk '{print $NF}')"
|
|
export mailq_path="$(postconf -d mailq_path | awk '{print $NF}')"
|
|
export mail_owner="$(postconf -d mail_owner | awk '{print $NF}')"
|
|
export setgid_group="$(postconf -d setgid_group | awk '{print $NF}')"
|
|
|
|
if [ X"${DISTRO}" == X'FREEBSD' ]; then
|
|
export setgid_group='maildrop'
|
|
elif [ X"${DISTRO}" == X'OPENBSD' ]; then
|
|
export command_directory='/usr/local/sbin'
|
|
export daemon_directory='/usr/local/libexec/postfix'
|
|
export mail_owner='_postfix'
|
|
export setgid_group='_postdrop'
|
|
fi
|
|
|
|
# Copy sample main.cf and update values.
|
|
backup_file ${POSTFIX_FILE_MAIN_CF} ${POSTFIX_FILE_MASTER_CF}
|
|
cp ${SAMPLE_DIR}/postfix/main.cf ${POSTFIX_FILE_MAIN_CF}
|
|
|
|
ECHO_DEBUG "Enable submission and additional transports required by Amavisd and Dovecot."
|
|
cat ${SAMPLE_DIR}/postfix/master.cf >> ${POSTFIX_FILE_MASTER_CF}
|
|
|
|
perl -pi -e 's#PH_POSTFIX_DEFAULT_DB_TYPE#$ENV{POSTFIX_DEFAULT_DB_TYPE}#g' ${POSTFIX_FILE_MAIN_CF}
|
|
perl -pi -e 's#PH_QUEUE_DIRECTORY#$ENV{queue_directory}#g' ${POSTFIX_FILE_MAIN_CF}
|
|
perl -pi -e 's#PH_COMMAND_DIRECTORY#$ENV{command_directory}#g' ${POSTFIX_FILE_MAIN_CF}
|
|
perl -pi -e 's#PH_DAEMON_DIRECTORY#$ENV{daemon_directory}#g' ${POSTFIX_FILE_MAIN_CF}
|
|
perl -pi -e 's#PH_DATA_DIRECTORY#$ENV{data_directory}#g' ${POSTFIX_FILE_MAIN_CF}
|
|
|
|
perl -pi -e 's#PH_SENDMAIL_PATH#$ENV{sendmail_path}#g' ${POSTFIX_FILE_MAIN_CF}
|
|
perl -pi -e 's#PH_NEWALIASES_PATH#$ENV{newaliases_path}#g' ${POSTFIX_FILE_MAIN_CF}
|
|
perl -pi -e 's#PH_MAILQ_PATH#$ENV{mailq_path}#g' ${POSTFIX_FILE_MAIN_CF}
|
|
perl -pi -e 's#PH_MAIL_OWNER#$ENV{mail_owner}#g' ${POSTFIX_FILE_MAIN_CF}
|
|
perl -pi -e 's#PH_SETGID_GROUP#$ENV{setgid_group}#g' ${POSTFIX_FILE_MAIN_CF}
|
|
|
|
unset queue_directory command_directory daemon_directory data_directory
|
|
unset mail_owner sendmail_path newaliases_path mailq_path setgid_group
|
|
|
|
# Append LOCAL_ADDRESS in `mynetworks`
|
|
if [ X"${LOCAL_ADDRESS}" != X'127.0.0.1' ]; then
|
|
perl -pi -e 's#^(mynetworks.*)#${1} $ENV{LOCAL_ADDRESS}#g' ${POSTFIX_FILE_MAIN_CF}
