LinuxSir.cn,穿越时空的Linuxsir!

 找回密码
 注册
搜索
热搜: shell linux mysql
楼主: fleagle

安装 Exim 邮件服务器

[复制链接]
发表于 2004-6-22 19:58:05 | 显示全部楼层
你有没有在配置时,把 root 的信件转发到了 faint 用户?
发表于 2004-6-22 20:11:06 | 显示全部楼层
已经设置了。就是说设置把root的信件给faint,那么,fanit就拥有root的邮件全
部功能了?看来,这个会有什么安全问题吧?

比如,偶用faint和root用户各发一封信,如果偶先用faint用户收信,那么它也会把root的信给收下来。如果是root先收信,那么它也会把faint用户的信给收下。


另外,一般你们那个文件的仅限是什么呢????是不和我上面的一样?
发表于 2004-6-22 20:23:04 | 显示全部楼层
我是默认的权限。
这个应该不算安全隐患吧!
因为一般情况是不用 root 身份登录的,当管理员在平时处理系统事务时,如用户的抱怨投诉,或者所维护的系统和网络某个环节出现问题而自动给管理员发的信件等,也没有必要用 root 登录去看信,管理员一般用一个普通权限的用户登录,系统自动把邮件转发给管理员习惯使用的帐号,这样在最大程度上减少安全隐患。
当然如果你的邮件包含一些机密的话,那么这个帐号绝对是要好好的保护。
发表于 2004-6-22 20:32:24 | 显示全部楼层
嗯,偶平时是很用root login上去的。多数情况还是用sudo的,配置好sudo后,没有特别特别情况,偶都不轻易su 的。你的默认权限也是像我上面的一样吧!
发表于 2004-6-22 22:53:29 | 显示全部楼层
我的

root@guccio~#ls -l /var/mail/
总用量 10700
-rw-------    1 mail     mail         1416 2004-02-29 17:53 mail
-rw-rw----    1 root     mail     10952070 2004-06-22 22:56 root
发表于 2004-6-22 23:11:23 | 显示全部楼层
root文件正常哦。你的没有换发到:-)
另外的文件mail是什么来的。我的一直都是0个字节大小(估计是我已经把所有测试的信件都收下来了),而且就只有一个文件。exim虽然只一个配置文件,搞起来也挺复杂的。
发表于 2004-6-23 08:46:09 | 显示全部楼层
没有,我比较愚蠢,一直用root登陆的,所以邮件都是root收,mail我也不知道是什么文件,大概是mail组成员共有的吧。
发表于 2004-6-23 11:14:30 | 显示全部楼层
exim还是比较难配置好。应该要和其它的东西配合才行。
发现老外把exim和ClamAV(杀病毒)配合得比较好,哎,偶加上iptables后,发现
往外发信都不行。不知道是什么原因。

#smtp
iptables -A OUTPUT -o ppp0 -p tcp --sport 1024: --dport 25 -m state --state ! INVALID -j ACCEPT
iptables -A INPUT -i ppp0 -p tcp --sport 25 --dport 1024: -m state --state RELATED,ESTABLISHED -j ACCEPT
#pop3
iptables -A OUTPUT -o ppp0 -p tcp --dport 110 -m state --state ! INVALID -j ACCEPT
iptables -A INPUT -i ppp0 -p tcp --sport 110 -m state --state RELATED,ESTABLISHED -j ACCEPT
 楼主| 发表于 2004-6-23 12:15:35 | 显示全部楼层

我的iptables

# SMTP service
iptables -A INPUT -i $INET_IFACE -p tcp --syn --dport 25 -m limit --limit 1/s -j ACCEPT

# POP3 service
iptables -A INPUT -i $INET_IFACE -p tcp --syn --dport 110 -m limit --limit   1/s -j ACCEPT

我认为限制进入的包即可,可以不对OUTPUT做什么限制。
发表于 2004-7-23 01:51:24 | 显示全部楼层
最初由 guccio 发表
我就是adls+动态dns,完全可以回复,主要就是要把邮件域或者本地邮件域设置为你的动态域名, 目的是接受从外部进入的、目的域为你的域名的邮件转发(其实就是别人回复给你的邮件)。否则邮件无法进入。

