Hi,
Please recommend a Dovecot book for a newbie... I have a fair amount of Linux PHP hosting experience - LAMP virtual host configurations. I'm new to BIND, Postfix, and Dovecot.
I'm running Ubuntu 20.04lts.
I have a test server almost working. Can send but not receive. Would like to understand more. I'm guessing it is a Zone (MX) / SSL / Client configuration issue.
Thanks in advance!!
I am not aware of any Dovecot specific book, but maybe a good starting point would be the Dovecot Quick Configuration guide: https://doc.dovecot.org/configuration_manual/quick_configuration/
For Postfix, a good starting point could be the VIRTUAL_README and ADDRESS_CLASS_README pages: http://www.postfix.org/VIRTUAL_README.html http://www.postfix.org/ADDRESS_CLASS_README.html
I've also heard good things about "The Book of Postfix". Even though it is quite old now, most of the parts/concepts/terminology still apply today. Part of it is also available on Google Books.
Setting up a mail server for the first time can be a bit challenging and time consuming, but once you get a hold of things, it gets much easier :)
Personally, I would take things step by step and not try to install and configure everything all at once.
You could create a local isolated virtual environment with multiple VMs (ex: 1 authoritative DNS server for local testdomain1 and testdomain2, 1 mail server for local testdomain1, 1 mail server for local testdomain2) where you could experiment freely until everything works as expected.
That way you are in control of the entire environment and you can easily debug any issues. Plus, it can be a good learning experience :)
Once messages can be sent between the local test domains without any issues, you could take that configuration and, more or less, apply it to your internet facing mail server.
Hi,
Please recommend a Dovecot book for a newbie... I have a fair amount of Linux PHP hosting experience - LAMP virtual host configurations. I'm new to BIND, Postfix, and Dovecot.
I'm running Ubuntu 20.04lts.
Can send but not receive.
Assuming everything else is set up correctly, did you check your firewall just to make sure that is not blocking incoming connections on your SMTP port?
Cheers,
K.
On 2021 Jul 07, at 13:33, Kevin N. kevin@notscheduled.eu wrote:
I've also heard good things about "The Book of Postfix". Even though it is quite old now, most of the parts/concepts/terminology still apply today. Part of it is also available on Google Books.
Despite being quote oldies you say, this is a great resource for understanding not just postfix, but how email in general works. I think it would be a handy primer for anyone trying to be a mail admin, as the concepts have not changed even if some of the commands and configurations have. Modern Postfix has more and better tools that are not mentioned in the book, especially for dealing with unwanted mail, but as a baseline, the book is still worthwhile.
ersonally, I would take things step by step and not try to install and configure everything all at once.
If you have the time, hang out reading the postfix and dovecot mailing lists, and searching the archives. Look for configuration questions that people have discussed. Do not really on a google search for something like :how to setup postfix and dovecot" because most of these results will be garbage, outdated, m or contain flat-out errors.
Pay close attention to the syntax of sample configs people post, and especially to the comments and corrections of those samples.
Also, the man pages for Postfix are very good.
The most important thing to get straight is that what you think might be the best plan for configuring your mail may in fact be a terrible idea, and you really want to do the research first.
Understanding exactly where the separation is between postfix and dovecot is crucial, and even people who've been doing this a lot can get caught out sometimes.
The Dovecot web docs are decent enough and cover the information, but I find them to be sometimes sparse on details and examples, and they are not really designed for someone starting out IMO. More for refreshing something you forgot or misremembered. Searching the list for doveconf outputs might be more fruitful, as long as you follow the threads for comments and corrections.
Whatever you do, do not setup unauthticated submission, or submission that used deprecated security settings no matter how much you thin this is a good idea. It's not. If you have to support people using ancient software, force them to use a email client like Horde or Roundcube so you maintain your mail security. IMO, YMMV. TANSTAAFL. IANAL. ETC.
