setup_basic_mailserver_with_postfix_dovecot_sieve

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision		 Previous revision
setup_basic_mailserver_with_postfix_dovecot_sieve [02.01.2020 11:57] – [proxmox mail gateway] Pascal Sutersetup_basic_mailserver_with_postfix_dovecot_sieve [20.03.2021 07:47] (current) – [add a new domain] Pascal Suter
Line 65: Line 65:
 to make sure letsencrypt will restart all our servers once the ssh keys change, we need to add this:  to make sure letsencrypt will restart all our servers once the ssh keys change, we need to add this: 
 <code> <code>
-echo -e "\npost-hook = service postfix restart ; service dovecot restart ; service apache2 restart" >> /etc/letsencrypt/cli.ini+cat > /etc/letsencrypt/renewal-hooks/post/restart_services.sh <<EOF 
 +#!/bin/bash 
 +service postfix restart 
 +service dovecot reload 
 +service apache2 reload 
 +EOF 
 +chmod +x /etc/letsencrypt/renewal-hooks/post/restart_services.sh 
 </code> </code>
  
Line 530: Line 537:
  
 you can see all attempts that where blocked by geylisting if you go to the tracking center and check the "Include Greylist" search option, then click search.  you can see all attempts that where blocked by geylisting if you go to the tracking center and check the "Include Greylist" search option, then click search. 
 +
 +==== enterprise vs. free ====
 +PMG is free open source software with an optional enterprise subscription. For a private person, the enterprise license is too expensive, but if you use this setup for a production server in a copmany, you might want to consider getting the enterprise subscription, because besides support, it also offers access to an enterprise repository, which contains heavily tested packages whereas the non-subscription repo is kind of the "beta tester" repo, meaning, a new package gets to the no-sub repo first and only after a certain amount of time of successful distribution through the no-sub repos will it enter the enterprise repo. So you either contribute by testing new packages or by paying money :) 
 +
 +by default, PMG comes with the enterprise repo pre-configured which means you won't be able to update if you don't have a subscription. if you want to use the free repo, you need to change your apt configuration: 
 +  rm /etc/apt/sources.list.d/pmg-enterprise.list
 +  echo "deb http://download.proxmox.com/debian/pmg buster pmg-no-subscription" >> /etc/apt/sources.list.d/pmg-no-sub.list
 +
 +as a non-enterprise user you will have to run updates from the command line, while enterprise users can do it from the web-ui IIRC (i am a poor private user ;)) 
 +
 +===== Create new users =====
 +to manage user accounts, login to adminer to edit your ''mailserver'' database. 
 +
 +first make sure the domain is added by checking the ''domains'' table. if the domain does not exist, add it. 
 +
 +make note of the domain id of the domain you want to add a new user for. 
 +
 +to add a new forwarding, make a new entry in the ''aliases'' table, make sure you don't forget to fill in the ''domain_id'' field
 +
 +to add a new user account, make a new entry in the users table. make sure you don't forget to fill in the ''domain_id'' field. leave ''quota'' empty or 0 in order to not enforce a mail box quota. if you want to set a quota, enter the amount of space the mailbox is allowed to use **in bytes**. for the ''password'' field, you need to generate a password hash on the command line of your mailserver. use the command 
 +  dovecot pw -s SHA256-CRYPT
 +and then enter the new password. It will return a SHA hash which you can then enter in the password field. 
 +
 +lastly, to activate the new mail user account, send an email to that address. 
 +
 +===== add a new domain =====
 +to add a new domain to the mail system, complete the following steps: 
 +  - add the domain on the Proxmox Mail Gateway to the "Relay Domains" list
 +  - add the domain to your mailserver database, as mentioned above
 +  - update the DNS records of your domain to point to the mailfitler and also add these entries: <code>
 +autoconfig              IN      CNAME   mail
 +autodiscover            IN      CNAME   mail
 +_dmarc                  IN      TXT     "v=DMARC1; p=quarantine; pct=100"
 +@                       IN      TXT     "v=spf1 mx ~all"
 +00000000._domainkey     IN      TXT     ( "v=DKIM1; h=sha256; k=rsa; ".... copy/paste from PMG
 +</code>you can get the correct entry for he DKIM1 key from your proxmox mail gateway web gui, just go to Configuration --> Mail Proxy --> DKIM and click on the "view DNS record" button, then copy/paste the entry to your bind config. 
  • setup_basic_mailserver_with_postfix_dovecot_sieve.1577962673.txt.gz
  • Last modified: 02.01.2020 11:57
  • by Pascal Suter