Postfix安全设置.docx

Postfix安全设置配置Cyrus-sasl安装完成后，启动该服务/etc/init.d/saslauthd start //启动Cyrus-sasl服务。chkconfig saslauthd on //把Cyrus-sasl设置为开机自启动。测试一下是否成功：testsaslauthd –u 系统用户名 –p ‘对应的密码’或/usr/sbin/testsaslauthd –u 系统用户名 –p ‘对应的密码’如果提示0: OK Success.则说明已安装成功！注：Cyrus-sasl的功能就是实现密码验证机制。配置SMTP现在，开始配置Postfix，Postfix的功能就是实现SMTP服务，也即信件发送服务。Postfix的主要配置文档是/etc/postfix/main.cf，如果没看到mail.cf文档则请执行：cp /etc/postfix/main.cf.default /etc/postfix/main.cf然后修改main.cf的相关内容。具体内容如下：alias_database = hash:/etc/aliasesalias_maps = hash:/etc/aliasescommand_directory = /usr/sbinconfig_directory = /etc/postfixdaemon_directory = /usr/libexec/postfixdebug_peer_level = 2header_checks = regexp:/etc/postfix/header_checkshtml_directory = nomailbox_size_limit = 102400000mailq_path = /usr/bin/mailq.postfixmanpage_directory = /usr/share/manmydestination = $myhostname, localhost.$mydomain, localhost, $mydomainmydomain = 域名myhostname = mail.域名mynetworks = /24, /8, 00/32myorigin = $mydomainnewaliases_path = /usr/bin/newaliases.postfixreadme_directory = /usr/share/doc/postfix-1.1.11/README_FILESrelay_domains = sample_directory = /usr/share/doc/postfix-1.1.11/samplessendmail_path = /usr/sbin/sendmail.postfixsetgid_group = postdropsmtpd_sasl_auth_enable = yessmtpd_sasl_local_domain= smtpd_recipient_restrictions =permit_sasl_authenticatedpermit_auth_destinationpermit_mynetworkscheck_relay_domainreject_rbl_client .twreject_rbl_client reject_rbl_client reject_rbl_client reject_non_fqdn_senderreject_non_fqdn_recipientreject_unknown_sender_domainreject_unknown_recipient_domainrejectbroken_sasl_auth_clients = yessmtpd_client_restrictions = permit_sasl_authenticatedsmtpd_recipient_restrictions = permit_sasl_authenticatedsmtpd_sasl_security_options=noanonymousunknown_local_recipient_reject_code = 550Postfix配置文件默认情况下，没有启用SMTP认证机制，所以，需要修改postfix的主配置main.cf文件，也即上面以smtpd开头的，这些就是实现SMTP功能的配置内容！现在可以启动postfix服务：/etc/init.d/postfix start??????? //启动postfix服务chkconfig postfix on//设置postfix开机自启动。可以通过netstat –ntl进行查看SMTP的端口(25)是否起来然后就可以进行测试是否能发信，如