Setting up a mail server and configuring email accounts under Linux / CentOS 5

if you dont have sendmail install then you need to install sendmail

but you have already installed then you dont need.

jsut need to configure.

if you type this command :  pgrep sendmail

if it return number that mean sendmail is running.

or try : service sendmail restart

see what happended

Ok -- I had to log in as a super user in order to issue those commandsl.  Sendmail was not running, .. but typing "service sendmail restart" seems to have started the service.  

What now?  Is there some kind of web mail interface that I could install to simplify the setting up of email addresses?  

Thanks,
- Yvan

>> it will show you , how to configure sendmail with SSl Certificatate for securing your sendmail

If possible, I would prefer to set up sendmail WITHOUT an SSL Certificate. I don't have any SSL certificates for any of my domains, and would prefer to not have to purchase any if I can help it.

- Yvan

no you dont need to purchase, its open ssl, it will create a self certificate  for your server

you port 25 is closed, you need open port 25

iptables -A INPUT  -p tcp --dport 25 -j ACCEPT

and when you do  pgrep sendmail
you see some number is not it ??

you can use webmin , for configuring sendmail and to check email ( its actually sever configuration tool , not webmail) but you would be able to check emaiil from their

or you need to install webmail software

we will come to this lateron

Ok -- I have access to webmin on my dedicated server, and just used it to install the postfix mail server.  What's the next step?  

Also -- fosiul01 --- I've typed the following at the command line while logged in as a super user:

iptables -A INPUT  -p tcp --dport 25 -j ACCEPT

I didn't see anything displayed at  the command line after I typed this in and hit enter, .. but I didn't get any error messages or anything either.  

And yes -- when I type "pgrep sendmail" at the command line, .. I see numbers (668 & 677).

What now?

- Yvan

u have send mail installed.u dont need to instal postfix. Stick with send mail. Tomorow i wil send u configuration 4r sendmail and how to use it with webmin and outlook.

I don't use outlook .. I use Thunderbird.  Not sure if that makes any difference, but thought I should mention it.  

Thanks,  though.  I'll wait to hear back from you tomorrow.

- yg

Hi, your Port 25 is closed.

Try this : telnet 25 localhost

Result : you will be connected to mailserver. ( let me know the result)

 lsof -n -i:25
(Past the result here)

Iptables -L
(past result here)

and do one more thing :

iptables --flush

it will flush all your iptables rule for time being,

let me know then i will check your port again

Here's what's returned when I type "telnet 25 localhost" at the command line:

25/localhost: Servname not supported for ai_socktype


When I type " lsof -n -i:25", I get the following:

COMMAND  PID USER   FD   TYPE DEVICE SIZE NODE NAME
sendmail 668 root    4u  IPv4 360426       TCP 127.0.0.1:smtp (LISTEN)
 

.. and when I type "iptables -L" I get the following:

Chain INPUT (policy DROP)
target     prot opt source               destination
ACCEPT     all  --  anywhere             anywhere
ACCEPT     all  --  anywhere             anywhere
ACCEPT     tcp  --  anywhere             anywhere            tcp flags:ACK/ACK
ACCEPT     all  --  anywhere             anywhere            state ESTABLISHED
ACCEPT     all  --  anywhere             anywhere            state RELATED
ACCEPT     udp  --  anywhere             anywhere            udp spt:domain dpts:1024:65535
ACCEPT     icmp --  anywhere             anywhere            icmp any
ACCEPT     tcp  --  anywhere             anywhere            tcp dpt:ftp
ACCEPT     tcp  --  anywhere             anywhere            tcp dpts:terabase:samsung-unidex
ACCEPT     tcp  --  anywhere             anywhere            tcp dpt:ssh
ACCEPT     tcp  --  anywhere             anywhere            tcp dpt:smtp
ACCEPT     tcp  --  anywhere             anywhere            tcp dpt:domain
ACCEPT     udp  --  anywhere             anywhere            udp dpt:domain
ACCEPT     tcp  --  anywhere             anywhere            tcp dpt:http
ACCEPT     tcp  --  anywhere             anywhere            tcp dpt:pop3
ACCEPT     tcp  --  anywhere             anywhere            tcp dpt:imap
ACCEPT     udp  --  anywhere             anywhere            udp dpt:imap
ACCEPT     tcp  --  anywhere             anywhere            tcp dpt:https
ACCEPT     tcp  --  anywhere             anywhere            tcp dpt:mysql
ACCEPT     tcp  --  anywhere             anywhere            tcp dpt:ndmp
ACCEPT     tcp  --  anywhere             anywhere            tcp dpt:dnp
LOG        all  --  anywhere             anywhere            LOG level debug prefix `DROPPED = '
ACCEPT     udp  --  anywhere             anywhere            udp dpt:domain
ACCEPT     tcp  --  anywhere             anywhere            tcp dpt:smtp

