root@wl ~ # wget ftp://ftp.cyrusimap.org/cyrus-sasl/cyrus-sasl-2.1.23.tar.gz root@wl ~ # tar xvfz cyrus-sasl-2.1.23.tar.gz root@wl ~ # cd cyrus-sasl-2.1.23 root@wl ~/cyrus-sasl-2.1.23 # cp /usr/include/sys/des.h include/ 1) root@wl ~/cyrus-sasl-2.1.23 # ./configure \ --enable-login \ --with-pwcheck \ --disable-digest \ --disable-srp \ --disable-krb4 \ --disable-gssapi \ --disable-anon root@wl ~/cyrus-sasl-2.1.23 # make root@wl ~/cyrus-sasl-2.1.23 # make install root@wl ~/cyrus-sasl-2.1.23 # ln -s /usr/local/lib/sasl2 /usr/lib/sasl2 2) root@wl ~/cyrus-sasl-2.1.23 # mkdir -p /var/state/saslauthd 3) root@wl ~/cyrus-sasl-2.1.23 # vi /usr/lib/sasl2/Sendmail.conf pwcheck_method: saslauthd root@wl ~/cyrus-sasl-2.1.23 # /usr/local/sbin/saslauthd -v 4) saslauthd 2.1.21 authentication mechanisms: getpwent pam rimap shadow root@wl ~/cyrus-sasl-2.1.23 # /usr/local/sbin/saslauthd -a pam 5) root@wl ~/cyrus-sasl-2.1.23 # vi /etc/init.d/saslauthd 6) #!/bin/sh case "$1" in start) /usr/local/sbin/saslauthd -a pam ;; stop) pkill saslauthd ;; *) echo "Usage: saslauthd {start|stop}" exit 1 esac exit 0 root@wl ~/cyrus-sasl-2.1.23 # chmod 744 /etc/init.d/saslauthd root@wl ~/cyrus-sasl-2.1.23 # ln -s /etc/init.d/saslauthd /etc/rc2.d/S87saslauthd root@wl ~/cyrus-sasl-2.1.23 # ln -s /etc/init.d/saslauthd /etc/rc0.d/K37saslauthd root@wl ~/cyrus-sasl-2.1.23 # ln -s /etc/init.d/saslauthd /etc/rc1.d/K37saslauthd root@wl ~/cyrus-sasl-2.1.23 # ln -s /etc/init.d/saslauthd /etc/rcS.d/K37saslauthd1) des.h를 찾지 못하기 때문에 복사해준다.
root@wl ~ # svcadm disable sendmail 1) root@wl ~ # pkgrm SUNWsndmu 1) root@wl ~ # pkgrm SUNWsndmr 1)계정 생성확인 2)
root@wl ~ # cat /etc/group | grep smmsp smmsp::25: root@wl ~ # cat /etc/passwd | grep smmsp smmsp:x:25:25:SendMail Message Submission Program:/:설치
root@wl ~/src # wget ftp://ftp.sendmail.org/pub/sendmail/sendmail.8.14.4.tar.gz root@wl ~/src # tar xvfz sendmail.8.14.4.tar.gz root@wl ~/src # cd sendmail-8.14.4 root@wl ~/src/sendmail-8.14.4 # vi ./devtools/Site/site.config.m4 3) # DOMAIN(generic)dnl 아래에 붙인다. dnl C compiler settings define(`confCC', `cc') dnl makemap APPENDDEF(`confMAPDEF', `-DNEWDB') APPENDDEF(`confLIBDIRS', `-L/usr/local/db/lib') APPENDDEF(`confINCDIRS', `-I/usr/local/db/include') dnl SASLv2 Support APPENDDEF(`confENVDEF', `-DSASL=2') APPENDDEF(`conf_sendmail_LIBS', `-lsasl2') APPENDDEF(`confLIBDIRS', `-L/usr/local/lib/sasl2') APPENDDEF(`confINCDIRS', `-I/usr/local/include/sasl') dnl LDAP Support for Solaris 9 APPENDDEF(`confMAPDEF', `-DLDAPMAP') APPENDDEF(`confENVDEF', `-DSM_CONF_LDAP_MEMFREE') APPENDDEF(`confLIBS', `-lldap') dnl OpenSSL Support APPENDDEF(`confENVDEF', `-DSTARTTLS') APPENDDEF(`confLIBS', `-lssl -lcrypto') APPENDDEF(`confLIBDIRS', `-L/usr/local/ssl/lib') APPENDDEF(`confINCDIRS', `-I/usr/local/ssl/include') root@wl ~/sendmail-8.14.4 # ./Build 4) root@wl ~/sendmail-8.14.4 # mkdir /usr/share/man/cat1; mkdir /usr/share/man/cat5; mkdir /usr/share/man/cat8 5) root@wl ~/sendmail-8.14.4 # ./Build install root@wl ~/sendmail-8.14.4 # cp obj.