HOWTO: qmail vpopmail courier-imap qmail-scanner etc (NEW)

[sabrex]

This is the new version of this guide, and is based on the previous one posted a while ago. All comments have been incorporated into this new HOWTO, and everything here should work if the instructions are followed properly. This version is also different in that it uses the absolute latest version of each program currently available. You can substitute a newer version if one is available. As long as it installs, it should probably work with these instructions.

1) ensure that the proper USE flags are set

Code: Select all

> nano -w /etc/make.conf
add apache2, maildir, and mysql as USE flags.

2) install qmail

Code: Select all

First of all, make sure that you unmerge the other mail handlers that may be installed, such as ssmtp, sendmail, or postfix:
> emerge -C ssmtp sendmail postfix
> emerge /usr/portage/net-mail/qmail/qmail-1.03-r13.ebuild
> ebuild /var/db/pkg/net-mail/qmail-1.03-r13/qmail-1.03-r13.ebuild config
 
> ln -s /var/qmail/supervise/qmail-send /service/qmail-send
> ln -s /var/qmail/supervise/qmail-smtpd /service/qmail-smtpd

> rc-update add svscan default
> /etc/init.d/svscan start

3) install vpopmail

Code: Select all

> emerge /usr/portage/net-mail/vpopmail/vpopmail-5.4.0.ebuild
First log into mysql as your mysql root user and pass. Then:
> create database vpopmail;
> use mysql;
> grant select, insert, update, delete, create, drop on vpopmail.* to vpopmail@localhost identified by 'your password';
> flush privileges;
 
If you have problems with vpopmail not accepting mail properly,
please ensure that /etc/vpopmail.conf is chmod 600 and
owned by vpopmail:vpopmail

4) install courier-imap as imap and pop3 server

Code: Select all

> emerge /usr/portage/net-mail/courier-imap/courier-imap-3.0.2-r1.ebuild
> nano -w /etc/courier-imap/authdaemonrc
  authmodulelist="authvchkpw"
> nano -w /etc/courier-imap/imapd
  IMAPDSTART=YES
  AUTHMODULES="authvchkpw"
> nano -w /etc/courier-imap/pop3d
  POP3DSTART=YES
  AUTHMODULES="authvchkpw"
> rc-update add courier-imapd default
> rc-update add courier-pop3d default
> /etc/init.d/courier-imapd start
> /etc/init.d/courier-pop3d start

5) update the smtpd config to allow smtp-auth using vpopmail

Code: Select all

> nano -w /var/qmail/control/conf-smtpd
QMAIL_SMTP_POST="mail.mydomain.com /var/vpopmail/bin/vchkpw /bin/true"
> svc -t /var/qmail/supervise/qmail-smtpd
> chmod u+s /var/vpopmail/bin/vchkpw

The following step makes sending mail a lot faster under some circumstances, and I highly recommend that you do the following if you notice delays of 30 to 45 seconds sending mail:

> nano -w /var/qmail/control/conf-common
TCPSERVER_OPTS="-H -R -l 0" (that's lower-case L followed by zero)

6) install spam database clients.

Code: Select all

> emerge /usr/portage/dev-python/pyzor/pyzor-0.4.0-r1.ebuild
> emerge /usr/portage/net-mail/razor/razor-2.40.ebuild
> emerge /usr/portage/net-mail/dcc/dcc-1.2.28.ebuild

7) install f-prot and Mail-SpamAssassin. they must be running before installing qmail-scanner.

Code: Select all

> emerge /usr/portage/app-antivirus/f-prot/f-prot-4.4.2.ebuild
> emerge /usr/portage/dev-perl/Mail-SpamAssassin/Mail-SpamAssassin-2.63.ebuild
> nano -w /etc/conf.d/spamd.conf
  SPAMD_OPTS="-d -u vpopmail -v -x -C /etc/mail/spamassassin/local.cf"
> rc-update add spamd default
> /etc/init.d/spamd start

You'll want to set up a cron.hourly job to update the f-prot definitions automatically:

> nano -w /etc/cron.hourly/virus-update.cron
#!/bin/bash
/opt/f-prot/check-updates.pl -cron -quiet
> chmod 755 /etc/cron.hourly/virus-update.cron
> crontab -e
# min hour day month weekday command
0 * * * * /etc/cron.hourly/virus-update.cron

Now to set up spam processing rules:

> nano -w /etc/mail/spamassassin/local.cf
required_hits  5.0
rewrite_subject  1
subject_tag  *****SPAM*****
report_safe  1
report_header  1
use_bayes  1
auto_learn  1
skip_rbl_checks  0
use_razor2  1
use_dcc  1
use_pyzor  1
ok_languages  all
ok_locales  all

8) install qmail-scanner. for this to work, you may have to force the install of maildrop.

