infrastructure:serveur_mail:partie_2:debian_jessie_rmilter_rspamd_clamav
Différences
Ci-dessous, les différences entre deux révisions de la page.
| Les deux révisions précédentesRévision précédenteProchaine révision | Révision précédente | ||
| infrastructure:serveur_mail:partie_2:debian_jessie_rmilter_rspamd_clamav [2015/10/12 14:52] – [Autoconfigured mailboxes and virtual ones] ghusson | infrastructure:serveur_mail:partie_2:debian_jessie_rmilter_rspamd_clamav [2017/07/24 13:42] (Version actuelle) – ghusson | ||
|---|---|---|---|
| Ligne 66: | Ligne 66: | ||
| dead_time = 300; | dead_time = 300; | ||
| maxerrors = 10; | maxerrors = 10; | ||
| - | reject_message = "Spam detecte et rejete. Si ce n'est pas un Sapm, contactez votre administrateur de messagerie SVP. Spam message rejected; If this is not spam contact abuse"; | + | reject_message = "Spam detecte et rejete. Si ce n'est pas un spam, contactez votre administrateur de messagerie SVP. Spam message rejected; If this is not spam contact abuse"; |
| whitelist = 127.0.0.1/ | whitelist = 127.0.0.1/ | ||
| + | extended_spam_headers = yes; | ||
| }; | }; | ||
| Ligne 407: | Ligne 408: | ||
| echo " | echo " | ||
| echo "-> DNS entries to add:" | echo "-> DNS entries to add:" | ||
| - | echo " | + | echo " |
| - | echo " | + | echo " |
| echo " | echo " | ||
| - | echo " | + | echo " |
| - | echo " | + | echo " |
| echo "-> rmilter.conf :" | echo "-> rmilter.conf :" | ||
| echo " | echo " | ||
| echo " | echo " | ||
| - | echo " | + | echo " |
| echo " | echo " | ||
| echo " | echo " | ||
| Ligne 434: | Ligne 435: | ||
| <file bash example> | <file bash example> | ||
| + | root@mail: | ||
| + | illegal number of parameters | ||
| + | / | ||
| + | root@mail: | ||
| + | Generating RSA private key, 1024 bit long modulus | ||
| + | ................................................................................++++++ | ||
| + | ................++++++ | ||
| + | e is 65537 (0x10001) | ||
| + | writing RSA key | ||
| ================================================================================ | ================================================================================ | ||
| - | -> New DNS DKIM for liberasys.com. Selector is : 201509231353 | + | -> New DNS DKIM for alocean.com. Selector is : 201511301053 |
| - | | + | |
| - | / | + | / |
| - | | + | |
| -> DNS entries to add: | -> DNS entries to add: | ||
| - | | + | |
| - | | + | |
| - | : @ 1800 IN TXT " | + | : alocean.com |
| - | DMARC LIGHT : _dmarc 1800 IN TXT " | + | DMARC LIGHT : _dmarc 1800 IN TXT " |
| - | DMARC REJECT : _dmarc 1800 IN TXT " | + | DMARC REJECT : _dmarc 1800 IN TXT " |
| -> rmilter.conf : | -> rmilter.conf : | ||
| domain { | domain { | ||
| - | key = /etc/dkim/liberasys.com.201509231353.key; | + | key = /etc/dkim/alocean.com.201511301053.key; |
| domain = " | domain = " | ||
| - | selector = "201509231353"; | + | selector = "201511301053"; |
| }; | }; | ||
| ================================================================================ | ================================================================================ | ||
| + | chown -R _rmilter: | ||
| + | chmod 550 /etc/dkim | ||
| + | chmod 640 /etc/dkim/* | ||
| + | service rmilter stop && sleep 2 && service rmilter start | ||
| </ | </ | ||
| + | |||
| + | |||
| + | |||
| + | ===== Configure rspamd ===== | ||
| + | Verify you have scoring decisions matching your spam policy. For example : | ||
| + | vi / | ||
| + | < | ||
| + | metric { | ||
| + | name = " | ||
| + | actions { | ||
| + | reject = 100; | ||
| + | add_header = 6; | ||
| + | greylist = 4; | ||
| + | }; | ||
| + | </ | ||
| + | |||
| Ligne 459: | Ligne 489: | ||
| In order to check everything is good, we do a full stop/start of the complete chain (in the good order!) | In order to check everything is good, we do a full stop/start of the complete chain (in the good order!) | ||
| <code bash> | <code bash> | ||
| + | # tail logs | ||
| + | tail -f / | ||
| # stop mail services | # stop mail services | ||
| for SERVICE_ in postfix dovecot rmilter clamav-freshclam clamav-daemon rspamd; do service $SERVICE_ stop; done | for SERVICE_ in postfix dovecot rmilter clamav-freshclam clamav-daemon rspamd; do service $SERVICE_ stop; done | ||
| # start mail services | # start mail services | ||
| for SERVICE_ in rspamd clamav-daemon clamav-freshclam rmilter dovecot postfix; do service $SERVICE_ start; done | for SERVICE_ in rspamd clamav-daemon clamav-freshclam rmilter dovecot postfix; do service $SERVICE_ start; done | ||
| + | fg | ||
| </ | </ | ||
| Ligne 469: | Ligne 502: | ||
| - | TODO : copie des spams à l'admin | + | TODO : copy spams to a specific |
infrastructure/serveur_mail/partie_2/debian_jessie_rmilter_rspamd_clamav.1444661536.txt.gz · Dernière modification : 2015/10/12 14:52 de ghusson