From ac37e4533c6ef7dab75a54f7fb6b1295afdeecf8 Mon Sep 17 00:00:00 2001 From: David Piggott Date: Sat, 28 Mar 2015 16:38:28 +0000 Subject: [PATCH] Describe how to configure a remote host to relay via MIAB Since the conclusion was that #212 was the wrong approach for relaying, I've recently dropped that patch from my deployment in order to keep as close to vanilla upstream as possible. So I'm now doing SASL based relaying, and thought it would be nice to document how to do so somewhere. --- management/templates/mail-guide.html | 28 ++++++++++++++++++++++++++-- 1 file changed, 26 insertions(+), 2 deletions(-) diff --git a/management/templates/mail-guide.html b/management/templates/mail-guide.html index c1085216..b5bf0a4d 100644 --- a/management/templates/mail-guide.html +++ b/management/templates/mail-guide.html @@ -4,7 +4,7 @@

Checking and Sending Mail

-
+

Webmail

Webmail lets you check your email from any web browser. Your webmail site is:

@@ -50,7 +50,7 @@

Your device should also provide a contacts list and calendar that syncs to this box when you use this method.

-
+

Other information about mail on your box

@@ -64,6 +64,30 @@

Use only this box to send as you

Your box sets strict email sending policies for your domain names to make it harder for spam and other fraudulent mail to claim to be you. Only this machine is authorized to send email on behalf of your domain names. If you use any other service to send email as you, it will likely get spam filtered by recipients.

+ +

Relaying for other machines

+

If you have other machines on domains that are under the jurisdiction of your Mail-in-a-Box and they need to send mail (e.g. a webserver, or any machine that has cron jobs you want to see the output of) it is recommended that you configure those machines to relay via the Mail-in-a-Box.

+

If the remote machine is running Ubuntu 14.04 this can be done by applying the following steps to it: +

    +
  1. Run sudo apt-get install postfix and choose “Satellite system” when prompted.
    2. +
  2. + Append the following seven lines to /etc/postfix/main.cf: + 
    mydestination = 
+smtp_use_tls = yes
+smtp_tls_security_level = verify
+smtp_tls_CAfile = /etc/ssl/certs/ca-certificates.crt
+smtp_sasl_auth_enable = yes
+smtp_sasl_password_maps = hash:/etc/postfix/relay_password
+smtp_sasl_tls_security_options =
    +
    3. +
  3. + Write credentials in the following form to /etc/postfix/relay_password (substitute the second and third values with credentials for a freshly created account on the Mail-in-a-Box): + 
    {{hostname}} username:password
    + The account that you create on Mail-in-a-Box for this purpose can be on any of the domains that your Mail-in-a-Box manages, as the only requirement on mail sent by the remote machine is that it is from a domain that the Mail-in-a-Box manages. You may wish to create aliases on Mail-in-a-Box so that any replies sent to automatically generated messages do get routed to your own inbox; otherwise they will accumulate in the inbox of the relay account. +
    4. +
  4. Finally, chmod it to 600 (sudo chmod 600 /etc/postfix/relay_password), run sudo postmap /etc/postfix/relay_password and then reload postfix (sudo service postfix reload).
    5. +
+ That's it! Mail created and dispatched on the remote machine will now be routed via your Mail-in-a-Box.