Chain FORWARD (policy ACCEPT)
target     prot opt source               destination

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination


I've also typed "iptables --flush" at the command line (nothing happened - I just got returned to a prompt).

What's next?

- yg

Err, ... that just crashed my server dude.  Now I can't get in via SSH, .. nor is my website coming up. What am I supposed to do now?

- yg

yap, i knew this will happended!!!!

who told you to block all the incoming request to your server

Chain INPUT (policy DROP)   ??

You are blocking all the incomming request

so when you flushed your iptables, its now blocking all the incomming request to your server

can you access your server from control panel ???

if you can access your server from control panel, which you should be able to

use this :

iptables -P INPUT ALLOW
# iptables -P OUTPUT ALLOW
# iptables -P FORWARD ALLOW

then Service iptables save
then
service iptables restart

then past here again : iptables -L

No, I can not get in via the control panel (the webmin interface is on the same box).  Will a server restart remedy this?  

- yg

Sorry it was my fault, i should of check your iptables before telling you to flush your iptables

i am sorry for that,

like my vps server, i can access control pantel and frm control panel there is a ssh which will allow you to connect always


do you have something like this ??

No.  Will a server restart remedy this?

yes, server reboot would clear iptables again, it will take the default iptables .

do a reboot of whole server

any luck ??

is this your vps server ??

hold on, if its vps. then your vps provider should of provide you a control pantel.

what about that ?

its allwright isnot it??

No, it's not a VPS.

The server is now back up (I had the co-lo facility reboot the machine).

What's next?

- yg

ok

do

iptables -P INPUT ALLOW  

its should allow all trafiq to your server now,

problem is , we need to open your 25 port

Can you telnet like this : telnet localhost 25 ?? ( yes or not)

Ohh onee more thing

in /etc/mail/sendmail.mc

you need to delete  this oine :

from here :
DAEMON_OPTIONS(`Port=smtp,Addr=127.0.0.1, Name=MTA')

to here

DAEMON_OPTIONS(`Port=smtp, Name=MTA')

then type :
make

then service sendmail restart

let me know when you are done

Ok you can do 2 things:

1.  iptables -A INPUT  -p tcp --dport 25 -j ACCEPT

and

in /etc/mail/sendmail.mc

you need to delete  this oine :

from here :
DAEMON_OPTIONS(`Port=smtp,Addr=127.0.0.1, Name=MTA')

to here

DAEMON_OPTIONS(`Port=smtp, Name=MTA')

then type :
make

then service sendmail restart


Or

iptables -P INPUT ALLOW  
then
in /etc/mail/sendmail.mc

you need to delete  this oine :

from here :
DAEMON_OPTIONS(`Port=smtp,Addr=127.0.0.1, Name=MTA')

to here

DAEMON_OPTIONS(`Port=smtp, Name=MTA')

then type :
make

then service sendmail restart


try the first one . if it workes then let me know, then will have to save the rule in iptables

I'm kind of nervous about running the following command:

iptables -P INPUT ALLOW

Please explain to me what this command will do, and if there are any risks associated with it.

Can you telnet like this : telnet localhost 25 ?? ( yes or not)

I already answered that question for you the other day. When I type that at the command line, I get the following:

25/localhost: Servname not supported for ai_socktype

- yg

if u dont want to allow al input trafiq then u just need to open port 25 as i said b4r. But why ur server saying it does nt suppot aisoket. I wil have to see tomorow as its night here.

