Почтовый сервер в связке Postfix, Dovecot
При установке будем ориентироваться на этот мануал: http://dummyluck.com/page/pochtovyi_server_nastroika_opisanie
Настройку будем производить для сервера с одним доменом. Система FreeBSD 10.1
1. Подготовка
прописываем хостнейм /etc/rc.conf
hostname="mail.megapuper.ru"
делаем изменения в хостах /etc/hosts
127.0.0.1 localhost 109.172.52.114 megapuper.ru 109.172.52.114 mail.megapuper.ru
создаём пользователя и группу vmail
# pw groupadd vmail -g 5000 # pw useradd vmail -g vmail -s /sbin/nologin -u 5000
сразу отключаем sendmail
/etc/rc.conf
sendmail_enable="NO" sendmail_submit_enable="NO" sendmail_outbound_enable="NO" sendmail_msp_queue_enable="NO"
/etc/periodic.conf
daily_clean_hoststat_enable="NO" daily_status_mail_rejects_enable="NO" daily_status_include_submit_mailq="NO" daily_submit_queuerun="NO"
2. Установка Nginx, MySQL, PHP, PHP-extension. Этот web-сервер будет использоваться для PostfixAdmin
Здесь коротко, ибо уже тыщу раз ставилось)
Nginx cтавим из пакетов
# pkg install nginx
основной конфиг /usr/local/etc/nginx/nginx.conf
user www; worker_processes 2; pid /var/run/nginx.pid; events { worker_connections 1024; } http { access_log /var/log/nginx/access.log; error_log /var/log/nginx/error.log; include /usr/local/etc/nginx/mime.types; default_type application/octet-stream; sendfile on; tcp_nopush on; tcp_nodelay on; keepalive_timeout 65; client_max_body_size 5m; server_names_hash_bucket_size 64; types_hash_max_size 2048; types_hash_bucket_size 64; include /usr/local/etc/nginx/conf/*.conf; }
конфиг виртуального хоста /usr/local/etc/nginx/conf/postfix.conf
server { listen 80; server_name postfix.megapuper.ru; root /usr/local/www/postfix; index index.php index.html index.htm; access_log /var/log/nginx/postfix.access.log; error_log /var/log/nginx/postfix.error.log; location / { # try_files $uri $uri/ /index.php?$uri&$args; } location ~ \.php$ { fastcgi_pass 127.0.0.1:10000; fastcgi_index index.php; fastcgi_param SCRIPT_FILENAME $document_root/$fastcgi_script_name; fastcgi_intercept_errors on; include fastcgi_params; } }
PHP и нужные PHP-extension тоже ставим из пакетов
# pkg install php55 # pkg install php55-* (пригодятся php55-ctype php55-dom php55-gd php55-hash php55-iconv php55-imap php55-json php55-mbstring php55-mcrypt php55-mysql php55-mysqli php55-session php55-xml)
конфиг php-fpm /usr/local/etc/php-fpm.conf
[global] error_log = /var/log/php/php-fpm.log pid = /var/run/php-fpm.pid log_level = notice include=/usr/local/etc/php/*.conf
конфиг для виртуального хоста /usr/local/etc/php/postfix.conf
[postfix] prefix = /usr/local/www/$pool listen = 127.0.0.1:10000 listen.allowed_clients = 127.0.0.1 listen.owner = www listen.group = www listen.mode = 0660 user = www group = www pm = dynamic pm.max_children = 4 pm.start_servers = 2 pm.min_spare_servers = 1 pm.max_spare_servers = 3 pm.max_requests = 100 ;pm.status_path = /status/php-fpm/$pool request_terminate_timeout = 0 request_slowlog_timeout = 1m slowlog = /var/log/php/$pool.slow.log catch_workers_output = yes
MySQL тоже из пакетов
# pkg install mysql56-server
простенький конфиг /etc/my.cnf
[mysqld] bind-address=127.0.0.1
В конфигах, где используется подключение к базе указываем хост 127.0.0.1
После этого имеем готовый web-сервер можно переходить к установке postfixadmin
3. Установка PostfixAdmin
Скачиваем последнюю версию отсюда http://sourceforge.net/projects/postfixadmin/ и заливаем на web-сервер
создаём базу и даём права пользователю
> create database postfix character set utf8 collate utf8_general_ci; > grant all on postfix.* to postfix@127.0.0.1 identified by 'пароль';
Правим основной конфиг postfixadmin config.inc.php
Spoiler
Теперь заходим на http://postfixadmin/setup.php и видим, что запустилась установка
Если все условия установки выполнены, то в базе создадутся необходимые таблицы и будет предложено создать суперадмина.
