| ・ |
ドキュメントセンターを初めてご利用する方や運営方針についての基本的な姿勢をご覧になりたい方へ。
|
| ご利用の皆様から多く寄せられる質問にお答えしています。 |
|
| ・ |
ディーエーオフィスなどが利用する用語に関する解説を行います。
|
|
|
|
 | |
postfix |
! インストール基本
cd /usr/ports/mail/postfix/
make install
! SMTP-AUTHの利用
今後、SMTP-AUTH/SASLを使う予定ならば、先に、Cyrus-SASLをインストールするべきかもしれない。
! postfixのオプション選択肢
おおむね下記のようにチェックを入れた。「Would you like to activate Postfix in /etc/mail/mailer.conf [n]? 」のような質問には、「y」と答えている。
[ ] NOPCRE DISABLE Perl Compatible Regular Expressions
[X] SASL Cyrus SASLv1 (Simple Authentication and Security Layer)
[X] SASL2 Cyrus SASLv2 (Simple Authentication and Security Layer)
[ ] SASLKRB If your SASL requires Kerberos select this option
[ ] SASLKRB5 If your SASL requires Kerberos5 select this option
[ ] SASLKRB5MIT If your SASL requires MIT Kerberos5 select this option
[X] SPF SPF support
[X] TLS SSL and TLS
[ ] BDB Berkeley DB (select version using WITH_BDB_VER variable)
[X] MySQL MySQL map lookups (choose version with WITH_MYSQL_VER)
[X] PgSQL PostgreSQL map lookups (choose with DEFAULT_PGSQL_VER)
[ ] OpenLDAP OpenLDAP map lookups (choose ver. with WITH_OPENLDAP_VER)
[ ] CDB CDB map lookups
[ ] NIS NIS map lookups
[X] VDA VDA (Virtual Delivery Agent)
[ ] Test SMTP/LMTP test server and generator
---
NOPCRE - Perl互換正規表現ライブラリ、フィルタリング等で使用。無効にするかどうか。
SASL - SMTP Auth。最近は標準的に使われる。
SASL2 -
SASLKRB -
SASLKRB5 -
SASLKRB5MIT -
SPF - Sender Policy Framework。ドメイン名を認証するというような考え方。
TLS - SSL暗号化の利用。
BDB - 認証にBerkeley DBを使う。
MySQL - 認証にMySQLを使う。
PgSQL - 認証にPostgreSQLを使う。
OpenLDAP - 認証にOpenLDAPを使う。
CDB - file_name.cdbを使うか
NIS - ?
VDA - ? バーチャルホスト関連か、Quotaと関係するかも?
Test - ?
! SASLのオプション
PostfixのインストールオプションへCyrus SASLを指定すると、Cyrus SASLのインストールも行われますが、同時にオプション選択を行わなければなりません。
= Additional Cyrus SASL options =
Please select desired options:
[X] NDBM ndbm DB
[ ] DB3 Berkeley DB, revision 3
[ ] JAVA JavaSASL [Experimental]
[ ] MySQL MySQL password Authentication
[ ] OpenLDAP1 OpenLDAP 1.x password Authentication
[ ] OpenLDAP2 OpenLDAP 2.x password Authentication w/TLS
[ ] PWCHECK Use pwcheck for password Authentication
[ ] PAMPWCHECK Use pwcheck_pam for password Authentication
[X] SASLAUTHD Use saslauthd for password Authentication
! 設定
= 設定ファイル =
ee /usr/local/etc/postfix/main.cf
= 必要に応じて追加するファイルの例 =
ee /usr/local/etc/postfix/db_virtual_alias_maps.cf
ee /usr/local/etc/postfix/db_virtual_domains_maps.cf
ee /usr/local/etc/postfix/db_virtual_mailbox_maps.cf
ログに余計なものが表示されないよう、設定しておくと良い。
ee /etc/periodic.conf
= 記述例 =
daily_clean_hoststat_enable="NO"
daily_status_mail_rejects_enable="NO"
daily_status_include_submit_mailq="NO"
daily_submit_queuerun="NO"
! 自動起動の設定
/usr/local/etc/rc.d以下に自動起動に関する設定ファイルは置かれている。ports導入後に設置されているはずなので、rc.confへ起動を有効にするよう書き込む。postfixの動作を有効と宣言することの他、sendmail関連の動作を調整しなければならない。
ee /etc/rc.conf
= 記述例 =
postfix_enable="YES"
(mysqlをportsからインストールした場合に必要)
mysql_enable="YES"
(sendmail関連の設定)
sendmail_enable="NO"
sendmail_submit_enable="NO"
sendmail_outbound_enable="NO"
sendmail_msp_queue_enable="NO"
(sendmailについては下記のように紹介する文献もあった)
sendmail_enable="YES"
sendmail_flags="-bd"
sendmail_pidfile="/var/spool/postfix/pid/master.pid"
sendmail_outbound_enable="NO"
sendmail_submit_enable="NO"
sendmail_msp_queue_enable="NO"
! ひとまず起動
自動起動用のスクリプトを使うのが確実。rc.confの設定が終わっていないと起動されない。
= 自動起動スクリプトを使う起動 =
/usr/local/etc/rc.d/mysql-server.sh start
/usr/local/etc/rc.d/postfix.sh start
= 自動起動スクリプトを使う停止 =
/usr/local/etc/rc.d/mysql-server.sh stop
/usr/local/etc/rc.d/postfix.sh stop
! メール関連ログの例
/var/log以下にログはできる。古いものがローテーションされて残っている。起動したら確認できる。
cd /var/log
ee /var/log/maillog
! インストール完了時の表示
===> Installing rc.d startup script(s)
===> Compressing manual pages for postfix-2.3.1,1
===> Registering installation for postfix-2.3.1,1
===> SECURITY REPORT:
This port has installed the following binaries which execute with
increased privileges.
