Basic mailserver configuration on RHEL10 - Revision history

Administrator: /* SPF filtering (strongly suggested) */

2025-10-16T15:03:52Z

SPF filtering (strongly suggested)

← Older revision		Revision as of 15:03, 16 October 2025
Line 302:		Line 302:
	........		........
	check_policy_service unix:private/policyd-spf,		check_policy_service unix:private/policyd-spf,

			Restart postfix

2025-10-16T15:03:21Z

← Older revision		Revision as of 15:03, 16 October 2025
Line 287:		Line 287:

	restart both postfix and dovecot		restart both postfix and dovecot
			== SPF filtering (strongly suggested)==
			dnf install pypolicyd-spf
			create user
			adduser policyd-spf --user-group --no-create-home -s /bin/false
			Add to /etc/postfix/master.cf
			policyd-spf unix - n n - 0 spawn
			user=policyd-spf argv=/usr/libexec/postfix/policyd-spf
			Add to /etc/postfix/main.cf unde smtp_client_restrictions
			smtpd_client_restrictions = permit_mynetworks,
			permit_sasl_authenticated,
			reject_unauth_destination,
			reject_unknown_sender_domain,
			reject_unknown_reverse_client_hostname,
			........
			check_policy_service unix:private/policyd-spf,

2025-10-16T10:57:07Z

Dovecot IMAP

← Older revision		Revision as of 10:57, 16 October 2025
Line 182:		Line 182:
	#ssl_ca = </etc/letsencrypt/live/server08.vettore.org/chain.pem		#ssl_ca = </etc/letsencrypt/live/server08.vettore.org/chain.pem

	in dovecot.conf remove comment from protocol. Remove pop3 if not needed. Remove submission if you wish to configure SMTP auth with a different service (see cirus-sasl section below)		in dovecot.conf remove comment from protocol. Remove pop3 if not needed. Remove submission if you wish to configure SMTP auth with a different service (see cirus-sasl section below). LMTP is optional (see SIEVE paragraph later)
	protocols = imap lmtp		protocols = imap lmtp

2025-10-16T10:55:31Z

Sieve/pidgeonhole (optional)

← Older revision		Revision as of 10:55, 16 October 2025
Line 256:		Line 256:
	openssl s_client -starttls imap -servername server08.vettore.org -connect server08.vettore.org:143		openssl s_client -starttls imap -servername server08.vettore.org -connect server08.vettore.org:143

	==Sieve/~~pidgeonhole~~ (optional)==		==Sieve/pigeonhole (optional)==
	dnf install dovecot-pigeonhole		dnf install dovecot-pigeonhole

2025-10-16T10:54:12Z

Sieve/pidgeonhole (optional)

← Older revision		Revision as of 10:54, 16 October 2025
Line 263:		Line 263:

	edit ./conf.d/20-managesieve.conf and uncomment		edit ./conf.d/20-managesieve.conf and uncomment
	~~iprotocols~~ = $protocols sieve		protocols = $protocols sieve

	and		and

2025-10-16T09:27:43Z

← Older revision		Revision as of 09:27, 16 October 2025
Line 273:		Line 273:

	restart dovecot</br>		restart dovecot</br>
	Try to telnet your local port 4190 to check if managesieve service is running		Try to telnet your local port 4190 to check if managesieve service is running</br>
			Enable LMTP in ./conf/10-master.conf

			service lmtp {
			unix_listener /var/spool/postfix/private/dovecot-lmtp {
			group = postfix
			mode = 0600
			user = postfix
			}
			}
			in /etc/postfix/main.cf edit the virtual_transport
			virtual_transport = lmtp:unix:/var/spool/postfix/private/dovecot-lmtp

			restart both postfix and dovecot

2025-10-16T08:05:41Z

Sieve/pidgeonhole (optional)=

← Older revision		Revision as of 08:05, 16 October 2025
Line 256:		Line 256:
	openssl s_client -starttls imap -servername server08.vettore.org -connect server08.vettore.org:143		openssl s_client -starttls imap -servername server08.vettore.org -connect server08.vettore.org:143

	==Sieve/pidgeonhole (optional)===		==Sieve/pidgeonhole (optional)==
	dnf install dovecot-pigeonhole		dnf install dovecot-pigeonhole

2025-10-16T08:05:30Z

← Older revision		Revision as of 08:05, 16 October 2025
Line 255:		Line 255:
	====IMAP startls====		====IMAP startls====
	openssl s_client -starttls imap -servername server08.vettore.org -connect server08.vettore.org:143		openssl s_client -starttls imap -servername server08.vettore.org -connect server08.vettore.org:143

			==Sieve/pidgeonhole (optional)===
			dnf install dovecot-pigeonhole

			edit ./conf.d/20-lmtp.conf & uncomment
			mail_plugins = $mail_plugins sievement

			edit ./conf.d/20-managesieve.conf and uncomment
			iprotocols = $protocols sieve

			and
			service managesieve-login {
			inet_listener sieve {
			port = 4190
			}
			}

			restart dovecot</br>
			Try to telnet your local port 4190 to check if managesieve service is running

2025-10-15T05:50:22Z

Dovecot IMAP

← Older revision		Revision as of 05:50, 15 October 2025
Line 161:		Line 161:
	args = uid=150 gid=150 home=/var/vmail/%d/%n allow_all_users=yes		args = uid=150 gid=150 home=/var/vmail/%d/%n allow_all_users=yes
	}		}
	~~Rename the above file removing .ext extension~~

	Verify path in the passdb section of the ~~above~~ file. Should be /etc/dovecot/dovecot-sql.conf.ext<br>		Edit /etc/dovecot/conf.d/10-auth.conf:<br>
			Enable loading of the above file removing comment from
			!include auth-sql.conf.ext
			and comment out in order to disable PAM (otherwise you will get errors in /var/log/secure)
			#!include auth-system.conf.ext

			Verify path in the passdb section of the /etc/dovecot/conf.d/auth-sql.conf.ext file. Should be /etc/dovecot/dovecot-sql.conf.ext<br>
	You must create this file:		You must create this file:

Line 199:		Line 204:
	}		}

	~~Disable PAM auth (otherwise you will get errors in /var/log/secure.</br>~~
	~~Comment out the following in /etc/dovecot/conf.d/10-auth.conf~~
	~~#!include auth-system.conf.ext~~

	Start end enable service		Start end enable service

2025-10-14T05:52:38Z

Dovecot IMAP

← Older revision		Revision as of 05:52, 14 October 2025
Line 199:		Line 199:
	}		}

	Disable PAM auth (otherwise you will get ~~errirs~~ in /var/log/secure.</br>		Disable PAM auth (otherwise you will get errors in /var/log/secure.</br>
	Comment out the following in /etc/dovecot/conf.d/10-auth.conf		Comment out the following in /etc/dovecot/conf.d/10-auth.conf
	#!include auth-system.conf.ext		#!include auth-system.conf.ext