В поле Setup password вводим пароль из config.inc.php: $CONF['setup_password'] = 'пароль_установки';
Заполняем остальные поля, и после нажатия кнопки Создать сгенерится хэш.
Этот хеш надо вставить в config.inc.php : $CONF['setup_password'] = 'хеш';
Повторяем процедуру заведения суперадмина используя пароль_установки
После создания суперадмина временно оставляем postfixadmin(так как без postfix и dovecot ящики создаваться не будут)
6. Установка Postfix
Postfix ставим из портов, т.к. пакет ставится без поддержки mysql
# cd /usr/ports/mail/postfix # make install clean [X] MYSQL, PCRE, SASL2, TLS CYRUS-SASL [X] MYSQL, CRAM, DIGEST, LOGIN, PLAIN
По окончании установки активируем postfix
Would you like to activate Postfix in /etc/mail/mailer.conf [n]? y
Заведём нужные aliases /etc/aliases
www: postmaster@megapuper.ru
Инициализируем базу алиасов
# newaliases
Рихтуем основные конфиги postfix
первый /usr/local/etс/postfix/main.cf
Spoiler
второй /usr/local/etс/postfix/master.cf
# ========================================================================== # service type private unpriv chroot wakeup maxproc command + args # (yes) (yes) (yes) (never) (100) # ========================================================================== smtpd pass - - n - - smtpd smtp inet n - n - - smtpd #smtp inet n - n - 1 postscreen #smtpd pass - - n - - smtpd #dnsblog unix - - n - 0 dnsblog #tlsproxy unix - - n - 0 tlsproxy #submission inet n - n - - smtpd # -o syslog_name=postfix/submission # -o smtpd_tls_security_level=encrypt # -o smtpd_sasl_auth_enable=yes # -o smtpd_reject_unlisted_recipient=no # -o smtpd_client_restrictions=$mua_client_restrictions # -o smtpd_helo_restrictions=$mua_helo_restrictions # -o smtpd_sender_restrictions=$mua_sender_restrictions # -o smtpd_recipient_restrictions= # -o smtpd_relay_restrictions=permit_sasl_authenticated,reject # -o milter_macro_daemon_name=ORIGINATING pickup unix n - n 60 1 pickup cleanup unix n - n - 0 cleanup qmgr unix n - n 300 1 qmgr tlsmgr unix - - n 1000? 1 tlsmgr rewrite unix - - n - - trivial-rewrite bounce unix - - n - 0 bounce defer unix - - n - 0 bounce trace unix - - n - 0 bounce verify unix - - n - 1 verify flush unix n - n 1000? 0 flush proxymap unix - - n - - proxymap proxywrite unix - - n - 1 proxymap smtp unix - - n - - smtp relay unix - - n - - smtp # -o smtp_helo_timeout=5 -o smtp_connect_timeout=5 showq unix n - n - - showq error unix - - n - - error retry unix - - n - - error discard unix - - n - - discard local unix - n n - - local virtual unix - n n - - virtual lmtp unix - - n - - lmtp anvil unix - - n - 1 anvil scache unix - - n - 1 scache # ==================================================================== # Interfaces to non-Postfix software. # ==================================================================== maildrop unix - n n - - pipe flags=DRhu user=vmail argv=/usr/local/bin/maildrop -d ${recipient} # uucp unix - n n - - pipe flags=Fqhu user=uucp argv=uux -r -n -z -a$sender - $nexthop!rmail ($recipient) # #ifmail unix - n n - - pipe # flags=F user=ftn argv=/usr/lib/ifmail/ifmail -r $nexthop ($recipient) #bsmtp unix - n n - - pipe # flags=Fq. user=bsmtp argv=/usr/lib/bsmtp/bsmtp -t$nexthop -f$sender $recipient #scalemail-backend unix - n n - 2 pipe # flags=R user=scalemail argv=/usr/lib/scalemail/bin/scalemail-store ${nexthop} ${user} ${extension} #mailman unix - n n - - pipe # flags=FR user=list argv=/usr/lib/mailman/bin/postfix-to-mailman.py # ${nexthop} ${user} # python-postfix-policyd-spf #policyd-spf unix - n n - 0 spawn # user=nobody argv=/usr/bin/python /usr/bin/policyd-spf #retry unix - - - - - error # ====================================================================
Создаём таблицы данных формата "hash" и базы с помощью команды postmap
