You're Reading a Free Preview
Pages 10 to 78 are not shown in this preview.
Pages 10 to 78 are not shown in this preview.
You're Reading a Free Preview
Pages 88 to 114 are not shown in this preview.
Pages 88 to 114 are not shown in this preview.
You're Reading a Free Preview
Pages 124 to 285 are not shown in this preview.
Pages 124 to 285 are not shown in this preview.
You're Reading a Free Preview
Pages 295 to 334 are not shown in this preview.
Pages 295 to 334 are not shown in this preview.
You're Reading a Free Preview
Pages 344 to 498 are not shown in this preview.
Pages 344 to 498 are not shown in this preview.
of 00
The Book of Postfix: State-of-the-Art Message Transport
Developed with security and speed in mind, Postfix has become a popular alternative to Sendmail. The Book of Postfix is a complete guide to Postfix whether used by the home user...
(More)
13,110 Reads
Info and Rating
| Category: | |
| Rating: | (5 Ratings) |
| Upload Date: | 05/23/2009 |
| Copyright: | Traditional Copyright: All rights reserved |
| Tags: |
This is a Free Preview
With this purchase, you can read the entire document on Scribd, download (as PDF), and print.
Sections
- AN INTRODUCTION TO POSTFIX
- BASICS
- PREPARING YOUR HOST AND ENVIRONMENT
- Hostname
- Connectivity
- TCP Port 25
- System Time and Timestamps
- Syslog
- Name Resolution (DNS)
- DNS for Mail Servers
- A record
- PTR record
- MX record
- A Records
- PTR Records
- MX Records
- MAIL SERVER FOR A SINGLE DOMAIN
- The Minimum Configuration
- Configuring Postfix
- Setting the Hostname in the smtpd Banner
- Setting the Domain Mail Is Accepted For
- Setting the Domain to Be Appended to Outgoing Messages
- Mapping Mail Sent to root to a Different Mailbox
- Starting Postfix and Testing Mail Delivery to root
- Mapping Email Addresses to Usernames
- Setting Permissions to Make Postfix Relay Email from Your Network
- DIAL-UP MAIL SERVER FOR A SINGLE DOMAIN
- Disabling DNS Resolution
- Adjusting Relay Permissions
- Setting the ISP Relay Host
- Deferring Message Transport
- Triggering Message Delivery
- Configuring Relay Permissions for a Relay Host
- POP-before-SMTP
- SMTP Authentication
- ANATOMY OF POSTFIX
- Postfix Daemons
- Postfix Queues
- Maps
- Map Types
- How Postfix Queries Maps
- External Sources
- Command-Line Utilities
- postfix
- postalias
- postcat
- postmap
- postdrop
- postkick
- postlock
- postlog
- postqueue
- postsuper
- CONTENT CONTROL
- A POSTMASTER’S PRIMER TO EMAIL
- Message Transport Basics
- Why Do You Need to Know This?
- Controlling the SMTP Communication (Envelope)
- Controlling the Message Content
- Headers
- Body
- Attachments
- HOW MESSAGE TRANSFER RESTRICTIONS WORK
- Restriction Triggers
- Restriction Types
- Generic restrictions
- Generic Restrictions
- Switchable Restrictions
- Customizable Restrictions
- Additional UCE Control Parameters
- Application Ranges
- Building Restrictions
- Notation
- Moment of Evaluation
- Influence of Actions on Restriction Evaluation
- Slowing Down Bad Clients
- Restriction Classes
- USING MESSAGE TRANSFER RESTRICTIONS
- How to Build and Test Restrictions
- Simulating the Impact of Restrictions
- Making Restrictions Effective Immediately
- Restriction Defaults
- Requiring RFC Conformance
- Restricting the Hostname in HELO/EHLO
- Restricting the Envelope Sender
- Restricting the Envelope Recipient
- Mail to Unknown Recipients
- Maintaining RFC Conformance
- Empty Envelope Sender
- Special Role Accounts
- Processing Order for RFC Restrictions
- Antispam Measures
- Preventing Obvious Forgeries
- Bogus Nameserver Records
- Bounces to Multiple Recipients
- Using DNS Blacklists
- Rejecting Blacklisted Sender Domains
- Verifying the Sender
- Restriction Process Order
- Uses for Restriction Classes
- HOW BUILT-IN CONTENT FILTERS WORK
- How Do Checks Work?