`uname -s`.`uname -r`.`uname -i`/mail.local/mail.local /usr/lib 6) root@wl ~/sendmail-8.14.4 # ln -s /usr/local/lib/libsasl2.so.2 /usr/lib/libsasl2.so.2 7) root@wl ~/sendmail-8.14.4 # ln -s /usr/local/db/lib/libdb-5.1.so /usr/lib/libdb-5.1.so root@wl ~/sendmail-8.14.4 # ln -s /usr/local/ssl/lib/libssl.so.1.0.0 /usr/lib/libssl.so.1.0.0 root@wl ~/sendmail-8.14.4 # ln -s /usr/local/ssl/lib/libcrypto.so.1.0.0 /usr/lib/libcrypto.so.1.0.0 root@wl ~/sendmail-8.14.4 # /usr/lib/sendmail -d0 < /dev/null 8) Version 8.14.4 Compiled with: DNSMAP LDAPMAP LOG MAP_REGEX MATCHGECOS MILTER MIME7TO8 MIME8TO7 NAMED_BIND NDBM NETINET NETINET6 NETUNIX NEWDB NIS NISPLUS PIPELINING SASLv2 SCANF STARTTLS USERDB USE_LDAP_INIT XDEBUG ============ SYSTEM IDENTITY (after readcf) ============ (short domain name) $w = wl (canonical domain name) $j = wl.local. (subdomain name) $m = local. (node name) $k = wl ======================================================== Recipient names must be specified1) 솔라리스10에 번들된 Sendmail을 삭제한다.
root@wl ~/src/sendmail-8.14.4 # cd ./cf/cf 1) root@wl ~/src/sendmail-8.14.4/cf/cf # cp generic-solaris.mc sendmail.mc 2) root@wl ~/src/sendmail-8.14.4/cf/cf # vi sendmail.mc 3) define(`confPRIVACY_FLAGS', `authwarnings,noexpn,novrfy')dnl define(`confAUTH_MECHANISMS', `DIGEST-MD5 CRAM-MD5 PLAIN LOGIN')dnl TRUST_AUTH_MECH(`DIGEST-MD5 CRAM-MD5 PLAIN LOGIN')dnl define(`CERT_DIR', `/usr/local/ssl/certs') define(`confCACERT', `CERT_DIR/ca.crt') define(`confCACERT_PATH', `CERT_DIR') define(`confSERVER_CERT', `CERT_DIR/signed-req.pem') define(`confSERVER_KEY', `CERT_DIR/req.key') define(`confCLIENT_CERT', `CERT_DIR/signed-req.pem') define(`confCLIENT_KEY', `CERT_DIR/req.key') FEATURE(dnsbl, `blackholes.mail-abuse.org', `Rejected ($&{client_addr}) - see http://www.mail-abuse.org/rbl/')dnl FEATURE(dnsbl, `spamlist.or.kr', `Rejected ($&{client_addr}) - see http://www.kisarbl.or.kr/')dnl FEATURE(dnsbl, `cbl.abuseat.org', `Rejected ($&{client_addr}) - see http://cbl.abuseat.org')dnl FEATURE(`virtusertable',`hash -o /etc/mail/virtusertable.db')dnl FEATURE(`access_db',`hash -o /etc/mail/access.db')dnl FEATURE(`smrsh',`/usr/lib/smrsh')dnl FEATURE(use_cw_file)dnl FEATURE(use_ct_file)dnl FEATURE(`always_add_domain')dnl FEATURE(`accept_unqualified_senders')dnl FEATURE(`accept_unresolvable_domains')dnl FEATURE(`relay_entire_domain')dnl root@wl ~/src/sendmail-8.14.4/cf/cf # ./Build sendmail.cf 4) root@wl ~/src/sendmail-8.14.4/cf/cf # cp /etc/mail/sendmail.cf /etc/mail/sendmail.cf.old 5) root@wl ~/src/sendmail-8.14.4/cf/cf # cp /etc/mail/submit.cf /etc/mail/submit.cf.old root@wl ~/src/sendmail-8.14.4/cf/cf # ./Build install-cf 6)1) cf 디렉토리안의 cf 디렉토리로 이동한다.