Необходимо создать файлы и базы со списками, которые были подключены в конфиге выше, даже если они будут пустыми
# touch aliases_lmtp # touch aliases_smtp_output # postmap aliases_lmtp # postmap aliases_smtp_output
Создаём файлы, хранящие SQL-запросы, проверяя имена таблиц и полей (в очередной версии PostfixAdmin они могут измениться)
[/usr/local/etc/postfix/maps/mysql_virtual_maps.cf] user = postfix password = пароль hosts = 127.0.0.1 dbname = postfix query = SELECT username FROM mailbox WHERE username='%s' AND active = '1'
[/usr/local/etc/postfix/maps/mysql_virtual_domains.cf] user = postfix password = пароль hosts = 127.0.0.1 dbname = postfix query = SELECT domain FROM domain WHERE domain = '%s' AND backupmx = '0' AND active = '1'
[/usr/local/etc/postfix/maps/mysql_virtual_alias_maps.cf] user = postfix password = пароль hosts = 127.0.0.1 dbname = postfix query = SELECT goto FROM alias WHERE address='%s' AND active = '1'
[/usr/local/etc/postfix/maps/mysql_virtual_alias_domain_maps.cf] user = postfix password = пароль hosts = 127.0.0.1 dbname = postfix query = SELECT CONCAT('%u', '@', target_domain) FROM alias_domain WHERE alias_domain = '%d' AND active = 1
[/usr/local/etc/postfix/maps/mysql_bcc_domain_maps.cf] user = postfix password = пароль hosts = 127.0.0.1 dbname = postfix query = SELECT 'bccsnd+bccflag@megapuper.ru' FROM domain WHERE domain='%d' AND active = '1'
[/usr/local/etc/postfix/maps/mysql_bcc_mailbox_maps.cf] user = postfix password = пароль hosts = 127.0.0.1 dbname = postfix query = SELECT CONCAT('%u', '+bccflag', '@', '%d') FROM mailbox WHERE username='%s' AND active = '1'
Выставляем права на конфиги
# chgrp postfix /usr/local/etc/postfix/*.cf # chgrp postfix /usr/local/etc/postfix/maps/*.cf # chmod u=rw,g=r,o= /usr/local/etc/postfix/*.cf # chmod u=rw,g=r,o= /usr/local/etc/postfix/maps/*.cf
Рестартим postfix
# /usr/local/etc/rc.d/postfix restart
7. Установка Dovecot
Dovecot ставим из портов
# cd /usr/ports/mail/dovecot2/ # make install clean [X] MYSQL
Устанавливаем поддержку языка Sieve в Dovecot(включает в себя настройку скриптов пользователями)
# pkg install dovecot-pigeonhole
Настраиваем конфиги dovecot
[/usr/local/etc/dovecot/dovecot.conf] # Enable installed protocols #!include_try /usr/share/dovecot/protocols.d/*.protocol protocols = imap lmtp sieve !include conf.d/*.conf
[/usr/local/etc/dovecot/conf.d/10-director.conf] service director { unix_listener login/director { #mode = 0666 } fifo_listener login/proxy-notify { #mode = 0666 } unix_listener director-userdb { #mode = 0600 } inet_listener { #port = } } # Enable director for the wanted login services by telling them to # connect to director socket instead of the default login socket: service imap-login { #executable = imap-login director } #service pop3-login { #executable = pop3-login director #} # Enable director for LMTP proxying: protocol lmtp { #auth_socket_path = director-userdb }