/usr/local/sbin/postdrop
/usr/local/sbin/postqueue
This port has installed the following files which may act as network
servers and may therefore pose a remote security risk to the system.
/usr/local/libexec/postfix/nqmgr
/usr/local/libexec/postfix/qmgr
/usr/local/libexec/postfix/showq
/usr/local/libexec/postfix/master
/usr/local/libexec/postfix/error
/usr/local/libexec/postfix/scache
/usr/local/libexec/postfix/qmqpd
/usr/local/libexec/postfix/anvil
/usr/local/libexec/postfix/cleanup
/usr/local/libexec/postfix/pickup
/usr/local/libexec/postfix/discard
/usr/local/libexec/postfix/virtual
/usr/local/libexec/postfix/oqmgr
/usr/local/libexec/postfix/verify
/usr/local/libexec/postfix/spawn
/usr/local/libexec/postfix/local
/usr/local/libexec/postfix/flush
/usr/local/libexec/postfix/tlsmgr
/usr/local/libexec/postfix/bounce
/usr/local/libexec/postfix/smtpd
/usr/local/libexec/postfix/pipe
/usr/local/libexec/postfix/smtp
/usr/local/libexec/postfix/proxymap
/usr/local/libexec/postfix/trivial-rewrite
/usr/local/libexec/postfix/lmtp
This port has installed the following startup scripts which may cause
these network services to be started at boot time.
/usr/local/etc/rc.d/postfix.sh
If there are vulnerabilities in these programs there may be a security
risk to the system. FreeBSD makes no guarantee about the security of
ports included in the Ports Collection. Please type 'make deinstall'
to deinstall the port if this is a concern.
For more information, and contact details about the security
status of this software, see the following webpage:
http://www.postfix.org/
! 旧postfix
To enable postfix rcNG startup script please add postfix_enable="YES" in
your rc.conf
If you not need sendmail anymore, please add in your rc.conf:
sendmail_enable="NO"
sendmail_submit_enable="NO"
sendmail_outbound_enable="NO"
sendmail_msp_queue_enable="NO"
And you can disable some sendmail specific daily maintenance routines in your
/etc/periodic.conf file:
daily_clean_hoststat_enable="NO"
daily_status_mail_rejects_enable="NO"
daily_status_include_submit_mailq="NO"
daily_submit_queuerun="NO"
If you are using SASL, you need to make sure that postfix has access to read
the sasldb file. This is accomplished by adding postfix to group mail and
making the /usr/local/etc/sasldb* file(s) readable by group mail (this should
be the default for new installs).
If you are upgrading from postfix version prior to 2.0, please see the README
files for recommended changes to your configuration.
===> Installing rc.d startup script(s)
===> Compressing manual pages for postfix-2.2.10_1,1
===> Registering installation for postfix-2.2.10_1,1
===> SECURITY REPORT:
This port has installed the following binaries which execute with
increased privileges.
/usr/local/sbin/postqueue
/usr/local/sbin/postdrop
This port has installed the following files which may act as network
servers and may therefore pose a remote security risk to the system.
/usr/local/libexec/postfix/nqmgr
/usr/local/libexec/postfix/tlsmgr
/usr/local/libexec/postfix/smtpd
/usr/local/libexec/postfix/lmtp
/usr/local/libexec/postfix/cleanup
/usr/local/libexec/postfix/virtual
/usr/local/libexec/postfix/oqmgr
/usr/local/libexec/postfix/master
/usr/local/libexec/postfix/anvil
/usr/local/libexec/postfix/qmgr
/usr/local/libexec/postfix/proxymap
/usr/local/libexec/postfix/pipe
/usr/local/libexec/postfix/trivial-rewrite
/usr/local/libexec/postfix/smtp
/usr/local/libexec/postfix/local
/usr/local/libexec/postfix/bounce
/usr/local/libexec/postfix/verify
/usr/local/libexec/postfix/spawn
/usr/local/libexec/postfix/scache
/usr/local/libexec/postfix/discard
/usr/local/libexec/postfix/showq
/usr/local/libexec/postfix/pickup
/usr/local/libexec/postfix/flush
/usr/local/libexec/postfix/qmqpd
/usr/local/libexec/postfix/error
This port has installed the following startup scripts which may cause
these network services to be started at boot time.
/usr/local/etc/rc.d/postfix.sh
If there are vulnerabilities in these programs there may be a security
risk to the system. FreeBSD makes no guarantee about the security of
ports included in the Ports Collection. Please type 'make deinstall'
to deinstall the port if this is a concern.
For more information, and contact details about the security
status of this software, see the following webpage:
http://www.postfix.org/
===> Cleaning for pcre-6.6_1
===> Cleaning for rc_subr-1.31_1
===> Cleaning for postfix-2.2.10_1,1
|
[ 関連文書 ]Cyrus-SASL2 (2006.07.31)
PostfixをPortsからインストールすると選べるオプションを選び直したいのですが? (2006.06.06)
| 文書番号 |
06925 |
| 日付 |
2006.06.06 |
| 参照数 |
678 |
|