root@wl /etc/mail # vi trusted-users 1) root root@wl /etc/mail # vi local-host-names 2) mydomain.com solanara.net root@wl /etc/mail # vi relay-domains 3) solanara.net root@wl /etc/mail # vi access 4) 127.0.0.1 RELAY 192.168.0 RELAY spam.com REJECT root@wl /etc/mail # makemap hash access < access root@wl /etc/mail # vi virtusertable 5) admin@solanara.net hana admin@solanara2.net hana2 root@wl /etc/mail # makemap hash virtusertable < virtusertable root@wl /etc/mail # vi aliases 6) # The program "newaliases" must be run after this file is updated # for any changes to show through to sendmail. # The following alias is required by the mail protocol, RFC 2821 # Set it to the address of a HUMAN who deals with this system's mail problems. postmaster: root # Alias for mailer daemon; returned messages from our MAILER-DAEMON # should be routed to our local Postmaster. MAILER-DAEMON: postmaster # General redirections for pseudo accounts. bin: root daemon: root system: root toor: root uucp: root manager: root dumper: root operator: root decode: root nobody: /dev/null root@wl /etc/mail # mkdir /var/spool/mqueue/ 7) root@wl /etc/mail # chown root:bin /var/spool/mqueue/ root@wl /etc/mail # chmod 750 /var/spool/mqueue/ root@wl /etc/mail # newaliases 8)1) 루트사용자를 지정한다.
root@wl /etc/mail # vi /etc/init.d/sendmail
#!/bin/sh
# 출처 모름. 윈디하나가 만든건 아님 ^^
version=`echo \$Z | /usr/lib/sendmail -bt -d0 | grep Version | awk '{print $2}'`
case "$1" in
start)
# Start daemons.
echo "Starting Sendmail $version"
# Enable the below line to set serious logging for trouble shooting
# /usr/lib/sendmail -O LogLevel=14 -L sm-mta -bd -q1h
/usr/lib/sendmail -L sm-mta -bd -q1h
/usr/lib/sendmail -L sm-msp-queue -Ac -q30m
;;
stop)
# Stop daemons.
echo "Shutting down Sendmail $version"
kill `cat /var/run/sendmail.pid | head -1`
kill `cat /var/spool/clientmqueue/sm-client.pid | head -1`
;;
*)
echo "Usage: sendmail {start|stop}"
exit 1
esac
exit 0
root@wl /etc/mail # chmod 744 /etc/init.d/sendmail
root@wl /etc/mail # ln -s /etc/init.d/sendmail /etc/rc0.d/K36sendmail
root@wl /etc/mail # ln -s /etc/init.d/sendmail /etc/rc1.d/K36sendmail
root@wl /etc/mail # ln -s /etc/init.d/sendmail /etc/rc2.d/S88sendmail
root@wl /etc/mail # ln -s /etc/init.d/sendmail /etc/rcS.d/K36sendmail
root@wl /etc/mail # /etc/init.d/sendmail start
root@wl ~ # telnet localhost 25 Trying 127.0.0.1... Connected to localhost. Escape character is '^]'. 220 wl.local. ESMTP Sendmail 8.14.4/8.14.4; Tue, 15 Feb 2011 10:51:21 +0900 (KST) EHLO localhost 250-wl.local. Hello localhost [127.0.0.1], pleased to meet you 250-ENHANCEDSTATUSCODES 250-PIPELINING 250-8BITMIME 250-SIZE 250-DSN 250-ETRN 250-AUTH CRAM-MD5 PLAIN LOGIN 250-STARTTLS 250-DELIVERBY 250 HELP quit 221 2.0.0 wl.local. closing connection Connection to localhost closed by foreign host. root@wl ~ #
root@wl ~/src # wget ftp://ftp.qualcomm.com/eudora/servers/unix/popper/qpopper4.0.19.tar.gz root@wl ~/src # tar xvfz qpopper4.0.19.tar.gz root@wl ~/src # cd qpopper4.0.19 root@wl ~/qpopper4.0.19 # ./configure \ --enable-specialauth \ --with-openssl=/usr/local/ssl \ --enable-auto-delete \ --enable-shy \ --enable-fast-update \ --enable-timing \ --enable-debugging \ --enable-standalone root@wl ~/src/qpopper4.0.19 # make root@wl ~/src/qpopper4.0.19 # make install1) 디버깅 가능하도록 컴파일 했다. 설치시 디버깅을 위해 트레이스 파일을 참고하기 위함이다. 물론 이 문서 내용대로 하면 문제 없다. 트레이싱 파일의 크기가 크기 때문에 필요 없다면 과감히 이 라인을 삭제한다.