Ok have installed cyrus ??

i guess yes, then shutdown cyrus

i think its by this : /etc/init.d/cyrus restart
or /etc/init.d/cyrus2.2 restart

then try to telnet localhost again

let me know the outcome

Sorry its stop , not restart

Also : I need some log file

when you will restart sendmail, try to get last few line of log from /var/log/messages

And also :
 I need the full error message here

you just said " 25/localhost: Servname not supported for ai_socktype"

is this the full error you are getting or is there any other line was there

sent me the full error message

When I try to stop the Cyrus service using either of the commands/paths you've indicated, .. I get a "no such file or directory" error message.  

I've checked the /etc/init.d folder on the server, and all I see in there that looks like it might be the cyrus server is a file called "cyrus-imapd".  

Should I try to stop that particular service?

Also -- The "25/localhost: Servname not supported for ai_socktype" error message is the only error message that I get when I try to telnet (there are NO other lines).

Lastly -- below are the entire contents of my messages log file:

Thanks,
- yg

----------------------------------------------------------------------------

Sep 21 04:03:03 DEDi163 syslogd 1.4.1: restart.
Sep 21 04:03:14 DEDi163 clamd[2170]: Database correctly reloaded (428240 signatures)
Sep 21 11:43:04 DEDi163 named[8420]: lame server resolving 'mirrors.arsc.edu' (in 'arsc.edu'?): 137.229.129.251#53
Sep 21 12:42:58 DEDi163 named[8420]: lame server resolving 'mirrors.arsc.edu' (in 'arsc.edu'?): 137.229.129.251#53
Sep 21 18:42:59 DEDi163 named[8420]: lame server resolving 'mirrors.arsc.edu' (in 'arsc.edu'?): 137.229.4.136#53
Sep 21 20:42:58 DEDi163 named[8420]: lame server resolving 'mirrors.arsc.edu' (in 'arsc.edu'?): 137.229.129.251#53
Sep 21 21:42:58 DEDi163 named[8420]: lame server resolving 'mirrors.arsc.edu' (in 'arsc.edu'?): 137.229.4.136#53
Sep 21 22:20:08 DEDi163 named[8420]: loading configuration from '/etc/named.conf'
Sep 21 22:20:08 DEDi163 named[8420]: atzilut.com.zone:22: file does not end with newline
Sep 21 22:20:08 DEDi163 named[8420]: zone atzilut.com/IN: zone serial unchanged
Sep 21 22:20:08 DEDi163 named[8420]: zone atzilut.com/IN: loaded serial 2004042601
Sep 21 22:20:08 DEDi163 named[8420]: zone atzilut.com/IN: sending notifies (serial 2004042601)
@
"messages" 650L, 57829C

By the way -- I've applied the updates to the sendmail.mc file.

When I typed "make" at the command line, .. I got the following warning message:

WARNING: 'sendmail.mc' is modified. Please install package sendmail-cf to update your configuration.

... but the sendmail service seemed to restart without any problems.

- yg

ok u need to instal sendmail-cf package. Then do make then restart sendmail. Try stop cyrus-imapd as u said be4r. Like this service cyrus-imapd stop. Check speling pls as i m texing 4rm moblie. Let me know.

yum install sendmail-cf

Loading "fastestmirror" plugin
Loading mirror speeds from cached hostfile
Could not retrieve mirrorlist http://mirrorlist.centos.org/?release=5&arch=i386&repo=os error was
[Errno 4] IOError: <urlopen error (-3, 'Temporary failure in name resolution')>
Error: Cannot find a valid baseurl for repo: base

install these 2 repo

wget -c  http://apt.sw.be/redhat/el5/en/i386/rpmforge/RPMS/rpmforge-release-0.3.6-1.el5.rf.i386.rpm

then

rpm -Uvh rpmforge-release-0.3.6-1.el5.rf.i386.rpm

Same again

wget -c http://download.fedora.redhat.com/pub/epel/4/i386/epel-release-4-9.noarch.rpm

rpm -Uvh rpm.....


then try again

let me know

http://apt.sw.be/redhat/el5/en/i386/rpmforge/RPMS/rpmforge-release-0.3.6-1.el5.rf.i386.rpm

Resolving apt.sw.be... failed: Temporary failure in name resolution.

what about this one ??

wget -c http://download.fedora.redhat.com/pub/epel/4/i386/epel-release-4-9.noarch.rpm

this one
wget -c http://download.fedora.redhat.com/pub/epel/4/i386/epel-release-4-9.noarch.rpm
wil tell you to install GCC or something, just do yum file name install

Resolving download.fedora.redhat.com... failed: Temporary failure in name resolution.

