Skip to content

Instantly share code, notes, and snippets.

@tankmek
Created February 15, 2018 19:16
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save tankmek/6ac3c7da29292a324117e6d0c8706cb1 to your computer and use it in GitHub Desktop.
Save tankmek/6ac3c7da29292a324117e6d0c8706cb1 to your computer and use it in GitHub Desktop.
Notes for installing qmail + vpopmail in a freebsd jail.

*** DRAFT **** DRAFT *****

[Install ezjail]

ezjail-admin create mail 'lo2|127.0.0.3,bge0|xx.xx.33.90'
echo 'cloned_interfaces="lo2"' >>/etc/rc.conf
service netif cloneup
ezjail-admin start mail
ezjail-admin console mail
cd /usr/ports/sysutils/daemontools 
make install clean

add to /etc/rc.conf

svscan_enable="YES"
svscan_servicedir="/service"
mkdir /service
/usr/local/etc/rc.d/svscan start
cd /usr/ports/sysutils/ucspi-tcp 
make install clean
cd /usr/ports/mail/qmail-tls 
make install clean
cd /var/qmail/alias 
echo "valid@email.org" > .qmail-root 
echo "valid@email.org" > .qmail-postmaster 
echo "valid@mydomain.org" > .qmail-mailer-daemon
cd /var/qmail/control
echo "20" > concurrencyincoming
echo "20" > concurrencylocal
echo "30" > concurrencyremote
echo "domain.com" > defaultdomain
echo "domain.com" > envnoathost
echo "domain.com" > plusdomain
cp /dev/null locals
echo "mx.domain.com" > me
echo "172800" > queuelifetime
echo "120" > timeoutsmtpd 
echo "120" > timeoutremote
echo "4" > spfbehavior

Generate the certificate for TLS

openssl genrsa -out server.key 2048
openssl req -new -key server.key -out server.csr
openssl x509 -req -days 365 -in server.csr -signkey server.key -out server.crt
cat server.key server.crt > servercert.pem
chown qmaild servercert.pem
openssl ciphers > /var/qmail/control/tlsclientciphers
openssl ciphers > /var/qmail/control/tlsserverciphers

echo :allow,QMAILQUEUE="/var/qmail/bin/qmail-queue" > /etc/tcp.smtp tcprules /etc/tcp.smtp.cdb /etc/tcp.smtp.tmp < /etc/tcp.smtp cd /var/qmail/ edit rc chmod +x rc

mkdir -p supervise/qmail-smtpd/log mkdir -p supervise/qmail-send/log mkdir -p /var/log/qmail chown qmaill /var/log/qmail /etc/rc.d/sendmail stop

add below to: /etc/rc.conf

sendmail_enable="NO"
sendmail_submit_enable="NO"
sendmail_outbound_enable="NO"
sendmail_msp_queue_enable="NO"
sendmail        /var/qmail/bin/sendmail
send-mail       /var/qmail/bin/sendmail
mailq           /var/qmail/bin/qmail-qread
newaliases      /var/qmail/bin/newaliases
hoststat        /var/qmail/bin/qmail-tcpto
purgestat       /var/qmail/bin/qmail-tcpok

ln -s /var/qmail/supervise/* /service/

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment