Корпоративная почтовая система на базе высокодоступного кластера

127.0.0.1:10026 inet n - n - 16 smtpd

         -o content_fi  lter=

         -o receive_override_options=no_unknown_recipient_checks,no_header_body_checks

         -o smtpd_helo_restrictions=

         -o smtpd_client_restrictions=

         -o smtpd_sender_restrictions=

         -o smtpd_recipient_restrictions=permit_mynetworks,reject

         -o mynetworks_style=host

         -o smtpd_authorized_xforward_hosts=127.0.0.0/8

spamfilter unix - n n - - pipe

  flags=Rq user=spamfilter argv=/usr/local/bin/spamfilter  -f  ${sender}  --  ${recipient}

Приложение Б

Конфигурационные файлы сервисов, подключаемых к Postfix

Листинг конфигурационного фалйа /etc/postfix/ local_recipient_maps.cf

bind = yes

bind_dn= uid=postfix,ou=auth,dc=nixlab,dc=org

bind_pw= ratha4ua

server_host = ldap://localhost:389

search_base = ou=people,dc=nixlab,dc=org

query_filter = (mail=%s)

result_attribute = uid

Листинг фалйа /etc/postfix/ smtpd_sender_login_maps.cf

version=3

server_host = ldap://localhost

bind= yes

bind_dn= uid=postfix,ou=auth,dc=nixlab,dc=org

bind_pw= ratha4ua

search_base= ou=people,dc=nixlab,dc=org

query_filter= (|(mail=%s)(maildrop=%s))

result_attribute= mail

Листинг конфигурационного фалйа /etc/postfix/virtual_alias_maps.cf

bind = yes

bind_dn= uid=postfix,ou=auth,dc=nixlab,dc=org

bind_pw= ratha4ua

server_host = ldap://localhost:389

search_base = ou=people,dc=nixlab,dc=org

query_filter = (maildrop=%s)

result_attribute = mail

Листинг конфигурационного фалйа /etc/dovecot.conf

base_dir = /var/run/dovecot/

protocols = imap pop3

   protocol imap {

     listen = *:143

   }

   protocol pop3 {

     listen = *:110

   }

log_timestamp = «%Y-%m-%d %H:%M:%S»

syslog_facility = mail

mail_location = maildir:/var/vmail/%d/%u

mail_debug = yes

first_valid_uid = 1000

last_valid_uid = 1000

maildir_copy_with_hardlinks = yes

protocol imap {

  login_executable = /usr/libexec/dovecot/imap-login

  mail_executable = /usr/libexec/dovecot/imap

  imap_max_line_length = 65536

}

protocol pop3 {

  login_executable = /usr/libexec/dovecot/pop3-login

  mail_executable = /usr/libexec/dovecot/pop3

  pop3_uidl_format = %08Xu%08Xv

}

protocol lda {

  postmaster_address = postmaster@company.ru

  sendmail_path = /usr/lib/sendmail

  auth_socket_path = /var/run/dovecot/auth-master

}

auth_verbose = yes

auth_debug = yes

auth_debug_passwords = yes

auth default {

base_dir = /var/run/dovecot/

mechanisms = plain

  passdb pam {

  }

}

dict {

}

plugin {

}

Листинг конфигурационного фалйа /etc/clamd.conf

LogFile /var/log/clamav/clamd.log

LogFileMaxSize 0

LogTime yes

LogSyslog yes

PidFile /var/run/clamav/clamd.pid

TemporaryDirectory /var/tmp

DatabaseDirectory /var/clamav

LocalSocket /var/run/clamav/clamd.sock

FixStaleSocket yes

TCPSocket 3310

TCPAddr 127.0.0.1

MaxConnectionQueueLength 30

MaxThreads 50

ReadTimeout 300

User clamav

AllowSupplementaryGroups yes

ScanPE yes

ScanELF yes

DetectBrokenExecutables yes

ScanOLE2 yes

ScanMail yes

ScanHTML yes

ScanArchive yes

ArchiveBlockEncrypted no

Листинг конфигурационного фалйа /etc/clamsmtpd.cf

OutAddress: 10026

TimeOut: 180

KeepAlives: 0

XClient: on

Listen: 127.0.0.1:10025

ClamAddress: /var/run/clamav/clamd.sock

Header: X-Virus-Scanned: ClamAV using ClamSMTP

TempDirectory: /tmp

Action: drop

Quarantine: on

User: clamav

Листинг конфигурационного фалйа /etc/mail/spamassasin/local.cf

required_hits 5

rewrite_header Subject ****SPAM****

report_safe 0

use_bayes 1

bayes_path /etc/mail/spamassassin/bayes

bayes_file_mode 0666

bayes_learn_to_journal 1

bayes_min_ham_num 50

bayes_min_spam_num 50

score SUBJ_FULL_OF_8BITS 0.00

score HTML_COMMENT_8BITS 0.01

score HEADER_8BITS 0.00

score TO_NO_USER 0.01

score FORGED_MUA_OUTLOOK 0.5

score X_AUTH_WARNING 0.01

score SUBJ_HAS_UNIQ_ID 9.99

score HTTP_USERNAME_USED 9.99

score FORGED_YAHOO_RCVD 9.99

score FORGED_JUNO_RCVD 16

score UNWANTED_LANGUAGE_BODY 1.02

score MLM 5.55

score RCVD_NUMERIC_HELO 4.95

ok_locales en ru

whitelist_from root@localhost

blacklist_from *@outblaze.com

auto_whitelist_path        /etc/mail/spamassassin/auto-whitelist

auto_whitelist_file_mode   0666

trusted_networks 192.168.146.0/24

Приложение В

Файлы для организации фильтрации спама средствами Postfix

Листинг файла /etc/postfix/helo_access

example.com REJECT you are not in my local networks

80.80.80.80 REJECT you are not in my local networks

dc.DOM OK broken M$ Widnows server

Листинг файла /etc/postfix/dul_checks

/81-177-70-6\.donnetwork\.ru/i             OK 81-177-70-6.donnetwork.ru (@aaanet.ru)

/([0-9]*-){3}[0-9]*(\..*){2,}/i            553 SPAM_ip-add-rr-ess_networks

/([0-9]*\.){4}(.*\.){3,}.*/i               553 SPAM_ip-add-rr-ess_networks

/.*\..*\...\.comcast\.net/i                553 SPAM_comcast-net

/.*yahoobb.*\.bbtec\.net/i                 553 SPAM_yahoobb_bbtec-net

/[0-9]{12}\.bbtec\.net/i                   553 SPAM_host_bbtec-net

/.*\.broadband\.hu/i                       553 SPAM_broadband-hu

/client.*\..*\..*/i                        553 SPAM_CLIENT

/cable.*\..*\..*/i                         553 SPAM_CABLE

/pool.*\..*\..*/i                          553 SPAM_POOL

/dial.*\..*\..*/i                          553 SPAM_DIAL

/ppp.*\..*\..*/i                           553 SPAM_PPP

/dslam.*\..*\..*/i                         553 SPAM_DSLAM

/dhcp.*\..*\..*/i                          553 SPAM_DHCP

/adsl\.r61\.net/i                          OK adsl.r61.net

/adsl\.infotecstt\.ru/i                    OK adsl.infotecstt.ru

/[\.-]dsl.*\..*\..*/i                      553 SPAM_DSL

/[ax]dsl.*\..*\..*/i                       553 SPAM_XDSL

/.*([0-9]*\.){4}cableonline\.com\.mx/i     553 SPAM_IP-cableonline-com-mx

/.*\.([0-9]*\.){4}ip\.holtonks\.net/i      553 SPAM_ip-holtonks-net

/([0-9]*-){3}[0-9]*\.fibertel\.com\.ar/i   553 SPAM_IP-fibertel-com-ar

/.*[0-9]*-[0-9]*\.fibertel\.com\.ar/i      553 SPAM_IP-fibertel-com-ar

/[0-9]*\.user\.veloxzone\.com\.br/i        553 SPAM_user-veloxzone-com-br

/[0-9]*\.customer\.alfanett\.no/i          553 SPAM_customer-alfanett-no

/.*([0-9]*-){3}[0-9]*\.telecom\.net\.ar/i  553 SPAM_host-telecom-net-ar

/.*(-[0-9]*){2}\.telpol\.net\.pl/i         553 SPAM_host-telpol-net-pl

/(.*\.){2}maxonline\.com\.sg/i             553 SPAM_host-maxonline-com-sg

/(.*-){2}.*\.fairgamemail\.us/i            553 SPAM_host-fairgamemail-us

/[0-9]*[0-9]*-\.wispnet\.net/i             553 SPAM_host-wispnet-net

/.*-.*(\..*){2}\.ne\.jp/i                  553 SPAM_host-ne-jp

/[0-9]*\..*\.ne\.jp/i                      553 SPAM_h09t-ne-jp

/(.*\.){3}ad\.jp/i                         553 SPAM_host-ad-jp

/(.*\.){4}revip\.asianet\.co\.th/i         553 SPAM_revip-asianet-co-th

/[0-9]*\..*\.virtua\.com\.br/i             553 SPAM_host-virtua-com-br

/([0-9]*-){3}[0-9]*\.exatt\.net/i          553 SPAM_host-exatt-net

/([0-9]*\.){4}ip\.alltel\.net/i            553 SPAM_host-ip-alltel-net

/[0-9]{6,}\.chello\.../i                   553 SPAM_host-chello

/.*[0-9]*\..*\.chello\.../i                553 SPAM_host-chello-xx

/.*\..*\.t-dialin\.net/i                   553 SPAM_t-dialin-net

/.*\..*\.t-ipconnect\.de/i                 553 SPAM_t-ipconnect-de

/([0-9]*-){2,3}[0-9]*\..*\.cgocable\.net/i 553 SPAM_host-cgocable-net

/.*\..*\.shawcable\.net/i                  553 SPAM_host-shawcable-net

/p[0-9]*\.mp[0-9]*\.aaanet\.ru/i           553 SPAM_aaa_modem_pool

/([0-9]*-){2}[0-9]*\.ip\.adsl\.hu/i        553 SPAM_ip-adsl-hu

/([0-9]{1,3}\.){2}broadband4\.iol\.cz/i    553 SPAM_broadband-iol-cz

/.*\.yandex\.ru/i                          OK yandex.ru