Changeset cd8630b for npl/mailserver/netqmail_conf/root/etc/postinst.d/post.qmail_conf

Timestamp:

04/26/18 17:32:02 (7 years ago)

Author:

Edwin Eefting <edwin@datux.nl>

Branches:

gcc484, master, perl-5.22

Children:

dd97a57

Parents:

a1525ed

Message:

improved logging. auth and tls support. qmail-submission on port 587 (requires both tls and auth to relay mails from the internet)

File:

• npl/mailserver/netqmail_conf/root/etc/postinst.d/post.qmail_conf (modified) (2 diffs)

npl/mailserver/netqmail_conf/root/etc/postinst.d/post.qmail_conf

@@ -37 +37 @@
 
 
+# logging via syslog in /var/log/maillog from now on
+rm -rf /var/log/qmail/
+
+
 # permissions
 . /etc/qmail.permissions
 qmail_permissions
-cd /var/log/qmail
-chown -R qmaill.nofiles .
-chgrp root .
-chmod -R og-wrx .
-chmod g+rx .
+
 
 #stuff
@@ -61 +61 @@
 #regenerate cdb
 tcprules /etc/qmail/tcp.smtp.cdb /etc/qmail/tcp.smtp.tmp < /etc/qmail/tcp.smtp
+tcprules /etc/qmail/tcp.submission.cdb /etc/qmail/tcp.submission.tmp < /etc/qmail/tcp.submission
+
+
+#TLS configuration
+if ! [ -e /var/qmail/control/dh1024.pem ]; then
+    openssl dhparam -out /var/qmail/control/dh1024.pem.tmp 1024 || exit 1
+    chown qmaild /var/qmail/control/dh1024.pem.tmp || exit 1
+    chmod 400 /var/qmail/control/dh1024.pem.tmp || exit 1
+    mv /var/qmail/control/dh1024.pem.tmp /var/qmail/control/dh1024.pem || exit 1
+fi
+
+
+
 
 #enable scripts (x is disble to prevent starting up after first installation of binary)
-chmod +x /service/qmail-smtpd/run /service/qmail-send/run /service/qmail-send/log/run /service/qmail-smtpd/log/run
+chmod +x /service/qmail-smtpd/run /service/qmail-send/run /service/qmail-send/log/run /service/qmail-smtpd/log/run /service/qmail-submission/run /service/qmail-submission/log/run