Linux下架构安全邮件服务器之Sendmail(二)

二、sina.com配置:

把163.com主机配置,克隆一份,进行相应修改即可!

650) this.width=650;” src=”http://cdn.verydemo.com/upload/2013_05_01/13673620784620.png” border=”0″ alt=”” />

注意:克隆前必须把电源关掉

如果sendmail启动比较慢,可以在1级别进行修改!(出现红色界面:按be末尾输入1)

1.手动配置ip

[root@mail ~]# vim /etc/sysconfig/network-scripts/ifcfg-eth0

[root@mail ~]# cat/etc/sysconfig/network-scripts/ifcfg-eth0

# Advanced Micro Devices [AMD] 79c970 [PCnet32 LANCE]

DEVICE=eth0

BOOTPROTO=none

ONBOOT=yes

HWADDR=00:0c:29:5b:98:33

NETMASK=255.255.255.0

IPADDR=192.168.10.9

TYPE=Ethernet

2.修改dns配置

[root@mail etc]# vim named.conf//5个any

[root@mail etc]# vim named.rfc1912.zones

650) this.width=650;” src=”http://cdn.verydemo.com/upload/2013_05_01/13673620786481.png” border=”0″ alt=”” />

[root@mail named]# pwd

/var/named/chroot/var/named

[root@mail named]# cp -p 163.com.zone sina.com.zone

[root@mail named]# vim sina.com.zone

650) this.width=650;” src=”http://cdn.verydemo.com/upload/2013_05_01/13673620788822.png” border=”0″ alt=”” />

dns指向

[root@mail ~]# vim /etc/resolv.conf

[root@mail ~]# cat /etc/resolv.conf

search domain.org

nameserver 192.168.10.9

3.修改主机名

[root@mail ~]# vim /etc/sysconfig/network

[root@mail ~]# cat /etc/sysconfig/network

NETWORKING=yes

NETWORKING_IPV6=yes

HOSTNAME=mail.sina.com

[root@mail ~]# hostname

mail.163.com//发现名字并没有改变过来

需要重启,如果不想重启,只需重命名后,重新登录即可!

[root@mail ~]# hostname mail.sina.com//重命名

650) this.width=650;” src=”http://cdn.verydemo.com/upload/2013_05_01/13673620795753.png” border=”0″ alt=”” />

4.修改sendmail配置

[root@mail mail]# vim sendmail.mc

650) this.width=650;” src=”http://cdn.verydemo.com/upload/2013_05_01/13673620800344.png” border=”0″ alt=”” />

116行,任意地址都可以telnet上该主机的25端口

[root@mail mail]# vim access

650) this.width=650;” src=”http://cdn.verydemo.com/upload/2013_05_01/13673620807745.png” border=”0″ alt=”” />

sendmail服务重启

[root@mail ~]# service sendmail status

sendmail is stopped

[root@mail ~]# service sendmail restart

Shutting down sendmail:[FAILED]

Starting sendmail:[OK]

Starting sm-client:[OK]

5.查看接收服务器端口:

[root@mail ~]# netstat -tupln |grep dovecot

tcp00 :::993:::*LISTEN3166/dovecot

tcp00 :::995:::*LISTEN3166/dovecot

tcp00 :::110:::*LISTEN3166/dovecot

tcp00 :::143:::*LISTEN3166/dovecot

You have mail in /var/spool/mail/root

6.查看账号:

[root@mail ~]# tail /etc/passwd

nfsnobody:x:65534:65534:Anonymous NFS User:/var/lib/nfs:/sbin/nologin

sshd:x:74:74:Privilege-separated SSH:/var/empty/sshd:/sbin/nologin

haldaemon:x:68:68:HAL daemon:/:/sbin/nologin

gdm:x:42:42::/var/gdm:/sbin/nologin

avahi-autoipd:x:100:103:avahi-autoipd:/var/lib/avahi-autoipd:/sbin/nologin

sabayon:x:86:86:Sabayon user:/home/sabayon:/sbin/nologin

named:x:25:25:Named:/var/named:/sbin/nologin

user1:x:500:500::/home/user1:/bin/bash

user2:x:501:501::/home/user2:/bin/bash

dovecot:x:97:97:dovecot:/usr/libexec/dovecot:/sbin/nologin

彻底删除这两个帐号!

[root@mail ~]# userdel -r user1

[root@mail ~]# userdel -r user2

创建新账号:

[root@mail ~]# useradd user3

[root@mail ~]# passwd设置密码

Changing password for user root.

New UNIX password:

BAD PASSWORD: it is WAY too short

Retype new UNIX password:

passwd: all authentication tokens updated successfully.

[root@mail ~]# useradd user4

[root@mail ~]# passwd

Changing password for user root.

