Please enable JavaScript.

Coggle requires JavaScript to display documents.

Mail Server (Anti-Spoofing (SPF (Add txt & spf record (Tutorial), Add…

- - - - sender_canonical_maps = tcp:localhost:10001
      - sender_canonical_classes = envelope_sender
      - recipient_canonical_maps = tcp:localhost:10002
      - recipient_canonical_classes= envelope_recipient,header_recipient
  - - - Tutorial
    - - Postfix/SPF
    - - 確認電子郵件確實是由網域授權的郵件伺服器寄出
  - - - chown opendkim dkim.key
- - - - myhostname
        
        kaiiiz.nctucs.net
      - mydestination
        
        設定可收信的郵件位址
      - mynetworks
        
        設定可以幫忙relay的位址
        
        取代mynetworks_style的參數
- - - - 將伺服器的信下載到使用者電腦上
    - - 閱讀信件不用重新連線
    - - 信件只會在使用者電腦上保存一份
    - - 30 封信件，傳到 15 封後斷線，下次會重新從第 1 封開始收，直到全部收完才刪除
  - - - 信件保存在伺服器，使用者讀取信件時才會下載到本機上
    - - 使用者回家後仍可存取於公司郵件主機上的信件
      - 支援在伺服器上建立分類資料夾
    - - 網路斷線後無法讀取尚未下載的信件
    - - 先下載信件標題，需要閱讀時才下載整封信
- - - - Test
        
        :red_flag: telnet localhost 25
        
        ehlo localhost
        
        250-AUTH ... PLAIN LOGIN
      - CentOS
      - Tutorial
  - - - /usr/share/dovecot
        
        :red_flag: dovecot-openssl.cnf
        
        /etc/dovecot/conf.d
        
        :red_flag: 10-ssl.conf
        
        :red_flag: mkcert.sh
        
        restart
      - Test
        
        POP3s : port 995
        IMAPs : port 993
      - 強制使用者開啟 SSL 加密
        
        /usr/share/dovecot/conf.d/10-auth.conf
        
        disable_plaintext_auth = yes
    - - Generate Key
        
        :red_flag: sudo openssl req -x509 -new -days 365 -nodes -out kaiiiz.nctucs.net.crt -keyout kaiiiz.nctucs.net.key
        
        CA
        
        :red_flag: sudo openssl req -new -x509 -extensions v3_ca -keyout cakey.pem -out cacert.pem -days 3650
      - Config
        
        /etc/postfix/main.cf
        
        smtpd_tls_cert_file=/etc/postfix/ssl/kaiiiz.nctucs.net.crt
        
        smtpd_tls_key_file=/etc/postfix/ssl/kaiiiz.nctucs.net.key
        
        smtpd_tls_CAfile=/etc/postfix/ssl/cacert.pem
      - Test
        
        :red_flag: telnet localhost 25
        
        ehlo localhost
        
        250-STARTTLS
    - - /etc/postfix/master.cf
        
        smtpd >> 465
- - - - :red_flag: telnet localhost 110
    - - :red_flag: telnet localhost 143
- - - - smtpd_sender_restrictions = reject_rbl_client www.spamhaus.org
  - - - --delay = 60
    - - smtpd_recipient_restrictions =
        permit_mynetworks,
        reject_unauth_destination,
        check_policy_service inet:127.0.0.1:10023
- - - - sudo certbot --apache --agree-tos --email your-email-address -d mail.example.com
    - - https://www.linuxbabe.com/mail-server/install-rainloop-webmail-ubuntu-16-04