Changes

From Amahi Wiki
Jump to: navigation, search
no edit summary
tags: mail gmail f14 postfix relay
 
{{MessageBox|
backgroundcolor = red#faa|
image =Warning.png|
heading =WARNING|
message = Only try this if you know what you’re doing.}}This can be used to send mails from your HDA and to receive system emails.<br>To receive emails meant is recommended only for the root useradvanced users, you have to [[Forward_System_Emails|Forward System Emails]] after finishing thisproceed with caution.<br>I took the information from [http://carlton.oriley.net/blog/?p=31 this page] and modified them slightly for Fedora 14 / Amahi 6. <br><br>First of all, install postfix and remove sendmail: <br>{{Code|yum -y install postfixyum -y remove sendmail}}Openssl and openssl-perl are needed to generate certificates and create SSL connections to GMail<br>Openssl should be installed already, but to be sure: <br>{{Code|yum -y install openssl openssl-perl}}A Certificate Authority This tutorial is needed to create now available as the necessary certificates. You can skip the next paragraph if you already have oneAmahi [https:<br>{{Code|cd /etc/pki/tls/misc./CA.pl –newca}}*You will be prompted for the file name, hit enter to create a new CA.* You will need to enter a passphrase next, be sure to remember itwww.*Choose the Country Name, State or Province Name, Locality Name, Organization Name, and Organizational Unit Name to your likingamahi. Be sure to remember the values, they will be needed in the key creation later. *For the Common Name, type “CA” (without quotes). *Take defaults for everything else and when prompted enter the passphrase from above.<br>Now a key that is sent to Gmail to start the SSL encryption will be created: <br>{{Code|cd org/etcapps/pki/tlsmkdir gmail_relaycd gmail_relayopenssl genrsa postfix-out server.key 1024openssl req mail-new -key server.key -out server.csr}}You will be prompted for country etc. like when creating the CA. Enter the same values. <br>As Common Name, now enter the name of your server, FQDN or not, your choice. <br>{{Code|openssl ca -out server.pem -infiles server.csr}}You will need to enter your passphrase again at this point.<br>When asked if you want to sign the key, answer yes, same when asked if to commit itrelay Post Mail Relay] application.
Add This can be used to send mails from your Amahi 7 or greater (Fedora 19 or greater) HDA and to receive system emails. To receive emails meant for the following root user, you have to the bottom of the file /etc/postfix/main[[Forward_System_Emails|Forward System Emails]] after finishing this tutorial.cf. You do not need also might want to change anything else in it, take a look at [[Masquerade_email_address|Masquerade email address]] as the last setting for any option is the one that is savedwell.{{Text|Text=#### Gmail SSL SMTP Relay relayhost <nowiki>=</nowikibr> [smtp.gmail.com]:587
#auth smtp_sasl_auth_enable<nowiki>=<REF: [http:/nowiki>yes smtp_sasl_password_maps <nowiki>=</nowiki> hash:opentodo.net/2013/etc03/postfix/sasl_passwd-smtp-relay-to-smtp-gmail-com Postfix SMTP relay to SMTP gmail.com]