|
|
fi
|
|
|
|
if [ X"${IREDMAIL_HAS_IPV6}" == X'YES' ]; then
|
|
# Append local IPv6 address in `mynetworks`
|
|
perl -pi -e 's#^(mynetworks.*)#${1} [::1]#g' ${POSTFIX_FILE_MAIN_CF}
|
|
else
|
|
# Disable ipv6 protocol
|
|
perl -pi -e 's#^(inet_protocols.*=).*#${1} ipv4#g' ${POSTFIX_FILE_MAIN_CF}
|
|
fi
|
|
|
|
# Update normal settings.
|
|
perl -pi -e 's#PH_HOSTNAME#$ENV{HOSTNAME}#g' ${POSTFIX_FILE_MAIN_CF}
|
|
perl -pi -e 's#PH_MESSAGE_SIZE_LIMIT_BYTES#$ENV{MESSAGE_SIZE_LIMIT_BYTES}#g' ${POSTFIX_FILE_MAIN_CF}
|
|
perl -pi -e 's#PH_STORAGE_BASE_DIR#$ENV{STORAGE_BASE_DIR}#g' ${POSTFIX_FILE_MAIN_CF}
|
|
perl -pi -e 's#PH_SYS_USER_VMAIL_UID#$ENV{SYS_USER_VMAIL_UID}#g' ${POSTFIX_FILE_MAIN_CF}
|
|
|
|
perl -pi -e 's#PH_SYS_GROUP_VMAIL_GID#$ENV{SYS_GROUP_VMAIL_GID}#g' ${POSTFIX_FILE_MAIN_CF}
|
|
perl -pi -e 's#PH_SYS_USER_VMAIL_UID#$ENV{SYS_USER_VMAIL_UID}#g' ${POSTFIX_FILE_MAIN_CF}
|
|
|
|
perl -pi -e 's#PH_SSL_DH512_PARAM_FILE#$ENV{SSL_DH512_PARAM_FILE}#g' ${POSTFIX_FILE_MAIN_CF}
|
|
perl -pi -e 's#PH_SSL_DH1024_PARAM_FILE#$ENV{SSL_DH1024_PARAM_FILE}#g' ${POSTFIX_FILE_MAIN_CF}
|
|
perl -pi -e 's#PH_SSL_CERT_FILE#$ENV{SSL_CERT_FILE}#g' ${POSTFIX_FILE_MAIN_CF}
|
|
perl -pi -e 's#PH_SSL_KEY_FILE#$ENV{SSL_KEY_FILE}#g' ${POSTFIX_FILE_MAIN_CF}
|
|
perl -pi -e 's#PH_SSL_CERT_DIR#$ENV{SSL_CERT_DIR}#g' ${POSTFIX_FILE_MAIN_CF}
|
|
perl -pi -e 's#PH_SSL_CA_FILE#$ENV{SSL_CA_FILE}#g' ${POSTFIX_FILE_MAIN_CF}
|
|
|
|
if [ X"${DISTRO}" == X'FREEBSD' -o X"${DISTRO}" == X'OPENBSD' ]; then
|
|
perl -pi -e 's#^(smtpd_tls_CApath=).*#${1}#g' ${POSTFIX_FILE_MAIN_CF}
|
|
perl -pi -e 's#^(smtpd_tls_dh1024_param_file.*)##g' ${POSTFIX_FILE_MAIN_CF}
|
|
fi
|
|
|
|
# Replace deprecated parameters on Postfix >= 3.7.
|
|
if [ X"${DISTRO_CODENAME}" == X'trixie' -o X"${DISTRO_CODENAME}" == X'resolute' ]; then
|
|
# main.cf
|
|
perl -pi -e 's#^(smtpd_tls_dh1024_param_file.*)##g' ${POSTFIX_FILE_MAIN_CF}
|
|
elif [[ X"${DISTRO}" == X'FREEBSD' ]]; then
|
|
# main.cf
|
|
perl -pi -e 's#^(smtpd_tls_dh1024_param_file.*)##g' ${POSTFIX_FILE_MAIN_CF}
|
|
|
|
# master.cf
|
|
perl -pi -e 's#disable_dns_lookups=yes#smtp_dns_support_level=disabled#g' ${POSTFIX_FILE_MASTER_CF}
|
|
fi
|
|
|
|
perl -pi -e 's#PH_POSTFIX_FILE_ALIASES#$ENV{POSTFIX_FILE_ALIASES}#g' ${POSTFIX_FILE_MAIN_CF}
|
|
