Email System For The Home Network - Version 2.1

sourmash · n00b Joined: 15 Jan 2004 Posts: 18

No probs youve helped me a lot and I appreciate that. I will see if I can persuade my friends to use a different email client on windows for the moment, any suggestions??

sourmash

bruzzler · n00b Joined: 08 Oct 2003 Posts: 70

Hi,

i have encountered this strange error following the tutorial:

linuxsrv root # /usr/sbin/postmap hash:/etc/postfix/saslpass
postmap: warning: valid_hostname: invalid character 44(decimal): linuxsrv.bruzzler.dyndns.org,
postmap: fatal: unable to use my own hostname

anyone's knowing where this damn "," comes from. It's not in /etc/dnsdomainname, but if i type in # dnsdomainname, it appears too.

Thanks for your Help

beowulf · Apprentice Joined: 07 Apr 2003 Posts: 225

Perhaps it's a typo in /etc/hosts ?
_________________
I have nothing witty to say here... ever :-(

Bob Shroom · Posted: Wed Jan 28, 2004 11:44 pm Post subject:

hi there, great tutorial, but i think, i got a similar problem like miha had before with the 'client host rejected'.

https://forums.gentoo.org/viewtopic.php?t=56633&postdays=0&postorder=asc&highlight=client+host+rejected+access+denied&start=221

imap works fine via ssl; i can login with tunderbird from a client in my lan or via squirrelmail and can browse my mail.

but when it comes to sending mail, i must have done something wrong.

doesn't matter, if i try to send mail from the mail-client (sylpheed-claws) installed on the server or from a client inside my lan (thunderbird or squirrelmail)... i always get this:

beowulf · Apprentice Joined: 07 Apr 2003 Posts: 225

Hey Bob, Shrooms and Doob's eh?

Well, there's a few things I can suggest:

1. Check your SSL generation steps. It would appear there's a problem with the *.pem files you generated. Did you add the -nodes switch?

2. is your FQDN listed in /etc/hosts ? What does this code output: hostname -f

As a side note, I am in the process of re-writing the whole guide and plan to bump it to version 2 in a couple days.... I think I've found better ways to do the stuff that causes the most problems (IE: sasl, SSL and OE). If you're willing to give me a few days, I'll have it updated and will bump the thread....
_________________
I have nothing witty to say here... ever :-(

Bob Shroom · Posted: Thu Jan 29, 2004 9:14 am Post subject:

bruzzler · n00b Joined: 08 Oct 2003 Posts: 70

Hi,

i corrected the error above by simply typing in my domain and hostname into /etc/postfix/main.cf

Now i have another problem with postfix whenever i try to deliver local mail i get this error:

[postfix/postdrop] warning: unable to look up public/pickup: No such file or directory

Anyone who can help me ?

beowulf · Apprentice Joined: 07 Apr 2003 Posts: 225

Bob Shroom - Unfotunately I haven't been able to finish the guide... a few things came up that need my attention for the next week or so.... However, I may be able to help you with your SSL problem....

The new way I've been talking about regarding SSL is to use some pregenerated SSL certs I found in /etc/ssl/postfix. They're pre-generated so no more editing -nodes and no more entering all sorts of stuff.... Anyways, here's a snippet from /etc/postfix/main.cf that shows which key files go with what option:

Bob Shroom · Posted: Sun Feb 01, 2004 4:51 pm Post subject:

ok, i've edited main.conf so it uses the pre-generated ssl-certs:

beowulf · Apprentice Joined: 07 Apr 2003 Posts: 225

Bob,

If I understand it correctly, you want to become your own SMTP server, not using SASL to auth to your ISP's SMTP server...

In that case, here's a few more changes to /etc/postfix/main.cf that needs to be placed....

Bob Shroom · Posted: Sun Feb 01, 2004 9:34 pm Post subject:

beowulf, i have the feeling, that my system is doomed for some reason.

edited main.cf and enabled myorigin and mydestination and disabled all smtpd_sasl stuff.

mmmhhh....still no luck. postfix still bitches about a 'bad certificate' (see output in my last post)....looks like nothing has changed.

EDIT:
stopping and starting postfix should be enough for the changes to take effect, right? 'shutdown -r now ' is not necessary, right?

i hope, i'm not getting on your nerves...

before i started with your guide, i tried the gentoo virtual mailhosting guide, which worked fine, but for my small home lan, this setup was a little oversized in my opinion. so i was really happy, when i found your guide, as it is exactly what i want/need.

maybe i should just wait for your version 2.0 and try my luck again with this one then.

anyway....thanks for your help and time so far.

_________________
[planet-earth] root # rm -rf /

pubecon

having trawled around looking for a howto on how to set up virtual users for postfix, I came across (of course) the gentoo howto but also...
http://annapolislinux.org/docs/plc/postfix-courier-howto.html

now, the gentoo howto is all well and good but I have my linux server running alongside a windows 2000 server and so would like to be getting some active directory integration/authentication going on

ANYWAY,

on the topic of virtual users there is very little said in either of these howtos

the gentoo howto has a throwaway

IcedTerror · Tux's lil' helper Joined: 26 Apr 2003 Posts: 78

I have no problems with auth in imap.
but eveytime I try to send anything I get this error:

beowulf · Apprentice Joined: 07 Apr 2003 Posts: 225

Bob Shroom - I hope you made a typo in your post about th smtpd_sasl stuff... I hope you really meant you removed the smtp_sasl stuff

The only time you have to reboot is when you change your kernel...