- Applying Checks to Separate Message Sections
- What’s So Special about These Parameters?
- When Does Postfix Apply Checks?
- What Actions Can Checks Invoke?
- USING BUILT-IN CONTENT FILTERS
- Checking Postfix for Checks Support
- Building Postfix with PCRE Map Support
- Safely Implementing Header or Body Filtering
- Adding a Regular Expression and Setting a WARN Action
- Creating a Test Pattern
- Does the Regular Expression Match the Test Pattern?
- Setting the Check in the Main Configuration
- Testing with Real Mail
- Checking Headers
- Rejecting Messages
- Holding Delivery
- Removing Headers
- Discarding Messages
- Redirecting Messages
- Filtering Messages
- Checking MIME Headers
- Checking Headers in Attached Messages
- Checking the Body
- HOW EXTERNAL CONTENT FILTERS WORK
- When Is the Best Moment to Filter Content?
- Filters and Address Rewriting
- content_filter: Queuing First, Filtering Later
- Filter-Delegation Daemons
- The Basics of Configuring content_filter
- smtpd_proxy_filter: Filtering First, Queuing Later
- Considerations for Proxy Filters
- The Basics of Configuring smtpd_proxy_filter
- USING EXTERNAL CONTENT FILTERS
- Appending Disclaimers to Messages with a Script
- Installing alterMIME and Creating the Filter Script
- Configuring Postfix for the Disclaimer Script
- Testing the Filter
- Scanning for Viruses with content_filter and amavisd-new
- Installing amavisd-new
- Testing amavisd-new
- Optimizing amavisd-new Performance
- Configuring Postfix to Use amavisd-new
- Testing the Postfix amavisd-new Filter
- Scanning for Viruses with smtpd_proxy_filter and amavisd-new
- Configuring Postfix to Use amavisd-new with smtpd_proxy_filter
- ADVANCED CONFIGURATIONS
- MAIL GATEWAYS
- Basic Setup
- Setting Gateway Relay Permissions
- Setting a Relay Domain on the Gateway
- Setting the Internal Mail Host on the Gateway
- Defining Relay Recipients
- Advanced Gateway Setup
- Improving Security on the Mail Gateway
- Using Postfix with Microsoft Exchange Server
- Exporting Valid Recipients from Active Directory
- Building the Recipient Map
- Configuring Exchange and Postfix Communication
- NAT Setup
- A MAIL SERVER FOR MULTIPLE DOMAINS
- Virtual Alias Domains
- 1.Set the virtual alias domain name
- Setting the Virtual Alias Domain Name
- Creating a Recipient Address Map
- Configuring Postfix to Receive Mail for Virtual Alias Domains
- Testing Virtual Alias Domain Settings
- Advanced Mappings
- Virtual Mailbox Domains
- Checking Postfix for Virtual Delivery Agent Support
- Basic Configuration
- Setting the Virtual Mailbox Domain Name
- Setting File Ownership
- Creating the Recipient Map
- Creating the Alias Map
- Advanced Configuration
- Setting Storage and Access Permissions
- Generating Maps with Scripts
- Database-Driven Virtual Mailbox Domains
- 1.Check Postfix for MySQL map support
- Checking Postfix for MySQL Map Support
- Building Postfix to Support MySQL Maps
- Configuring the Database
- Creating a MySQL User for Postfix
- Configuring Postfix to Use the Database
- Constructing the Recipient Domains Query
- Testing Database-Driven Virtual Mailbox Domains
- Querying Recipient Domains
- UNDERSTANDING SMTP AUTHENTICATION
- The Architecture and Configuration of Cyrus SASL
- Which Approach Is Best?
