Franske ITC-2480 Mail Lab - Revision history

BenFranske: Update to mjnk version

2021-12-03T20:00:15Z

Update to mjnk version

BenFranske: /* Allow Remote Users to Send Mail */

2021-03-16T02:36:45Z

Allow Remote Users to Send Mail

← Older revision		Revision as of 02:36, 16 March 2021
Line 70:		Line 70:
	# See if you can follow [https://wiki.debian.org/PostfixAndSASL these instructions] for setting up SASL with Postfix.		# See if you can follow [https://wiki.debian.org/PostfixAndSASL these instructions] for setting up SASL with Postfix.
	#* Note: You do NOT need to setup TLS to support SASL (more on that in the additional considerations section below)		#* Note: You do NOT need to setup TLS to support SASL (more on that in the additional considerations section below)
	# Now modify your MUA to use a username and password when connecting to your SMTP server and try sending mail to someone else's system from your MUA using a destination address like ''root@.itc2480.campus.ihitc.net'' where the is replaced by the host letter of your system.		# Now modify your MUA to use a username and password when connecting to your SMTP server and try sending mail to ''ping@itc2480.campus.ihitc.net'' from your MUA. You should receive an automatic response email from this special server if you send it a message and everything on your mail server is configured correctly.
			# Try sending mail to someone else's system in your class from your MUA using a destination address like ''root@.itc2480.campus.ihitc.net'' where the is replaced by the host letter of your system. Use the discussion forum for this topic to find someone to exchange messages with.
	#* NOTE: You MUST actually exchange messages with someone else in the class (both sending to them and receiving from them). It is not possible to test using an outside email account of your own (you will not be able to send a message back to your server because it is behind a firewall). It is not enough to just be able to send a message to another system. It is not enough to just be able to receive a message from another user.		#* NOTE: You MUST actually exchange messages with someone else in the class (both sending to them and receiving from them). It is not possible to test using an outside email account of your own (you will not be able to send a message back to your server because it is behind a firewall). It is not enough to just be able to send a message to another system. It is not enough to just be able to receive a message from another user.
	# Troubleshoot as needed using the mail log files on your system.		# Troubleshoot as needed using the mail log files on your system.

BenFranske at 23:56, 29 October 2018

2018-10-29T23:56:36Z

← Older revision		Revision as of 23:56, 29 October 2018
Line 22:		Line 22:
	<li> Restart the ''postfix'' service to apply your change. Postfix is now saving new incoming messages into the Maildir folder inside each user's home directory. This folder is automatically created by Postfix the first time a new message comes in for a user.</li>		<li> Restart the ''postfix'' service to apply your change. Postfix is now saving new incoming messages into the Maildir folder inside each user's home directory. This folder is automatically created by Postfix the first time a new message comes in for a user.</li>
	<li> Set your shell to recognize the maildir as your mail location</li>		<li> Set your shell to recognize the maildir as your mail location</li>
	<ol><li> Edit the ''/etc/pam.d/login'' file, find and comment out the ''session optional pam_mail.so standard'' line (place a # in front of the line) and add a line like this immediately below it:		<ol><li> Edit the ''/etc/login.defs'' file and comment out the ''MAIL_DIR /var/mail'' line (place a # in front of the line) and add a line setting ''MAIL_FILE'' like this:
			<pre>
			#MAIL_DIR /var/mail
			MAIL_FILE Maildir/
			</pre></li>
			<li> Edit the ''/etc/pam.d/login'' file, find and comment out the ''session optional pam_mail.so standard'' line (place a # in front of the line) and add a line like this immediately below it:
	<pre>		<pre>
	#session optional pam_mail.so standard		#session optional pam_mail.so standard

