Bearbeiten von „StuRa:Server/SRS14/2018“

Verwendungszweck: [[mailman]] für [http://lists.htw.stura-dresden.de lists.htw.stura-dresden.de]

== [[Server/Jails/SRS14/Ports |Ports]] ==

{{:Server/Jails/SRS14/Ports}}

== zusätzliche Konfigurationsdateien ==

=== Jail ===

==== /etc/rc.conf ====

 <code>
 apache22_enable="YES"
 mailman_enable="YES"
 sshd_enable="YES"
 dovecot_enable="YES"
 </code>

== Konfiguration der Programme ==

=== apache ===

==== httpd.conf ====

 <code>
 …
 ServrerAdmin '''you@example.com'''
 …
 
 ServerName '''www.example.com''':80
 …
 # Virtual hosts
 Include etc/apache22/extra/httpd-vhosts.conf
 …
 </code>

==== httpd-vhost.conf ====

 <code><b>
 # Mailman mailing list domain.
 #
 <Virtualhost *:80>
   ServerAdmin webmaster@stura.htw-dresden.de
   DocumentRoot "/usr/local/mailman/lists"
   ServerName lists.stura.htw-dresden.de
   ServerAlias lists.stura.htw-dresden.de
   <Directory /usr/local/mailman/archives/>
       Options FollowSymLinks
       AllowOverride None
   </Directory>
   Alias /pipermail/ /usr/local/mailman/archives/public/
   Alias /images/mailman/ /usr/share/images/mailman/
   ScriptAlias /admin /usr/local/mailman/cgi-bin/admin
   ScriptAlias /admindb /usr/local/mailman/cgi-bin/admindb
   ScriptAlias /confirm /usr/local/mailman/cgi-bin/confirm
   ScriptAlias /create /usr/local/mailman/cgi-bin/create
   ScriptAlias /edithtml /usr/local/mailman/cgi-bin/edithtml
   ScriptAlias /listinfo /usr/local/mailman/cgi-bin/listinfo
   ScriptAlias /options /usr/local/mailman/cgi-bin/options
   ScriptAlias /private /usr/local/mailman/cgi-bin/private
   ScriptAlias /rmlist /usr/local/mailman/cgi-bin/rmlist
   ScriptAlias /roster /usr/local/mailman/cgi-bin/roster
   ScriptAlias /subscribe /usr/local/mailman/cgi-bin/subscribe
   ScriptAlias /mailman/ /usr/local/mailman/cgi-bin/
   ScriptAlias / /usr/local/mailman/cgi-bin/listinfo
   <Directory "/usr/local/mailman">
      AllowOverride All
      Options FollowSymlinks
      Order allow,deny
      Allow from all
   </Directory>
   ErrorLog /var/log/mailman-error.log
 #   CustomLog /var/log/mailman-access.log combined
 </Virtualhost>
 ...</b>
 </code>

NOTE:

Notice the addition of the default HTTP directory. The reason for this is due to the fact that once virtual hosting is enabled, the default directory used by Apache is the first VirtualHost listed in the httpd-vhosts.conf file. So, make sure that what ever site you plan on using as the default site for that machine comes first in the list of virtual hosts in the httpd-vhosts.conf file.

After adding the above VirtualHost directive, you can delete or comment out the remaining lines in the httpd-vhosts.conf file being as they’re just the default examples and pretty much useless.

=== dovecot2 ===

default config kopieren

 <code>
 # cp /usr/local/share/doc/dovecot/example-config/dovecot.conf /usr/local/etc/dovecot/dovecot.conf
 </code>

==== dovecot.conf ====

 <code>
 protocols = imap pop3
 disable_plaintext_auth = no
 ssl = no
 mail_location = mbox:~/mail/:INBOX=/var/mail/%u
 mail_privileged_group = mail
 protocol imap {
  imap_client_workarounds = delay-newmail outlook-idle netscape-eoh tb-extra-mailbox-sep
 }
 </code>

=== maildrop ===

* maildir in users homeverzeichnis anlegen
 <code>
 maildrop-maildirmake Mail
 </code>

* im homeverzeichnis die Datei .mailfilter anlegen:

 <code>
 MAILBOX="$HOME/Mail"
 DEFAULT="$MAILBOX"
 </code>

* chmod 600 .mailfilter
* maildrop in postfix main.cf einarbeiten

 <code>
 mailbox_command = /usr/local/bin/maildrop -d ${USER}
 </code>

=== mailman ===

 <!--<code>
 # cd /usr/local/mailman
 # fetch http://www.gurulabs.com/downloads/postfix-to-mailman-2.1.py
 # mv postfix-to-mailman-2.1.py postfix-to-mailman.py
 # chmod 750 postfix-to-mailman.py
 # chown mailman:nobody postfix-to-mailman.py
 </code>

==== /usr/local/mailman/postfix-to-mailman.py ====

 <code>
 '''#! /usr/local/bin/python'''
 …
 # Configuration variables – Change these for your site if necessary.
 MailmanHome = “'''/usr/local/mailman'''“; # Mailman home directory.
 MailmanOwner = “'''postmaster@domain.tld'''“; # Postmaster and abuse mail recipient.
 …
 </code>--->

==== Set Site Password ====

 <code>
 # cd /usr/local/mailman
 # bin/mmsitepass
 New site password: '''mailman_password'''
 Again to confirm password: '''mailman_password'''
 </code>

==== Create Mailman list ====

 <code>
 # bin/newlist
 Enter the name of the list: '''mailman'''
 Enter the email of the person running the list: '''you@domain.tld'''
 Initial mailman password: '''list_password'''
 
 You’ll then see instructions to add aliases for the mailing list. We need not worry about that because everything
 is virtual. So, proceeding… Hit enter to notify mailman owner… ENTER
 
 bin/genaliases
 </code>


=== Listen auf andere Domain ===

Realisiert durch den Shell Einzeiler: 

Einzelne:
 <code>
 bin/withlist -l -r fix_url <liste> -u <domain>
 </code>
Alle:
 <code>
 bin/list_lists -b | xargs -I % bin/withlist -l -r fix_url % -u <domain>
 </code>

==== Add list to Mailman configuration file /usr/local/mailman/Mailman/mm_cfg.py ====

 <code>
 MTA = 'Postfix'
 # The default language for this server.
 DEFAULT_SERVER_LANGUAGE = 'de'
 # Unset send_reminders on newly created lists
 DEFAULT_SEND_REMINDERS = 0
 DEFAULT_SEND_WELCOME_MSG = 0
 DEFAULT_SEND_GOODBYE_MSG = 0
 DEFAULT_ADMIN_NOTIFY_MCHANGES = 1
 DEFAULT_NEW_MEMBER_OPTIONS = 272
 DEFAULT_RESPOND_TO_POST_REQUESTS = 0 
 DEFAULT_ADMINISTRIVIA = 0
 DEFAULT_MAX_MESSAGE_SIZE = 0
 DEFAULT_MAX_NUM_RECIPIENTS = 0
 DEFAULT_REQUIRE_EXPLICIT_DESTINATION = 0
 # SUBSCRIBE POLICY
 # 0 - open list (only when ALLOW_OPEN_SUBSCRIBE is set to 1) **
 # 1 - confirmation required for subscribes
 # 2 - admin approval required for subscribes
 # 3 - both confirmation and admin approval required
 #
 # ** please do not choose option 0 if you are not allowing open
 # subscribes (next variable)
 DEFAULT_SUBSCRIBE_POLICY = 3
 # Does this site allow completely unchecked subscriptions?
 ALLOW_OPEN_SUBSCRIBE = Yes
 
 # Private_roster == 0: anyone can see, 1: members only, 2: admin only.
 DEFAULT_PRIVATE_ROSTER = 0
 
 # Are archives public or private by default?
 # 0=public, 1=private
 DEFAULT_ARCHIVE_PRIVATE = 1
 
 # What shold happen to non-member posts which are do not match explicit
 # non-member actions?
 # 0 = Accept
 # 1 = Hold
 # 2 = Reject
 # 3 = Discard
 DEFAULT_GENERIC_NONMEMBER_ACTION = 0
 
 SMTPHOST = 'localhost'
 # Put YOUR site-specific settings below this line.
 add_virtualhost('lists.domain.tld','domain.tld')
 add_virtualhost('domain.tld','domain.tld')
 OWNERS_CAN_DELETE_THEIR_OWN_LISTS = 'YES'
 </code>

==== geänderte allgemeine Listen-Informationsseite ====

===== geänderte allgemeine Listen-Informationsseite für [[Mail-Verteiler#Mail-Verteiler, in die sich keine Person einschreiben soll | Mail-Verteiler, in die sich keine keine Person einschreiben soll]] =====