- SASL: The Simple Authentication and Security Layer
- Authentication Interface
- Authentication interface
- SMTP AUTH Mechanisms
- Authentication Methods (Password-Verification Services)
- Authentication Backends
- Planning Server-Side SMTP Authentication
- Finding Clients and Their Supported Mechanisms
- Defining the Authentication Backend and Password-Verification Service
- Installing and Configuring Cyrus SASL
- 1.Install Cyrus SASL
- Installing Cyrus SASL
- Creating the Postfix Application Configuration File
- Configuring Logging and the Log Level
- Setting the Password-Verification Service
- Selecting SMTP AUTH Mechanisms
- Configuring saslauthd
- Configuring Auxiliary Plug-ins (auxprop)
- Using the sql Plug-In
- Testing the Authentication
- The Future of SMTP AUTH
- SMTP AUTHENTICATION
- Checking Postfix for SMTP AUTH Support
- Adding SMTP AUTH Support to Postfix
- Server-Side SMTP Authentication
- Enabling and Configuring the Server
- Configuring SASL Mechanisms
- Configuring Relay Permissions
- Testing Server-Side SMTP AUTH
- Authenticating a User
- Advanced Server Settings
- Client-Side SMTP Authentication
- AUTH for the Postfix SMTP Client
- Storing SMTP AUTH Credentials
- Restricting Authentication Mechanisms
- Testing Client-Side SMTP AUTH
- The lmtp Client
- UNDERSTANDING TRANSPORT LAYER SECURITY
- TLS Basics
- How TLS Works
- Understanding Certificates
- How to Establish Trust
- Which Certification Authority Suits Your Needs?
- Creating Certificates
- Required Information
- Creating the CA Certificate
- Distributing and Installing the CA Certificate
- Creating Your Server’s Certificate
- Signing Your Server’s Certificate
- Preparing Certificates for Use in Postfix
- USING TRANSPORT LAYER SECURITY
- Checking Postfix for TLS Support
- Building Postfix with TLS Support
- Building and Installing OpenSSL from Source Code
- Building Postfix with TLS
- Server-Side TLS
- Basic Server Configuration
- Connecting Postfix to a Random Source Generator
- Increasing the TLS Log Level
- Server Performance Tuning
- Server-Side Measures to Secure the SMTP AUTH Handshake
- Server-Side Certificate-Based Relaying
- Tightening the TLS Server
- Client-Side TLS
- Basic Client Configuration
- Selective TLS Use
- Client Performance Tuning
- Securing Client SMTP AUTH
- Client-Side Certificate-Based Relaying
- Tightening Client-Side TLS
- A COMPANY MAIL SERVER
- Conceptual Overview
- The LDAP Directory Structure
- Choosing Attributes in a Postfix Schema
- Branch Design
- Building User Objects
- Creating List Objects
- Adding Attributes for the Remaining Servers
- Configuring Cyrus SASL
- Configuring OpenLDAP
- Installing OpenLDAP from Source
- Configuring Postfix and LDAP
- Adding LDAP Queries for Local Recipients
- Activating the Query Map
- Testing LDAP Recipients
- Configuring Postfix for LDAP Alias Query Maps
- Creating a Local Transport
- Configuring Courier Maildrop
- Creating a Mail Filter
- Preparing Maildir Quotas
- Configuring Courier IMAP
- Expanding the Directory
- Adding Authentication to Servers
- Protecting Directory Data
- Encrypting LDAP Queries
- Testing the OpenLDAP Client
- Enforcing Valid Sender Addresses
- RUNNING POSTFIX IN A CHROOT ENVIRONMENT
- How Does a chroot Jail Work?
- Basic Principles of a chroot Setup
- Technical Implementation
- How Does chroot Affect Postfix?
