User Tools

Site Tools


networking:linux:postfix_smarthost

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision
Previous revision
networking:linux:postfix_smarthost [2016/10/08 12:32]
gcooper
networking:linux:postfix_smarthost [2021/11/30 08:01] (current)
gcooper
Line 18: Line 18:
   * Blacklisted IP address   * Blacklisted IP address
   * Etc.   * Etc.
 +
 +You need a package installed (CentOS, Ubuntu):
 +
 +<file>
 +yum install cyrus-sasl-plain
 +</file>
 +
 +<file>
 +apt install libsasl2-modules
 +</file>
  
 You can copy and paste the following into an editor, then adjust the $SMTPHOST and $USERPASS variables for your needs. Then, as root, paste it to the command line:  You can copy and paste the following into an editor, then adjust the $SMTPHOST and $USERPASS variables for your needs. Then, as root, paste it to the command line: 
Line 43: Line 53:
 postconf -e 'smtp_sasl_security_options =' postconf -e 'smtp_sasl_security_options ='
  
-/etc/init.d/postfix reload+systemctl restart postfix
 </file> </file>
  
Line 61: Line 71:
  
 <file> <file>
-yum install cyrus-sasl-plain+yum install cyrus-sasl-plain cyrus-sasl-ntlm
 </file> </file>
  
Line 73: Line 83:
  
 <file> <file>
-SMTPHOST=your.mailserver.domain:587+#smtp.isp.com       username:password 
 +<fqdn_of_mail_svr>:587  <username>:<password>
 </file> </file>
  
Line 84: Line 95:
 <file> <file>
 postconf -e 'smtp_use_tls=yes' postconf -e 'smtp_use_tls=yes'
-/etc/init.d/postfix reload+postfix reload
 </file> </file>
  
Line 91: Line 102:
 **Envelope-From**: http://serverfault.com/questions/533912/how-do-i-change-the-envelope-from-in-postfix **Envelope-From**: http://serverfault.com/questions/533912/how-do-i-change-the-envelope-from-in-postfix
  
-Some servers require the ''envelope-from'' header to be a valid user in order to accept mail via authenticated SMTP.+<note warning>Some mail servers require the ''envelope-from'' header to be a **valid sender** in order to accept mail via authenticated SMTP.  Many servers also require that the **authentication user must match the sender address**.</note>
  
 <file> <file>
Line 102: Line 113:
  
 <file> <file>
-# Use the empty regexp to map *any* address to the desired envelope sender. +# Use the empty regex '//' to map *any* address to the desired envelope sender. 
-// pbx@yourdomain.tld+// validsender@yourdomain.tld
 </file> </file>
  
Line 113: Line 124:
 </file> </file>
  
-===== Script for FreePBX Distro =====+===== FreePBX Distro =====
  
 :!: Includes **SMTP authentication**, **TLS**, **envelope-from** and **trusted CAs** :!: Includes **SMTP authentication**, **TLS**, **envelope-from** and **trusted CAs**
Line 120: Line 131:
   - **Edit** for your needs   - **Edit** for your needs
   - **Paste** into FreePBX Distro CLI as ''root''   - **Paste** into FreePBX Distro CLI as ''root''
 +
 +:!: This package must be installed on older FreePBX Distro installations:
 +
 +<file>
 +yum install cyrus-sasl-plain
 +</file>
 +
 +Copy, edit, then paste in the CLI:
  
 <file> <file>
 FILE=/etc/postfix/password FILE=/etc/postfix/password
 # Your valid mail server - colon and port number optional  # Your valid mail server - colon and port number optional 
-SMTPHOST=yourhost.yourdomain.com:587+SMTPHOST=yoursmtphost.yourdomain.tld:587
 # SMTP auth credentials - username may have @ # SMTP auth credentials - username may have @
 USERPASS=yoursmtpusername:yoursmtpuserpassword USERPASS=yoursmtpusername:yoursmtpuserpassword
 CANONICAL=/etc/postfix/canonical CANONICAL=/etc/postfix/canonical
 # Must be a valid authorized sender e-mail address in your domain  # Must be a valid authorized sender e-mail address in your domain 
-SENDER=pbx@yourdomain.com+SENDER=validsender@yourdomain.tld
 # Trusted CAs aren't configured by default?! # Trusted CAs aren't configured by default?!
 CAFILE=/etc/ssl/certs/ca-bundle.trust.crt CAFILE=/etc/ssl/certs/ca-bundle.trust.crt
- 
-yum install cyrus-sasl-plain 
-#apt-get install libsasl2-modules 
  
 # This will overwrite any existing contents # This will overwrite any existing contents
Line 165: Line 181:
 postconf -e "smtp_tls_CAfile = $CAFILE" postconf -e "smtp_tls_CAfile = $CAFILE"
  
-/etc/init.d/postfix reload+postfix reload
 </file> </file>
networking/linux/postfix_smarthost.1475951555.txt.gz · Last modified: 2016/10/08 12:32 by gcooper