[/usr/local/etc/dovecot/conf.d/10-logging.conf] # Log file to use for error messages. "syslog" logs to syslog, # /dev/stderr logs to stderr. log_path = /var/log/dovecot/dovecot.log info_log_path = /var/log/dovecot/dovecot-info.log debug_log_path = /var/log/dovecot/dovecot-debug.log auth_verbose = no auth_verbose_passwords = no auth_debug = no auth_debug_passwords = no mail_debug = no verbose_ssl = no #plugin { #} #log_timestamp = "%b %d %H:%M:%S " #login_log_format_elements = user=<%u> method=%m rip=%r lip=%l mpid=%e %c #login_log_format = %$: %s #mail_log_prefix = "%s(%u): " # Format to use for logging mail deliveries. You can use variables: # %$ - Delivery status message (e.g. "saved to INBOX") # %m - Message-ID # %s - Subject # %f - From address # %p - Physical size # %w - Virtual size #deliver_log_format = msgid=%m: %$
Подготовим каталоги
# mkdir /var/lib/dovecot/virtual # mkdir /var/lib/dovecot/virtual/Folder # chown -R vmail:vmail /var/lib/dovecot/virtual # chmod -R 700 /var/lib/dovecot/virtual
Создаём Файл с фильтрами для виртуального каталога(для каталога Folder)
[/var/lib/dovecot/virtual/Folder/dovecot-virtual] virtual/Folder inthread refs x-mailbox INBOX
Продолжаем с конфигами
[/usr/local/etc/dovecot/conf.d/10-mail.conf] mail_location = maildir:/var/spool/mail/%d/%n:INBOX=/var/spool/mail/%d/%n namespace virt { # type = private prefix = virtual/ separator = / location = virtual:/var/lib/dovecot/virtual:INDEX=/var/spool/mail/%d/%n/virtual_index:CONTROL=/var/spool/mail/%d/%n/virtual_index inbox = no hidden = yes list = yes subscriptions = yes #mailbox Folder1 { # auto=subscribe #} } namespace allusers { type = public separator = / prefix = "allmail/%d/" location = maildir:/var/spool/mail/%d:LAYOUT=fs:INDEX=/var/spool/mail/%d/%n/allmail_index inbox = no hidden = yes list = yes subscriptions = no } namespace system_users { type = private separator = / prefix = "system_users/" location = mbox:/var/mail/:INDEX=/var/spool/mail/system_users_index inbox = no hidden = yes list = yes subscriptions = yes } namespace inbox { type = private separator = / prefix = inbox = yes hidden = no list = yes subscriptions = yes } mail_uid = 5000 mail_gid = 5000
[/usr/local/etc/dovecot/conf.d/10-master.conf] #default_process_limit = 100 #default_client_limit = 1000 #default_vsz_limit = 256M #default_login_user = dovenull #default_internal_user = dovecot service imap-login { inet_listener imap { address = * port = 143 #ssl = yes } inet_listener imaps { #port = 993 port = 0 #ssl = yes } #service_count = 1 #process_min_avail = 0 #vsz_limit = $default_vsz_limit } #service pop3-login { #inet_listener pop3 { #port = 110 #} #inet_listener pop3s { #port = 995 #ssl = yes #} #} service lmtp { unix_listener lmtp { path = /var/spool/postfix/private/dovecot-lmtp group = postfix mode = 0660 user = postfix ##mode = 0666 } #unix_listener /var/spool/postfix/private/dovecot-lmtp { # group = postfix # mode = 0660 # user = postfix # } # process_min_avail = 5 executable = lmtp -L } service imap { #vsz_limit = $default_vsz_limit # Max. number of IMAP processes (connections) #process_limit = 1024 #executable = imap } #service pop3 { # Max. number of POP3 processes (connections) #process_limit = 1024 #} service auth { unix_listener auth { path = /var/spool/postfix/private/auth mode = 0660 user = postfix group = postfix } user = $default_internal_user } service auth-worker { user = $default_internal_user } #Detail Process title in ps #verbose_proctitle = yes #service dict { #unix_listener dict { #} #}