New UNIX password:

BAD PASSWORD: it is WAY too short

Retype new UNIX password:

passwd: all authentication tokens updated successfully.

7.所有服务重启

重启sendmail named dovecot服务器

8.查看dns解析

dig –t mx sina.com

9.测试:

9.1windows下telnet上写信

650) this.width=650;” src=”http://cdn.verydemo.com/upload/2013_05_01/13673620809286.png” border=”0″ alt=”” />

windows下收信:

650) this.width=650;” src=”http://cdn.verydemo.com/upload/2013_05_01/13673620814217.png” border=”0″ alt=”” />

查看后退出时输入X信件还保留在邮箱中,输入q时,信件保留在家目录下的mbox里!

9.2 windows下使用客户端软件测试收发情况:

650) this.width=650;” src=”http://cdn.verydemo.com/upload/2013_05_01/13673620816148.png” border=”0″ alt=”” />

创建了两个账号:user3、user4

点击“发送”

650) this.width=650;” src=”http://cdn.verydemo.com/upload/2013_05_01/13673620819899.png” border=”0″ alt=”” />

650) this.width=650;” src=”http://cdn.verydemo.com/upload/2013_05_01/136736208249510.png” border=”0″ alt=”” />

三、163.com与sina.com如何通信?

[root@mail ~]# hostname

mail.163.com

[root@mail ~]# dig -t mx sina.com

; <&lt;>&gt; DiG9.3.6-P1-RedHat-9.3.6-4.P1.el5 <&lt;>&gt; -t mx sina.com

;; global options:printcmd

;; Got answer:

;; -&gt;&gt;HEADER<&lt;- opcode: QUERY, status: SERVFAIL, id: 57589

;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:

;sina.com.INMX

;; Query time: 28 msec

;; SERVER: 192.168.10.99#53(192.168.10.99)

;; WHEN: Sat Aug

;; MSG SIZErcvd: 26

sina.com找不到!

由于是内部邮件服务器,不是internet网上的,所以,只能转发:

163.com和sina.com都这样做

[root@mail ~]# vim /var/named/chroot/etc/named.conf

650) this.width=650;” src=”http://cdn.verydemo.com/upload/2013_05_01/136736208269111.png” border=”0″ alt=”” />

[root@mail ~]# rndc reload

server reload successful

在163.com下解析sina.com

[root@mail ~]# hostname

mail.163.com

[root@mail ~]# dig -t mx sina.com

; &lt;&lt;>&gt; DiG9.3.6-P1-RedHat-9.3.6-4.P1.el5 <&lt;>&gt; -t mx sina.com

;; global options:printcmd

;; Got answer:

;; -&gt;&gt;HEADER<&lt;- opcode: QUERY, status: NOERROR, id: 54345

;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 1, ADDITIONAL: 2

;; QUESTION SECTION:

;sina.com.INMX

;; ANSWER SECTION:

sina.com.86388INMX10 mail.sina.com.

;; AUTHORITY SECTION:

sina.com.86388INNSns.sina.com.

;; ADDITIONAL SECTION:

mail.sina.com.86388INA192.168.10.9

ns.sina.com.86388INA192.168.10.9

;; Query time: 10 msec

;; SERVER: 192.168.10.99#53(192.168.10.99)

;; WHEN: Sat Aug4 12:11:58 2012

;; MSG SIZErcvd: 96

发信件,测试:

163.com启动sendmail服务!

[root@mail ~]# service sendmail status

sendmail is stopped

[root@mail ~]# service sendmail start

Starting sendmail:[OK]

Starting sm-client:[OK]

[root@mail ~]# netstat -tupln |grep 25

tcp000.0.0.0:250.0.0.0:*

650) this.width=650;” src=”http://cdn.verydemo.com/upload/2013_05_01/136736208287712.png” border=”0″ alt=”” />

[root@mail ~]# tail -f /var/log/maillog//监控日志

Aug4 12:41:12 mail sendmail[3833]: q744fCNB003833: from=&lt;user1@163.com>, size=1193, class=0, nrcpts=1, msgid=<598984A216F64770B9602B1F6073BCA7@PC201203120919>, proto=SMTP, daemon=MTA, relay=[192.168.10.1]

Aug4 12:41:52 mail sendmail[3837]: q744fCNB003833: to=<user4@sina.com>, ctladdr=<user1@163.com> (500/500), delay=00:00:40, xdelay=00:00:40, mailer=esmtp, pri=121193, relay=mail.sina.com. [192.168.10.9], dsn=2.0.0, stat=Sent (q744fTsd006212 Message accepted for delivery)

650) this.width=650;” src=”http://cdn.verydemo.com/upload/2013_05_01/136736208317813.png” border=”0″ alt=”” />

双方已能够正常通信,只是速度太慢

四、163.com与sina.com通信速度如何加快?