perl -pi -e 's#PH_POSTFIX_FILE_HELO_ACCESS#$ENV{POSTFIX_FILE_HELO_ACCESS}#g' ${POSTFIX_FILE_MAIN_CF}
|
|
perl -pi -e 's#PH_POSTFIX_FILE_HEADER_CHECKS#$ENV{POSTFIX_FILE_HEADER_CHECKS}#g' ${POSTFIX_FILE_MAIN_CF}
|
|
perl -pi -e 's#PH_POSTFIX_FILE_BODY_CHECKS#$ENV{POSTFIX_FILE_BODY_CHECKS}#g' ${POSTFIX_FILE_MAIN_CF}
|
|
perl -pi -e 's#PH_POSTFIX_FILE_SENDER_ACCESS#$ENV{POSTFIX_FILE_SENDER_ACCESS}#g' ${POSTFIX_FILE_MAIN_CF}
|
|
perl -pi -e 's#PH_POSTFIX_FILE_SMTPD_COMMAND_FILTER#$ENV{POSTFIX_FILE_SMTPD_COMMAND_FILTER}#g' ${POSTFIX_FILE_MAIN_CF}
|
|
|
|
# Create required files and set correct owner + permission
|
|
_files="${POSTFIX_FILE_HELO_ACCESS} ${POSTFIX_FILE_HEADER_CHECKS} ${POSTFIX_FILE_BODY_CHECKS} ${POSTFIX_FILE_SENDER_ACCESS}"
|
|
touch ${_files}
|
|
chown ${SYS_USER_ROOT}:${SYS_GROUP_POSTFIX} ${_files}
|
|
chmod 0640 ${_files}
|
|
unset _files
|
|
|
|
# iRedAPD
|
|
perl -pi -e 's#PH_IREDAPD_SERVER_ADDRESS#$ENV{IREDAPD_SERVER_ADDRESS}#g' ${POSTFIX_FILE_MAIN_CF}
|
|
perl -pi -e 's#PH_IREDAPD_LISTEN_PORT#$ENV{IREDAPD_LISTEN_PORT}#g' ${POSTFIX_FILE_MAIN_CF}
|
|
perl -pi -e 's#PH_IREDAPD_SRS_FORWARD_PORT#$ENV{IREDAPD_SRS_FORWARD_PORT}#g' ${POSTFIX_FILE_MAIN_CF}
|
|
perl -pi -e 's#PH_IREDAPD_SRS_REVERSE_PORT#$ENV{IREDAPD_SRS_REVERSE_PORT}#g' ${POSTFIX_FILE_MAIN_CF}
|
|
|
|
# Dovecot quota-status service
|
|
perl -pi -e 's#PH_DOVECOT_SERVICE_QUOTA_STATUS_PORT#$ENV{DOVECOT_SERVICE_QUOTA_STATUS_PORT}#g' ${POSTFIX_FILE_MAIN_CF}
|
|
|
|
# Distro releases ship Postfix 3.6+.
|
|
# - Ubuntu 22.04
|
|
# - Debian 12
|
|
# - OpenBSD
|
|
# - FreeBSD
|
|
if [[ X"${DISTRO}" == X'RHEL' ]]; then
|
|
if [[ X"${DISTRO_VERSION}" == X'10' ]]; then
|
|
# Postfix 3.8.5
|
|
postconf -e compatibility_level=3.6
|
|
postconf -e default_database_type=${POSTFIX_DEFAULT_DB_TYPE}
|
|
else
|
|
# Postfix 3.5.x
|
|
postconf -e compatibility_level=2
|
|
fi
|
|
elif [[ X"${DISTRO}" == X'FREEBSD' ]]; then
|
|
postconf -e compatibility_level=3.11
|
|
else
|
|
postconf -e compatibility_level=3.6
|
|
fi
|
|
|
|
perl -pi -e 's/^(smtp.*inet)(.*)(n)(.*)(n)(.*smtpd)$/${1}${2}${3}${4}-${6}/' ${POSTFIX_FILE_MASTER_CF}
|
|
|
|
# set smtp server
|
|
perl -pi -e 's#PH_SMTP_SERVER#$ENV{SMTP_SERVER}#g' ${POSTFIX_FILE_MASTER_CF}
|
|
perl -pi -e 's#PH_AMAVISD_CONTENT_FILTER_ORIGINATING#$ENV{AMAVISD_CONTENT_FILTER_ORIGINATING}#g' ${POSTFIX_FILE_MASTER_CF}