[/usr/loca/etc/dovecot/conf.d/15-lda.conf] postmaster_address = postmaster@megapuper.ru hostname = megapuper.ru #quota_full_tempfail = no #sendmail_path = /usr/sbin/sendmail #submission_host = #rejection_subject = Rejected: %s # %n = CRLF, %r = reason, %s = original subject, %t = recipient rejection_reason = Your message to <%t> was automatically rejected:%n%r #recipient_delimiter = + #lda_original_recipient_header = #lda_mailbox_autocreate = no #lda_mailbox_autosubscribe = no protocol lda { mail_plugins = sieve virtual # log_path = /var/log/dovecot/mail-dovecot-lda-errors.log # info_log_path = /var/log/dovecot/mail-dovecot-lda.log # auth_socket_path = /var/run/dovecot/auth-master # auth_socket_path = auth-userdb # global_script_path = /var/lib/dovecot/sieve/global/globalsieverc }
[/usr/local/etc/dovecot/conf.d/20-imap.conf] protocol imap { mail_plugins = $mail_plugins imap_acl imap_quota mail_log notify acl quota virtual #ssl_cert = </etc/dovecot/ssl.cert.pem #ssl_key = </etc/dovecot/ssl.key.pem info_log_path = /var/log/dovecot-imap.log #imap_max_line_length = 64k #mail_max_userip_connections = 10 # IMAP logout format string: # %i - total number of bytes read from client # %o - total number of bytes sent to client #imap_logout_format = bytes=%i/%o #imap_capability = #imap_idle_notify_interval = 2 mins #imap_id_send = #imap_id_log = # Workarounds for various client bugs: # delay-newmail: # tb-extra-mailbox-sep: # tb-lsub-flags: # The list is space-separated. #imap_client_workarounds = }
[/usr/local/etc/dovecot/conf.d/20-lmtp.conf] #lmtp_proxy = no #lmtp_save_to_detail_mailbox = no protocol lmtp { mail_plugins = $mail_plugins quota sieve virtual postmaster_address = postmaster@megapuper.ru #info_log_path = /var/log/dovecot/dovecot-lmtp.log }
[/usr/local/etc/dovecot/conf.d/20-managesieve.conf] service managesieve-login { inet_listener sieve { address = 127.0.0.1 port = 4190 } service_count = 1 #process_min_avail = 0 vsz_limit = 64M } #service managesieve { # Max. number of ManageSieve processes (connections) #process_count = 1024 #} mail_plugins = virtual protocol sieve { #managesieve_max_line_length = 65536 #mail_max_userip_connections = 10 #mail_plugins = virtual # MANAGESIEVE logout format string: # %i - total number of bytes read from client # %o - total number of bytes sent to client #managesieve_logout_format = bytes=%i/%o #managesieve_implementation_string = Dovecot Pigeonhole #managesieve_sieve_capability = #managesieve_notify_capability = #managesieve_max_compile_errors = 5 }
[/usr/local/etc/dovecot/conf.d/90-acl.conf] plugin { #acl = vfile:/usr/local/etc/dovecot/acl/%d:cache_secs=300 acl = vfile:/usr/local/etc/dovecot/acl/%d } plugin { #acl_shared_dict = file:/var/lib/dovecot/shared-mailboxes }
Примеры ACL
Следующая настройка запрещает пользователю всё, кроме чтения/просмотра/удаления, но разрешает сохранение для LDA
В каталоге с именем домена указываем ACL для папки ".Sent".