I think some other kind of problem has been introduced by the edits I've recently applied.  It looks like my server is not able to see any resources outside of it's own network.  Is there any for me to confirm that somehow?

yes, you are having problem

what edit did you do ??

I've done everything you've suggested in this thread.

ommm NO,

you server cant resolve any outside address
can you ping any host

like ping www.yahoo.com ??

what Ip tables rules did you apply ??

can you past here again your IPtables ?? iptables -L

and also you have change , sendmail config, which is nothing to do with resolving Ip.

and als0

have you checked that name server information is right in

/etc/resolv.conf ??

no, I can't ping any domains.  The only IP tables rule that I applied was the one to open up port #25.   Here is the output of iptables -L :


Chain INPUT (policy DROP)
target     prot opt source               destination
ACCEPT     all  --  anywhere             anywhere
ACCEPT     all  --  anywhere             anywhere
ACCEPT     tcp  --  anywhere             anywhere            tcp flags:ACK/ACK
ACCEPT     all  --  anywhere             anywhere            state ESTABLISHED
ACCEPT     all  --  anywhere             anywhere            state RELATED
ACCEPT     udp  --  anywhere             anywhere            udp spt:domain dpts:1024:65535
ACCEPT     icmp --  anywhere             anywhere            icmp any
ACCEPT     tcp  --  anywhere             anywhere            tcp dpt:ftp
ACCEPT     tcp  --  anywhere             anywhere            tcp dpts:terabase:samsung-unidex
ACCEPT     tcp  --  anywhere             anywhere            tcp dpt:ssh
ACCEPT     tcp  --  anywhere             anywhere            tcp dpt:smtp
ACCEPT     tcp  --  anywhere             anywhere            tcp dpt:domain
ACCEPT     udp  --  anywhere             anywhere            udp dpt:domain
ACCEPT     tcp  --  anywhere             anywhere            tcp dpt:http
ACCEPT     tcp  --  anywhere             anywhere            tcp dpt:pop3
ACCEPT     tcp  --  anywhere             anywhere            tcp dpt:imap
ACCEPT     udp  --  anywhere             anywhere            udp dpt:imap
ACCEPT     tcp  --  anywhere             anywhere            tcp dpt:https
ACCEPT     tcp  --  anywhere             anywhere            tcp dpt:mysql
ACCEPT     tcp  --  anywhere             anywhere            tcp dpt:ndmp
ACCEPT     tcp  --  anywhere             anywhere            tcp dpt:dnp
LOG        all  --  anywhere             anywhere            LOG level debug prefix `DROPPED = '
ACCEPT     tcp  --  anywhere             anywhere            tcp dpt:smtp

Chain FORWARD (policy ACCEPT)
target     prot opt source               destination

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination

if you try to ping what it say ??

and have you checked your resolv.conf ?? is your nameserver address alright ??

try to restart your server one more time, if your iptables give any problem it will fix it.

Or if you dont want to restart , then do service iptables restart

its till put your iptables same as before

then try again

ping: unknown host yahoo.com

My resolv.conf file contains the following:

nameserver 63.134.253.164
nameserver 127.0.0.1

I typed service iptables restart .. but I'm still not able to ping anything

can you ping 63.134.253.164 ??

hold on 63.134.253.164  is your IP address
how can it be your nameserver addres ??

name server address would your ISP Dns server address!!!

Because I'm running my own nameserver. .. You were the one who talked me through setting up DNS in another thread the other day, .. remember?

- yg

you are running your own Dns server

nameserever is different!!!!

nameserver IP would be your ISP dns server address. and your clients would your Gateway as nameserver.

find out what ip of your ISP dns server , and put that one in /etc/resolv.conf

then try to ping.

by the way

have you ever install any thing by yum ??

like this, yum program installed ??

