4 236
modifications
Ligne 287 : | Ligne 287 : | ||
=Configurer le serveur mail postfix= | =Configurer le serveur mail postfix= | ||
Par défaut, postfix fournit une configuration suffisante. Voici les modifications que j'y ai apporté : | |||
<pre> | |||
smtpd_banner = $myhostname ESMTP $mail_name (Debian/GNU) | |||
biff = no | |||
disable_vrfy_command = yes | |||
smtpd_helo_required = yes | |||
smtpd_tls_cert_file=/etc/postfix/ssl/postfix.pem | |||
smtpd_tls_key_file=/etc/postfix/ssl/postfix.key | |||
smtpd_tls_CAfile=/etc/postfix/ssl/ca_chain.pem | |||
smtp_tls_CAfile=/etc/postfix/ssl/ca_chain.pem | |||
smtpd_tls_security_level=may | |||
smtp_tls_security_level=may | |||
smtpd_tls_loglevel = 1 | |||
smtp_tls_loglevel = 1 | |||
smtp_tls_policy_maps = hash:/etc/postfix/tls_policy | |||
mydomain = proxmox.domain.tld | |||
append_dot_mydomain = yes | |||
myhostname = proxmox.domain.tld | |||
myorigin = /etc/mailname | |||
mydestination = proxmox.domain.tld, localhost.localdomain, localhost | |||
relayhost = | |||
smtp_sasl_password_maps = | |||
mynetworks = 127.0.0.0/8 | |||
relay_domains = | |||
relay_recipient_maps = | |||
inet_interfaces = 127.0.0.1, [::1], ipv4_de_votre_serveur, [ipv6_de_votre_serveur] | |||
inet_protocols = all | |||
alias_maps = proxy:hash:/etc/aliases | |||
smtpd_sasl_auth_enable = no | |||
smtpd_sasl_local_domain = $myhostname | |||
smtpd_sender_restrictions = | |||
reject_unknown_sender_domain, | |||
reject_non_fqdn_sender | |||
smtpd_recipient_restrictions = | |||
permit_inet_interfaces, | |||
permit_mynetworks, | |||
permit_sasl_authenticated, | |||
reject_non_fqdn_hostname, | |||
reject_non_fqdn_sender, | |||
reject_non_fqdn_recipient, | |||
reject_unauth_destination | |||
smtpd_client_restrictions = | |||
permit_inet_interfaces, | |||
permit_mynetworks, | |||
permit_sasl_authenticated, | |||
reject_unauth_pipelining | |||
smtpd_helo_restrictions = | |||
permit_inet_interfaces, | |||
permit_mynetworks, | |||
permit_sasl_authenticated, | |||
reject_invalid_helo_hostname, | |||
reject_non_fqdn_helo_hostname, | |||
reject_unknown_helo_hostname | |||
smtpd_data_restrictions = | |||
permit_inet_interfaces, | |||
permit_mynetworks, | |||
permit_sasl_authenticated, | |||
reject_unauth_pipelining | |||
</pre> | |||
Il faudra évidemment configurer les directives <code>inet_interfaces</code> <code>myhostname</code> et <code>mydomain</code> | |||
=Configurer les alertes raid software= | =Configurer les alertes raid software= |