给出我的exim.conf:

# This is the main exim configuration file.
# It was originally generated by `eximconfig', part of the exim package
# distributed with Debian, but it may edited by the mail system administrator.
# This file originally generated by eximconfig at ÈÕ  2ÔÂ 29 21:12:34 CST 2004
# See exim info section for details of the things that can be configured here.

# Please see the manual for a complete list
# of all the runtime configuration options that can be included in a
# configuration file.

# This file is divided into several parts, all but the last of which are
# terminated by a line containing the word "end". The parts must appear
# in the correct order, and all must be present (even if some of them are
# in fact empty). Blank lines, and lines starting with # are ignored.

######################################################################
#                    MAIN CONFIGURATION SETTINGS                     #
######################################################################

# Specify the domain you want to be added to all unqualified addresses
# here. Unqualified addresses are accepted only from local callers by
# default. See the receiver_unqualified_{hosts,nets} options if you want
# to permit unqualified addresses from remote sources. If this option is
# not set, the primary_hostname value is used for qualification.

qualify_domain = guccio

# If you want unqualified recipient addresses to be qualified with a different
# domain to unqualified sender addresses, specify the recipient domain here.
# If this option is not set, the qualify_domain value is used.

# qualify_recipient =

# Specify your local domains as a colon-separated list here. If this option
# is not set (i.e. not mentioned in the configuration file), the
# qualify_recipient value is used as the only local domain. If you do not want
# to do any local deliveries, uncomment the following line, but do not supply
# any data for it. This sets local_domains to an empty string, which is not
# the same as not mentioning it at all. An empty string specifies that there
# are no local domains; not setting it at all causes the default value (the
# setting of qualify_recipient) to be used.

local_domains = localhost:guccio:guccio.3322.org

# Allow mail addressed to our hostname, or to our IP address.

local_domains_include_host = true
local_domains_include_host_literals = true

# Domains we relay for; that is domains that aren't considered local but we
# accept mail for them.

#relay_domains =

# If this is uncommented, we accept and relay mail for all domains we are
# in the DNS as an MX for.

#relay_domains_include_local_mx = true

# No local deliveries will ever be run under the uids of these users (a colon-
# separated list). An attempt to do so gets changed so that it runs under the
# uid of "nobody" instead. This is a paranoic safety catch. Note the default
# setting means you cannot deliver mail addressed to root as if it were a
# normal user. This isn't usually a problem, as most sites have an alias for
# root that redirects such mail to a human administrator.

# However, you chose not to have such an alias, so this is commented out

#never_users = root

# The setting below causes Exim to do a reverse DNS lookup on all incoming
# IP calls, in order to get the true host name. If you feel this is too
# expensive, you can specify the networks for which a lookup is done, or
# remove the setting entirely.

host_lookup = *

# The setting below would, if uncommented, cause Exim to check the syntax of
# all the headers that are supposed to contain email addresses (To:, From:,
# etc). This reduces the level of bounced bounces considerably.

# headers_check_syntax

# Exim contains support for the Realtime Blocking List (RBL), and the many
# similar services that are being maintained as part of the DNS. See
# http://www.mail-abuse.org/ for background. The line below, if uncommented,
# will reject mail from hosts in the RBL, and add warning headers to mail
# from hosts in a list of dynamic-IP dialups. Note that MAPS may charge
# for this service.