如果163.com向sina.com发送信件,sina要对163域名信息进行核实,所以,先正向解析,再反向解析,由于缺少反向解析,所以影响通信质量!

解决:配置反向DNS解析

修改163.com的区域文件:

[root@mail ~]# cd /var/named/chroot/etc/

[root@mail etc]# vim named.rfc1912.zones增加下面代码

650) this.width=650;” src=”http://cdn.verydemo.com/upload/2013_05_01/136736208408514.png” border=”0″ alt=”” />

[root@mail named]# cp -p named.local 192.168.10.zone

[root@mail named]# vim 192.168.10.zone

[root@mail named]# rndc reload

server reload successful

[root@mail named]# dig -x 192.168.10.99

650) this.width=650;” src=”http://cdn.verydemo.com/upload/2013_05_01/136736208423915.png” border=”0″ alt=”” />

; <&lt;>&gt; DiG9.3.6-P1-RedHat-9.3.6-4.P1.el5 <&lt;>&gt; -x 192.168.10.99

;; global options:printcmd

;; Got answer:

;; -&gt;&gt;HEADER<&lt;- opcode: QUERY, status: NOERROR, id: 23352

;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 1, ADDITIONAL: 2

;; QUESTION SECTION:

;99.10.168.192.in-addr.arpa.INPTR

;; ANSWER SECTION:

99.10.168.192.in-addr.arpa. 86400 INPTRmail.163.com.

;; AUTHORITY SECTION:

10.168.192.in-addr.arpa. 86400INNSlocalhost.

;; ADDITIONAL SECTION:

localhost.86400INA127.0.0.1

localhost.86400INAAAA::1

修改sina.com的区域文件:

[root@mail ~]# cd /var/named/chroot/etc/

[root@mail etc]# vim named.rfc1912.zones

650) this.width=650;” src=”http://cdn.verydemo.com/upload/2013_05_01/136736208439216.png” border=”0″ alt=”” />

[root@mail etc]# cd ../var/named/

[root@mail named]# cp -p named.local 192.168.10.local

[root@mail named]# vim 192.168.10.local

650) this.width=650;” src=”http://cdn.verydemo.com/upload/2013_05_01/136736208455917.png” border=”0″ alt=”” />

rndc reload//不用启动,只需加载更新项

[root@mail named]# dig -t mx 163.com//正向解析

; &lt;&lt;>&gt; DiG9.3.6-P1-RedHat-9.3.6-4.P1.el5 <&lt;>&gt; -t mx 163.com

;; global options:printcmd

;; Got answer:

;; -&gt;&gt;HEADER<&lt;- opcode: QUERY, status: NOERROR, id: 14211

;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 1, ADDITIONAL: 2

;; QUESTION SECTION:

;163.com.INMX

;; ANSWER SECTION:

163.com.81604INMX10 mail.163.com.

;; AUTHORITY SECTION:

163.com.81523INNSns.163.com.

;; ADDITIONAL SECTION:

mail.163.com.81523INA192.168.10.99

ns.163.com.81523INA192.168.10.99

;; Query time: 5 msec

;; SERVER: 192.168.10.9#53(192.168.10.9)

;; WHEN: Sat Aug

;; MSG SIZErcvd: 95

[root@mail named]# dig -x 192.168.10.9//反向解析

; &lt;&lt;>&gt; DiG9.3.6-P1-RedHat-9.3.6-4.P1.el5 <&lt;>&gt; -x 192.168.10.9

;; global options:printcmd

;; Got answer:

;; -&gt;&gt;HEADER&lt;&lt;- opcode: QUERY, status: NOERROR, id: 62534

;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 1, ADDITIONAL: 2

;; QUESTION SECTION:

;9.10.168.192.in-addr.arpa.INPTR

;; ANSWER SECTION:

9.10.168.192.in-addr.arpa. 86400 INPTRmail.sina.com.

;; AUTHORITY SECTION:

10.168.192.in-addr.arpa. 86400INNSlocalhost.

;; ADDITIONAL SECTION:

localhost.86400INA127.0.0.1

localhost.86400INAAAA::1

;; Query time: 5 msec

;; SERVER: 192.168.10.9#53(192.168.10.9)

;; WHEN: Sat Aug

;; MSG SIZErcvd: 137

现在反向解析已存在,检测发送——接收信件之间是否加快!

650) this.width=650;” src=”http://cdn.verydemo.com/upload/2013_05_01/136736208482318.png” border=”0″ alt=”” />

一个背包,几本书,所有喜欢的歌,

Linux下架构安全邮件服务器之Sendmail(二)

相关文章:

你感兴趣的文章:

标签云: