Ayuda con instalacion Postfix + Dovecot + Mysql

Hola,

falto iptables. Si n tiene iptables cualquiera con malas intenciones por telnet o con el comando netcat le ganan acceso root al server.

Salu2,

 

creo que iptables es super complicado no es asi?

recordad que soy programador y sin mucho tiempo para terminar esta instalación

 

Para empezar recomiendo que pases un nmap a tu server para ver que puertos están abiertos.

nmap la ip del server y deja que escanee los 1.000 puertos.

iptables viene por defecto instalado solo debes actualizarlo y crear las reglas. Mira en google que hay generadores de reglas.

Ver version:

iptables -V

Iniciar:

service iptables start

http://www.alcancelibre.org/staticpages/index.php/introduccion-iptables

 

puedes usar delante shorewall que es mas sencillo para configurar.

fail2ban bien configurado tambien es importante

 

De momento he instalado amavis, clamav y spamassasain.

Pero tengo un problema, ahora cualquier correo que mande me lo manda a spam:

CODE, HTML o PHP Insertado:

Apr 30 19:12:14 ns3285243 dovecot: auth-worker(11400): mysql(127.0.0.1): Connected to database mailserver
Apr 30 19:12:14 ns3285243 dovecot: auth-worker(11402): mysql(127.0.0.1): Connected to database mailserver
Apr 30 19:12:14 ns3285243 dovecot: imap-login: Login: user=<carmen@rentabiliza.net>, method=PLAIN, rip=83.52.9.5, lip=5.135.177.115, mpid=11404, TLS, session=<+Q5ZpkX40ABTNAkF>
Apr 30 19:12:14 ns3285243 dovecot: imap-login: Login: user=<soporte@rentabiliza.net>, method=PLAIN, rip=83.52.9.5, lip=5.135.177.115, mpid=11405, TLS, session=<vRdZpkX4zwBTNAkF>
Apr 30 19:12:15 ns3285243 dovecot: imap-login: Login: user=<carmen@rentabiliza.net>, method=PLAIN, rip=83.52.9.5, lip=5.135.177.115, mpid=11408, TLS, session=<hWVxpkX40gBTNAkF>
Apr 30 19:12:15 ns3285243 dovecot: imap-login: Login: user=<soporte@rentabiliza.net>, method=PLAIN, rip=83.52.9.5, lip=5.135.177.115, mpid=11409, TLS, session=<ty5zpkX40wBTNAkF>
Apr 30 19:12:30 ns3285243 dovecot: imap-login: Login: user=<carmen@rentabiliza.net>, method=PLAIN, rip=83.52.9.5, lip=5.135.177.115, mpid=11411, TLS, session=<7exSp0X41QBTNAkF>
Apr 30 19:13:20 ns3285243 postfix/smtpd[11455]: connect from mail-we0-f171.google.com[74.125.82.171]
Apr 30 19:13:21 ns3285243 postfix/policy-spf[11462]: Policy action=PREPEND Received-SPF: pass (gmail.com ... _spf.google.com: Sender is authorized to use '500l3r@gmail.com' in 'mfrom' identity (mechanism 'include:_netblocks.google.com' matched)) receiver=orbialia.es; identity=mailfrom; envelope-from="500l3r@gmail.com"; helo=mail-we0-f171.google.com; client-ip=74.125.82.171
Apr 30 19:13:21 ns3285243 postfix/smtpd[11455]: 1F331A17C1: client=mail-we0-f171.google.com[74.125.82.171]
Apr 30 19:13:21 ns3285243 postfix/cleanup[11464]: 1F331A17C1: message-id=<CAG91J61o0MtUf=2CJiHPmqXK2=evYoB8SQWUo0iDsWR-8qNrfQ@mail.gmail.com>
Apr 30 19:13:21 ns3285243 opendkim[16078]: 1F331A17C1: s=20120113 d=gmail.com SSL 
Apr 30 19:13:21 ns3285243 postfix/qmgr[7742]: 1F331A17C1: from=<500l3r@gmail.com>, size=2180, nrcpt=1 (queue active)
Apr 30 19:13:21 ns3285243 postfix/smtp[11466]: connect to 127.0.0.1[127.0.0.1]:10024: Connection refused
Apr 30 19:13:21 ns3285243 postfix/smtpd[11455]: disconnect from mail-we0-f171.google.com[74.125.82.171]
Apr 30 19:13:21 ns3285243 postfix/smtp[11466]: 1F331A17C1: to=<soporte@rentabiliza.net>, relay=none, delay=0.77, delays=0.76/0.02/0/0, dsn=4.4.1, status=deferred (connect to 127.0.0.1[127.0.0.1]:10024: Connection refused)
Apr 30 19:16:16 ns3285243 dovecot: imap(soporte@rentabiliza.net): Connection closed in=0 out=301
Apr 30 19:16:16 ns3285243 dovecot: imap(carmen@rentabiliza.net): Connection closed in=1095 out=9309
Apr 30 19:16:16 ns3285243 dovecot: imap(carmen@rentabiliza.net): Connection closed in=394 out=1503
Apr 30 19:16:16 ns3285243 dovecot: imap(soporte@rentabiliza.net): Connection closed in=752 out=3475
Apr 30 19:16:16 ns3285243 dovecot: imap(carmen@rentabiliza.net): Connection closed in=132 out=851
Apr 30 19:16:41 ns3285243 postfix/anvil[11458]: statistics: max connection rate 1/60s for (smtp:74.125.82.171) at Apr 30 19:13:20
Apr 30 19:16:41 ns3285243 postfix/anvil[11458]: statistics: max connection count 1 for (smtp:74.125.82.171) at Apr 30 19:13:20
Apr 30 19:16:41 ns3285243 postfix/anvil[11458]: statistics: max cache size 1 at Apr 30 19:13:20
Apr 30 19:18:04 ns3285243 postfix/smtpd[11688]: connect from dub0-omc4-s19.dub0.hotmail.com[157.55.2.94]
Apr 30 19:18:05 ns3285243 postfix/policy-spf[11695]: Policy action=PREPEND Received-SPF: pass (hotmail.com: Sender is authorized to use 'soler-cueto@hotmail.com' in 'mfrom' identity (mechanism 'include:spf-a.hotmail.com' matched)) receiver=orbialia.es; identity=mailfrom; envelope-from="soler-cueto@hotmail.com"; helo=dub0-omc4-s19.dub0.hotmail.com; client-ip=157.55.2.94
Apr 30 19:18:05 ns3285243 postfix/smtpd[11688]: B2B85A17C5: client=dub0-omc4-s19.dub0.hotmail.com[157.55.2.94]
Apr 30 19:18:05 ns3285243 postfix/cleanup[11697]: B2B85A17C5: message-id=<DUB118-W42BA5245DE554ADB8DE98FED410@phx.gbl>
Apr 30 19:18:05 ns3285243 postfix/qmgr[7742]: B2B85A17C5: from=<soler-cueto@hotmail.com>, size=1897, nrcpt=1 (queue active)
Apr 30 19:18:06 ns3285243 postfix/smtpd[11688]: disconnect from dub0-omc4-s19.dub0.hotmail.com[157.55.2.94]
Apr 30 19:18:06 ns3285243 postfix/smtp[11699]: connect to 127.0.0.1[127.0.0.1]:10024: Connection refused
Apr 30 19:18:06 ns3285243 postfix/smtp[11699]: B2B85A17C5: to=<soporte@rentabiliza.net>, relay=none, delay=0.98, delays=0.95/0.02/0/0, dsn=4.4.1, status=deferred (connect to 127.0.0.1[127.0.0.1]:10024: Connection refused)

