Переход с sendmail на exim

Вот и настала пора практически поработать. Нужен почтовик на Exim. Больше никаких комментариев не было. Будем делать как сказали ;)

site# uname -a
FreeBSD site.nax.ua 7.0-RELEASE FreeBSD 7.0-RELEASE #0: Sun Feb 24 19:59:52 UTC 2008     root@logan.cse.buffalo.edu:/usr/obj/usr/src/sys/GENERIC  i386

Первым делом ставим Exim из портов. я запустил /usr/ports/mail/exim-mysql

потянулись зависимости. Сервер mySQL будет крутится на этой-же машине. ставим и его.

Нужен антивирус - ставим ClamAV. Бесплатно и сердито.

устанавливаем saslauthd.

выключаем sendmail в /etc/mail/mailer.conf

sendmail        /usr/local/sbin/exim
send-mail       /usr/local/sbin/exim
mailq           /usr/local/sbin/exim -bp
newaliases      /usr/local/sbin/exim -bi
hoststat        /usr/local/sbin/exim
purgestat       /usr/local/sbin/exim

Дописываем exim_enable="YES", sendmail_enable="NONE" в /etc/rc.conf

site#killall -9 sendmail
site# ps -ax |grep sendmail
99571  p1  R+     0:00.00 grep sendmail
site#/usr/local/etc/rc.d/exim.sh start

 

 

Вот блин,

Вот блин, сбился начал ставить вэб -клиентов, наворачивать авторизацию.... запутался в трех соснах. Буду переделывать эту тему с разбиением на топики, вижу лезу в дебри на пустом месте

/usr/ports/security/cyrus-sasl2

пригодится авторизация. /usr/ports/security/cyrus-sasl2
#make install
........
You can use sasldb2 for authentication, to add users use: saslpasswd2 -c usernameIf you want to enable SMTP AUTH with the system Sendmail, readSendmail.READMENOTE: This port has been compiled with a default pwcheck_method of auxprop. If you want to authenticate your user by /etc/passwd, PAM or LDAP, install ports/security/cyrus-sasl2-saslauthd and set sasl_pwcheck_method to saslauthd after installing the Cyrus-IMAPd 2.X port. You should also check the /usr/local/lib/sasl2/*.conf files for the correct pwcheck_method.===> Compressing manual pages for cyrus-sasl-2.1.22===> Running ldconfig/sbin/ldconfig -m /usr/local/lib===> Registering installation for cyrus-sasl-2.1.22site#
добавляем 'saslauthd_enable="YES"' в /etc/rc.conf
#/usr/local/etc/rc.d/saslauthd.sh start

установка clamav

.....
===> Registering installation for clamav-0.92.1_1===> SECURITY REPORT: This port has installed the following files which may act as network servers and may therefore pose a remote security risk to the system./usr/local/sbin/clamd This port has installed the following startup scripts which may cause these network services to be started at boot time./usr/local/etc/rc.d/clamav-freshclam/usr/local/etc/rc.d/clamav-clamd If there are vulnerabilities in these programs there may be a security risk to the system. FreeBSD makes no guarantee about the security of ports included in the Ports Collection. Please type 'make deinstall' to deinstall the port if this is a concern. For more information, and contact details about the security status of this software, see the following webpage:http://www.clamav.net/site#

