>Вы б, все-таки, показали конфиги. Только поудаляйте оттуда реальные адреса-имена. в конфигах много переменных закоментировано. так было у лисяры, либо я подгонял под свои нужды. но в целом все совпадает.
в том виде в котором сейчас - dovecot lda не работает. ну, а exim, как я писал выше, не может писать в каталоги, которые создал dovecot c правами для mail/mem.
я пытался менять значения user/group и последние варианты экспериментов оставил как есть.
user_forward в роутерах убран для того чтобы почта для user@domain.ru не складывалась в ящик системного юзера с именем "user". возможно, что это делается не таким образом, но каким я пока не знаю. вероятно нужно заюзать ~/.forward, но с этим потом буду разбираться.
exim
---------------------------------------------------------------------------------
primary_hostname =
hide mysql_servers = localhost/mail/mail/password
domainlist local_domains = ${lookup mysql{SELECT `domain` \
FROM `domain` \
WHERE `domain`='${domain}' AND \
`active`='1'}}
domainlist relay_to_domains = ${lookup mysql{SELECT `domain` \
FROM `domain` \
WHERE `domain`='${domain}' AND \
`active`='1'}}
hostlist relay_from_hosts = localhost:127.0.0.0/8
acl_smtp_rcpt = acl_check_rcpt
acl_smtp_data = acl_check_data
#acl_smtp_mime = acl_check_mime
av_scanner = clamd:/var/run/clamd.exim/clamd.sock
spamd_address = 127.0.0.1 783
tls_advertise_hosts = *
tls_certificate = /etc/pki/tls/certs/exim.pem
tls_privatekey = /etc/pki/tls/private/exim.pem
daemon_smtp_ports = 25 : 465 : 587
tls_on_connect_ports = 465
local_interfaces = <; external_ip ; 127.0.0.1
qualify_domain =
qualify_recipient =
allow_domain_literals = false
never_users = root
host_lookup = *
rfc1413_query_timeout = 0s
sender_unqualified_hosts = +relay_from_hosts
recipient_unqualified_hosts = +relay_from_hosts
# percent_hack_domains =
ignore_bounce_errors_after = 2d
timeout_frozen_after = 7d
# auth_advertise_hosts = ${if eq {$tls_cipher}{}{}{*}}
auth_advertise_hosts = *
begin acl
acl_check_rcpt:
accept hosts = :
deny message = Restricted characters in address
domains = +local_domains
local_parts = ^[.] : ^.*[@%!/|]
deny message = Restricted characters in address
domains = !+local_domains
local_parts = ^[./|] : ^.*[@%!] : ^.*/\\.\\./
accept local_parts = postmaster
domains = +local_domains
require verify = sender
accept hosts = +relay_from_hosts
control = submission
accept authenticated = *
control = submission
require message = relay not permitted
domains = +local_domains : +relay_to_domains
require verify = recipient
accept
acl_check_data:
accept
acl_check_mime:
# File extension filtering.
deny message = Blacklisted file extension detected
condition = ${if match \
{${lc:$mime_filename}} \
{\N(\.exe|\.pif|\.bat|\.scr|\.lnk|\.com)$\N} \
{1}{0}}
accept
begin routers
dnslookup:
driver = dnslookup
domains = ! +local_domains
transport = remote_smtp
ignore_target_hosts = 0.0.0.0 : 127.0.0.0/8
no_more
system_aliases:
driver = redirect
allow_fail
allow_defer
# data = ${lookup{$local_part}lsearch{/etc/aliases}}
data = ${lookup mysql{SELECT `goto` FROM `alias` WHERE \
`address`='${quote_mysql:$local_part@$domain}' OR \
`address`='${quote_mysql:@$domain}'}}
# user = exim
# file_transport = address_file
# pipe_transport = address_pipe
#userforward:
# driver = redirect
# check_local_user
# local_part_suffix = +* : -*
# local_part_suffix_optional
# file = $home/.forward
# allow_filter
# no_verify
# no_expn
# check_ancestor
# file_transport = address_file
# pipe_transport = address_pipe
# reply_transport = address_reply
procmail:
