Email System For The Home Network - Version 2.1

Message

bruor · Post by **bruor** » Tue May 04, 2004 12:56 am

when setting everything up did you have any problems sending at all? i.e. authing against your server etc....
would you mind pm'ming me a copy of your procmail config ?

im having a heck of a time getting it to work outbound...

krunk · Post by **krunk** » Tue May 04, 2004 3:34 am

From my client I cannot not even detect that my server exists, so my config file might not be what you want.....

MooktaKiNG · Post by **MooktaKiNG** » Tue May 04, 2004 8:34 am

Does anyone know howto get the emails that i send using "mutt -x mma" seem like its coming from domain.com, instead of hostname.domain.com?

i cant seem to figure this out.

omné · Post by **omné** » Wed May 05, 2004 8:10 am

Hello, great HOWTO, but I still have the same problem, I don't read all this thread, since, as you can read, I'm not a native english spoker, but all search I made or test, failed.
OK, here is my problem :
It seems like everything work great, exept one point : I can't use IMAP.

I've created ma maildir with

Code: Select all

maildirmake ~/.maildir/

I tried Thunderbird and balsa.
[EDIT] Same with kmail.

I can connect to the local IMAP server via SSH, but, after, still the same message (here in thunderbird) :

The current command did not succed. The mail server responded : Unable to open this mailbox..

For me it's like imap don't not that $HOME/.maildir is my mailbox or don't know were to search or that it's a maildir directori.

Looking in my imapd, I foud too variable, that may be the reason, but every change I tried cause the same error :

Code: Select all

vi /etc/courier-imap/imapd

##NAME: MAILDIRPATH:0
#
# MAILDIRPATH - directory name of the maildir directory.
#
#MAILDIRPATH=Maildir
MAILDIRPATH=Maildir

#Hardwire a value for ${MAILDIR}
#MAILDIR=Mail
MAILDIR=Mail
#Put any program for ${PRERUN} here
PRERUN=

Since it's the only place where IMAP seems to look about the mailbox path, I tried other things here, but no result.

Other things...
- Putting a "." in front of directories in $HOME/procmailrc cause them to be cached-directories, is it normal ?
- I tried to open my $HOME/.maildir like a local directorie, with thunderbird, he don't "see" the cached directories and show me a INBOX.new witch contain 6 other directories who are in fact the 6 mail (so files and not directories) I see with a

Code: Select all

ls ~/.maildir/INBOX.new

Can anyone help me ? I spend long hours on it know, I would be great if it work

Thank's

Némo.

PS : I'm not at all a net master, and It's possible that I made error between my fix IP / localhost / 127.0.0.1 / hostname / domainname in he main.cf, but everything seem's OK, and it's not a reason for imap not finding my mail dir, isn't it ?

[EDIT 09/05/2004]
Solve
I had to say, via /etc/courier-imap/imapd where is my maildir :

Code: Select all

MAILDIRPATH=Maildir
MAILDIR=.maildir

I got two new problem :
imap disconnect me after when changin from a folder to an other (created by procmail)
How do i said to cron no to send me mail each time he check my boxes ?

Némo.

thekk · Post by **thekk** » Wed May 05, 2004 9:04 am

In reply to the tip to create an extra /usr/lib/sasl2/smtpd.conf file with the same contents as /etc/sasl2/smtpd.conf (Suggestion by Woolong), I had the same problem, but found a different solution. Create a symlink (which was suggested by Souperman).
You'd have to type:

Code: Select all

# ln -s /etc/sasl2/smtpd.conf /usr/lib/sasl2/smtpd.conf

If you want to change some options for the authentication, you only have to edit one file.

Thanks for making my life a little easier with this guide!
Thekk

Gwyd10n · Post by **Gwyd10n** » Thu May 06, 2004 5:35 pm

I seem to be having trouble with amavis working correctly. I see this error in the log over and over again.

Code: Select all

May 6 10:32:06 athame /postfix/qmgr [17418]: warning: connect to transport smtp-amavis: Connection refused

When I try to enable the transport mail gets stuck in no-where land.
Any ideas as to what's going on?