[/usr/local/etc/dovecot/acl/megapuper.ru/Sent] owner lrwstpe
Аналогично можно настроить остальные папки (подробности - в заметке по ссылке чуть выше)
Закрываем доступ для всех кроме LDA к файлу ".dovecot.lda-dupes", который может быть виден в MUA как фантомная папка "lda-dupes":
# mkdir /usr/local/etc/dovecot/acl/megapuper.ru/dovecot/
ВАЖНО! - точка воспринимается как маркер вложенной папки.
[/etc/dovecot/acl/megapuper.ru/dovecot/lda-dupes] anyone rp
[/usr/local/etc/dovecot/conf.d/90-plugin.conf] plugin { # mail_plugins = $mail_plugins mail_log notify acl quota # For Plugin mail_log: mail_log_events = copy mail_log_fields = uid box msgid size }
[/usr/local/etc/dovecot/conf.d/90-quota.conf] plugin { quota = dict:user::file:/var/spool/mail/%d/%n/dovecot-quota quota_rule = *:storage=1GB quota_rule2 = Trash:storage=+10%% } # Note that % needs to be escaped as %%, otherwise "% " expands to empty. plugin { #quota_warning = storage=95%% quota-warning 95 %u #quota_warning2 = storage=80%% quota-warning 80 %u } #service quota-warning { # executable = script /usr/local/bin/quota-warning.sh # user = dovecot # unix_listener quota-warning { # user = mail # } #} plugin { #quota = dirsize:User quota #quota = maildir:User quota #quota = dict:User quota::proxy::quota #quota = fs:User quota } plugin { #quota = dict:user::proxy::quota #quota2 = dict:domain:%d:proxy::quota_domain #quota_rule = *:storage=102400 #quota2_rule = *:storage=1048576 }
Sieve
Все глобальные скрипты и конфигурационные файлы будут находится в соответствующих папках в: /var/lib/dovecot/sieve/global/
Все персональные настройки и файлы будут находится либо в папках пользователей, либо в каталоге: /var/lib/dovecot/sieve/private/ - в соответствующих папках.
# mkdir /var/lib/dovecot/sieve/ # mkdir /var/lib/dovecot/sieve/global/ # mkdir /var/lib/dovecot/sieve/private/ # chown -R root:wheel /var/lib/dovecot/sieve/ # chown -R root:wheel /var/lib/dovecot/sieve/global/ # chown -R root:wheel /var/lib/dovecot/sieve/private/ # chmod -R 755 /var/lib/dovecot/sieve/ # chmod -R 755 /var/lib/dovecot/sieve/global/ # chmod -R 700 /var/lib/dovecot/sieve/private/
[/usr/local/etc/dovecot/conf.d/90-sieve.conf] plugin { # sieve_user_log = /var/lib/dovecot/sieve/private/%d/%n/.main.peronal.log sieve = /var/lib/dovecot/sieve/private/%d/%n/.main.personal.sieve #sieve_default = /var/lib/dovecot/sieve/default.sieve sieve_dir = /var/lib/dovecot/sieve/private/%d/%n/ sieve_global_dir = /var/lib/dovecot/sieve/global/ #sieve_before2 = sieve_before = /var/lib/dovecot/sieve/global/incoming_deduplicate.sieve #sieve_after = #sieve_after2 = sieve_extensions = +editheader sieve_global_extensions = +vnd.dovecot.duplicate sieve_duplicate_period = 1d #sieve_plugins = recipient_delimiter = + #sieve_max_script_size = 1M #sieve_max_actions = 32 #sieve_max_redirects = 4 #sieve_quota_max_scripts = 0 #sieve_quota_max_storage = 0 }