Code: Select all

> emerge /usr/portage/net-mail/maildrop/maildrop-1.5.3-r1.ebuild
> emerge /usr/portage/net-mail/qmail-scanner/qmail-scanner-1.16-r2.ebuild

Please log into the "qmaild" account  and run
/var/qmail/bin/qmail-scanner-queue.pl -g
 
If you see the error "Can't do setuid", or "Permission denied", then
refer to the FAQ.
 
(e.g.  "setuidgid qmaild "/var/qmail/bin/qmail-scanner-queue.pl -g"
or "su qmaild -c "/var/qmail/bin/qmail-scanner-queue.pl -g")

The 'subject_tag' variable in /etc/mail/sendmail/local.cf does not seem to change the subject of detected spam.  As a workaround, do this:

> nano -w /var/qmail/bin/qmail-scanner-queue.pl
my $spamc_subject='*****SPAM*****';

Now update tcp.smtp to activate qmail-scanner

> nano -w /etc/tcp.smtp
# Qmail-Scanner disabled for mail from localhost, relay allowed
127.0.0.1:allow,RELAYCLIENT="",RBLSMTPD="",QMAILQUEUE="/var/qmail/bin/qmail-queue"                                                                                                                         
# Qmail-Scanner enabled (virus only) for mail from local network, relay allowed
192.168.1.:allow,RELAYCLIENT="",RBLSMTPD="",QMAILQUEUE="/var/qmail/bin/qmail-scanner-queue.pl"                                                                                                                         
# Qmail-Scanner enabled (virus and spam) for mail from external internet, relay denied
:allow,QMAILQUEUE="/var/qmail/bin/qmail-scanner-queue.pl"

save tcp.smtp and then:

> tcprules /etc/tcp.smtp.cdb /etc/tcp.smtp.tmp < /etc/tcp.smtp
> chmod 644 /etc/tcp.smtp*

9) install squirrelmail

Code: Select all

> emerge /usr/portage/net-mail/squirrelmail/squirrelmail-1.4.2-r5.ebuild
> perl /var/www/localhost/htdocs/squirrelmail/config/conf.pl
set up squirrelmail

You can also set up the vpopmail squirrelmail plugin as follows. For this to work though, you'll need to run apache as vpopmail:vpopmail by editing /etc/apache2/conf/commonapache2.conf.  This may be a security risk, so follow at your own risk:

> wget http://www.squirrelmail.org/plugins/vpopmail.1.00-1.4.0.tar.gz
> cd /<your squirrelmail dir>/plugins
> tar -zxvf /<location of vpopmail.1.00-1.4.0.tar.gz>
> cd vpopmail
> nano -w config.php
$vpopmail_autorespondpath = '/usr/local/bin';
> perl /var/www/localhost/htdocs/squirrelmail/config/conf.pl
activate the vpopmail plugin

10) install qmailadmin

Code: Select all

> emerge /usr/portage/net-mail/ezmlm-idx-mysql/ezmlm-idx-mysql-0.40-r2.ebuild
> emerge /usr/portage/net-mail/autorespond/autorespond-2.0.4.ebuild
> emerge /usr/portage/net-mail/qmailadmin/qmailadmin-1.2.0_rc2-r1.ebuild

You can access qmailadmin from http://www.youdomain.com/cgi-bin/qmailadmin ... if the image files are not showing, you'll have to copy the qmailadmin images to wherever apache is trying to access them from.  You can find out where by checking your /var/log/apache2/error_log ... note that this version still does not use valias to maintain forward/alias info, and you'll need to install 1.2.1 from source for that to work.