Thanks

slestak · Post by **slestak** » Thu May 06, 2004 7:00 pm

Following version 2.1 of howto.

have script getmymail2 (2nd attempt) returns following output:

Code: Select all

steve@webserver bin $ ./getmymailnow2
Enter password for steve@/usr/bin/procmail -d %T:
fetchmail: couldn't find canonical DNS name of /usr/bin/procmail -d %T (/usr/bin
/procmail -d %T)
fetchmail: Query status=11 (DNS)
steve@webserver bin $ fetchmail: Query status=11 (DNS)

~/bin/getmymail2 contains

Code: Select all

#!/bin/bash
/usr/bin/fetchmail -a -s -m -k "/usr/bin/procmail -d %T"

Any hints on where I can look next.

When I execute same line in bash, not in script, works correctly. I think %T is not resolving correctly.

Edit - SOLVED
I added the -k switch for testing and interrupted the -m with its arg

Edit2 - spelling

bruor · Post by **bruor** » Mon May 10, 2004 1:21 pm

ok im giving sending another shot now, when i try to send out stuff with ssl enabled outlook tells me that my server does not support ssl.

so i disable it. and when i send i get a mail immediately that says this

Code: Select all

Your message did not reach some or all of the intended recipients.

      Subject:	testing one more time 
      Sent:	5/10/2004 9:16 AM

The following recipient(s) could not be reached:

      '[i]outbound@mail.address[/i]' on 5/10/2004 9:16 AM
            554 <unknown[192.168.0.6]>: Client host rejected: Access denied

192.168.0.6 is the IP of the computer i am connecting to the server from.
can someone at least help me know where to look? as far as i can tell everything is as it needs to be in the howto....

should ssl be enabled for the smtp connection?

thanks in advance for any help!

slestak · Post by **slestak** » Tue May 11, 2004 3:59 pm

when I include the getmymail script in my cron, how will I handle the password prompt? I have my pop3 password in my fetchmailrc, and it is chmod 700 for the non-priveliged owner.

I would think with the password in the fetchmailrc, getmymail wouldnt prompt.

[Solved] Don't know how, its working now.

schmeggahead · Post by **schmeggahead** » Thu May 13, 2004 1:05 pm

I have the squirrelmail setup with this how to and the fetchmail setup for each of the users to run daily. I would like to be able to run fetchmail from within squirrelmail to get new mail when anyone is actually needing it but not logged on to the mail system, just using squirrelmail. PHP is probably capable of doing this.

Could someone point me in the direction of a similar PHP item that can access a shell script?

There has to be one in the squirrelmail system.

Benzman · Post by **Benzman** » Fri May 14, 2004 12:44 pm

First, thank you for this guide!

But I've got a problem:
My e-mail program don't show the folders that I created with procmail. So I wrote them to ~/.maildir/courierimapsubscribed. Now I can see the Folders in my e-mail client, but they are all empty. I've checked the dirs over the cmdline and there are messages in it. I'm also confused, that the maildirs made by procmail aren't in ~/.maildir/. They are directly in ~/. Is this correct or did I / procmail made a mistake? My .procmailrc has the same synthax like the .procmailrc written by beowulf in this guide.

Edit: solved
I forgot to type the first two lines in ~/.procmailrc

blake121666 · Post by **blake121666** » Sun May 16, 2004 6:35 pm

Hi, thanks for this guide

You have pwcheck_method:saslauthd in /etc/sasl2/smtpd.conf but you neglect to add sasl users with saslpasswd2. I couldn't send mail from my Outlook Express client until I did this.

echo "$passwd" | saslpasswd2 -p -c $username

And I had to specify $username@$host as the username in Outlook Express where $host = the smtp server (short name - not fully-qualified).