|
|
|
|
# set mailbox owner: user/group
|
|
perl -pi -e 's#PH_SYS_USER_VMAIL#$ENV{SYS_USER_VMAIL}#g' ${POSTFIX_FILE_MASTER_CF}
|
|
perl -pi -e 's#PH_SYS_GROUP_VMAIL#$ENV{SYS_GROUP_VMAIL}#g' ${POSTFIX_FILE_MASTER_CF}
|
|
|
|
# Amavisd integration.
|
|
perl -pi -e 's#PH_LOCAL_ADDRESS#$ENV{LOCAL_ADDRESS}#g' ${POSTFIX_FILE_MASTER_CF}
|
|
perl -pi -e 's#PH_AMAVISD_MAX_SERVERS#$ENV{AMAVISD_MAX_SERVERS}#g' ${POSTFIX_FILE_MASTER_CF}
|
|
perl -pi -e 's#PH_AMAVISD_MYNETWORKS#$ENV{AMAVISD_MYNETWORKS}#g' ${POSTFIX_FILE_MASTER_CF}
|
|
perl -pi -e 's#PH_POSTFIX_MAIL_REINJECT_PORT#$ENV{POSTFIX_MAIL_REINJECT_PORT}#g' ${POSTFIX_FILE_MASTER_CF}
|
|
perl -pi -e 's#PH_AMAVISD_ORIGINATING_PORT#$ENV{AMAVISD_ORIGINATING_PORT}#g' ${POSTFIX_FILE_MASTER_CF}
|
|
|
|
# Enable `content_filter` for `pickup` transport:
|
|
# - Treat all emails generated locally as outbound
|
|
# - sign DKIM signature
|
|
# - do spam/virus scanning
|
|
_pickup_orig="$(postconf -M |grep '^pickup')"
|
|
echo ${_pickup_orig} | grep 'content_filter=' &>/dev/null
|
|
if [ X"$?" != X'0' ]; then
|
|
postconf -M "pickup/unix=${_pickup_orig}"
|
|
postconf -P "pickup/unix/content_filter=${AMAVISD_CONTENT_FILTER_ORIGINATING}"
|
|
fi
|
|
|
|
_postfix_version="$(postconf -d mail_version | awk '{print $NF}')"
|
|
if echo ${_postfix_version} | grep '^3' &>/dev/null; then
|
|
# The master.cf chroot default value has changed from "y" (yes) to "n" (no).
|
|
for i in $(postconf -Mf | grep '^[0-9a-zA-Z]' | awk '{print $1"/"$2"/chroot=n"}'); do
|
|
postconf -F $i
|
|
done
|
|
|
|
# Disable smtputf8 if EAI support is not compiled in.
|
|
if postconf -m 2>&1 |grep 'warning: smtputf8_enable' &>/dev/null; then
|
|
postconf -e smtputf8_enable=no
|
|
fi
|
|
fi
|
|
|
|
ECHO_DEBUG "Enable chroot."
|
|
# mlmmj integration.
|
|
perl -pi -e 's#PH_POSTFIX_MLMMJ_REINJECT_PORT#$ENV{POSTFIX_MLMMJ_REINJECT_PORT}#g' ${POSTFIX_FILE_MASTER_CF}
|
|
|
|
# Dovecot LDA
|
|
perl -pi -e 's#PH_DOVECOT_DELIVER_BIN#$ENV{DOVECOT_DELIVER_BIN}#g' ${POSTFIX_FILE_MASTER_CF}
|
|
|
|
# mlmmj
|
|
perl -pi -e 's#PH_SYS_USER_MLMMJ#$ENV{SYS_USER_MLMMJ}#g' ${POSTFIX_FILE_MASTER_CF}
|
|
perl -pi -e 's#PH_SYS_GROUP_MLMMJ#$ENV{SYS_GROUP_MLMMJ}#g' ${POSTFIX_FILE_MASTER_CF}
|
|
perl -pi -e 's#PH_CMD_MLMMJ_AMIME_RECEIVE#$ENV{CMD_MLMMJ_AMIME_RECEIVE}#g' ${POSTFIX_FILE_MASTER_CF}
|
|
perl -pi -e 's#PH_MLMMJ_SPOOL_DIR#$ENV{MLMMJ_SPOOL_DIR}#g' ${POSTFIX_FILE_MASTER_CF}
|
|
|
|
ECHO_DEBUG "Copy: /etc/{hosts,resolv.conf,localtime,services} -> ${POSTFIX_CHROOT_DIR}/etc/"
|
|
mkdir -p ${POSTFIX_CHROOT_DIR}/etc/ >> ${INSTALL_LOG} 2>&1
|
|
for i in /etc/hosts /etc/resolv.conf /etc/localtime /etc/services; do
|
|
[[ -f $i ]] && cp ${i} ${POSTFIX_CHROOT_DIR}/etc/
|
|
done
|
|
|
|
backup_file ${POSTFIX_FILE_HELO_ACCESS}
|
|
cp -f ${SAMPLE_DIR}/postfix/helo_access.pcre ${POSTFIX_FILE_HELO_ACCESS}
|
|
|
|
backup_file ${POSTFIX_FILE_SMTPD_COMMAND_FILTER}
|
|
cp -f ${SAMPLE_DIR}/postfix/command_filter.pcre ${POSTFIX_FILE_SMTPD_COMMAND_FILTER}