[sabrex]

For those who want to use the latest qmailadmin (with valias support), then alternatively, you can install qmailadmin from source with the following instructions (note, that you still need to copy the images from where they are to where apache is trying to load them from):

Code: Select all

> wget http://easynews.dl.sourceforge.net/sourceforge/qmailadmin/qmailadmin-1.2.1.tar.gz
> tar -zxvf qmailadmin-1.2.1.tar.gz
> cd qmailadmin-1.2.1
> ./configure --enable-valias --enable-cgibindir=/var/www/localhost/cgi-bin/ --enable-htmldir=/var/www/localhost/htdocs/ --enable-htmllibdir=/var/www/localhost/htdocs/qmailadmin --enable-imagedir=/var/www/localhost/htdocs/qmailadmin/images --enable-ezmlmdir=/usr/bin --enable-vpopuser=vpopmail --enable-vpopgroup=vpopmail --enable-modify-quota
> make
> make install

[blubbi]

Thanks for that nice howto.

But just one little question, did you manage it to get SMTP-AUTH working?

[sabrex]

Thanks for that nice howto.

But just one little question, did you manage it to get SMTP-AUTH working?

Yes, smtp-auth has been working for me all along, with these instructions, as well as instructions from the previous howto. Follow step 8 carefully, and actually run all of the commands (including chmod, etc). It doesn't just work on one server, but on all servers I've set up.

[image]

really nice guide. i've used it a couple of times already, with perfect results. i do have a gripe tho. for the life of me, i CANT figure out how to change the spam settings to behave differently. my client never uses anything other than IMAP/Squirrelmail, so i would like to move the mail to another folder by default instead of getting it's subject changed. any easy way to do this, without deviating from the guide's instructions too much? let me know, thanks.

[sabrex]

really nice guide. i've used it a couple of times already, with perfect results. i do have a gripe tho. for the life of me, i CANT figure out how to change the spam settings to behave differently. my client never uses anything other than IMAP/Squirrelmail, so i would like to move the mail to another folder by default instead of getting it's subject changed. any easy way to do this, without deviating from the guide's instructions too much? let me know, thanks.

There is a way to do this, although it isn't easy. It was covered by other posters (JeffreyCentex) in the original HOWTO and the actual instructions are located at http://forums.gentoo.org/viewtopic.php? ... c&start=50

Mind you, I haven't tested these yet, on page 2 of the howto, there is another guide to do this by wetkitty, and I did try that without success. Let me know which one works out for you.

[tfunk]

I'm just looking to have php send email from a web server...I don't really want to be able to receive email (response wil be directed to a different server).

Will this still work for this purpose? I imagine I would only need the first part? (steps 1 and 2?)

Is that accurate?

Thanks!

Tfunk

[battlex]

hi, great tutorial, worked first time however i do have a problem... i tried to login to squirrelmail / pop3 / imap with a user account i made in gentoo, but i can't seem to be able to. it says incorrect user / pass. also i can't seem to login to qmailadmin. what is the username / pass for that? are there any other settings i need to do so that everything works? thanks

[image]

For those who want to use the latest qmailadmin (with valias support), then alternatively, you can install qmailadmin from source with the following instructions (note, that you still need to copy the images from where they are to where apache is trying to load them from):

i took the liberty to actually modify the latest known ebuild to just include the correct switch. here's how.

Code: Select all

cd /usr/portage/net-mail/qmailadmin/
cp qmailadmin-1.2.0_rc2-r1.ebuild qmailadmin-1.2.1.ebuild
vi qmailadmin-1.2.1.ebuild
[diff]
        econf ${myopts} \
+       --enable-valias \
        --enable-vpopmaildir=${dir_vpopmail} \
[/diff]
ebuild qmailadmin-1.2.1.ebuild digest
emerge qmailadmin-1.2.1.ebuild

or, for the lazy, i submitted an ebuild here.