I also had to "chown postfix:mail" the /etc/sasl2/sasldb2 file.

blatch · Post by **blatch** » Tue May 18, 2004 6:26 am

Ok. Let's say my server is jth.ath.cx. I want to be able to send mail to jth@jth.ath.cx. I don't want fetchmail to read anything from any OTHER e-mail accounts, I want to setup my OWN PERSONAL e-mail account based on this address. How would I do that? I've done EVERYTHING in this tutorial, but I can't receive mail to that address.

hammerhai · Post by **hammerhai** » Tue May 18, 2004 2:36 pm

I found a mistake in the "Spam Assassin"-Part of this Howto:

Code: Select all

server root # sa-learn --dir --spam /home/niklas/.maildir/.spam

This just gives you

Code: Select all

Learned from 1 message(s) (3 message(s) examined).

But if you do

Code: Select all

server root # sa-learn --dir --spam /home/niklas/.maildir/.spam/cur/

you will get the expected result

Code: Select all

Learned from 65 message(s) (66 message(s) examined).

So this

Code: Select all

user@server $ crontab -e 
 
 #This scans for spam and for good mails every half hour. 
 #Set the interval (30 minutes) appropriatly for your convenience and the amount of mails you get. 
 
 */30 * * * *    sa-learn --dir --spam /home/user/.maildir/.spam > /dev/null 2>&1 
 */30 * * * *    sa-learn --dir --ham  /home/user/.maildir/ > /dev/null 2>&1

should be changed to

Code: Select all

user@server $ crontab -e 
 
 #This scans for spam and for good mails every half hour. 
 #Set the interval (30 minutes) appropriatly for your convenience and the amount of mails you get. 
 
 */30 * * * *    sa-learn --dir --spam /home/user/.maildir/.spam/cur > /dev/null 2>&1 
 */30 * * * *    sa-learn --dir --ham  /home/user/.maildir/cur > /dev/null 2>&1

edit:

10.4 Configure Spam Assassin

This can be done automatically (almost) by using a script you can find here:
http://www.yrex.com/spam/spamconfig.php
Place the config file here: /etc/mail/spamassassin

The config file has to be /etc/mail/spamassassin/local.cf.
I just saw, that there is an init script for Spam Assassin (/etc/init.d/spamd). Isn't it necessary to start the service by using this script?

BlinkEye · Post by **BlinkEye** » Tue May 18, 2004 4:09 pm

if i use the suggested crontab entry for a specific user i get

Code: Select all

May 18 17:52:00 computername CRON[12046]: (username) CMD (/usr/bin/fetchmail -a -s -m "/usr/bin/procmail -d \%T" )
May 18 17:52:21 computername CRON[12045]: (username) MAIL (mailed 696 bytes of output but got status 0xffffffff )

and don't get the mails - instead i receive an email from crontab with the following header:

Code: Select all

Subject: Cron <username@domain> /usr/bin/fetchmail -a -s -m "/usr/bin/procmail -d \%T"
X-Cron-Env:  <SHELL=/bin/sh>
X-Cron-Env:  <HOME=/home/username>
X-Cron-Env:  <PATH=/usr/bin:/bin>
X-Cron-Env:  <LOGNAME=username>

and the following message:

Code: Select all

sh: -c: line 1: unexpected EOF while looking for matching `''
sh: -c: line 2: syntax error: unexpected end of file
fetchmail: SIGPIPE thrown from an MDA or a stream socket error
fetchmail: socket error while fetching from pop.bluewin.ch
fetchmail: Query status=2 (SOCKET)
sh: -c: line 1: unexpected EOF while looking for matching `''
sh: -c: line 2: syntax error: unexpected end of file
fetchmail: MDA returned nonzero status 2
sh: -c: line 1: unexpected EOF while looking for matching `''
sh: -c: line 2: syntax error: unexpected end of file
fetchmail: SIGPIPE thrown from an MDA or a stream socket error
fetchmail: socket error while fetching from pop.gmx.ch
fetchmail: Query status=2 (SOCKET)

if i use

Code: Select all

*/2 * * * * /usr/bin/fetchmail -a -s

i get no cron mail and receive my mails. i use procmail and set up some filterrules too - they don't get ignored, so why should i use the more complicated line mentioned above? i'm confused because i had my mailserver running yesterday without any problem. i had to reboot my server and changed ONLY some iptables settings (from built in to modules) and it stopped working. either way it works now and i'm pretty sure someone can explain me the crontab entry and why it doesn't work for me any more.
i don't have a /etc/fetchmailrc file and didn't set the daemon mode in /etc/conf.d/fetchmail. i use userbased ~/.fetchmailrc (no daemon mode)
any ideas?

