[Workaround] r79 - trunk/sarge
pjaeger at torf.workaround.org
pjaeger at torf.workaround.org
Fri Dec 30 12:32:25 CET 2005
Author: pjaeger
Date: 2005-12-30 12:32:24 +0100 (Fri, 30 Dec 2005)
New Revision: 79
Modified:
trunk/sarge/de.xml
Log:
hoffentlich pa?\195?\159ts. screen ist ge?\195?\164ndert.
Modified: trunk/sarge/de.xml
===================================================================
--- trunk/sarge/de.xml 2005-12-28 13:00:57 UTC (rev 78)
+++ trunk/sarge/de.xml 2005-12-30 11:32:24 UTC (rev 79)
@@ -262,9 +262,9 @@
/etc/aliases</emphasis>, in der eMail-Weiterleitungen für Ihre Domäne
eingetragen sind. Eine klassische Zeile sieht so aus:
</para>
- <screen>
- postmaster: root
- </screen>
+<screen>
+postmaster: root
+</screen>
<para>
Hiermit sagen wir Postfix, dass alle eMails an
postmaster at ihre-domain.tld an root at ihre-domain.tld weitergeleitet
@@ -307,16 +307,16 @@
erreichen:
</para>
- <screen>
- user = provider_admin
- password = DomAKg07
- dbname = provider
- table = virtual_mailboxes
- select_field = mailbox
- where_field = email
- hosts = 127.0.0.1
- </screen>
-
+<screen>
+user = provider_admin
+password = DomAKg07
+dbname = provider
+table = virtual_mailboxes
+select_field = mailbox
+where_field = email
+hosts = 127.0.0.1
+</screen>
+
<para>
Wenn wir diese Datei jetzt als
<emphasis>"/etc/postfix/mysql_virtual_mailboxes.cf"</emphasis>
@@ -546,9 +546,9 @@
die Datenbanken als Benutzer <emphasis>'root'</emphasis> ohne Paßwort
zugreifen. Sie sollten zunächst ein Paßwort für diesen
Benutzer anlegen:
- <screen>
- mysqladmin -u root password geheimes-paßwort
- </screen>
+<screen>
+mysqladmin -u root password geheimes-paßwort
+</screen>
</para>
<para>
@@ -560,27 +560,26 @@
erledigen:
</para>
- <screen>
- mysqladmin -u [username] -p -h [hostname] create provider
- </screen>
+<screen>
+mysqladmin -u [username] -p -h [hostname] create provider
+</screen>
<para>
Sie müssen nun eine neuen Datenbankbenutzer anlegen, der
Nur-Lese-Zugriff auf die Datenbank "provider" für Ihre eMail-Daten hat.
Öffnen Sie hierfür eine Verbindung zu ihrem MySQL-Server:
</para>
- <screen>
- mysql -u root -p
- </screen>
+<screen>
+mysql -u root -p
+</screen>
<para>
...und geben Sie folgendes Kommando ein, sobald Sie den
MySQL-Prompt <emphasis>mysql></emphasis> sehen:
</para>
- <screen>
- grant select on provider.* to provider_admin at localhost
- identified by 'your-password';
- </screen>
+<screen>
+grant select on provider.* to provider_admin at localhost identified by 'your-password';
+</screen>
<para>
Dadurch wird ein neuer Benutzer namens
@@ -592,9 +591,9 @@
Zugriffsberechtigungen noch neu laden:
</para>
- <screen>
- flush privileges;
- </screen>
+<screen>
+flush privileges;
+</screen>
</sect1>
@@ -633,13 +632,13 @@
können wir die Tabelle mit folgendem SQL-Befehl:
</para>
- <screen>
- CREATE TABLE forwardings (
- source varchar(80) NOT NULL,
- destination TEXT NOT NULL,
- PRIMARY KEY (source) )
- TYPE=MyISAM;
- </screen>
+<screen>
+CREATE TABLE forwardings (
+source varchar(80) NOT NULL,
+destination TEXT NOT NULL,
+PRIMARY KEY (source) )
+TYPE=MyISAM;
+</screen>
</sect2>
<sect2>
@@ -661,13 +660,13 @@
Hierfür also noch ein letzter SQL-Befehl zum Anlegen dieser Tabelle:
</para>
- <screen>
- CREATE TABLE users (
- email varchar(80) NOT NULL,
- password varchar(20) NOT NULL,
- PRIMARY KEY email (email)
- ) TYPE=MyISAM;
- </screen>
+<screen>
+CREATE TABLE users (
+email varchar(80) NOT NULL,
+password varchar(20) NOT NULL,
+PRIMARY KEY email (email)
+) TYPE=MyISAM;
+</screen>
</sect2>
</sect1>
@@ -750,15 +749,15 @@
IP-Adresse 127.0.0.1 nutzen.