#rbl_domains = rbl.mail-abuse.org/reject : dialups.mail-abuse.org/warn

# http://www.rfc-ignorant.org is another interesting site with a number of
# services you can use with the rbl_domains option

# The setting below allows your host to be used as a mail relay only by
# localhost: it locks out the use of your host as a mail relay by any
# other host. See the section of the manual entitled "Control of relaying"
# for more info.

host_accept_relay = 127.0.0.1 : ::::1

# This setting allows anyone who has authenticated to use your host as a
# mail relay. To use this you will need to set up some authenticators at
# the end of the file

host_auth_accept_relay = *

# If you want Exim to support the "percent hack" for all your local domains,
# uncomment the following line. This is the feature by which mail addressed
# to x%y@z (where z is one of your local domains) is locally rerouted to
# x@y and sent on. Otherwise x%y is treated as an ordinary local part

# percent_hack_domains=*

# If this option is set, then any process that is running as one of the
# listed users may pass a message to Exim and specify the sender's
# address using the "-f" command line option, without Exim's adding a
# "Sender" header.

trusted_users = mail:uucp

# If this option is true, the SMTP command VRFY is supported on incoming
# SMTP connections; otherwise it is not.

smtp_verify = true

# Some operating systems use the "gecos" field in the system password file
# to hold other information in addition to users' real names. Exim looks up
# this field when it is creating "sender" and "from" headers. If these options
# are set, exim uses "gecos_pattern" to parse the gecos field, and then
# expands "gecos_name" as the user's name. $1 etc refer to sub-fields matched
# by the pattern.

gecos_pattern = ^([^,:]*)
gecos_name = $1

# This sets the maximum number of messages that will be accepted in one
# connection and immediately delivered. If one connection sends more
# messages than this, any further ones are accepted and queued but not
# delivered. The default is 10, which is probably enough for most purposes,
# but is too low on dialup SMTP systems, which often have many more mails
# queued for them when they connect.

smtp_accept_queue_per_connection = 100

# Send a mail to the postmaster when a message is frozen. There are many
# reasons this could happen; one is if exim cannot deliver a mail with no
# return address (normally a bounce) another that may be common on dialup
# systems is if a DNS lookup of a smarthost fails. Read the documentation
# for more details: you might like to look at the auto_thaw option

freeze_tell_mailmaster = true

# This string defines the contents of the \`Received' message header that
# is added to each message, except for the timestamp, which is automatically
# added on at the end, preceded by a semicolon. The string is expanded each
# time it is used.

received_header_text = "Received: \
         ${if def:sender_rcvhost {from ${sender_rcvhost}\n\t}\
         {${if def:sender_ident {from ${sender_ident} }}\
         ${if def:sender_helo_name {(helo=${sender_helo_name})\n\t}}}}\
         by ${primary_hostname} \
         ${if def:received_protocol {with ${received_protocol}}} \
         (Exim ${version_number} #${compile_number} (Debian))\n\t\
         id ${message_id}\
         ${if def:received_for {\n\tfor <$received_for>}}"

# Attempt to verify recipient address before receiving mail, so that mails
# to invalid addresses are rejected rather than accepted and then bounced.
# Apparently some spammers are abusing servers that accept and then bounce
# to send bounces containing their spam to people.

receiver_try_verify = true

# This would make exim advertise the 8BIT-MIME option. According to
# RFC1652, this means it will take an 8bit message, and ensure it gets
# delivered correctly. exim won't do this: it is entirely 8bit clean
# but won't do any conversion if the next hop isn't. Therefore, if you
# set this option you are asking exim to lie and not be RFC
# compliant. But some people want it.

#accept_8bitmime = true

# This will cause it to accept mail only from the local interface

#local_interfaces = 127.0.0.1

# If this next line is uncommented, any user can see the mail queue
# by using the mailq command or exim -bp.

#queue_list_requires_admin = false

# The errors_copy line will cause the specified address to receive a copy
# of bounces generated on the system.

#errors_copy = *@* postmaster@yourdomain

#
end



这是EXIM4还是EXIM3呀??
我怎么找不到你这个配置文件 。
您需要登录后才可以回帖 登录 | 注册

本版积分规则

快速回复 返回顶部 返回列表