[SpoKKe]

HI,
great tutorial, my server whit this istructions work great, but i've a little question

The RBL check it's implemented?
In the file /etc/tcp.smtp

# Qmail-Scanner disabled for mail from localhost, relay allowed
127.0.0.1:allow,RELAYCLIENT="",RBLSMTPD="",QMAILQUEUE="/var/qmail/bin/qmail-queue"
# Qmail-Scanner enabled (virus only) for mail from local network, relay allowed
192.168.1.:allow,RELAYCLIENT="",RBLSMTPD="",QMAILQUEUE="/var/qmail/bin/qmail-scanner-queue.pl"

The term RBLSMTPD="" means that it's disabled the RBL check?
And if it's not disabled where i can declare a list of RBL ?

Sorry for my BAD english please

Tnks SPK

[battlex]

hi, my authentification doesn't work. what is the username and password for qmailadmin? and why does my pop3 / imap mail not work either? please help

[sabrex]

HI,
great tutorial, my server whit this istructions work great, but i've a little question

The RBL check it's implemented?
In the file /etc/tcp.smtp

# Qmail-Scanner disabled for mail from localhost, relay allowed
127.0.0.1:allow,RELAYCLIENT="",RBLSMTPD="",QMAILQUEUE="/var/qmail/bin/qmail-queue"
# Qmail-Scanner enabled (virus only) for mail from local network, relay allowed
192.168.1.:allow,RELAYCLIENT="",RBLSMTPD="",QMAILQUEUE="/var/qmail/bin/qmail-scanner-queue.pl"

The term RBLSMTPD="" means that it's disabled the RBL check?
And if it's not disabled where i can declare a list of RBL ?

Sorry for my BAD english please

Tnks SPK

Why would you want to run an RBL check on local ips? The RBL checks are performed when mail originates from any IP other than the local network or localhost ips.

[SpoKKe]

yes i know but i've make a mistake

Now i've resolved my problem with this line in the /var/qmail/control/config-smtp

QMAIL_SMTP_PRE="${QMAIL_SMTP_PRE} rblsmtpd -r sbl-xbl.spamhaus.org"


tnks and sorrrry for the mistake

spk

[ARC2300]

Okay, I've read this and read the old guide, and have a working mail server.

The only problem being, though, that to log in (with SquirrelMail or remotely from something like thunderbird), I have to login as user@domain.net. Why?

[darkweaseljedi]

On a side note, if you are using ".maildir" instead of Maildir.

I could not get qmailadmin to work. I discovered it's a code issue: qmailadmin is hardcoded to assume "Maildir". I'm not sure how common either ".maildir" or "Maildir" is but I am using ".maildir".

In order to get qmailadmin to work, I needed to change the code so that it was hardcoded to look at ".maildir" instead.

Obviously the better solution would be to enable qmailadmin to read some sort of config file where you can tell it what to look for.

[sabrex]

In order to get qmailadmin to work, I needed to change the code so that it was hardcoded to look at ".maildir" instead.

Strange. When I compiled 1.2.1, it worked without needing to change anything. I used the valias flag, so that may have made the difference. I also believe emerging 1.2.0_rc2 also worked without needing to change anything.

[darkweaseljedi]

Are you using .maildir? You're howto doesn't mention it this time, but the previous howto I believe mentioned Maildir. If you are using "Maildir" you shouldn't have any problems.

[sabrex]

Are you using .maildir? You're howto doesn't mention it this time, but the previous howto I believe mentioned Maildir. If you are using "Maildir" you shouldn't have any problems.

The new vpopmail (5.4.0) automatically uses .maildir, so at this point I am using .maildir and not Maildir. However, since I upgraded from a system in which I was using .maildir, and ran the vpopmail-Maildir-dotmaildir-fix.sh script, then it may be that qmailadmin is still using Maildir, but since there is now a symlink from Maildir to .maildir for each user, that may explain why it is still working.

[image]

"setuidgid qmaild "/var/qmail/bin/qmail-scanner-queue.pl -g"

i think it would be better to do the following (also, the quotes were kinda messed up):

Code: Select all

#recursively change the owner of the directory
chown qmaild:nofiles -R /var/spool/qmailscan

#set original permissions on symlinked viruslog
chown root:root /var/spool/qmailscan/viruses.log

#do default first actions with scanner
setuidgid qmaild "/var/qmail/bin/qmail-scanner-queue.pl" -z
setuidgid qmaild "/var/qmail/bin/qmail-scanner-queue.pl" -g

edit: ok, found out that you need to set it to the user that qmail-smtpd is running at, which is qmaild. edited accordingly. also, if you do a

Code: Select all

ps aux | grep tcpserver

you'll see that the guide is wrong, and we should be editing /etc/tcprules.d/tcp.qmail-smtp instead of /etc/tcp.smtp in step 6. took me forever to figure out why my mail wasn't being scanned.