|
|
|
|
# Update Postfix aliases file.
|
|
add_postfix_alias nobody ${SYS_USER_ROOT}
|
|
add_postfix_alias ${SYS_USER_VMAIL} ${SYS_USER_ROOT}
|
|
add_postfix_alias ${SYS_USER_ROOT} ${DOMAIN_ADMIN_EMAIL}
|
|
|
|
if [ X"${DISTRO}" == X'DEBIAN' -o X"${DISTRO}" == X'UBUNTU' ]; then
|
|
# Since `mail.*` is logged to /var/log/mail.log, no need to log
|
|
# `mail.err` to /var/log/mail.err separately.
|
|
ECHO_DEBUG "Disable duplicate log entries (mail.{info,warn,err}) in syslog config file."
|
|
|
|
for f in ${SYSLOG_CONF} ${SYSLOG_CONF_DIR}/50-default.conf; do
|
|
if [ -f ${f} ]; then
|
|
perl -pi -e 's/^(mail.info.*mail.info)$/#${1}/' ${f}
|
|
perl -pi -e 's/^(mail.warn.*mail.warn)$/#${1}/' ${f}
|
|
perl -pi -e 's/^(mail.err.*mail.err)$/#${1}/' ${f}
|
|
fi
|
|
done
|
|
elif [ X"${DISTRO}" == X'FREEBSD' ]; then
|
|
# FreeBSD: Start postfix when system start up.
|
|
backup_file /etc/mail/mailer.conf
|
|
cp -f ${SAMPLE_DIR}/postfix/freebsd/mailer.conf /etc/mail/mailer.conf
|
|
chmod +r /etc/mail/mailer.conf
|
|
|
|
# Start service when system start up.
|
|
service_control enable 'postfix_enable' 'YES'
|
|
service_control enable 'sendmail_enable' 'NO'
|
|
service_control enable 'sendmail_submit_enable' 'NO'
|
|
service_control enable 'sendmail_outbound_enable' 'NO'
|
|
service_control enable 'sendmail_msp_queue_enable' 'NO'
|
|
service_control enable 'daily_clean_hoststat_enable' 'NO'
|
|
service_control enable 'daily_status_mail_rejects_enable' 'NO'
|
|
service_control enable 'daily_status_include_submit_mailq' 'NO'
|
|
service_control enable 'daily_submit_queuerun' 'NO'