Oh, and consider if you really need or want to support POP3 (I recommend not unless you have a users who want to use Gmail to suck in their mail). The more mail you are dealing with, the worse POP3 is on your system and your users.
-- Windle shook his head sadly. Five exclamation marks, the sure sign of an insane mind. --Reaper Man
Thanks!!
On 2021-07-13 07:22, @lbutlr wrote:
On 2021 Jul 07, at 13:33, Kevin N. kevin@notscheduled.eu wrote:
I've also heard good things about "The Book of Postfix". Even though it is quite old now, most of the parts/concepts/terminology still apply today. Part of it is also available on Google Books.
Despite being quote oldies you say, this is a great resource for understanding not just postfix, but how email in general works. I think it would be a handy primer for anyone trying to be a mail admin, as the concepts have not changed even if some of the commands and configurations have. Modern Postfix has more and better tools that are not mentioned in the book, especially for dealing with unwanted mail, but as a baseline, the book is still worthwhile.
ersonally, I would take things step by step and not try to install and configure everything all at once.
If you have the time, hang out reading the postfix and dovecot mailing lists, and searching the archives. Look for configuration questions that people have discussed. Do not really on a google search for something like :how to setup postfix and dovecot" because most of these results will be garbage, outdated, m or contain flat-out errors.
Pay close attention to the syntax of sample configs people post, and especially to the comments and corrections of those samples.
Also, the man pages for Postfix are very good.
The most important thing to get straight is that what you think might be the best plan for configuring your mail may in fact be a terrible idea, and you really want to do the research first.
Understanding exactly where the separation is between postfix and dovecot is crucial, and even people who've been doing this a lot can get caught out sometimes.
The Dovecot web docs are decent enough and cover the information, but I find them to be sometimes sparse on details and examples, and they are not really designed for someone starting out IMO. More for refreshing something you forgot or misremembered. Searching the list for doveconf outputs might be more fruitful, as long as you follow the threads for comments and corrections.
Whatever you do, do not setup unauthticated submission, or submission that used deprecated security settings no matter how much you thin this is a good idea. It's not. If you have to support people using ancient software, force them to use a email client like Horde or Roundcube so you maintain your mail security. IMO, YMMV. TANSTAAFL. IANAL. ETC.
Oh, and consider if you really need or want to support POP3 (I recommend not unless you have a users who want to use Gmail to suck in their mail). The more mail you are dealing with, the worse POP3 is on your system and your users.
-- Windle shook his head sadly. Five exclamation marks, the sure sign of an insane mind. --Reaper Man
I am not aware of any Dovecot specific book, but maybe a good starting point would be the Dovecot Quick Configuration guide: https://doc.dovecot.org/configuration_manual/quick_configuration/
For Postfix, a good starting point could be the VIRTUAL_README and ADDRESS_CLASS_README pages: http://www.postfix.org/VIRTUAL_README.html http://www.postfix.org/ADDRESS_CLASS_README.html
I've also heard good things about "The Book of Postfix". Even though it is quite old now, most of the parts/concepts/terminology still apply today. Part of it is also available on Google Books.
Setting up a mail server for the first time can be a bit challenging and time consuming, but once you get a hold of things, it gets much easier :)
Personally, I would take things step by step and not try to install and configure everything all at once.
You could create a local isolated virtual environment with multiple VMs (ex: 1 authoritative DNS server for local testdomain1 and testdomain2, 1 mail server for local testdomain1, 1 mail server for local testdomain2) where you could experiment freely until everything works as expected.
That way you are in control of the entire environment and you can easily debug any issues. Plus, it can be a good learning experience :)
Once messages can be sent between the local test domains without any issues, you could take that configuration and, more or less, apply it to your internet facing mail server.
Hi,
Please recommend a Dovecot book for a newbie... I have a fair amount of Linux PHP hosting experience - LAMP virtual host configurations. I'm new to BIND, Postfix, and Dovecot.
I'm running Ubuntu 20.04lts.
Can send but not receive.