In your position I would now probably just wipe the machine and start over. Unless you're doing this for money or else on a professional basis, just install an Ubuntu version, possibly a server edition. Make sure you have enabled the web and mail servers. Configure postfix by its config file, seeking assistance on the postfix web site. Apache seems to have been up already, so copy that config (and your files, of course). Use your router for access control, it's much simpler. Just do NAT and port forwarding for the externally accessible services (mail and web server; ports 25, 110 + 80) to the server you're setting up. Don't let the server sit on a public IP! A router saves you many headaches, including configuring a Linux firewall. Use your ISP to hold DNS records, often it's part of your bargain or anyway not expensive.
/RID

Hi rid

I dont understand, why your suggestion is to reinstall whole OS and install debain for the problem he is facing!!!

i dont see any problem of Centos,

Reinstaling OS should be the last and last option , in linux i must say its realy rare. for windows it might be , but linux always there is solution I believe

Ok -- here's the deal ...

I got the tech support department at my colocation facility involved, and I am now able to ping domains at the command line again.  This means that I can connect to repositories and download RPMs.  However, I suspect that those steps may no longer be necessary.

I've recently learned that I can use my dedicated server's Webmin interface to do all sorts of things, .. which I'm learning is a lot easier (and safer) than using the command line interface.  So, .. that's what I'd like to do from here on in: use Webmin to configure my email server(s).

I have the Sendmail service running, and have verified that I am able to send email.  

I also have Postfix, Dovecot, and QMail servers installed (though none of these 3 services are currently configured or running).  

Ideally, I'd like to set up a mailserver that allows for the configuring of both POP email accounts, as well as forwarding email aliases. It might also be worth mentioning that I'll need to set up multiple email addresses for the multiple domains/websites that I intend to host on the same box (all using a single IP address).

Can anyone here talk me through the setting up of either of these 3 mail servers  (preferably whichver one is the easiest to configure -- like Postfix, perhaps)  using the Webmin console?  My goal is ..

1) To configure my Thunderbird email client with profile information that allows me to both SEND and RETRIEVE email for a single POP account for my atzilut.com domain

2) To set up a forwarding email alias for my atzilut.com domain that forwards to my gmail account

Thanks!
- Yvan


 

There isnt a webmin modue for qmail, so if you want to use that I suggest you read the web page http://qmail.jms1.net

I am a contributor to that page and there is a TON of qmail related stuff there.

(word of caution, if you do try to go there, DO NOT use IE, the owner of that domain HATES IE, and will block your IE from viewing web sites.

postfix has plenty of documentation, and most of it is quite good, but Ive never used it.

postfix has the advantage of having a license that allows distro developers to compile it and distribute it as a package.

qmail has to be downloaded from source and compiled yourself to be legal.

sendmail is only 1/2 of an MTA meaning that it can only SEND mail, not receive it.

both postfix and qmail have sendmail replacement binaries that allow scripts that look for sendmail to actually find it and work.

I would uninstall sendmail, and install either postfix, or qmail  you dont need both.

Now, your postfix mailer needs a pop3 and or imap server to be able to connect your thunderbird directly to it.

depending on your ISP you cant send mail unless you use their outbound mail system.

so the way I get around that is to setup pop3ssl or imapssl and smtpssl

isp's usually dont block these ports.

Let me try this one last time ...

Can anyone here talk me through the setting up of POP email accounts and fwding email alias via the Webmin console? I have Postfix and Dovecot servers already installed and ready to be configured.  I just have no idea what I'm doing, and am hoping that someone can either talk me through it, or steer me to some kind of online step-by-step set of instructions on how to do so.  My goal is ...

1) To configure my Thunderbird email client with profile information that allows me to both SEND and RETRIEVE email for a single POP account for my atzilut.com domain

2) To set up a forwarding email alias for my atzilut.com domain that forwards to my gmail account

Thanks!
- Yvan

HI yah i didnot  read your last post , actually i thought why you are silent for long time!!

I never used postfix,

but could you just take a screen shot of webmin postfix configuration menu and attach here

i belive its same of sendmail.