User Tools

Site Tools


networking:linux:postfix_smarthost

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision
Previous revision
networking:linux:postfix_smarthost [2016/10/08 12:25]
gcooper
networking:linux:postfix_smarthost [2021/11/30 08:01] (current)
gcooper
Line 18: Line 18:
   * Blacklisted IP address   * Blacklisted IP address
   * Etc.   * Etc.
 +
 +You need a package installed (CentOS, Ubuntu):
 +
 +<file>
 +yum install cyrus-sasl-plain
 +</file>
 +
 +<file>
 +apt install libsasl2-modules
 +</file>
  
 You can copy and paste the following into an editor, then adjust the $SMTPHOST and $USERPASS variables for your needs. Then, as root, paste it to the command line:  You can copy and paste the following into an editor, then adjust the $SMTPHOST and $USERPASS variables for your needs. Then, as root, paste it to the command line: 
Line 43: Line 53:
 postconf -e 'smtp_sasl_security_options =' postconf -e 'smtp_sasl_security_options ='
  
-/etc/init.d/postfix reload+systemctl restart postfix
 </file> </file>
  
Line 61: Line 71:
  
 <file> <file>
-yum install cyrus-sasl-plain+yum install cyrus-sasl-plain cyrus-sasl-ntlm
 </file> </file>
  
Line 73: Line 83:
  
 <file> <file>
-SMTPHOST=your.mailserver.domain:587+#smtp.isp.com       username:password 
 +<fqdn_of_mail_svr>:587  <username>:<password>
 </file> </file>
  
Line 84: Line 95:
 <file> <file>
 postconf -e 'smtp_use_tls=yes' postconf -e 'smtp_use_tls=yes'
-/etc/init.d/postfix reload+postfix reload
 </file> </file>
  
Line 91: Line 102:
 **Envelope-From**: http://serverfault.com/questions/533912/how-do-i-change-the-envelope-from-in-postfix **Envelope-From**: http://serverfault.com/questions/533912/how-do-i-change-the-envelope-from-in-postfix
  
-Some servers require the ''envelope-from'' header to be a valid user in order to accept mail via authenticated SMTP.+<note warning>Some mail servers require the ''envelope-from'' header to be a **valid sender** in order to accept mail via authenticated SMTP.  Many servers also require that the **authentication user must match the sender address**.</note>
  
 <file> <file>
Line 102: Line 113:
  
 <file> <file>
-# Use the empty regexp to map *any* address to the desired envelope sender. +# Use the empty regex '//' to map *any* address to the desired envelope sender. 
-// pbx@yourdomain.tld+// validsender@yourdomain.tld
 </file> </file>
  
Line 113: Line 124:
 </file> </file>
  
-===== Script for FreePBX Distro =====+===== FreePBX Distro =====
  
-  - Copy to a text editor +:!: Includes **SMTP authentication**, **TLS**, **envelope-from** and **trusted CAs** 
-  - Edit for your needs + 
-  - Paste into FreePBX Distro CLI as ''root''+  - **Copy** to a text editor 
 +  - **Edit** for your needs 
 +  - **Paste** into FreePBX Distro CLI as ''root'' 
 + 
 +:!: This package must be installed on older FreePBX Distro installations: 
 + 
 +<file> 
 +yum install cyrus-sasl-plain 
 +</file> 
 + 
 +Copy, edit, then paste in the CLI:
  
 <file> <file>
 FILE=/etc/postfix/password FILE=/etc/postfix/password
-SMTPHOST=yourhost.yourdomain.com:587+# Your valid mail server - colon and port number optional  
 +SMTPHOST=yoursmtphost.yourdomain.tld:587 
 +# SMTP auth credentials - username may have @
 USERPASS=yoursmtpusername:yoursmtpuserpassword USERPASS=yoursmtpusername:yoursmtpuserpassword
 CANONICAL=/etc/postfix/canonical CANONICAL=/etc/postfix/canonical
-SENDER=pbx@yourdomain.com+# Must be a valid authorized sender e-mail address in your domain  
 +SENDER=validsender@yourdomain.tld 
 +# Trusted CAs aren't configured by default?!
 CAFILE=/etc/ssl/certs/ca-bundle.trust.crt CAFILE=/etc/ssl/certs/ca-bundle.trust.crt
- 
-yum install cyrus-sasl-plain 
-#apt-get install libsasl2-modules 
  
 # This will overwrite any existing contents # This will overwrite any existing contents
Line 159: Line 181:
 postconf -e "smtp_tls_CAfile = $CAFILE" postconf -e "smtp_tls_CAfile = $CAFILE"
  
-/etc/init.d/postfix reload+postfix reload
 </file> </file>
networking/linux/postfix_smarthost.1475951125.txt.gz · Last modified: 2016/10/08 12:25 by gcooper