Assuming everything else is set up correctly, did you check your firewall just to make sure that is not blocking incoming connections on your SMTP port?
Cheers,
K.
https://www.amazon.com/Dovecot-POP3-IMAP-servers-enterprises/dp/1534895701
On 7/7/21 10:04 AM, techlists@phpcoderusa.com wrote:
Hi,
Please recommend a Dovecot book for a newbie... I have a fair amount of Linux PHP hosting experience - LAMP virtual host configurations. I'm new to BIND, Postfix, and Dovecot.
I'm running Ubuntu 20.04lts.
I have a test server almost working. Can send but not receive. Would like to understand more. I'm guessing it is a Zone (MX) / SSL / Client configuration issue.
Thanks in advance!!
On Wed, 07 Jul 2021 10:04:06 -0700 techlists@phpcoderusa.com wrote:
Hi,
Please recommend a Dovecot book for a newbie... I have a fair amount of Linux PHP hosting experience - LAMP virtual host configurations. I'm new to BIND, Postfix, and Dovecot.
I'm running Ubuntu 20.04lts.
I have a test server almost working. Can send but not receive. Would like to understand more. I'm guessing it is a Zone (MX) / SSL / Client configuration issue.
Thanks in advance!!
I used this person's blog when I set up my servers. Unfortunately he only has guides for centos and freebsd but it is worth checking out. I think the odds of me setting up an email server from just the manuals would be zero, keyword me. But ubuntu verses centos should just be a packaging issue.
https://blog.andreev.it/?p=1975
I recall it being correct put not complete regarding postfix. I don't recall any Dovecot issue. It is 99% there. What I like is the guide provides a test at each step.
I advise you to start out small and add features later or never. After being hacked via RoundCube when I used a hosting service I am a firm believer in keeping the attack surface small. If this is a personal server (as is mine) I wouldn't even bother with spamassasin. You can stop much spam simply via Postfix. What this guide lacks is a number of milters for postfix required for DKIM and DMARC. Also I would set up the server using "submission" (port 587) since that allows for geofencing all the email ports other than 25, again presuming this is a personal server where geofencing would be appropriate.
There are a number of websites that can test your email server. For instance you wouldn't want to mistakenly be an open relay. They will also help with verifying all the identification features are proper. The deal with an email server is you need to look legit because the world is out to block you. In fact there are some ISPs that will simply reject your email until you contact them to get "allow listed". Some like Spectrum will never accept email from some VPS. [Sheer incompetence.]
Lastly my personal philosophy is to make no element of the email server programmable via a browser. I do everything via ssh and cli. This makes life hard for the hackers.
On 2021 Jul 07, at 16:16, lists@lazygranch.com wrote:
This is quite out of date now, especially as regards setting up TLS. This is a Postfix 2.10 configuration and the current postfix is 3.6.
In addition, it is missing configuration for submissions in master.cf in addition to submission.
It recommends using self-signed certs, which is going to cause problems for your users.
It looks like it was a good write-up in 2015, but it is not a good path to follow in 2021.
-- Boy meets up with a failed priest and an outlaw and murders 2 million in a terrorist attack. (Star Wars).
Thanks for the head's up!!
On 2021-07-13 07:33, @lbutlr wrote:
On 2021 Jul 07, at 16:16, lists@lazygranch.com wrote:
This is quite out of date now, especially as regards setting up TLS. This is a Postfix 2.10 configuration and the current postfix is 3.6.
In addition, it is missing configuration for submissions in master.cf in addition to submission.
It recommends using self-signed certs, which is going to cause problems for your users.
It looks like it was a good write-up in 2015, but it is not a good path to follow in 2021.
-- Boy meets up with a failed priest and an outlaw and murders 2 million in a terrorist attack. (Star Wars).
participants (5)
-
@lbutlr
-
Kevin N.
-
lists@lazygranch.com
-
Richard Doyle
-
techlists@phpcoderusa.com