BlinkEye · Post by **BlinkEye** » Tue May 18, 2004 4:14 pm

blatch wrote:Ok. Let's say my server is jth.ath.cx. I want to be able to send mail to jth@jth.ath.cx. I don't want fetchmail to read anything from any OTHER e-mail accounts, I want to setup my OWN PERSONAL e-mail account based on this address. How would I do that? I've done EVERYTHING in this tutorial, but I can't receive mail to that address.

do it like i did: don't use a /etc/fetchmailrc file with every account written in it, but use a similar but userspecific ~/.fetchmailrc file. remember to set the postmaster in ~/.fetchmailrc to the username for which you want the mails to be downloaded (same goes to every user options in the file too). if you have several mal accounts for one user you may want to use procmail to filter the mails into different mail folders

barrct · Post by **barrct** » Tue May 18, 2004 5:52 pm

I've been trying to authenticate for 3 days not and after going though pages of forus, I thought to add the -v in master. While I was in there I added an option as well. This has finnaly gotten me up and running to auth to send, and to happily recieve.

Code: Select all

/etc/postfix/master.cf

and add

Code: Select all

-o smtpd_sasl_auth_enable=yes

onto the smtpd line (first one), then kill the client restrictions so that any network can deliver to me, but still use

Code: Select all

smtpd_recipient_restrictions = permit_sasl_authenticated, permit_mynetworks, reject_unauth_destination

Anyone want to tell me that that will make me an open relay and give me a slight mod to fix it?

blatch · Post by **blatch** » Tue May 18, 2004 11:42 pm

BlinkEye wrote:
blatch wrote:Ok. Let's say my server is jth.ath.cx. I want to be able to send mail to jth@jth.ath.cx. I don't want fetchmail to read anything from any OTHER e-mail accounts, I want to setup my OWN PERSONAL e-mail account based on this address. How would I do that? I've done EVERYTHING in this tutorial, but I can't receive mail to that address.
do it like i did: don't use a /etc/fetchmailrc file with every account written in it, but use a similar but userspecific ~/.fetchmailrc file. remember to set the postmaster in ~/.fetchmailrc to the username for which you want the mails to be downloaded (same goes to every user options in the file too). if you have several mal accounts for one user you may want to use procmail to filter the mails into different mail folders

No. Forget fetchmail. I want OTHER e-mail systems to be able to send to my OWN PERSONAL e-mail address ON MY SERVER and RECEIVE it.

BlinkEye · Post by **BlinkEye** » Wed May 19, 2004 4:52 pm

i guess i misunderstood you. you have a domain and want to recieve the mail delivered to youruser@yourdomain? i can't help you with virtual users as i haven't figured that out yet neither (so every user who has an email account on my domain has a home folder where the mails are saved). to read the mail sent to youruser@yourdomain you don't need neither fetchmail nor procmail if you don't want to filter your mail. but if postfix works for accounts fetched with fetchmail i don't think somethings wrong. you have to specify the mynetworks settings if you want to check your mail from another box:

Code: Select all

mynetworks =127.0.0.0/8, 10.10.10.0/24

if your on a 10.10.10.0 net homenetwork. i also had to set the

Code: Select all

inet_interface

to

Code: Select all

inet_interface = all

to read your mail just specify your servers ip, your user name and your password on the server to connect to your mailbox (which are the same data as if you'd login to your server). simple as that

Benzman · Post by **Benzman** » Thu May 20, 2004 1:49 pm

I have the same problem as bruor. I also get that error mail from Outlook when I try to send mails over postfix:

Code: Select all

Ihre Nachricht hat einige oder alle Empfänger nicht erreicht.