EL error que da es connection refused. He progrado con un correo de gmail y otro de hotmail y nada.

 

Acabo de solucionarlo, tuve que reiniciar el servidor completo y el problema se solventó.

También he testeado con este contenido de prueba desde un email temporal externo y me lo tira a spam

CODE, HTML o PHP Insertado:

This is the GTUBE, the
    Generic
    Test for
    Unsolicited
    Bulk
    Email

If your spam filter supports it, the GTUBE provides a test by which you
can verify that the filter is installed correctly and is detecting incoming
spam. You can send yourself a test mail containing the following string of
characters (in upper case and with no white spaces and line breaks):

XJS*C4JDBQADN1.NSBN3*2IDNEN*GTUBE-STANDARD-ANTI-UBE-TEST-EMAIL*C.34X

You should send this test mail from an account outside of your network.

 

Acabo de instalar rkhunter y configurar la tarea diaria de comprobar el sistema y que este me envie un correo diario con los reportes.

Estoy en el tramo de configurar postgrey como greylist y lo estoy anexando a postfix, pero tengo una duda.

CODE, HTML o PHP Insertado:

En el archivo main.cf de postfix tengo la siguiente opción:

check_policy_service unix:private/policy-spf

y debo agregar inet:127.0.0.1:10023 a esa linea para configurar correctamente postgrey

La opción de unix: private/policy-spf la puse al configurar el spf
¿Puedo colocar la opción de postgrey después de la de psf o como debo hacerlo?

 

He añadido un segundo check_policy_service con la nueva opción, reiniciado los servicios y parece que funciona

CODE, HTML o PHP Insertado:

May  3 17:30:58 ns3285243 postgrey[9216]: Resolved [localhost]:10023 to [127.0.0.1]:10023, IPv4
May  3 17:30:58 ns3285243 postgrey[9216]: Binding to TCP port 10023 on host 127.0.0.1 with IPv4
May  3 17:30:58 ns3285243 postgrey[9216]: Setting gid to "126 126"
May  3 17:30:58 ns3285243 postgrey[9216]: Setting uid to "120"
May  3 17:32:30 ns3285243 postgrey[9391]: Process Backgrounded
May  3 17:32:30 ns3285243 postgrey[9391]: 2014/05/03-17:32:30 postgrey (type Net::Server::Multiplex) starting! pid(9391)
May  3 17:32:30 ns3285243 postgrey[9391]: Resolved [localhost]:10023 to [127.0.0.1]:10023, IPv4
May  3 17:32:30 ns3285243 postgrey[9391]: Binding to TCP port 10023 on host 127.0.0.1 with IPv4
May  3 17:44:31 ns3285243 postfix/master[15977]: terminating on signal 15
May  3 17:44:32 ns3285243 postfix/master[10086]: daemon started -- version 2.10.2, configuration /etc/postfix