root@wl ~ # mkdir /etc/mail/pop
root@wl ~ # vi /etc/mail/pop/qpopper.config
set tls-support = alternate-port
set tls-version = default
set tls-server-cert-file = /etc/mail/certs/qpopper_cert.pem
set tls-options = 0x00000800
set clear-text-password = tls
set chunky-writes = tls
root@wl ~ # mkdir /etc/mail/certs
root@wl ~ # cat /usr/local/ssl/certs/req.key > /etc/mail/certs/qpopper_cert.pem
root@wl ~ # cat /usr/local/ssl/certs/signed-req.pem >> /etc/mail/certs/qpopper_cert.pem
root@wl ~ # chmod 600 /etc/mail/certs/qpopper_cert.pem
root@wl ~ # vi /etc/init.d/qpopper
#!/bin/sh
case "$1" in
start)
/usr/local/sbin/popper 995 -S -f /etc/mail/pop/qpopper.config
/usr/local/sbin/popper -S -f /etc/mail/pop/qpopper.config
;;
stop)
pkill popper
;;
*)
echo "Usage: qpopper {start|stop}"
exit 1
esac
exit 0
root@wl ~ # chmod 744 /etc/init.d/qpopper
root@wl ~ # ln -s /etc/init.d/qpopper /etc/rc2.d/S99qpopper
root@wl ~ # /usr/local/sbin/popper 995 -S -d -f /etc/mail/pop/qpopper.config -t /var/log/qpoppertrace 1)
root@wl ~ # /usr/local/sbin/popper -S -d -f /etc/mail/pop/qpopper.config -t /var/log/qpoppertrace 2)
1) TLS(995번 포트)를 사용했다. -t /var/log/qpoppertrace 옵션과 -d 옵션을 주면 /var/log/qpoppertrace 에 트레이싱 로그가 저장된다. 문제가 발생하면 열어보면 된다. 트레이싱 로그가 꽤 크기 때문에 주의하자.root@wl ~ # cd /usr/lib/mail/cf root@wl /usr/lib/mail/cf # cp sendmail.mc new.mc root@wl /usr/lib/mail/cf # vi new.mc # new.mc를 고쳐 원하는 세팅을 한다. root@wl /usr/lib/mail/cf # make new.cf root@wl /usr/lib/mail/cf # cp new.cf /etc/mail/sendmail.cf root@wl /usr/lib/mail/cf # svcadm restart sendmail※ 즉 sendmail.mc 를 new.mc 파일로 복사해 수정한 후 m4를 사용해 컴파일 하면 된다. 아래는 new.mc의 내용이다.
# 최소화 OSTYPE(`solaris8')dnl DOMAIN(`solaris-generic')dnl MAILER(`local')dnl MAILER(`smtp')dnl
# 메일 서버 OSTYPE(`solaris8')dnl MAILER(`local')dnl MAILER(`smtp')dnl # 설치후 sendmail을 재시작한후 vi /etc/mail/local-host-names를 수정. 도메인을 적어줘야 한다.
# 인커밍 릴레이: 메일을 받은 경우, 메일을 로컬에 저장하는 대신 타 서버로 메일을 다시 전송한다. # 아래예제에서는 relay.mydomain.com으로 모든 메일을 전송한다. 이후 /etc/mail/relay-domains 을 수정해야 한다. OSTYPE(`solaris8')dnl DOMAIN(`solaris-antispam')dnl define(`SMART_HOST', 'relay.mydomain.com')dnl FEATURE(`relay_entire_domain')dnl MAILER(`local')dnl MAILER(`smtp')dnl
# 로컬 호스트 전송 전용. 25번 포트를 127.0.0.1에 한정하여 바인드한다. OSTYPE(`solaris8')dnl DOMAIN(`solaris-generic')dnl DAEMON_OPTIONS(`Port=smtp,Addr=127.0.0.1, Name=MTA') MAILER(`local')dnl MAILER(`smtp')dnl솔라리스 10의 경우 아래와같이 해도 된다.
root@wl ~ # svcadm disable sendmail root@wl ~ # svccfg -s sendmail setprop config/local_only = true root@wl ~ # svcadm refresh sendmail root@wl ~ # svcadm restart sendmail
|
Copyright © 2004-2012 Jo HoSeok. All rights reserved. |