- Helper Scripts for chroot
- chrooted Daemons
- chroot Libraries, Configuration Files, and Other Files
- Overcoming chroot Restrictions
- TUNING POSTFIX
- REMOTE CLIENT CONCURRENCY AND REQUEST RATE LIMITING
- The Basics of Rate Limiting
- Gathering Rate Statistics
- Running the anvil Daemon
- Changing the anvil Log Interval
- Limiting Client-Connection Frequency
- Testing Client-Connection Rate Limits
- Restricting Simultaneous Client Connections
- Testing Simultaneous Client-Connection Limits
- Exempting Clients from Limits
- PERFORMANCE TUNING
- Basic Enhancements
- Speeding Up DNS Lookups
- Improving DNS Lookup Performance
- Confirming That Your Server Is Not Listed as an Open Relay
- Refusing Messages to Nonexistent Users
- Blocking Messages from Blacklisted Networks
- Refusing Messages from Unknown Sender Domains
- Reducing the Retransmission Attempt Frequency
- Finding Bottlenecks
- Incoming Queue Bottlenecks
- Maildrop Queue Bottlenecks
- Deferred Queue Bottlenecks
- Active Queue Bottlenecks
- Asynchronous Bounce Queue Congestion Inequality
- Using Fallback Relays
- Tuning for Higher Throughput
- Configuring an Alternative Transport
- INSTALLING POSTFIX
- The Postfix Source Code
- Applying Patches
- Building and Installing from Source Code
- Starting and Stopping Postfix
- Installing Postfix on Debian Linux
- Installing Postfix
- Installing an Update
- Building from a Debian Source Package
- Installing Postfix on Red Hat Linux
- Getting Postfix for Red Hat Linux
- Building an RPM from an SRPM
- Switching to Postfix
- Removing the Sendmail MTA
- Starting and Stopping Postfix in Red Hat Linux
- TROUBLESHOOTING POSTFIX
- Problems Starting Postfix and Viewing the Log
- Connecting to Postfix
- Checking the Network
- Verifying the Listening Process
- Getting Postfix to Use Your Configuration Settings
- Reporting Postfix Problems
- Getting More Logging Information
- Client-Specific Logging
- Logging and qmgr
- Other Configuration Errors
- Intricacies of the chroot Jail
- Solving Filesystem Problems
- Library Hell
- Daemon Inconsistencies
- Fork Hell
- Stress-Testing Postfix
- Disk I/O
- Too Many Connections
- CIDR AND SMTP STANDARDS REFERENCE
- Subnets in CIDR Notation
- Server Response Codes
- GLOSSARY
- INDEX
More From This User
Related Documents
More From This User
The Book of FileMaker 6
The Book of FileMaker 6 is a complete reference to the FileMaker Pro product ...
The Manga Guide to Molecular Biology (Excerpt)
Rin and Ami have been skipping molecular biology class all semester, and Prof...
The Manga Guide to Calculus (Excerpt)
Noriko is just getting started as a junior reporter for the Asagake Times. Sh...
Wicked Cool Ruby Scripts
Are you spending valuable time on work a well-trained monkey could do? If so,...
How to Be a Geek Goddess
When it comes to technology (or anything, really), men and women rarely think...
Cisco Routers for the Desperate, 2nd Edition
Cisco routers and switches are the cornerstones of many networks. But when th...
Network Know-How
Are the machines in your office living isolated lives? Do you have a few comp...
Growing Software
As the technology leader at a small software company, you need to focus on pe...
The Blender GameKit, 2nd Edition
Blender is the first of the 3D packages to integrate a game engine as well as...
Gray Hat Python
Python is fast becoming the programming language of choice for hackers, rever...
The Google Way
Shortly after World War I, Ford and GM created the large modern corporation, ...
The Book of IMAP: Building a Mail Server with Courier and Cyrus
IMAP (the Internet Message Access Protocol) allows clients to access their em...
Art of Debugging with GDB, DDD, and Eclipse
Debugging is crucial to successful software development, but even many experi...
The Book of Postfix: State-of-the-Art Message Transport
Developed with security and speed in mind, Postfix has become a popular alter...
The Manga Guide to Physics (Excerpt)
Megumi is an all-star athlete, but she's a failure when it comes to physics c...
The Book of PF - A No-Nonsense Guide to the OpenBSD Firewall
OpenBSD's stateful packet filter, PF, offers an amazing feature set and suppo...
The Manga Guide to Electricity (excerpt)
Rereko is just your average high-school girl from Electopia, the land of elec...
The Manga Guide to Databases (excerpt)
Want to learn about databases without the tedium? With its unique combination...
Related Docuements
Postfix: The Definitive Guide
Postfix is a Mail Transfer Agent (MTA): software that mail servers use to rou...
From O'Reilly Media, Inc.
Postfix Ubuntu
build email server using postfix authenticated using TLS, originally from ubu...
From Irfan Irawan Cbn
GEN200 / GEN 200 / Week 1 Assignment- Map Out an Important Goal
Educational Goal-Mapping Worksheet/Academic Readiness Assessment (Individual ...
From Number1Tutor
Leave a Comment