View source for Configuring basic SMTP, IMAP, POP and HTTP access for complete email on a single server

[[Main Page|Home]] > [[CentOS]] > [[CentOS 6.x]] > [[Email server configuration]] > [[Configuring basic SMTP, IMAP, POP and HTTP access for complete email on a single server]]

=Cloud Account creation and DNS entries=
# Create a dedicated cloud account (eg linode)
# Create CentOS instance with public IP
# Ensure that firewall for the VM allows SSH, HTTP, HTTPS, IMAP, IMAPS, SMTP, STMPS, POP3, POP3S and ICMP
# Register domain name through registrar eg godaddy
# Update DNS entries for domain, www, mail, MX record to point to public IP of the VM


==Configure system==
# Set correct timezone on system using [[CentOS 7.x Change system timezone]]
# Configure history using [[Storing date / time along with commands in history]]
# In case of public cloud VM consider adding swap by referring [[CentOS 7.x adding swap space using file]]


==Configure web server==
# yum -y install httpd mod_ssl
# service httpd start
# Edit iptables to allow incoming connections to port 80, 443
# service iptables restart
# Put test file in /var/www/html
# Open domain in browser to verify that website is accessible.  (Wait at least 3-4 minutes after updating DNS entries to avoid getting wrong values cached in near-by DNS)
# chkconfig httpd on
# Edit /etc/httpd/conf/httpd.conf and update '<tt>Listen 80</tt>' to '<tt>Listen 0.0.0.0:80</tt>'

For public facing server it might make sense to get recognized SSL certificates from CA.  For example refer [[Installing lets-encrypt SSL certificate]]


==Create users==
# useradd saurabh
# passwd saurabh
Similarly more users can be created


==Setup postfix SMTP server==
# Edit '<tt>/etc/postfix/main.cf</tt>' as follows:
## Set myhostname=mail.sbarjatiya.com
## Set mydomain=sbarjatiya.com
## Set myorigin=$mydomain
## Set inet_interfaces=all   (Comment inet_interfaces=localhost)
## Prepend $mydomain to mydestination value   (Without this only @mail.domain.com mails would get accepted.  After this change @domain.com would also work)
# service postfix restart
# Edit /etc/sysconfig/network and set correct hostname.  
# Edit /etc/hosts and correct hostname
# hostname mail.sbarjatiya.com
# Allow incoming connections to port 25 and 465

Also refer to [[Postfix SMTP authentication using dovecot]]

Increase postfix message and mailbox size limit using [[Troubleshooting_postfix_server_issues#Message_file_too_big_issue]]



==Setup dovecot==
# yum -y install dovecot
# Edit /etc/postfix/main.cf and set '<tt>home_mailbox = mail/</tt>'
# service postfix restart
# Edit /etc/dovecot/conf.d/10-mail.conf and set '<tt>mail_location = maildir:~/mail</tt>'
# service dovecot start
# Allow incoming connections to ports 110,143,993,995
# chkconfig dovecot on


==Setup squirrelmail==
# yum -y install wget
# Setup rpmfusion, repoforge and epel
# yum -y install squirrelmail
# cd /usr/share/squirrelmail/config  and run './conf.pl'  
## Set Organization Preferences -&gt; Organization name
## Set Server Settings -&gt; Domain
## Set Server Settings -&gt; IMAP Settings.   Use values mail.sbarjatiya.com, 993, Secure (IMAP): true, Server software: dovecot
## Setup mail sending using sendmail and not through SMTP
# Open &lt;domain&gt;/webmail in browser
# setenforce 0
# edit /etc/sysconfig/selinux  and set SELINUX=disabled
# set correct timezone in PHP using following in /etc/php.ini:
#:<pre>
#:: date.timezone="Asia/Kolkata"
#:</pre>
#: Refer: https://www.php.net/manual/en/timezones.php for list of all possible timezones


Note that user must login into squirrelmail interface once before he/she can receive email.  This is required for creating necessary folders in home folder.


==Squirrelmail change password support==

# Download change_passwd and compatability (Version 1.3) plugins from
#:http://squirrelmail.org/countdl.php?fileurl=http%3A%2F%2Fwww.squirrelmail.org%2Fplugins%2Fchange_passwd-4.0-1.2.8.tar.gz
#:http://squirrelmail.org/countdl.php?fileurl=http%3A%2F%2Fwww.squirrelmail.org%2Fplugins%2Fcompatibility-1.3.tar.gz
# cd /usr/share/squirrelmail/plugins
# Extract both .tar.gz file here
# For change_passwd read INSTALL file and perform necessary steps
## cp config.php.sample config.php
## yum -y install gcc
## gcc -lcrypt -O -o chpasswd chpasswd.c
## chown root:apache chpasswd
## chmod 4750 chpasswd
# Go to /usr/share/squirrelmail/config
# Again run ./conf.pl and enable both plugins (Compatability plugin must load before change_password plugin.  Edit /etc/squirrelmail/config.php by hand if that is not the case)



===Troubleshooting change password support===

Squirrelmail change password support requires use of md5 salted hash and does not supports sha256 or sha512.  In case machine is configured to use only sha256 hash for password then the plugin will not work and will always report old password as incorrect.  To resolve this use following steps:

# Edit /etc/libuser.conf and set '<tt>crypt_style md5</tt>'
# yum -y install authconfig
# Edit /etc/sysconfig/authconfig and set '<tt>PASSWDALGORITHM=md5</tt>'.  The same can also be achived by running '<tt>authconfig-tui</tt>' and enabling use of md5 for passwords.
# Test by going to /usr/share/squirrelmail/plugins/change_passwd folder and by running command '<tt>sudo ./chpasswd &lt;username&gt; &lt;old_password&gt; &lt;new_password&gt;</tt>'.  If this fails then changing through browser will also fail as the browser plugin calls this script to change password.

 

==Migrating email server==
For migrating email server setup this way refer to [[Migrating mail server from one machine to another]]




[[Main Page|Home]] > [[CentOS]] > [[CentOS 6.x]] > [[Email server configuration]] > [[Configuring basic SMTP, IMAP, POP and HTTP access for complete email on a single server]]