</para>
- <screen>
- user = provider_admin
- password = ...
- dbname = provider
- table = domains
- select_field = 'virtual'
- where_field = domain
- hosts = 127.0.0.1
- </screen>
+<screen>
+user = provider_admin
+password = ...
+dbname = provider
+table = domains
+select_field = 'virtual'
+where_field = domain
+hosts = 127.0.0.1
+</screen>
</sect2>
<sect2>
@@ -773,15 +772,15 @@
</para>
</sect2>
- <screen>
- user = provider_admin
- password = ...
- dbname = provider
- table = forwardings
- select_field = destination
- where_field = source
- hosts = 127.0.0.1
- </screen>
+<screen>
+user = provider_admin
+password = ...
+dbname = provider
+table = forwardings
+select_field = destination
+where_field = source
+hosts = 127.0.0.1
+</screen>
<sect2>
<title>mysql-virtual_mailboxes.cf</title>
@@ -803,15 +802,15 @@
brauchen.
</para>
- <screen>
- user = provider_admin
- password = ...
- dbname = provider
- table = users
- select_field = CONCAT(SUBSTRING_INDEX(email,'@',-1),'/',SUBSTRING_INDEX(email,'@',1),'/')
- where_field = email
- hosts = 127.0.0.1
- </screen>
+<screen>
+user = provider_admin
+password = ...
+dbname = provider
+table = users
+select_field = CONCAT(SUBSTRING_INDEX(email,'@',-1),'/',SUBSTRING_INDEX(email,'@',1),'/')
+where_field = email
+hosts = 127.0.0.1
+</screen>
</sect2>
@@ -837,15 +836,15 @@
beschriebene Problem zu umgehen. Klingt komisch, ist aber so. :)
</para>
- <screen>
- user = provider_admin
- password = ...
- dbname = provider
- table = users
- select_field = email
- where_field = email
- hosts = 127.0.0.1
- </screen>
+<screen>
+user = provider_admin
+password = ...
+dbname = provider
+table = users
+select_field = email
+where_field = email
+hosts = 127.0.0.1
+</screen>
</sect2>
@@ -880,10 +879,10 @@
Hierfür müssen Sie lediglich folgendes Kommando in einer shell ausführen:
</para>
- <screen>
- groupadd -g 5000 vmail
- useradd -g vmail -u 5000 vmail -d /home/vmail -m
- </screen>
+<screen>
+groupadd -g 5000 vmail
+useradd -g vmail -u 5000 vmail -d /home/vmail -m
+</screen>
<important>
Anmerkung: die Zahl 5000 ist die zu vergebene UID - sie müssen natürlich
@@ -1116,17 +1115,17 @@
<emphasis>/etc/postfix/sasl/smtpd.conf</emphasis>:
</para>
- <screen>
- pwcheck_method: auxprop
- auxprop_plugin: sql
- mech_list: plain login cram-md5 digest-md5
- sql_engine: mysql
- sql_hostnames: 127.0.0.1
- sql_user: provider_admin
- sql_passwd: ...
- sql_database: provider
- sql_select: select password from users where email='%u@%r'
- </screen>
+<screen>
+pwcheck_method: auxprop
+auxprop_plugin: sql
+mech_list: plain login cram-md5 digest-md5
+sql_engine: mysql
+sql_hostnames: 127.0.0.1
+sql_user: provider_admin
+sql_passwd: ...