      Betreff:	test
      Gesendet am:	20.05.2004 15:30

Folgende Empfänger konnten nicht erreicht werden:

      'outbound@email.adress' am 20.05.2004 15:30
            554 <stefan.benzman.ath.cx[192.168.0.3]>: Client host rejected: Access denied

I've told postfix to debug and heres my logfile:

Code: Select all

match_string: mynetworks ~? debug_peer_list
match_string: mynetworks ~? fast_flush_domains
match_string: mynetworks ~? mynetworks
match_string: relay_domains ~? debug_peer_list
match_string: relay_domains ~? fast_flush_domains
match_string: relay_domains ~? mynetworks
match_string: relay_domains ~? permit_mx_backup_networks
match_string: relay_domains ~? qmqpd_authorized_clients
match_string: relay_domains ~? relay_domains
match_string: permit_mx_backup_networks ~? debug_peer_list
match_string: permit_mx_backup_networks ~? fast_flush_domains
match_string: permit_mx_backup_networks ~? mynetworks
match_string: permit_mx_backup_networks ~? permit_mx_backup_networks
maps_append: proxy:unix:passwd.byname
connect to subsystem private/proxymap
send attr request = open
send attr table = unix:passwd.byname
send attr flags = 64
private/proxymap socket: wanted attribute: status
input attribute name: status
input attribute value: 0
private/proxymap socket: wanted attribute: flags
input attribute name: flags
input attribute value: 80
private/proxymap socket: wanted attribute: (list terminator)
input attribute name: (end)
dict_proxy_open: connect to map=unix:passwd.byname status=0 server_flags=0120
dict_open: proxy:unix:passwd.byname
maps_append: hash:/etc/mail/aliases
dict_open: hash:/etc/mail/aliases
match_string: smtpd_access_maps ~? debug_peer_list
match_string: smtpd_access_maps ~? fast_flush_domains
match_string: smtpd_access_maps ~? mynetworks
match_string: smtpd_access_maps ~? permit_mx_backup_networks
match_string: smtpd_access_maps ~? qmqpd_authorized_clients
match_string: smtpd_access_maps ~? relay_domains
match_string: smtpd_access_maps ~? smtpd_access_maps
starting TLS engine
watchdog_create: 0x80a7400 18000
watchdog_stop: 0x80a7400
watchdog_start: 0x80a7400
connection established
master_notify: status 0
name_mask: resource
name_mask: software
name_mask: noanonymous
connect from stefan.benzman.ath.cx[192.168.0.3]
> stefan.benzman.ath.cx[192.168.0.3]: 220 server.benzman.ath.cx ESMTP Postfix
watchdog_pat: 0x80a7400
< stefan.benzman.ath.cx[192.168.0.3]: EHLO stefan
> stefan.benzman.ath.cx[192.168.0.3]: 250-server.benzman.ath.cx
> stefan.benzman.ath.cx[192.168.0.3]: 250-PIPELINING
> stefan.benzman.ath.cx[192.168.0.3]: 250-SIZE 10240000
> stefan.benzman.ath.cx[192.168.0.3]: 250-VRFY
> stefan.benzman.ath.cx[192.168.0.3]: 250-ETRN
> stefan.benzman.ath.cx[192.168.0.3]: 250-STARTTLS
match_hostname: stefan.benzman.ath.cx ~? 127.0.0.0/8
match_hostaddr: 192.168.0.3 ~? 127.0.0.0/8
match_hostname: stefan.benzman.ath.cx ~? 192.168.0.0/24
match_hostaddr: 192.168.0.3 ~? 192.168.0.0/24
> stefan.benzman.ath.cx[192.168.0.3]: 250-XVERP
> stefan.benzman.ath.cx[192.168.0.3]: 250 8BITMIME
watchdog_pat: 0x80a7400
< stefan.benzman.ath.cx[192.168.0.3]: MAIL FROM: <benzman@benzman.ath.cx>
extract_addr: input: <benzman@benzman.ath.cx>
extract_addr: result: benzman@benzman.ath.cx
fsspace: .: block size 4096, blocks free 1537772
smtpd_check_size: blocks 4096 avail 1537772 min_free 0 size 0
connect to subsystem public/cleanup
public/cleanup socket: wanted attribute: queue_id
input attribute name: queue_id
input attribute value: C3C6F1EA23
public/cleanup socket: wanted attribute: (list terminator)
input attribute name: (end)
send attr flags = 2
C3C6F1EA23: client=stefan.benzman.ath.cx[192.168.0.3]
> stefan.benzman.ath.cx[192.168.0.3]: 250 Ok
watchdog_pat: 0x80a7400
< stefan.benzman.ath.cx[192.168.0.3]: RCPT TO: <outbound@email.adress>
extract_addr: input: <outbound@email.adress>
extract_addr: result: outbound@email.adress
generic_checks: START
generic_checks: name=permit_sasl_authenticated
generic_checks: name=permit_sasl_authenticated status=0
generic_checks: name=reject
C3C6F1EA23: reject: RCPT from stefan.benzman.ath.cx[192.168.0.3]: 554 <stefan.benzman.ath.cx[192.168.0.3]>: Client host rejected: Access denied; from=<benzman@benzman.ath.cx> to=<outbound@email.adress> proto=ESMTP helo=<stefan>
generic_checks: name=reject status=2
> stefan.benzman.ath.cx[192.168.0.3]: 554 <stefan.benzman.ath.cx[192.168.0.3]>: Client host rejected: Access denied
watchdog_pat: 0x80a7400
< stefan.benzman.ath.cx[192.168.0.3]: QUIT
> stefan.benzman.ath.cx[192.168.0.3]: 221 Bye
disconnect from stefan.benzman.ath.cx[192.168.0.3]
master_notify: status 1
connection closed
watchdog_stop: 0x80a7400
watchdog_start: 0x80a7400