Code: Select all

#add accept rules
vi /etc/tcprules.d/tcp.qmail-smtp
...

#apply the tcprules changes to the files
tcprules /etc/tcprules.d/tcp.qmail-smtp.cdb /etc/tcprules.d/tcp.qmail-smtp.tmp < /etc/tcprules.d/tcp.qmail-smtp
chmod 644 /etc/tcprules.d/tcp.qmail-smtp*

#restart the service to apply changes to daemon
/etc/init.d/svscan restart

and may i suggest commenting each complicated step, because some ppl actually want to know what each command does. if we wanted mindless installing, we'd be using windows =)

[darkweaseljedi]

The new vpopmail (5.4.0) automatically uses .maildir, so at this point I am using .maildir and not Maildir. However, since I upgraded from a system in which I was using .maildir, and ran the vpopmail-Maildir-dotmaildir-fix.sh script, then it may be that qmailadmin is still using Maildir, but since there is now a symlink from Maildir to .maildir for each user, that may explain why it is still working.

You're probably right. Do newly created accounts have the Maildir -> .maildir symlink created or do you have to do that manually?

[image]

argh, even more troubles. spamassassin wasn't being used by qmail-scanner, AND doing it manually (spamc -c -f < spamexample.eml)resulted in scores of 0.0. after a whole day of troubleshooting, i found out that it was the

Code: Select all

'-C /etc/mail/spamassassin/local.cf'

in /etc/conf.d/spamd
-C changes the default paths, which includes the default databases and checks. also, -v (which enable vpopmail indiviual configs) and -x (which disable user configs) are contrary to each other. if you want user-specific learning, then remove -x, if you want it only to be domainwide, use remove -v.

my final /etc/conf.d/spamd ended up to be the following:

Code: Select all

SPAMD_OPTS="-v -u vpopmail --siteconfigpath=/etc/mail/spamassassin/local.cf"

then re-emerge qmail-scanner to pick up the differences

Code: Select all

#refresh spamd
/etc/init.d/spamd restart

#qmail-scanner checks score in its ./configure, so you have to rebuild
emerge qmail-scanner

after all this, spam checking FINALLY works.

edit: added blurb about -v and -x

[mlow]

I had the mail server up and running with everything working. Yesterday I started to get bounce backs saying:

Code: Select all

has encountered a delivery problem.

Reason: Bad destination mailbox address
The mailbox specified in the address does not exist.
This means the address portion to the left of the @ sign is invalid.

Transcript of session:
RCPT TO:<*@*.com>
550 <*@*.com>, Recipient unknown

The asterisk being the user and domain names. I can see the entries in the mysql database, so they haven't been corrupted. I cannot figure out what is causing this. Any suggestions would be appreciated.

[Crymson]

I'm having the error where I can't add a domain or user, because it gives me "SQL server has gone away" crap. I double checked my /etc/vpopmail.conf file, and the password is correct, and I'm using vpopmail 5.4.0. Just for fun, I changed the password in the /etc/vpopmail.conf file, and tried to add another domain.

IT STILL TRIES TO DO IT!!! (It also gives me the same errors). It doesn't tell me it can't log in using that user, or any of that. So where's the error? Is there some file I haven't edited or something?

I'm considering starting over, (which would suck, considering I've spent two days on this already), and if I *DO* need to start over, what do I need to remove, and what is the best, most complete way to do it?

TIA

[darkweaseljedi]

And now for something completely different:

Relaying. I'd like to enable any sort of relay where users can send after they've checked email, or have to log into send email. Anything that allows anyone that has logged in to send, regardless of IP. Right now it's reading "/etc/tcprules.d/tcp.qmail-smtp" and I have to manually add IPs and rebuild the thing.

[darkweaseljedi]

Crymson:

I did a search and found this link, it might help you:
http://www.mail-archive.com/vchkpw@inte ... 17169.html

darkweasel