|
|
|
|
elif [ X"${DISTRO}" == X'OPENBSD' ]; then
|
|
# Replace sendmail, opensmtpd by Postfix
|
|
echo 'sendmail_flags=NO' >> ${RC_CONF_LOCAL}
|
|
echo 'smtpd_flags=NO' >> ${RC_CONF_LOCAL}
|
|
/usr/local/sbin/postfix-enable >> ${INSTALL_LOG} 2>&1
|
|
perl -pi -e 's/(.*sendmail -L sm-msp-queue.*)/#${1}/' ${CRON_FILE_ROOT}
|
|
fi
|
|
|
|
# Update /etc/host.conf to solve warning message in Postfix like this:
|
|
# "warning: hostname xxx does not resolve to address 127.0.0.1"
|
|
if [ -f /etc/host.conf ]; then
|
|
if ! grep '^multi on$' /etc/host.conf &>/dev/null; then
|
|
echo 'multi on' >> /etc/host.conf
|
|
fi
|
|
fi
|
|
|
|
# Create symbol link: /var/log/mail.log -> maillog
|
|
# So that all linux/bsd distributions have the same maillog file.
|
|
if [ X"${DISTRO}" == X'DEBIAN' -o X"${DISTRO}" == X'UBUNTU' ]; then
|
|
if [ -f ${MAILLOG} -a ! -f /var/log/maillog ]; then
|
|
ln -s ${MAILLOG} /var/log/maillog
|
|
fi
|
|
fi
|
|
|
|
echo 'export status_postfix_config_basic="DONE"' >> ${STATUS_FILE}
|
|
}
|
|
|
|
postfix_config_vhost()
|
|
{
|
|
ECHO_DEBUG "Configure Postfix for SQL/LDAP lookup."
|
|
|
|
# Create directory which used to store sql/ldap lookup files.
|
|
[[ -d ${POSTFIX_LOOKUP_DIR} ]] || mkdir -p ${POSTFIX_LOOKUP_DIR}
|
|
|
|
cat ${SAMPLE_DIR}/postfix/main.cf.${POSTFIX_LOOKUP_DB} >> ${POSTFIX_FILE_MAIN_CF}
|
|
perl -pi -e 's#PH_POSTFIX_LOOKUP_DIR#$ENV{POSTFIX_LOOKUP_DIR}#g' ${POSTFIX_FILE_MAIN_CF}
|
|
|
|
cp -f ${SAMPLE_DIR}/postfix/${POSTFIX_LOOKUP_DB}/*.cf ${POSTFIX_LOOKUP_DIR}
|
|
|
|
chown ${SYS_USER_ROOT}:${SYS_GROUP_POSTFIX} ${POSTFIX_LOOKUP_DIR}/*.cf
|
|
chmod 0640 ${POSTFIX_LOOKUP_DIR}/*.cf
|
|
|
|
if [ X"${BACKEND}" == X'OPENLDAP' ]; then
|
|
# LDAP server and bind dn/password
|
|
perl -pi -e 's#PH_LDAP_SERVER_HOST#$ENV{LDAP_SERVER_HOST}#g' ${POSTFIX_LOOKUP_DIR}/*.cf
|
|
perl -pi -e 's#PH_LDAP_SERVER_PORT#$ENV{LDAP_SERVER_PORT}#g' ${POSTFIX_LOOKUP_DIR}/*.cf
|
|
perl -pi -e 's#PH_LDAP_BIND_VERSION#$ENV{LDAP_BIND_VERSION}#g' ${POSTFIX_LOOKUP_DIR}/*.cf
|
|
perl -pi -e 's#PH_LDAP_BASEDN#$ENV{LDAP_BASEDN}#g' ${POSTFIX_LOOKUP_DIR}/*.cf
|
|
perl -pi -e 's#PH_LDAP_BINDDN#$ENV{LDAP_BINDDN}#g' ${POSTFIX_LOOKUP_DIR}/*.cf
|
|
perl -pi -e 's#PH_LDAP_BINDPW#$ENV{LDAP_BINDPW}#g' ${POSTFIX_LOOKUP_DIR}/*.cf
|
|
|
|
perl -pi -e 's#PH_LDAP_ATTR_GROUP_USERS#$ENV{LDAP_ATTR_GROUP_USERS}#g' ${POSTFIX_LOOKUP_DIR}/*.cf
|
|
perl -pi -e 's#PH_LDAP_ATTR_GROUP_GROUPS#$ENV{LDAP_ATTR_GROUP_GROUPS}#g' ${POSTFIX_LOOKUP_DIR}/*.cf
|
|
elif [ X"${BACKEND}" == X'MYSQL' -o X"${BACKEND}" == X'PGSQL' ]; then
|
|
# SQL server, port, bind username, password
|
|
perl -pi -e 's#PH_SQL_SERVER_ADDRESS#$ENV{SQL_SERVER_ADDRESS}#g' ${POSTFIX_LOOKUP_DIR}/*.cf
|
|
perl -pi -e 's#PH_SQL_SERVER_PORT#$ENV{SQL_SERVER_PORT}#g' ${POSTFIX_LOOKUP_DIR}/*.cf
|
|
perl -pi -e 's#PH_VMAIL_DB_BIND_USER#$ENV{VMAIL_DB_BIND_USER}#g' ${POSTFIX_LOOKUP_DIR}/*.cf
|
|
perl -pi -e 's#PH_VMAIL_DB_BIND_PASSWD#$ENV{VMAIL_DB_BIND_PASSWD}#g' ${POSTFIX_LOOKUP_DIR}/*.cf
|
|
perl -pi -e 's#PH_VMAIL_DB_NAME#$ENV{VMAIL_DB_NAME}#g' ${POSTFIX_LOOKUP_DIR}/*.cf
|
|
fi
|
|
|
|
echo 'export status_postfix_config_vhost="DONE"' >> ${STATUS_FILE}
|
|
}
|
|
|
|
postfix_config_postscreen()
|
|
{
|
|
ECHO_DEBUG "Enable postscreen service."
