さくらのVPS Apache & PHP 環境構築メモ

あらかじめ packages でインストールしておくものはさくらのVPS FreeBSD環境構築メモを参照。

• sendmail+tls+sasl2
• cyrus-sasl
• cyrus-sasl-saslauthd
• milter-greylist
• milter-regex
• qpopper

SMTP認証対応

% cd /etc/mail

% vi local-host-names
----------
host1.domain1
host2.domain2
----------

% make

% vi host.domain.mc
----------
TRUST_AUTH_MECH(`LOGIN PLAIN')dnl
define(`confAUTH_MECHANISMS',`LOGIN PLAIN')dnl
----------

% make

% service sendmail start

HELOコマンドチェックとグレーリスト

% vi host.domain.mc
----------
INPUT_MAIL_FILTER(`milter-regex', `S=local:/var/run/milter-regex/sock, F=, T=S:30s;R:2m')
INPUT_MAIL_FILTER(`milter-greylist', `S=local:/var/milter-greylist/milter-greylist.sock')
----------

% make

% vi /usr/local/etc/milter-regex.conf
----------
reject "Malformed HELO (not a domain, no dot)"
helo /\./n
tempfail "Malformed HELO (can't be me)"
helo /^11\.22\.33\.44$/
----------

% cp /usr/local/etc/mail/greylist.conf.sample /usr/local/etc/mail/greylist.conf

% vi /usr/local/etc/mail/greylist.conf
----------
subnetmatch /24
greylist 10m
autowhite 1w
racl greylist default
#racl whitelist default
----------

% vi /etc/rc.conf
----------
saslauthd_enable="YES"
saslauthd_flags="-a pam"
sendmail_enable="YES"
sendmail_flags="-bd -q30m"
milterregex_enable="YES"
miltergreylist_enable="YES"
----------

% service saslauthd start

% service milterregex start

% service milter-greylist start

% service sendmail restart

% vi /etc/inetd/conf
----------
pop3    stream  tcp     nowait  root    /usr/local/libexec/qpopper      qpopper -s
----------