+sql_database: provider
+sql_select: select password from users where email='%u@%r'
+</screen>
<para>
(Sollten Sie mit SASL Probleme haben, schlage ich vor, dass Sie noch
@@ -1170,9 +1169,9 @@
smtpd.domain.tld gültig ist, geben Sie folgenden Befehl ein:
</para>
- <screen>
- openssl req -new -outform PEM -out smtpd.cert -newkey rsa:2048 -nodes -keyout smtpd.key -keyform PEM -days 365 -x509
- </screen>
+<screen>
+openssl req -new -outform PEM -out smtpd.cert -newkey rsa:2048 -nodes -keyout smtpd.key -keyform PEM -days 365 -x509
+</screen>
<para>
openssl wird Ihnen dann ein paar Fragen zu den Details für Ihr
@@ -1182,15 +1181,15 @@
aus:
</para>
- <screen>
- Country Name (2 letter code) [AU]:<emphasis>DE</emphasis>
- State or Province Name (full name) [Some-State]:<emphasis>Hamburg</emphasis>
- Locality Name (eg, city) []:<emphasis>Hamburg</emphasis>
- Organization Name (eg, company) [Internet Widgits Pty Ltd]:<emphasis>workaround.org email services</emphasis>
- Organizational Unit Name (eg, section) []:<emphasis>Master of Disaster</emphasis>
- Common Name (eg, YOUR name) []:<emphasis>smtp.domain.tld</emphasis>
- Email Address []:<emphasis>postmaster at domain.tld</emphasis>
- </screen>
+<screen>
+Country Name (2 letter code) [AU]:<emphasis>DE</emphasis>
+State or Province Name (full name) [Some-State]:<emphasis>Hamburg</emphasis>
+Locality Name (eg, city) []:<emphasis>Hamburg</emphasis>
+Organization Name (eg, company) [Internet Widgits Pty Ltd]:<emphasis>workaround.org email services</emphasis>
+Organizational Unit Name (eg, section) []:<emphasis>Master of Disaster</emphasis>
+Common Name (eg, YOUR name) []:<emphasis>smtp.domain.tld</emphasis>
+Email Address []:<emphasis>postmaster at domain.tld</emphasis>
+</screen>
<para>
Einen kurzen Moment später werden Sie zwei neue Dateien haben:
@@ -1234,9 +1233,9 @@
so:
</para>
- <screen>
- authmodulelist="authmysql"
- </screen>
+<screen>
+authmodulelist="authmysql"
+</screen>
<para>
Außerdem müssen wir natürlich noch verraten, in welchen
@@ -1244,22 +1243,22 @@
<emphasis>/etc/courier/authmysqlrc</emphasis> wie folgt:
</para>
- <screen>
- MYSQL_SERVER localhost
- MYSQL_USERNAME provider_admin
- MYSQL_PASSWORD ...
- MYSQL_PORT 0
- MYSQL_DATABASE provider
- MYSQL_USER_TABLE users
- #MYSQL_CRYPT_PWFIELD (comment this out)
- MYSQL_CLEAR_PWFIELD password
- MYSQL_UID_FIELD 5000
- MYSQL_GID_FIELD 5000
- MYSQL_LOGIN_FIELD email
- MYSQL_HOME_FIELD "/home/vmail"
- MYSQL_MAILDIR_FIELD CONCAT(SUBSTRING_INDEX(email,'@',-1),'/',SUBSTRING_INDEX(email,'@',1),'/')
- #MYSQL_NAME_FIELD (comment this out)
- </screen>
+<screen>
+MYSQL_SERVER localhost
+MYSQL_USERNAME provider_admin
+MYSQL_PASSWORD ...