; Entfernung von:
 <nowiki>
   <p>Sie können im folgenden Abschnitt diese Liste abonnieren
     oder ein bestehendes Abonnement ändern.
   </td>
 </tr>
 <TR>
   <TD COLSPAN="2" WIDTH="100%" BGCOLOR="#FFF0D0">
     <B><FONT COLOR="#000000">Abonnieren von <MM-List-Name></FONT></B>
   </TD>
 </TR>
 <tr>
   <td colspan="2">
   <P>
   Abonnieren Sie <MM-List-Name>, indem Sie das folgende Formular
   ausfüllen:
   <MM-List-Subscription-Msg>
   <ul>
     <MM-Subscribe-Form-Start>
     <TABLE BORDER="0" CELLSPACING="2" CELLPADDING="2" WIDTH="70%">
     <TR>
       <TD BGCOLOR="#dddddd" WIDTH="55%">Ihre E-Mail-Adresse:</TD>
       <TD WIDTH="33%"><MM-Subscribe-Box></TD>
       <TD WIDTH="12%"> </TD>
     </TR>
     <tr>
       <td bgcolor="#dddddd" width="55%">Ihr Name (optional):</td>
       <td width="33%"><mm-fullname-box></td>
       <TD WIDTH="12%"> </TD>
     </TR>
     <TR>
       <TD COLSPAN="3"><FONT SIZE=-1>Sie können weiter unten ein Passwort
       eingeben. Dieses Passwort bietet nur eine geringe Sicherheit,
       sollte aber verhindern, dass andere Ihr Abonnement
       manipulieren. <b>Verwenden Sie kein wertvolles Passwort</b>,
       da es ab und zu im Klartext an Sie geschickt wird!

       <br><br>Wenn Sie kein Passwort eingeben, wird für Sie ein
       Zufallspasswort generiert und Ihnen zugeschickt, sobald Sie Ihr
       Abonnement bestätigt haben. Sie können sich Ihr Passwort
       jederzeit per E-Mail zuschicken lassen, wenn Sie weiter unten
       die Seite zum ändern Ihrer persönlichen Einstellungen aufrufen.
       <MM-Reminder> 	</font></TD>
     </TR>
     <TR>
       <TD BGCOLOR="#dddddd">Wählen Sie ein Passwort:</TD>
       <TD><MM-New-Password-Box></TD>
       <TD> </TD>
     </TR>
     <TR>
       <TD BGCOLOR="#dddddd">Erneute Eingabe zur Bestätigung:</TD>
       <TD><MM-Confirm-Password></TD>
       <TD>  </TD>
     </TR>
     <tr>
       <TD BGCOLOR="#dddddd">Welche Sprache bevorzugen Sie zur
       Benutzerführung?</TD>
       <TD> <MM-list-langs></TD>
       <TD>  </TD>
     </TR>
     <mm-digest-question-start>
     <tr>
       <td>Möchten Sie die Listenmails gebündelt in Form einer täglichen
       Zusammenfassung (digest) erhalten?
       </td>
       <td><MM-Undigest-Radio-Button>Nein
	<MM-Digest-Radio-Button>Ja
       </TD>
     </tr>
     <mm-digest-question-end>
     <tr>
       <td colspan="3">
         <center><MM-Subscribe-Button></center>
       </td>
     </tr>
     </TABLE>
     <MM-Form-End>
     </ul>
 </nowiki>

 <nowiki>
 <TR>
   <TD COLSPAN="2" WIDTH="100%" BGCOLOR="#FFF0D0">
   <B><FONT COLOR="#000000">Austragen / Ändern einer Mailadresse</FONT></B>
   </TD>
 </TR>
   <TD COLSPAN="2" WIDTH="100%">
     <MM-Options-Form-Start>
     <br>
     <MM-Editing-Options>
     <br>
     <MM-Form-End>
   </td>
  </tr>
 </nowiki>