BenFranske: /* Install the Postfix MTA */

2018-10-29T23:54:14Z

Install the Postfix MTA

← Older revision		Revision as of 23:54, 29 October 2018
Line 22:		Line 22:
	<li> Restart the ''postfix'' service to apply your change. Postfix is now saving new incoming messages into the Maildir folder inside each user's home directory. This folder is automatically created by Postfix the first time a new message comes in for a user.</li>		<li> Restart the ''postfix'' service to apply your change. Postfix is now saving new incoming messages into the Maildir folder inside each user's home directory. This folder is automatically created by Postfix the first time a new message comes in for a user.</li>
	<li> Set your shell to recognize the maildir as your mail location</li>		<li> Set your shell to recognize the maildir as your mail location</li>
	<ol><li> Edit the ''/etc/login~~.defs~~'' file and comment out the ''~~MAIL_DIR /var/mail~~'' line (place a # in front of the line) and add ~~two lines setting ''QMAIL_DIR'' and ''MAIL_FILE''~~ like this:		<ol><li> Edit the ''/etc/pam.d/login'' file, find and comment out the ''session optional pam_mail.so standard'' line (place a # in front of the line) and add a line like this immediately below it:
	<pre>		<pre>
	#~~MAIL_DIR~~ /~~var~~/~~mail~~		#session optional pam_mail.so standard
	~~QMAIL_DIR~~ Maildir/		session optional pam_mail.so dir=~/Maildir standard
	~~MAIL_FILE~~ Maildir/		</pre></li>
			<li> Edit the ''/etc/pam.d/su'' file, find and comment out the ''session optional pam_mail.so nopen'' line (place a # in front of the line) and add a line like this immediately below it:
			<pre>
			#session optional pam_mail.so nopen
			session optional pam_mail.so dir=~/Maildir nopen
			</pre></li>
			<li> Edit the ''/etc/pam.d/sshd'' file, find and comment out the ''session optional pam_mail.so standard noenv'' line (place a # in front of the line) and add a line like this immediately below it:
			<pre>
			#session optional pam_mail.so standard noenv
			session optional pam_mail.so dir=~/Maildir standard
	</pre></li>		</pre></li>
	<li> Edit the ''/etc/profile'' file and at the end of the file add the line: <pre>export MAIL=~/Maildir</pre></li></ol>		<li> Edit the ''/etc/profile'' file and at the end of the file add the line: <pre>export MAIL=~/Maildir</pre></li></ol>

BenFranske: /* Additional Considerations */

2018-03-03T03:18:49Z

Additional Considerations

← Older revision		Revision as of 03:18, 3 March 2018
Line 61:		Line 61:

	=Additional Considerations=		=Additional Considerations=
	Running a mailserver is tricky business. The basic server we have setup does not use ~~encryption~~ for connections meaning usernames, passwords, and mail contents are all sent ~~in plaintext~~. This is very undesirable from a security standpoint and it would be suggested to support SSL/TLS encryption for both the MTA and MDA portions with a valid certificate purchased from a certificate authority (CA) or from a free CA like [https://letsencrypt.org/ Let's Encrypt]. In addition, you will almost certainly want spam filtering at the server. More complicated setups also use database tables for users, passwords and domains so that you can host multiple domains on a single server and have email user boxes for people who do not have local logins on the system.		Running a mailserver is tricky business. The basic server we have setup does not use valid certificates for encrypting connections meaning usernames, passwords, and mail contents are all being sent to an unverified server. This is very undesirable from a security standpoint and it would be suggested to support SSL/TLS encryption for both the MTA and MDA portions with a valid certificate purchased from a certificate authority (CA) or from a free CA like [https://letsencrypt.org/ Let's Encrypt]. In addition, you will almost certainly want spam filtering at the server. More complicated setups also use database tables for users, passwords and domains so that you can host multiple domains on a single server and have email user boxes for people who do not have local logins on the system.

	=Additional Resources=		=Additional Resources=
	* [https://help.ubuntu.com/community/PostfixBasicSetupHowto Ubuntu Postfix Basic Setup]		* [https://help.ubuntu.com/community/PostfixBasicSetupHowto Ubuntu Postfix Basic Setup]
	* [https://wiki.debian.org/Postfix Debian Wiki - Postfix Installation]		* [https://wiki.debian.org/Postfix Debian Wiki - Postfix Installation]

BenFranske: /* Additional Considerations */

2018-03-03T03:17:34Z

Additional Considerations

← Older revision		Revision as of 03:17, 3 March 2018
Line 61:		Line 61:

	=Additional Considerations=		=Additional Considerations=
	Running a mailserver is tricky business. The basic server we have setup does not use encryption for connections meaning usernames, passwords, and mail contents are all sent in plaintext. This is very undesirable from a security standpoint and it would be suggested to support SSL/TLS encryption for both the MTA and MDA portions. In addition, you will almost certainly want spam filtering at the server. More complicated setups also use database tables for users, passwords and domains so that you can host multiple domains on a single server and have email user boxes for people who do not have local logins on the system.		Running a mailserver is tricky business. The basic server we have setup does not use encryption for connections meaning usernames, passwords, and mail contents are all sent in plaintext. This is very undesirable from a security standpoint and it would be suggested to support SSL/TLS encryption for both the MTA and MDA portions with a valid certificate purchased from a certificate authority (CA) or from a free CA like [https://letsencrypt.org/ Let's Encrypt]. In addition, you will almost certainly want spam filtering at the server. More complicated setups also use database tables for users, passwords and domains so that you can host multiple domains on a single server and have email user boxes for people who do not have local logins on the system.

