postfix+dovecot+sasl搭建

tips：relay_domains 后面设置的域名 会直接转发/投递，不受smtpd_recipient_restrictions 等限制项约束

• yum安装postfix （2.6版本）
  • postconf -n 显示修改的配置
  • postconf -d 显示默认的配置
  • pstconf -a 显示支持的sasl验证方式

#/etc/postfix/main.cf 配置 修改过的
# 配置sasl验证支持
smtpd_sasl_auth_enable = yes
broken_sasl_auth_clients = yes
smtpd_sasl_local_domain = 
smtpd_sasl_security_options = noanonymous
#用dovecot实现sasl验证
smtpd_sasl_type = dovecot
smtpd_sasl_path = private/auth
#用cyrus提供sasl验证
smtpd_sasl_path = smtpd
smtpd_sasl_type = cyrus
#sasl到此
inet_interfaces = all
inet_protocols = ipv4
mail_owner = postfix
mydestination = $myhostname, localhost.$mydomain, localhost ,$mydomain
mydomain = xiuxiumail.top
myhostname = mail.xiuxiumail.top
mynetworks = 168.100.189.0/28, 127.0.0.0/8
smtpd_recipient_restrictions = permit_mynetworks,permit_sasl_authenticated,reject_unauth_destination,reject_unauth_pipelining
unknown_local_recipient_reject_code = 550

• yum安装dovecot
  • doveconf -n 显示修改过的配置

# 2.0.9: /etc/dovecot/dovecot.conf
# OS: Linux 2.6.32-642.6.2.el6.x86_64 x86_64 CentOS release 6.8 (Final) ext3
auth_mechanisms = plain login
disable_plaintext_auth = no
listen = *
mail_location = mbox:/var/mail:INBOX=/var/mail/%u
mail_privileged_group = mail
mbox_write_locks = fcntl
#passdb userdb 在auth-system.conf.ext中
passdb {
  driver = pam
}
userdb {
  driver = passwd
}
protocols = imap pop3
ssl = no
ssl_cert = </etc/pki/dovecot/certs/dovecot.pem
ssl_key = </etc/pki/dovecot/private/dovecot.pem

#下面是为smtpd提供的sasl实现
service auth {
  unix_listener /var/spool/postfix/private/auth {
    group = postfix
    mode = 0660
    user = postfix
  }
}

• yum 安装 cyrus-sasl 提供smtpd验证发信(dovecot和cyrus选择一个就行了)
  • service saslauthd start 启动cryus-sasl验证客户端

#/etc/sasl2/smtpd.conf
pwcheck_method: saslauthd
mech_list: plain login

#/etc/sysconfig/saslauthd
SOCKETDIR=/var/run/saslauthd
#默认是pam
MECH=shadow
#testauthd测试时候认证ok