+MYSQL_PORT 0
+MYSQL_DATABASE provider
+MYSQL_USER_TABLE users
+#MYSQL_CRYPT_PWFIELD (comment this out)
+MYSQL_CLEAR_PWFIELD password
+MYSQL_UID_FIELD 5000
+MYSQL_GID_FIELD 5000
+MYSQL_LOGIN_FIELD email
+MYSQL_HOME_FIELD "/home/vmail"
+MYSQL_MAILDIR_FIELD CONCAT(SUBSTRING_INDEX(email,'@',-1),'/',SUBSTRING_INDEX(email,'@',1),'/')
+#MYSQL_NAME_FIELD (comment this out)
+</screen>
<para>
Und seien Sie hierbei bitte sorgfältig - authmysqlrc ist
@@ -1491,12 +1490,12 @@
</para>
<screen>
- Jul 24 21:48:28 myserver postfix/smtpd[9119]: connect from myserver[127.0.0.1]
- Jul 24 21:48:48 myserver postfix/smtpd[9119]: F2C1B47BD: client=myserver[127.0.0.1]
- Jul 24 21:48:52 myserver postfix/cleanup[9144]: F2C1B47BD: message-id=<20040724194842.F2C1B47BD at myserver>
- Jul 24 21:48:52 myserver postfix/qmgr[9117]: F2C1B47BD: from=<test at workaround.org>, size=313, nrcpt=1 (queue active)
- Jul 24 21:48:52 myserver postfix/virtual[9148]: F2C1B47BD: to=<user at virtual.test>, relay=virtual, delay=10, status=sent (delivered to maildir)
- </screen>
+Jul 24 21:48:28 myserver postfix/smtpd[9119]: connect from myserver[127.0.0.1]
+Jul 24 21:48:48 myserver postfix/smtpd[9119]: F2C1B47BD: client=myserver[127.0.0.1]
+Jul 24 21:48:52 myserver postfix/cleanup[9144]: F2C1B47BD: message-id=<20040724194842.F2C1B47BD at myserver>
+Jul 24 21:48:52 myserver postfix/qmgr[9117]: F2C1B47BD: from=<test at workaround.org>, size=313, nrcpt=1 (queue active)
+Jul 24 21:48:52 myserver postfix/virtual[9148]: F2C1B47BD: to=<user at virtual.test>, relay=virtual, delay=10, status=sent (delivered to maildir)
+</screen>
<para>
Wenn Sie "status=sent (delivered to maildir)" finden, dann wurde diese
@@ -1505,14 +1504,14 @@
"/home/vmail" zu finden - sollte etwa so aussehen:
</para>
- <screen>
- /home/vmail/virtual.test
- /home/vmail/virtual.test/user
- /home/vmail/virtual.test/user/tmp
- /home/vmail/virtual.test/user/cur
- /home/vmail/virtual.test/user/new
- /home/vmail/virtual.test/user/new/1090001045.2704_0.myserver.workaround.org
- </screen>
+<screen>
+/home/vmail/virtual.test
+/home/vmail/virtual.test/user
+/home/vmail/virtual.test/user/tmp
+/home/vmail/virtual.test/user/cur
+/home/vmail/virtual.test/user/new
+/home/vmail/virtual.test/user/new/1090001045.2704_0.myserver.workaround.org
+</screen>
<para>
Soweit alles so passiert, wie beschrieben? Hervorragend! Als letzten Test
@@ -1869,10 +1868,10 @@
<emphasis>/etc/postfix/main.cf</emphasis> ein:
</para>
- <screen>
- content_filter = amavis:[127.0.0.1]:10024
- receive_override_options = no_address_mappings
- </screen>
+<screen>
+content_filter = amavis:[127.0.0.1]:10024
+receive_override_options = no_address_mappings
+</screen>
<para>
Diese <emphasis>content_filter</emphasis>-Option
@@ -1884,25 +1883,25 @@
in <emphasis>/etc/postfix/master.cf</emphasis> beibringen:
</para>
- <screen>
- amavis unix - - - - 2 smtp
- -o smtp_data_done_timeout=1200
- -o smtp_send_xforward_command=yes
-
- 127.0.0.1:10025 inet n - - - - smtpd
- -o content_filter=
- -o local_recipient_maps=
- -o relay_recipient_maps=
- -o smtpd_restriction_classes=
- -o smtpd_client_restrictions=
- -o smtpd_helo_restrictions=
- -o smtpd_sender_restrictions=
- -o smtpd_recipient_restrictions=permit_mynetworks,reject