I think it's something with the authentication, but I set Outlook to auth with the server when sending mail, so it has to be something on the server.
Hope anyone can help...

BlinkEye · Post by **BlinkEye** » Thu May 20, 2004 5:17 pm

i mentioned above two important settings - did you verify them?

Benzman · Post by **Benzman** » Thu May 20, 2004 7:14 pm

Yes, I uncommented the line

Code: Select all

inet_interfaces = all

and set

Code: Select all

mynetworks = 127.0.0.0/8 192.168.0.0/24

but it still doesn't work...

BlinkEye · Post by **BlinkEye** » Thu May 20, 2004 10:30 pm

so we need some further infos. if you haven't modified your logger all messages go to /var/log/messages (at least for syslog-ng) - so, send a mail from another computer and check the output of /var/log/messages and/or post it here (preferably with

Code: Select all

tail -n 100 /var/log/messages

to get only the last 100 messages)

lorano · Post by **lorano** » Fri May 21, 2004 2:32 am

I'm having issues getting this thing to connect period. when I run ./getmymailnow I recieve :

IMAP connection to succubus.gotdns.org failed: No route to host
fetchmail: Query status=2 (SOCKET)

Any help would be greatly appreciatted

bruor · Post by **bruor** » Fri May 21, 2004 6:24 am

ok ive gotten this lal set up and working but i have a question or two...

using kmail from my laptop i can send no problem, i am using the servers hostname as the mail server location in the settings.

if i do the same from a machine running terminal server, on the machine that is also hosting the mail server, i cannot send email out, kmail just gives an error that says some messages failed to send.

using squirrelmail from the server does work however.

also, more importantly, i am getting nag screens on my windows email clients, both outlook and outlook express say

the certificate's CN name does not match the passed value

the certificate i am using was made by running

openssl x509 -in imapd.pem -out emailserver.crt
do i need to make it imapd.crt? instead? i have check the properties of the certificate and its not saying localhost etc....

Email System For The Home Network - Version 2.1

Imap don't find my maildir (SOLVE)

accessing fetchmail from squirrelmail

Forgot saslpasswd2 command

Finnaly got auth working!!!!!!