#tls smtp_use_tls <nowiki>=</nowiki> yes smtp_sasl_security_options <nowiki>=</nowiki> noanonymous smtp_sasl_tls_security_options <nowiki>=</nowiki> noanonymous smtp_tls_note_starttls_offer <nowiki>=</nowiki> yes tls_random_source <nowiki>=</nowiki> dev* First of all, install postfix and remove sendmail:/dev/urandom smtp_tls_scert_verifydepth <nowiki>=</nowikibr> 5 smtp_tls_key_file<nowikipre>=</nowiki>/etc/pki/tls/gmail_relay/server.keyyum -y install postfix mailx smtp_tls_cert_file<nowiki>=</nowiki>/etc/pki/tls/gmail_relay/server.pem smtpd_tls_ask_ccert <nowiki>=</nowiki> yes smtpd_tls_req_ccert <nowiki>=yum -y remove sendmail</nowikipre>no smtp_tls_enforce_peername <nowiki>=</nowiki> no}}Create /etc/postfix/sasl_passwd file with your Gmail login credentials that looks like below:{{Text|Text=gmail-smtp.l.google.com user@gmail.com:passwordsmtp.gmail.com user@gmail.com:password}}
Obviously, you * Add the following to the bottom of the file /etc/postfix/main.cf. You do not need to change ''user'' to your username and ''password'' to your gmail passwordanything else in it, as the last setting for any option is the one that is saved. <brpre>####Gmail SMTP Relay#TLS parameterssmtpd_use_tls=yessmtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scachesmtp_tls_session_cache_database = btree:${data_directory}/smtp_scachesmtp_tls_note_starttls_offer = yessmtp_tls_policy_maps = hash:/etc/postfix/tls_policyCreate the password database#Relay host configurationrelayhost = [smtp.gmail.com]: <br>587 #SASL Configurationsmtp_sasl_auth_enable = yes{{Code|postmap smtp_sasl_password_maps = hash:/etc/postfix/sasl_passwd}}smtp_sasl_security_options = noanonymoussmtp_sasl_mechanism_filter = plainsmtp_sasl_tls_security_options = noanonymous</pre><br />
* Create /etc/postfix/sasl_passwd file with your Gmail login credentials that looks like below:<pre>[smtp.gmail.com]:587 user@gmail.com:Password</pre><br /><b>NOTE:</b> Change ''user'' to your username and ''password'' to your gmail crredentials. <br /> * Build the password database: <br><pre>postmap hash:/etc/postfix/sasl_passwd</pre> * Create /etc/postfix/tls_policy file that looks like below:<pre>[smtp.gmail.com]:587 encrypt</pre><br />* Build the policy database: <br><pre>postmap /etc/postfix/tls_policy</pre> * Protect the files with your Gmail login data:{{Code|<pre>chmod 600 /etc/postfix/sasl_passwd
chmod 600 /etc/postfix/sasl_passwd.db
chmod 600 /etc/postfix/tls_policy
chmod 600 /etc/postfix/tls_policy.db</pre><!--
chown postfix /etc/postfix/sasl_passwd
chown postfix /etc/postfix/sasl_passwd.db}chown postfix /etc/postfix/tls_policychown postfix /etc/postfix/tls_policy.db--> * Restart Postfix:<pre>systemctl restart postfix.service</pre> * Set Postifx to start on boot:<pre>systemctl enable postfix.service</pre> * Now try sending a mail, it should reach your Gmail account:<pre>echo test 1 2 | mail -s "Test mail" user@gmail.com</pre>  <b>NOTE:</b> Some ISPs will block emails sent using this method. Looking for a work around. == Troubleshooting ==* If you get the message " warning: SASL authentication failure: No worthy mechs found", install this package. yum install cyrus-sasl{,-plain}
:Restart Postfix{{Code|/etc/init.d/ systemctl restart postfix restart}}
Now try sending a mail, it should reach your Gmail account* Receive the following message:{{Code|echo test 1 2 | mail -s "Test mail" user@ connect to smtp.gmail.com}}[2607:f8b0:400e:c05::6d]:587: Network is unreachable:To correct this problem, change /etc/postfix/main.cf as follows: inet_protocol = ipv4:Restart postfix systemctl reload postfix
See also:<br>
[[Amahi_Mail_-_The_Free_Way|Amahi Mail - The Free Way]], not working on F14, yet.<br>
[[Forward_System_Emails|Forward System Emails]]<br>
[[Enable_Outgoing_Emails|Enable Outgoing Emails]], not working on F14, yet.<br>
[[Monitor_System_Logs_via_E-mail|Monitor System Logs via E-mail]]<br>
12,424

edits