	=Additional Resources=		=Additional Resources=
	* [https://help.ubuntu.com/community/PostfixBasicSetupHowto Ubuntu Postfix Basic Setup]		* [https://help.ubuntu.com/community/PostfixBasicSetupHowto Ubuntu Postfix Basic Setup]
	* [https://wiki.debian.org/Postfix Debian Wiki - Postfix Installation]		* [https://wiki.debian.org/Postfix Debian Wiki - Postfix Installation]

BenFranske: /* Install Courier MDA */

2018-03-03T03:16:07Z

Install Courier MDA

← Older revision		Revision as of 03:16, 3 March 2018
Line 45:		Line 45:
	#* Do not create the directories for web-based administration as they are unneeded for our setup		#* Do not create the directories for web-based administration as they are unneeded for our setup
	# Install an email client (MUA) on your host system such as [http://www.mozilla.org/en-US/thunderbird/ Mozilla Thunderbird]		# Install an email client (MUA) on your host system such as [http://www.mozilla.org/en-US/thunderbird/ Mozilla Thunderbird]
	## Setup two user accounts in your MUA, the usernames and passwords should be the same as users and their passwords on your system. Use ''IMAP'' as the protocol for retrieving mail. The email address for each should be ''username@.itc2480.campus.ihitc.net'' where the is replaced by the host letter of your system. You can verify the IMAP and SMTP settings that are detected, both server addresses should be ''.itc2480.campus.ihitc.net'' where the is replaced by the host letter of your system.		# Setup two user accounts in your MUA, the usernames and passwords should be the same as users and their passwords on your system. Use ''IMAP'' as the protocol for retrieving mail. The email address for each should be ''username@.itc2480.campus.ihitc.net'' where the is replaced by the host letter of your system. You can verify the IMAP and SMTP settings that are detected, both server addresses should be ''.itc2480.campus.ihitc.net'' where the is replaced by the host letter of your system.
	##* NOTE: The first time you check messages and the first time you send messages to your server from Thunderbird you will need to accept an invalid security certificate in the Thunderbird window.		#* NOTE: The first time you check messages and the first time you send messages to your server from Thunderbird you will need to accept an invalid security certificate in the Thunderbird window.
	##* NOTE: To see the ''Tools'' menu with the ''Account Settings'' window in recent versions of Thunderbird (where you can add more accounts) you need to press ALT-F and then the menu bar will temporarily appear.		#* NOTE: To see the ''Tools'' menu with the ''Account Settings'' window in recent versions of Thunderbird (where you can add more accounts) you need to press ALT-F and then the menu bar will temporarily appear.
	# Try sending a message from one user to the other user by sending a message to the other account like ''username@localhost'' Verify that you can receive and read the messages.		# Try sending a message from one user to the other user by sending a message to the other account like ''username@localhost'' Verify that you can receive and read the messages.
	#* Note: If a user has not yet received any mail Postfix has not created a Maildir for the user and the Courier software will send an error to the client software. Use the mail program explained above to send some mail to the user, see that the ''~/Maildir'' is then created and try retrieving the messages again with your MUA.		#* Note: If a user has not yet received any mail Postfix has not created a Maildir for the user and the Courier software will send an error to the client software. Use the mail program explained above to send some mail to the user, see that the ''~/Maildir'' is then created and try retrieving the messages again with your MUA.

BenFranske: /* Install Courier MDA */

2018-03-03T03:15:38Z

Install Courier MDA

← Older revision		Revision as of 03:15, 3 March 2018
Line 46:		Line 46:
	# Install an email client (MUA) on your host system such as [http://www.mozilla.org/en-US/thunderbird/ Mozilla Thunderbird]		# Install an email client (MUA) on your host system such as [http://www.mozilla.org/en-US/thunderbird/ Mozilla Thunderbird]
	## Setup two user accounts in your MUA, the usernames and passwords should be the same as users and their passwords on your system. Use ''IMAP'' as the protocol for retrieving mail. The email address for each should be ''username@.itc2480.campus.ihitc.net'' where the is replaced by the host letter of your system. You can verify the IMAP and SMTP settings that are detected, both server addresses should be ''.itc2480.campus.ihitc.net'' where the is replaced by the host letter of your system.		## Setup two user accounts in your MUA, the usernames and passwords should be the same as users and their passwords on your system. Use ''IMAP'' as the protocol for retrieving mail. The email address for each should be ''username@.itc2480.campus.ihitc.net'' where the is replaced by the host letter of your system. You can verify the IMAP and SMTP settings that are detected, both server addresses should be ''.itc2480.campus.ihitc.net'' where the is replaced by the host letter of your system.
	#* NOTE: The first time you check messages and the first time you send messages to your server from Thunderbird you will need to accept an invalid security certificate in the Thunderbird window.		##* NOTE: The first time you check messages and the first time you send messages to your server from Thunderbird you will need to accept an invalid security certificate in the Thunderbird window.
	#* NOTE: To see the ''Tools'' menu with the ''Account Settings'' window in recent versions of Thunderbird (where you can add more accounts) you need to press ALT-F and then the menu bar will temporarily appear.		##* NOTE: To see the ''Tools'' menu with the ''Account Settings'' window in recent versions of Thunderbird (where you can add more accounts) you need to press ALT-F and then the menu bar will temporarily appear.
	## Try sending a message from one user to the other user by sending a message to the other account like ''username@localhost'' Verify that you can receive and read the messages.		# Try sending a message from one user to the other user by sending a message to the other account like ''username@localhost'' Verify that you can receive and read the messages.
	#* Note: If a user has not yet received any mail Postfix has not created a Maildir for the user and the Courier software will send an error to the client software. Use the mail program explained above to send some mail to the user, see that the ''~/Maildir'' is then created and try retrieving the messages again with your MUA.		#* Note: If a user has not yet received any mail Postfix has not created a Maildir for the user and the Courier software will send an error to the client software. Use the mail program explained above to send some mail to the user, see that the ''~/Maildir'' is then created and try retrieving the messages again with your MUA.