[/usr/local/etc/dovecot/conf.d/auth-sql.conf.ext] #passdb { # driver = passwd-file # args = username_format=%u /var/spool/mail/auth.d/%d/passwd #} # Master-user: auth_master_user_separator = * #auth_debug = yes passdb { driver = sql args = /usr/local/etc/dovecot/dovecot-sql-master.conf.ext master = yes pass = yes } passdb { driver = sql args = /usr/local/etc/dovecot/dovecot-sql.conf.ext #default_fields = userdb_gid=5000 userdb_uid=5000 } userdb { driver = prefetch }
[/usr/local/etc/dovecot/dovecot-sql.conf.ext] driver = mysql connect = host=127.0.0.1 dbname=postfix user=postfix password=q default_pass_scheme = PLAIN #default_pass_scheme = PLAIN-MD5 # %u = entire user@domain # %n = user part of user@domain # %d = domain part of user@domain password_query = SELECT username as user, password, '%u' AS userdb_master_user, CONCAT('/var/spool/vmail/', maildir) AS userdb_home, 5000 AS userdb_uid, 5000 AS userdb_gid, CONCAT('*:storage=', quota, \ 'B') as userdb_quota_rule FROM mailbox WHERE username = '%u' AND active = '1' user_query = SELECT CONCAT('/var/spool/vmail/', maildir) AS home, 5000 AS uid, 5000 AS gid, CONCAT('*:storage=', quota, 'B') as quota_rule FROM mailbox WHERE username = '%u' AND active = '1' userdb { driver = sql args = /usr/local/etc/dovecot/dovecot-sql.conf.ext #default_fields = uid=5000 gid=5000 }
ВАЖНО! password_query = ..., user_query = ... - должны быть ОДНОЙ строкой (без переносов)!
[/usr/local/etc/dovecot/dovecot-sql-master.conf.ext] driver = mysql #default_pass_scheme = PLAIN-MD5 default_pass_scheme = PLAIN connect = host=127.0.0.1 dbname=postfix user=postfix password=q password_query = SELECT username AS user, password FROM admin WHERE username = '%u' AND active = '1'
Отключим неиспользуемые конфиги:
# mv /usr/local/etc/dovecot/conf.d/auth-checkpassword.conf.ext /usr/local/etc/dovecot/conf.d/auth-checkpassword.conf.ext_ # mv /usr/local/etc/dovecot/conf.d/auth-deny.conf.ext /usr/local/etc/dovecot/conf.d/auth-deny.conf.ext_ # mv /usr/local/etc/dovecot/conf.d/auth-ldap.conf.ext /usr/local/etc/dovecot/conf.d/auth-ldap.conf.ext_ # mv /usr/local/etc/dovecot/conf.d/auth-master.conf.ext /usr/local/etc/dovecot/conf.d/auth-master.conf.ext_ # mv /usr/local/etc/dovecot/conf.d/auth-passwdfile.conf.ext /usr/local/etc/dovecot/conf.d/auth-passwdfile.conf.ext_ # mv /usr/local/etc/dovecot/conf.d/auth-static.conf.ext /usr/local/etc/dovecot/conf.d/auth-static.conf.ext_ # mv /usr/local/etc/dovecot/conf.d/auth-system.conf.ext /usr/local/etc/dovecot/conf.d/auth-system.conf.ext_ # mv /usr/local/etc/dovecot/conf.d/auth-vpopmail.conf.ext /usr/local/etc/dovecot/conf.d/auth-vpopmail.conf.ext_
Меняем права и владельца конфигов:
# chgrp vmail /usr/local/etc/dovecot/*.conf # chmod g+r /usr/local/etc/dovecot/*.conf # chgrp vmail /usr/local/etc/dovecot/*.ext # chmod g+r /usr/local/etc/dovecot/*.ext # chgrp vmail /usr/local/etc/dovecot/conf.d/*.conf # chmod g+r /usr/local/etc/dovecot/conf.d/*.conf # chgrp vmail /usr/local/etc/dovecot/conf.d/*.ext # chmod g+r /usr/local/etc/dovecot/conf.d/*.ext