=== postfix ===

==== /usr/local/etc/postfix/main.cf ====

 <code> 
 alias_database = hash:/etc/aliases, hash:/etc/aliases.stura
 alias_maps = hash:/etc/aliases, hash:[[#/etc/aliases.stura |/etc/aliases.stura ]], hash:/usr/local/mailman/data/aliases
 command_directory = /usr/local/sbin
 config_directory = /usr/local/etc/postfix
 daemon_directory = /usr/local/libexec/postfix
 data_directory = /var/db/postfix
 home_mailbox = Mail/
 html_directory = /usr/local/share/doc/postfix
 inet_interfaces = all
 inet_protocols = ipv4
 local_recipient_maps = unix:passwd.byname $alias_maps
 mail_owner = postfix
 mail_spool_directory = /var/mail
 mailbox_command = /usr/local/bin/maildrop -d ${USER}
 mailq_path = /usr/local/bin/mailq
 manpage_directory = /usr/local/man
 mydestination = $myhostname, localhost.$mydomain, localhost, $mydomain
 mydomain = stura.htw-dresden.de
 myhostname = mail.stura.htw-dresden.de
 mynetworks = <interne IP-Adresse> 127.0.0.0/24
 myorigin = $myhostname
 newaliases_path = /usr/local/bin/newaliases
 queue_directory = /var/spool/postfix
 readme_directory = /usr/local/share/doc/postfix
 sample_directory = /usr/local/etc/postfix
 sendmail_path = /usr/local/sbin/sendmail
 setgid_group = maildrop
 
 smtpd_client_restrictions =
     permit_mynetworks,
     reject_rbl_client bl.spamcop.net,
     reject_rbl_client dnsbl.sorbs.net
 
 smtpd_helo_restrictions =
     permit_mynetworks,
     reject_invalid_helo_hostname,
     reject_non_fqdn_helo_hostname,
     reject_unknown_helo_hostname
 
 smtpd_recipient_restrictions =
     reject_invalid_hostname,
     reject_unknown_recipient_domain,
     reject_rbl_client sbl.spamhaus.org,
     permit
 
 smtpd_relay_restrictions =
     permit_mynetworks,
     defer_unauth_destination
 
 smtpd_sender_restrictions =
     permit_mynetworks,
     reject_unknown_sender_domain,
     reject_non_fqdn_sender
 
 unknown_local_recipient_reject_code = 550
 </code>

===== <code>rhsbl.ahbl.org</code> für <code>reject_rhsbl_sender</code> bei <code>smtpd_sender_restrictions</code> entfernt =====

In er Datei <code>/usr/local/etc/postfix/main.cf</code> gab es (auch) den Eintrag
<pre></pre>
<pre>
smtpd_sender_restrictions = 
</pre>
<pre></pre>
<pre>
reject_rhsbl_sender rhsbl.ahbl.org
</pre>
<pre></pre>
.

Spätestens [https://www.ahbl.org/content/last-notice-wildcarding-services-jan-1st seit Beginn 2015] führte, das zu Problemen. (Im Übrigen war [https://www.ahbl.org/content/changes-ahbl dies seit Monaten bekannt], jedoch gab es keine ordentliche Betreuung der [[Rechentechnik]] mehr, die solche absehbaren Probleme vorbereitend beseitigte.) Konkret wurden alle [[E-Mail]]s für den [[StuRa]] nicht angenommen, da sie über [[srs14]] (gemäß [[Domains#stura.htw-dresden.de DNS|DNS für <code>stura.htw-dresden.de</code>]] <code>mail.stura.htw-dresden.de</code> und <code>lists.stura.htw-dresden.de</code>) gingen und dieser Eintrag zur Abweisung führte.

"Ehemalige" ersetzten den Eintrag "auf die Schnelle" ersatzlos.

Eigentlich wäre es wünschenswert, wenn es einen guten Ersatz geben würde. Aktuell gibt es nur noch einen derartigen (<code>[http://www.postfix.org/postconf.5.html#reject_rhsbl_sender reject_rhsbl_sender]</code>) Eintrag, sodass es keine weitere Möglichkeit zum Ausweichen gäbe.

==== /etc/aliases.stura ====

Datei um [[Mail-Adresse | Mail-Adressen]] anzulegen. Diese sind simple Weiterleitungen.


=== [[Server/Dokumentation#ssh | ssh ]] ===

siehe [[Server/Dokumentation#ssh]]

== Siehe auch ==
* [[mailman]]
* [[Server/Dokumentation]]

== Weblinks ==
* [http://www.freebsddiary.org/postfix.php Manual: Postfix on FreeBSD]
* [http://www.freebsddiary.org/mailman.php Manual: Mailman on FreeBSD]
* [http://www.purplehat.org/?page_id=18 Manual: Mailman on FreeBSD with Postfix]
* [https://www.gnu.org/software/mailman/index.html GNU Mailman] (offical website)

[[Kategorie:Mail]]
[[Kategorie:Rechentechnik]]
[[Kategorie:Software]]
[[Kategorie:Jail]]