BenFranske: /* Install Courier MDA */

2018-03-03T03:14:37Z

Install Courier MDA

← Older revision		Revision as of 03:14, 3 March 2018
Line 46:		Line 46:
	# Install an email client (MUA) on your host system such as [http://www.mozilla.org/en-US/thunderbird/ Mozilla Thunderbird]		# Install an email client (MUA) on your host system such as [http://www.mozilla.org/en-US/thunderbird/ Mozilla Thunderbird]
	## Setup two user accounts in your MUA, the usernames and passwords should be the same as users and their passwords on your system. Use ''IMAP'' as the protocol for retrieving mail. The email address for each should be ''username@.itc2480.campus.ihitc.net'' where the is replaced by the host letter of your system. You can verify the IMAP and SMTP settings that are detected, both server addresses should be ''.itc2480.campus.ihitc.net'' where the is replaced by the host letter of your system.		## Setup two user accounts in your MUA, the usernames and passwords should be the same as users and their passwords on your system. Use ''IMAP'' as the protocol for retrieving mail. The email address for each should be ''username@.itc2480.campus.ihitc.net'' where the is replaced by the host letter of your system. You can verify the IMAP and SMTP settings that are detected, both server addresses should be ''.itc2480.campus.ihitc.net'' where the is replaced by the host letter of your system.
			#* NOTE: The first time you check messages and the first time you send messages to your server from Thunderbird you will need to accept an invalid security certificate in the Thunderbird window.
			#* NOTE: To see the ''Tools'' menu with the ''Account Settings'' window in recent versions of Thunderbird (where you can add more accounts) you need to press ALT-F and then the menu bar will temporarily appear.
	## Try sending a message from one user to the other user by sending a message to the other account like ''username@localhost'' Verify that you can receive and read the messages.		## Try sending a message from one user to the other user by sending a message to the other account like ''username@localhost'' Verify that you can receive and read the messages.
	#* Note: If a user has not yet received any mail Postfix has not created a Maildir for the user and the Courier software will send an error to the client software. Use the mail program explained above to send some mail to the user, see that the ''~/Maildir'' is then created and try retrieving the messages again with your MUA.		#* Note: If a user has not yet received any mail Postfix has not created a Maildir for the user and the Courier software will send an error to the client software. Use the mail program explained above to send some mail to the user, see that the ''~/Maildir'' is then created and try retrieving the messages again with your MUA.

BenFranske: /* Install the Postfix MTA */

2018-03-03T01:10:10Z

Install the Postfix MTA

← Older revision		Revision as of 01:10, 3 March 2018
Line 31:		Line 31:
	<li> Test sending and receiving mail as a locally logged on user.		<li> Test sending and receiving mail as a locally logged on user.
	<ol>		<ol>
	<li> Install the ''~~heirloom-mailx~~'' package.</li>		<li> Install the ''mailutils'' package.</li>
	<li> Try sending a message (replace username with your username): <pre>echo "This is my message" \| mail -s "Email Subject" username@localhost</pre></li>		<li> Try sending a message (replace username with your username): <pre>echo "This is my message" \| mail -s "Email Subject" username@localhost</pre></li>
	<li> Log out of your SSH session and open a new SSH session to apply the changes to the ''/etc/profile'' and ''/etc/login.defs'' files.</li>		<li> Log out of your SSH session and open a new SSH session to apply the changes to the ''/etc/profile'' and ''/etc/login.defs'' files.</li>