Ставим mySQL сервер

site# site# make===> Vulnerability check disabled, database not foundYou may use the following build options: WITH_CHARSET=charset Define the primary built-in charset (latin1). WITH_XCHARSET=list Define other built-in charsets (may be 'all'). WITH_COLLATION=collate Define default collation (latin1_swedish_ci). WITH_OPENSSL=yes Enable secure connections. WITH_LINUXTHREADS=yes Use the linuxthreads pthread library. WITH_PROC_SCOPE_PTH=yes Use process scope threads (try it if you use libpthread). BUILD_OPTIMIZED=yes Enable compiler optimizations (use it if you need speed). BUILD_STATIC=yes Build a static version of mysqld. (use it if you need even more speed). WITHOUT_THR_ALARM=yes Disable signals (this reduces kernel lock contention on SMP, but has the side effect that you can't kill clients that are sleeping). WITHOUT_INNODB=yes Disable support for InnoDB table handler. WITH_ARCHIVE=yes Enable support for Archive Storage Engine. WITH_CSV=yes Enable support for CSV Storage Engine. WITH_FEDERATED=yes Enable support for Federated Storage Engine. WITH_NDB=yes Enable support for NDB Cluster.===> Extracting for mysql-server-5.0.45_1=> MD5 Checksum OK for mysql-5.0.45.tar.gz.=> SHA256 Checksum OK for mysql-5.0.45.tar.gz.===> Patching for mysql-server-5.0.45_1===> Applying FreeBSD patches for mysql-server-5.0.45_1===> mysql-server-5.0.45_1 depends on file: /usr/local/bin/libtool - found===> mysql-server-5.0.45_1 depends on shared library: mysqlclient.15 - found===> Configuring for mysql-server-5.0.45_1
.....
site# make install===> Installing for mysql-server-5.0.45_1===> mysql-server-5.0.45_1 depends on shared library: mysqlclient.15 - found===> Generating temporary packing list===> Checking if databases/mysql50-server already installedmake install-recursive.....Added group "mysql".Added user "mysql".************************************************************************Remember to run mysql_upgrade (with the optional --datadir=<dbdir> flag)the first time you start the MySQL server after an upgrade from anearlier version.************************************************************************install-info --quiet /usr/local/info/mysql.info /usr/local/info/dir===> Installing rc.d startup script(s)===> Compressing manual pages for mysql-server-5.0.45_1===> Registering installation for mysql-server-5.0.45_1===> SECURITY REPORT: This port has installed the following files which may act as network servers and may therefore pose a remote security risk to the system./usr/local/libexec/mysqld This port has installed the following startup scripts which may cause these network services to be started at boot time./usr/local/etc/rc.d/mysql-server If there are vulnerabilities in these programs there may be a security risk to the system. FreeBSD makes no guarantee about the security of ports included in the Ports Collection. Please type 'make deinstall' to deinstall the port if this is a concern. For more information, and contact details about the security status of this software, see the following webpage:http://www.mysql.com/site#

установился Exim

Installing default configuration in /usr/local/etc/exim/configure.defaultmkdir -p /usr/local/etc/eximsed -e \\ "/SYSTEM_ALIASES_FILE/ s'SYSTEM_ALIASES_FILE'/etc/aliases'" \\ ../src/configure.default > ${CONFIGURE_FILE}.defaultExim installation completeIMPORTANT NOTE:===============Please read /usr/local/share/doc/exim/POST-INSTALL-NOTES for importantinformation regarding your Exim installation.Don't forget to add 'exim_enable="YES"' to rc.conf(5)===> Installing rc.d startup script(s)===> Compressing manual pages for exim-mysql-4.68===> Registering installation for exim-mysql-4.68===> SECURITY REPORT: This port has installed the following binaries which execute with increased privileges./usr/local/sbin/exim-4.68-0 This port has installed the following files which may act as network servers and may therefore pose a remote security risk to the system./usr/local/sbin/exim-4.68-0 This port has installed the following startup scripts which may cause these network services to be started at boot time./usr/local/etc/rc.d/exim If there are vulnerabilities in these programs there may be a security risk to the system. FreeBSD makes no guarantee about the security of ports included in the Ports Collection. Please type 'make deinstall' to deinstall the port if this is a concern. For more information, and contact details about the security status of this software, see the following webpage:
http://www.exim.org/site# make clean===> Cleaning for mysql-client-5.0.45_1===> Cleaning for libtool-1.5.24===> Cleaning for exim-mysql-4.68site#site#
Установка закончилась.пакеты
site# pkg_infocvsup-without-gui-16.1h_3 General network file distribution system optimized for CVSexim-mysql-4.68 High performance MTA for Unix systems on the Internetezm3-1.2_1 Easier, more portable Modula-3 distribution for building CVgettext-0.16.1_3 GNU gettext packageglib-2.14.2 Some useful routines of C programming (current stable versigmake-3.81_2 GNU version of 'make' utilitylibiconv-1.11_1 A character set conversion librarylibtool-1.5.24 Generic shared library support scriptlinux_base-fc-4_10 Base set of packages needed in Linux mode (for i386/amd64)mc-4.6.1_6 Midnight Commander, a free Norton Commander Clonemysql-client-5.0.45_1 Multithreaded SQL database (client)pcre-7.4 Perl Compatible Regular Expressions libraryperl-5.8.8_1 Practical Extraction and Report Languagepkg-config-0.22_1 A utility to retrieve information about installed libraries

начинаем с таким конфигом

site# pkg_infocvsup-without-gui-16.1h_3 General network file distribution system optimized for CVSezm3-1.2_1 Easier, more portable Modula-3 distribution for building CVgettext-0.16.1_3 GNU gettext packageglib-2.14.2 Some useful routines of C programming (current stable versigmake-3.81_2 GNU version of 'make' utilitylibiconv-1.11_1 A character set conversion librarylinux_base-fc-4_10 Base set of packages needed in Linux mode (for i386/amd64)mc-4.6.1_6 Midnight Commander, a free Norton Commander Clonepcre-7.4 Perl Compatible Regular Expressions libraryperl-5.8.8_1 Practical Extraction and Report Languagepkg-config-0.22_1 A utility to retrieve information about installed librariessite#