infrastructure:serveur_mail:partie_2:debian_jessie_rmilter_rspamd_clamav
Différences
Ci-dessous, les différences entre deux révisions de la page.
| Les deux révisions précédentesRévision précédenteProchaine révision | Révision précédente | ||
| infrastructure:serveur_mail:partie_2:debian_jessie_rmilter_rspamd_clamav [2015/10/12 14:39] – [Installation : rspamd, rmilter, clamav and tools] ghusson | infrastructure:serveur_mail:partie_2:debian_jessie_rmilter_rspamd_clamav [2017/07/24 13:42] (Version actuelle) – ghusson | ||
|---|---|---|---|
| Ligne 28: | Ligne 28: | ||
| cp -a / | cp -a / | ||
| sed -i ' | sed -i ' | ||
| - | sed -i 's|^LocalSocketGroup | + | sed -i 's|^User clamav.*$|User _rmilter|g' |
| cp -a / | cp -a / | ||
| sed -i ' | sed -i ' | ||
| Ligne 66: | Ligne 66: | ||
| dead_time = 300; | dead_time = 300; | ||
| maxerrors = 10; | maxerrors = 10; | ||
| - | reject_message = "Spam detecte et rejete. Si ce n'est pas un Sapm, contactez votre administrateur de messagerie SVP. Spam message rejected; If this is not spam contact abuse"; | + | reject_message = "Spam detecte et rejete. Si ce n'est pas un spam, contactez votre administrateur de messagerie SVP. Spam message rejected; If this is not spam contact abuse"; |
| whitelist = 127.0.0.1/ | whitelist = 127.0.0.1/ | ||
| + | extended_spam_headers = yes; | ||
| }; | }; | ||
| Ligne 235: | Ligne 236: | ||
| recipient_delimiter = _ | recipient_delimiter = _ | ||
| protocol lmtp { | protocol lmtp { | ||
| - | postmaster_address = postmaster@liberasys.com | + | postmaster_address = __POSTMASTER_ADDRESS__ |
| mail_plugins = $mail_plugins antispam quota sieve virtual mailbox_alias | mail_plugins = $mail_plugins antispam quota sieve virtual mailbox_alias | ||
| } | } | ||
| __EOF__ | __EOF__ | ||
| + | |||
| + | sed -i " | ||
| + | |||
| + | |||
| </ | </ | ||
| Ligne 253: | Ligne 258: | ||
| unix_listener imap-postlogin {\ | unix_listener imap-postlogin {\ | ||
| }\ | }\ | ||
| - | }\ | ||
| |g' / | |g' / | ||
| </ | </ | ||
| Ligne 404: | Ligne 408: | ||
| echo " | echo " | ||
| echo "-> DNS entries to add:" | echo "-> DNS entries to add:" | ||
| - | echo " | + | echo " |
| - | echo " | + | echo " |
| echo " | echo " | ||
| - | echo " | + | echo " |
| - | echo " | + | echo " |
| echo "-> rmilter.conf :" | echo "-> rmilter.conf :" | ||
| echo " | echo " | ||
| echo " | echo " | ||
| - | echo " | + | echo " |
| echo " | echo " | ||
| echo " | echo " | ||
| Ligne 431: | Ligne 435: | ||
| <file bash example> | <file bash example> | ||
| + | root@mail: | ||
| + | illegal number of parameters | ||
| + | / | ||
| + | root@mail: | ||
| + | Generating RSA private key, 1024 bit long modulus | ||
| + | ................................................................................++++++ | ||
| + | ................++++++ | ||
| + | e is 65537 (0x10001) | ||
| + | writing RSA key | ||
| ================================================================================ | ================================================================================ | ||
| - | -> New DNS DKIM for liberasys.com. Selector is : 201509231353 | + | -> New DNS DKIM for alocean.com. Selector is : 201511301053 |
| - | | + | |
| - | / | + | / |
| - | | + | |
| -> DNS entries to add: | -> DNS entries to add: | ||
| - | | + | |
| - | | + | |
| - | : @ 1800 IN TXT " | + | : alocean.com |
| - | DMARC LIGHT : _dmarc 1800 IN TXT " | + | DMARC LIGHT : _dmarc 1800 IN TXT " |
| - | DMARC REJECT : _dmarc 1800 IN TXT " | + | DMARC REJECT : _dmarc 1800 IN TXT " |
| -> rmilter.conf : | -> rmilter.conf : | ||
| domain { | domain { | ||
| - | key = /etc/dkim/liberasys.com.201509231353.key; | + | key = /etc/dkim/alocean.com.201511301053.key; |
| domain = " | domain = " | ||
| - | selector = "201509231353"; | + | selector = "201511301053"; |
| }; | }; | ||
| ================================================================================ | ================================================================================ | ||
| + | chown -R _rmilter: | ||
| + | chmod 550 /etc/dkim | ||
| + | chmod 640 /etc/dkim/* | ||
| + | service rmilter stop && sleep 2 && service rmilter start | ||
| </ | </ | ||
| + | |||
| + | |||
| + | |||
| + | ===== Configure rspamd ===== | ||
| + | Verify you have scoring decisions matching your spam policy. For example : | ||
| + | vi / | ||
| + | < | ||
| + | metric { | ||
| + | name = " | ||
| + | actions { | ||
| + | reject = 100; | ||
| + | add_header = 6; | ||
| + | greylist = 4; | ||
| + | }; | ||
| + | </ | ||
| + | |||
| Ligne 456: | Ligne 489: | ||
| In order to check everything is good, we do a full stop/start of the complete chain (in the good order!) | In order to check everything is good, we do a full stop/start of the complete chain (in the good order!) | ||
| <code bash> | <code bash> | ||
| + | # tail logs | ||
| + | tail -f / | ||
| # stop mail services | # stop mail services | ||
| for SERVICE_ in postfix dovecot rmilter clamav-freshclam clamav-daemon rspamd; do service $SERVICE_ stop; done | for SERVICE_ in postfix dovecot rmilter clamav-freshclam clamav-daemon rspamd; do service $SERVICE_ stop; done | ||
| # start mail services | # start mail services | ||
| for SERVICE_ in rspamd clamav-daemon clamav-freshclam rmilter dovecot postfix; do service $SERVICE_ start; done | for SERVICE_ in rspamd clamav-daemon clamav-freshclam rmilter dovecot postfix; do service $SERVICE_ start; done | ||
| + | fg | ||
| </ | </ | ||
| Ligne 466: | Ligne 502: | ||
| - | TODO : copie des spams à l'admin | + | TODO : copy spams to a specific |
infrastructure/serveur_mail/partie_2/debian_jessie_rmilter_rspamd_clamav.1444660790.txt.gz · Dernière modification : 2015/10/12 14:39 de ghusson