I'm at a loss why SSL isn't working.... Bad certificate has me stumped since the pre-generated ones should've fixed it...

In any case, I'll be able to work on v2.0 some time this week, sorry if it's taking a while... and sorry to hear you dumped your working setup for this one which isn't.... I'll try to get the guide done quicker...

pubecon - Sorry man, I really don't have much knowledge in virtual mail users and all that jazz.... I think it would be best if you posted in the "Network And Security" forum as it will reach a much broader audience and your chances of getting a helpful reply will increase.

IcedTerror - I assume that's a telnet error and it disconnects you after EHLO? Hmm... Not quite sure why.... one thing I might suggest is to make postfix's logging a bit more verbose by editing /etc/postfix/master.cf. Find this line (about 65% in my file):
smtp inet n - n - - smtpd
--- and append a -v switch to smtpd, like this ----
smtp inet n - n - - smtpd -v

restart the server and see if it spits out any further errors....
_________________
I have nothing witty to say here... ever :-(

bruzzler · n00b Joined: 08 Oct 2003 Posts: 70

Hi,

i have corrected the above error, it whas caused by the init.d postfix skript, that stated out postfix was started, but it wasn't really.

By now i have another problem:

Some of my local email is delivered by postfix and some not. I get email from cron, but whenever i try to send local email e.g. through kmail i don't receive it. I don't receive any from ddclient, too.

Regards,
Bruzzler

IcedTerror · Tux's lil' helper Joined: 26 Apr 2003 Posts: 78

Added the -v and recieved the same message.
This is a great tut but I just can't get it to work.
Thanks for the howto and mabey after I reread and redo the config
things will work.

I may not have my networking setup correctly

thanks
IT

Woolong · n00b Joined: 03 Feb 2004 Posts: 62 Location: Hong Kong

Hi,

Thanks to author about the great guide. I have the imap working already.

However, when I tried to send a msg through postfix from a workstation on the same network, the authentication always fails. I'm sure postfix is alive because Kmail actually detected "TLS" for encryption and "DIGEST-MD5" for authentication.

So here is what I did:

Woolong · n00b Joined: 03 Feb 2004 Posts: 62 Location: Hong Kong

Sorry the prev post was unfinished.

Can anyone help me with the problem? I got prompts for username and passwd, and I'm pretty sure they are correct having reset the db over and over again.

Actually, is it possible to authenticate against pam instead of sasldb?

Thanx!

john5211 · n00b Joined: 04 Feb 2004 Posts: 14

First let me say that this is a great guide, and this setup seems to be exactly what I am looking for ... kudos!

Unfortunately, I am having problems with the first part of the guide. I am happily recieving mail and I have webmail setup, but I can't seem to get postfix to work correctly. When I run the check command, here is what I get:

john5211 · n00b Joined: 04 Feb 2004 Posts: 14

So I guess writing out my post made me look at everything a little harder and figure out what was wrong ... turns out that commenting out the localhost line in my /etc/hosts file and then restarting postfix did the trick.

Thanks again for the great guide!

John

pubecon · Posted: Wed Feb 04, 2004 2:39 pm Post subject:

shouldn't you just have deleted the "mailtux" alias on the localhost line?

Bob Shroom · Posted: Wed Feb 04, 2004 9:14 pm Post subject:

beowulf · Apprentice Joined: 07 Apr 2003 Posts: 225

Woolong - One suggestion I have is setting this:
smtpd_sasl_local_domain = $myhostname
--to equal this:
smtpd_sasl_local_domain =

That should fix it... but I could be wrong.... Try that and let me know of any log output that seems important if it fails... As for auth'ing against pam... that's what I'm working on in the new version... I've found sasldb causes more hassles than it's worth.... I think many in this thread would agree...

john5211 - Yeah, do what pubecon suggested. Don't remove the alias to localhost... because I think that'll break something. Not sure what it would break, but I think something will break.

Bob Shrooms - Your settings should be like this:

beowulf · Apprentice Joined: 07 Apr 2003 Posts: 225

Bad taste I hear to reply after yourself... oh well

Version 2 is up, completely re-written and should have better support for Outlook Express.. We use shadow (pam) to authenticate to both server's as to keep down on the unnessecary confusion that two seperate user/pass combo's created. Also Sasldb was more hassle than it's worth.

Hopefully this solves some of the major problems that existed before... If anything, let me of any problems, errors or anything else at all

hope this helps
_________________
I have nothing witty to say here... ever :-(

Bob Shroom · Posted: Thu Feb 05, 2004 5:34 pm Post subject:

beowulf...you are the man!

i don't know, what actually did the trick....but i can send email now!

tried it via squirrelmail and via sylpheed-claws....works fine with both!

thanx again for your help and this great guide!

bob
_________________
[planet-earth] root # rm -rf /