|
|
|
|
backup_file ${POSTSCREEN_FILE_ACCESS_CIDR} ${POSTSCREEN_FILE_DNSBL_REPLY}
|
|
|
|
export POSTFIX_VERSION="$(postconf mail_version 2>/dev/null | awk '{print $NF}')"
|
|
if echo ${POSTFIX_VERSION} | grep '^2\.[01234567]\.' &>/dev/null; then
|
|
ECHO_ERROR "postscreen requires Postfix 2.8 or later, you're running ${POSTFIX_VERSION}."
|
|
ECHO_ERROR "postscreen service not enabled."
|
|
else
|
|
ECHO_DEBUG "Comment out 'smtp inet ... smtpd' service in ${POSTFIX_FILE_MASTER_CF}."
|
|
perl -pi -e 's/^(smtp .*inet.*smtpd)$/#${1}/g' ${POSTFIX_FILE_MASTER_CF}
|
|
|
|
ECHO_DEBUG "Uncomment the new 'smtpd pass ... smtpd' service in ${POSTFIX_FILE_MASTER_CF}."
|
|
perl -pi -e 's/^#(smtpd.*pass.*smtpd)$/${1}/g' ${POSTFIX_FILE_MASTER_CF}
|
|
|
|
ECHO_DEBUG "Uncomment the new "smtp inet ... postscreen" service in ${POSTFIX_FILE_MASTER_CF}."
|
|
perl -pi -e 's/^#(smtp *.*inet.*postscreen)$/${1}/g' ${POSTFIX_FILE_MASTER_CF}
|
|
|
|
ECHO_DEBUG "Uncomment the new 'tlsproxy unix ... tlsproxy' service in ${POSTFIX_FILE_MASTER_CF}."
|
|
perl -pi -e 's/^#(tlsproxy.*unix.*tlsproxy)$/${1}/g' ${POSTFIX_FILE_MASTER_CF}
|
|
|
|
ECHO_DEBUG "Uncomment the new 'dnsblog unix ... dnsblog' service in ${POSTFIX_FILE_MASTER_CF}."
|
|
perl -pi -e 's/^#(dnsblog.*unix.*dnsblog)$/${1}/g' ${POSTFIX_FILE_MASTER_CF}
|
|
|
|
#
|
|
# main.cf
|
|
#
|
|
if [[ X"${DISTRO}" == X'FREEBSD' ]]; then
|
|
perl -pi -e 's#postscreen_blacklist_action#postscreen_denylist_action#g' ${SAMPLE_DIR}/postfix/main.cf.postscreen
|
|
perl -pi -e 's#postscreen_dnsbl_whitelist_threshold#postscreen_dnsbl_allowlist_threshold#g' ${SAMPLE_DIR}/postfix/main.cf.postscreen
|
|
fi
|
|
|
|
ECHO_DEBUG "Update ${POSTFIX_FILE_MAIN_CF} to enable postscreen."