- -o mynetworks=127.0.0.0/8
- -o strict_rfc821_envelopes=yes
- -o receive_override_options=no_unknown_recipient_checks,no_header_body_checks
- -o smtpd_bin_address=127.0.0.1
- </screen>
+<screen>
+amavis unix - - - - 2 smtp
+-o smtp_data_done_timeout=1200
+-o smtp_send_xforward_command=yes
+
+127.0.0.1:10025 inet n - - - - smtpd
+-o content_filter=
+-o local_recipient_maps=
+-o relay_recipient_maps=
+-o smtpd_restriction_classes=
+-o smtpd_client_restrictions=
+-o smtpd_helo_restrictions=
+-o smtpd_sender_restrictions=
+-o smtpd_recipient_restrictions=permit_mynetworks,reject
+-o mynetworks=127.0.0.0/8
+-o strict_rfc821_envelopes=yes
+-o receive_override_options=no_unknown_recipient_checks,no_header_body_checks
+-o smtpd_bin_address=127.0.0.1
+</screen>
<para>
In der Vergangenheit wurde ein
<command>pre-cleanup</command>-Dienst eingerichtet - und auch wenn die
@@ -1955,9 +1954,9 @@
soll, kann man in <emphasis>/var/log/mail.log</emphasis> folgende
Zeile sehen:
</para>
- <screen>
- amavis[677]: (00677-02) Passed, <my at test.address> -> <user at virtual.test>, Message-ID: <20040716231708.8717C1C21E at myserver>, Hits: -
- </screen>
+<screen>
+amavis[677]: (00677-02) Passed, <my at test.address> -> <user at virtual.test>, Message-ID: <20040716231708.8717C1C21E at myserver>, Hits: -
+</screen>
<para>
Wenn eine infizierte eMail eingeliefert wird (siehe auch <ulink
@@ -1965,9 +1964,9 @@
finden Sie Folgendes in <emphasis>/var/log/mail.log:</emphasis>
</para>
- <screen>
- amavis[11843]: (11843-01) INFECTED (Eicar-Test-Signature), <user at domain1> -> <user at domain2>...
- </screen>
+<screen>
+amavis[11843]: (11843-01) INFECTED (Eicar-Test-Signature), <user at domain1> -> <user at domain2>...
+</screen>
</sect2>
<sect2>
@@ -2007,31 +2006,31 @@
geschrieben und in /usr/local/bin/spamlearner abgelegt:
</para>
- <screen>
- #!/bin/bash -e
-
- SADIR=/var/lib/amavis/.spamassassin
- DBPATH=/var/lib/amavis/.spamassassin/bayes
- SPAMFOLDERS="\
- /home/vmail/well-known-customer.com/fred/.spam/cur \
- /home/vmail/spamtrap.org/jeanne/.spam/cur \
- "
- HAMFOLDERS="\
- /home/vmail/spamtrap.org/jeanne/.trash/cur \
- "
-
- for spamfolder in $SPAMFOLDERS ; do \
- echo Learning spam from $spamfolder ; \
- nice sa-learn --spam --showdots --dbpath $DBPATH $spamfolder
- done
-
- for hamfolder in $HAMFOLDERS ; do \
- echo Learning ham from $hamfolder ; \
- nice sa-learn --ham --showdots --dbpath $DBPATH $hamfolder
- done
-
- chown -R amavis:amavis $SADIR
- </screen>
+<screen>
+#!/bin/bash -e
+
+SADIR=/var/lib/amavis/.spamassassin
+DBPATH=/var/lib/amavis/.spamassassin/bayes
+SPAMFOLDERS="\
+/home/vmail/well-known-customer.com/fred/.spam/cur \
+/home/vmail/spamtrap.org/jeanne/.spam/cur \
+"
+HAMFOLDERS="\
+/home/vmail/spamtrap.org/jeanne/.trash/cur \
+"
+
+for spamfolder in $SPAMFOLDERS ; do \
+echo Learning spam from $spamfolder ; \
+nice sa-learn --spam --showdots --dbpath $DBPATH $spamfolder
+done
+
+for hamfolder in $HAMFOLDERS ; do \
+echo Learning ham from $hamfolder ; \
+nice sa-learn --ham --showdots --dbpath $DBPATH $hamfolder
+done
+
+chown -R amavis:amavis $SADIR
+</screen>
<para>
Um sich jetzt anzuschauen, was sich SpamAssassin von AMaViS jetzt so
More information about the Workaround-chitchat
mailing list