driver = accept
check_local_user
require_files = ${local_part}:+${home}/.procmailrc:/usr/bin/procmail
transport = procmail
no_verify
localuser:
driver = accept
check_local_user
# local_part_suffix = +* : -*
# local_part_suffix_optional
# transport = local_delivery
transport = dovecot_delivery
cannot_route_message = Unknown user
dovecot_user:
driver = accept
condition = ${lookup mysql{SELECT `goto` FROM \
`alias` WHERE \
`address`='${quote_mysql:$local_part@$domain}' OR \
`address`='${quote_mysql:@$domain}'}{yes}{no}}
transport = dovecot_delivery
begin transports
remote_smtp:
driver = smtp
dovecot_delivery:
driver = pipe
command = /usr/libexec/dovecot/deliver -d $local_part@$domain
message_prefix =
message_suffix =
delivery_date_add
envelope_to_add
return_path_add
log_output
group = mail
procmail:
driver = pipe
command = "/usr/bin/procmail -d $local_part"
return_path_add
delivery_date_add
envelope_to_add
user = $local_part
initgroups
return_output
#local_delivery:
# driver = appendfile
# file = /var/mail/$local_part
# file = /var/mail/$local_part@$domain/inbox
# delivery_date_add
# envelope_to_add
# return_path_add
# user = root
# group = mail
# mode = 0660
address_pipe:
driver = pipe
return_output
address_file:
driver = appendfile
delivery_date_add
envelope_to_add
return_path_add
address_reply:
driver = autoreply
#lmtp_delivery:
# home_directory = /var/spool/imap
# driver = lmtp
# command = "/usr/lib/cyrus-imapd/deliver -l"
# batch_max = 20
# user = cyrus
begin retry
* * F,2h,15m; G,16h,1h,1.5; F,4d,6h
begin rewrite
begin authenticators
auth_plain:
driver = plaintext
public_name = PLAIN
server_condition = ${lookup mysql{SELECT `username` FROM \
`mailbox` WHERE `username` = \
'${quote_mysql:$auth2}' AND `password` = \
'${quote_mysql:$auth3}'}{yes}{no}}
server_prompts = :
server_set_id = $auth2
auth_login:
driver = plaintext
public_name = LOGIN
server_condition = ${lookup mysql{SELECT `username` FROM \
`mailbox` WHERE `username` = \
'${quote_mysql:$auth1}' AND `password` = \
'${quote_mysql:$auth2}'}{yes}{no}}
server_prompts = Username:: : Password::
server_set_id = $auth1
auth_cram_md5:
driver = cram_md5
public_name = CRAM-MD5
server_secret = ${lookup mysql{SELECT `password` FROM \
`mailbox` WHERE `username` \
= '${quote_mysql:$auth1}'}{$value}fail}
server_set_id = $auth2
# begin local_scan
dovecot
---------------------------------------------------------------------------------
base_dir = /var/run/dovecot/
protocols = imap imaps pop3 pop3s
protocol imap {
listen = external_ip:143
ssl_listen = external_ip:993
}
protocol pop3 {
listen =external_ip:110
ssl_listen = external_ip:995
}
#listen = [::]
disable_plaintext_auth = no
#shutdown_clients = yes
log_path = /var/log/dovecot.log
info_log_path = /var/log/dovecot_debug.log
log_timestamp = "%b %d %H:%M:%S "
syslog_facility = mail
#ssl_listen =
ssl_disable = no
ssl_cert_file = /etc/pki/dovecot/certs/dovecot.pem
ssl_key_file = /etc/pki/dovecot/private/dovecot.pem
#ssl_key_password =
#ssl_ca_file =
ssl_verify_client_cert = no
ssl_parameters_regenerate = 168
#ssl_cipher_list = ALL:!LOW
#verbose_ssl = no
login_dir = /var/run/dovecot/login
login_chroot = yes
login_user = dovecot
login_process_size = 64
login_process_per_connection = yes
login_processes_count = 3
login_max_processes_count = 128
#login_max_connections = 256
login_greeting = Dovecot ready.