|
|
cat ${SAMPLE_DIR}/postfix/main.cf.postscreen >> ${POSTFIX_FILE_MAIN_CF}
|
|
|
|
perl -pi -e 's#PH_POSTSCREEN_FILE_DNSBL_REPLY#$ENV{POSTSCREEN_FILE_DNSBL_REPLY}#g' ${POSTFIX_FILE_MAIN_CF}
|
|
touch ${POSTSCREEN_FILE_DNSBL_REPLY}
|
|
|
|
perl -pi -e 's#PH_POSTSCREEN_FILE_ACCESS_CIDR#$ENV{POSTSCREEN_FILE_ACCESS_CIDR}#g' ${POSTFIX_FILE_MAIN_CF}
|
|
cp -f ${SAMPLE_DIR}/postfix/postscreen_access.cidr ${POSTSCREEN_FILE_ACCESS_CIDR}
|
|
|
|
# Require Postfix-2.11+
|
|
if echo ${POSTFIX_VERSION} | egrep '(^3|^2\.[123456789][123456789])' &>/dev/null; then
|
|
perl -pi -e 's/^#(postscreen_dnsbl_whitelist_threshold.*)/${1}/g' ${POSTFIX_FILE_MAIN_CF}
|
|
fi
|
|
|
|
# Set a not existing directory as default value, if we cannot get
|
|
# ${queue_directory} for some reason, it won't mistakenly reset owner
|
|
# and permission on '/'
|
|
export queue_directory="$(postconf queue_directory | awk '{print $NF}')"
|
|
export data_directory="$(postconf data_directory | awk '{print $NF}')"
|
|
_chrooted_data_directory="${queue_directory:=/tmp/not-exist}/${data_directory}"
|
|
|
|
unset queue_directory data_directory
|
|
|
|
ECHO_DEBUG "Create ${_chrooted_data_directory}/postscreen_cache.db."
|
|
if [ ! -d ${_chrooted_data_directory} ]; then
|
|
mkdir -p ${_chrooted_data_directory}
|
|
chown ${SYS_USER_POSTFIX}:${SYS_GROUP_ROOT} ${_chrooted_data_directory}
|
|
chmod 0700 ${_chrooted_data_directory}
|
|
fi
|
|
|
|
# Create db file.
|
|
cd ${_chrooted_data_directory}
|
|
touch postscreen_cache
|
|
postmap ${POSTFIX_DEFAULT_DB_TYPE}:postscreen_cache
|
|
rm postscreen_cache
|
|
chown ${SYS_USER_POSTFIX}:${SYS_GROUP_POSTFIX} postscreen_cache.*
|
|
chmod 0700 postscreen_cache.*
|
|
fi
|
|
|
|
echo 'export status_postfix_config_postscreen="DONE"' >> ${STATUS_FILE}
|
|
}
|
|
|
|
postfix_config_logwatch()
|
|
{
|
|
# Enable long queue ID.
|
|
if [[ -n ${LOGWATCH_SERVICES_DIR} ]]; then
|
|
# Create the directory if not present.
|
|
#
|
|
# logwatch package may be missing on the server, continue adding the
|
|
# modular config file to avoid the issue if sysadmin installs logwatch
|
|
# someday in the future.
|
|
[[ -d ${LOGWATCH_SERVICES_DIR} ]] || mkdir -p ${LOGWATCH_SERVICES_DIR}
|
|
|
|
f="${LOGWATCH_SERVICES_DIR}/postfix.conf"
|
|
|
|
if ! grep '\$postfix_Enable_Long_Queue_Ids' ${f} &>/dev/null; then
|
|
cat >> ${f} <<EOF
|
|
\$postfix_Enable_Long_Queue_Ids = Yes
|
|
EOF
|
|
fi
|
|
fi
|
|
|
|
echo 'export status_postfix_config_logwatch="DONE"' >> ${STATUS_FILE}
|
|
}
|
|
|
|
postfix_setup()
|
|
{
|
|
# Include all sub-steps
|
|
check_status_before_run postfix_config_basic && \
|
|
check_status_before_run postfix_config_vhost && \
|
|
check_status_before_run postfix_config_postscreen && \
|
|
check_status_before_run postfix_config_logwatch
|
|
|
|
cat >> ${TIP_FILE} <<EOF
|
|
Postfix:
|
|
* Configuration files:
|
|
- ${POSTFIX_ROOTDIR}
|
|
- ${POSTFIX_ROOTDIR}/aliases
|
|
- ${POSTFIX_FILE_MAIN_CF}
|
|
- ${POSTFIX_FILE_MASTER_CF}
|
|
|
|
* SQL/LDAP lookup config files:
|
|
- ${POSTFIX_LOOKUP_DIR}
|
|
|
|
EOF
|
|
|
|
echo 'export status_postfix_setup="DONE"' >> ${STATUS_FILE}
|
|
}
|