login_log_format_elements = user=<%u> method=%m rip=%r lip=%l %c
login_log_format = %$: %s
mail_location = mbox:/var/mail/%u
#namespace private {
#}
mail_privileged_group = mail
mail_access_groups = mail
#mail_full_filesystem_access = no
#mail_debug = no
#mail_log_prefix = "%Us(%u): "
#mail_log_max_lines_per_sec = 10
#mmap_disable = no
#mmap_no_write = no
#dotlock_use_excl = no
#fsync_disable = no
#lock_method = fcntl
#mail_drop_priv_before_exec = no
verbose_proctitle = yes
first_valid_uid = 0
#last_valid_uid = 0
first_valid_gid = 0
#last_valid_gid = 12
max_mail_processes = 64
mail_process_size = 32
mail_max_keyword_length = 50
#valid_chroot_dirs =
#mail_chroot =
#mail_cache_fields =
#mail_never_cache_fields =
#mail_cache_min_mail_count = 0
#mailbox_idle_check_interval = 30
#mail_save_crlf = no
#maildir_stat_dirs = no
#maildir_copy_with_hardlinks = no
#maildir_copy_preserve_filename = no
#mbox_read_locks = fcntl
#mbox_write_locks = fcntl
#mbox_lock_timeout = 300
#mbox_dotlock_change_timeout = 120
#mbox_dirty_syncs = yes
#mbox_very_dirty_syncs = no
#mbox_lazy_writes = yes
#mbox_min_index_size = 0
#dbox_rotate_size = 2048
#dbox_rotate_min_size = 16
#dbox_rotate_days = 0
protocol imap {
#login_executable = /usr/libexec/dovecot/imap-login
#mail_executable = /usr/libexec/dovecot/imap
#imap_max_line_length = 65536
#mail_plugins =
#mail_plugin_dir = /usr/lib/dovecot/imap
login_greeting_capability = yes
#imap_capability =
#imap_client_workarounds = outlook-idle
imap_client_workarounds = delay-newmail outlook-idle netscape-eoh tb-extra-mailbox-sep
}
protocol pop3 {
#login_executable = /usr/libexec/dovecot/pop3-login
#mail_executable = /usr/libexec/dovecot/pop3
#pop3_no_flag_updates = no
#pop3_enable_last = no
#pop3_reuse_xuidl = no
#pop3_lock_session = no
pop3_uidl_format = XuXv
#pop3_logout_format = top=%t/%p, retr=%r/%b, del=%d/%m, size=%s
#mail_plugins =
#mail_plugin_dir = /usr/lib/dovecot/pop3
#pop3_client_workarounds =
pop3_client_workarounds = outlook-no-nuls oe-ns-eoh
}
protocol lda {
postmaster_address = admin@domain.ru
#hostname =
#mail_plugins =
#mail_plugin_dir = /usr/lib/dovecot/lda
sendmail_path = /usr/sbin/sendmail
auth_socket_path = /var/run/dovecot/auth-master
}
#auth_executable = /usr/libexec/dovecot/dovecot-auth
#auth_process_size = 256
#auth_cache_size = 0
#auth_cache_ttl = 3600
#auth_realms =
#auth_default_realm =
#auth_username_chars = abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ01234567890.-_@
#auth_username_translation =
#auth_username_format =
#auth_master_user_separator =
#auth_anonymous_username = anonymous
#auth_verbose = no
#auth_debug = no
#auth_debug_passwords = no
#auth_worker_max_count = 30
#auth_gssapi_hostname =
#auth_krb5_keytab =
auth default {
mechanisms = plain
#passdb passwd-file {
# File contains a list of usernames, one per line
#args = /etc/dovecot.deny
#deny = yes
#}
passdb pam {
#args = dovecot
}
#passdb passwd {
#args =
#}
#passdb shadow {
#args =
#}
#passdb bsdauth {
#args =
#}
#passdb passwd-file {
#args =
#}
#passdb checkpassword {
#args =
#}
passdb sql {
args = /etc/dovecot-sql.conf
}
#passdb ldap {
#args =
#}
#passdb vpopmail {
#args =
#}
#userdb passwd {
#args =
#}
#userdb passwd-file {
#args =
#}
#userdb static {
#args =
#}
userdb sql {
args = /etc/dovecot-sql.conf
}
#userdb ldap {
#args =
#}
#userdb vpopmail {
#}
#userdb prefetch {
#}
user = root
#chroot =
#count = 1
#ssl_require_client_cert = no
#ssl_username_from_cert = no
socket listen {
master {
path = /var/run/dovecot/auth-master
mode = 0600
user = mail
#group =
}
#client {
# The client socket is generally safe to export to everyone. Typical use
# is to export it to your SMTP server so it can do SMTP AUTH lookups
# using it.
#path = /var/run/dovecot/auth-client
#mode = 0660
#}
}
}
#auth external {
# socket connect {
# master {
# path = /var/run/dovecot/auth-master
# }
# }
#}
dict {
#quota = mysql:/etc/dovecot-dict-quota.conf
}
plugin {
#quota = maildir
#acl = vfile:/etc/dovecot-acls
#convert_skip_broken_mailboxes = no
#trash = /etc/dovecot-trash.conf
#lazy_expunge = .EXPUNGED/ .DELETED/ .DELETED/.EXPUNGED/
}
Вариант для распечатки
