?
Solved

Migrate from Imail 11.03 to Postfix

Posted on 2012-08-14
12
Medium Priority
?
1,089 Views
Last Modified: 2012-08-22
Hello Experts!

We'd like to migrate from imail 11.03 to postfix. What the best way to achieve this with minimal user interruption?

Thank you.
0
Comment
Question by:coldfirenj
  • 6
  • 6
12 Comments
 
LVL 17

Expert Comment

by:BudDurland
ID: 38295668
What type of client access will you be configuring (IMAP/POP/Web)?  What are you looking to achieve by migrating to PostFix?
0
 

Author Comment

by:coldfirenj
ID: 38296221
Hello Bud. We will be configuring POP. We manage email domains for several clients... Spammers have been using us as a relay to send massive amounts of spam. We've configured Imail to deliver mail only to our managed domains; but, spam continues to be relayed to external accounts. We've done everything possible in Imail to block this spammer to no avail. We are hoping postfix may improve security.
0
 
LVL 17

Expert Comment

by:BudDurland
ID: 38296278
It sounds like one of your client's e-mail accounts is compromised; unless you force a password change during the switch to PostFix, you won't solve the spam problem.  iMail used to have excellent logging of authenicated SMTP sessions -- I suspect the answer is there.
0
Veeam Disaster Recovery in Microsoft Azure

Veeam PN for Microsoft Azure is a FREE solution designed to simplify and automate the setup of a DR site in Microsoft Azure using lightweight software-defined networking. It reduces the complexity of VPN deployments and is designed for businesses of ALL sizes.

 

Author Comment

by:coldfirenj
ID: 38296499
Hi Bud. The spam is coming from @aol and @gmail accounts... Not a client account.
0
 
LVL 17

Expert Comment

by:BudDurland
ID: 38296669
@aol and @gmail may reflect the address in the body of the e-mail, but when the spammer connects to your server, they have to authenticate with an e-maill address for one of the users you support.  This authentication e-mail does NOT have to be a domain match for e-mail being sent.

For example, if I administered the server for 'acme.com', I could send e-mail that looks like it is from 'fred@bedrock.com', but to do so I have to authenticate to the server as 'roadrunner@acme.com'.  Since I authenticated as an 'acme.com' address, the server will allow the relay of the message.
0
 

Author Comment

by:coldfirenj
ID: 38296955
Thanks greatly for your help Bud. I'm still not sure this is the case though. Because, wouldn't we see them logging in in the Imail log file? We don't see anyone from any of our accounts making that connection.
0
 
LVL 17

Expert Comment

by:BudDurland
ID: 38297146
I haven't used iMail a couple years now, so my memory may be fuzzy, but I seem to recall that you may have to configure what entries iMail should make in the log.  Specifically, you would want to log SMTP Authentication.  

Of course, I'm making the presumption that your SMTP relay option is set to "Only allow relay for authenticated users" or similar

I looked here: http://docs.ipswitch.com/_Messaging/IMailServer/v11/GettingStarted/index.htm

searched for "relay" and found this excerpt:

For secure data communication, SMTP Authentication lets you verify each user who attempts to send mail through your mail server, as long as SMTP Authentication is enabled on the IMail Server. Users need to set their mail clients to do an SMTP login; for example, in Microsoft Outlook on the Tools > Accounts > Mail > Properties > Servers tab select the option My outgoing mail server requires authentication.

SMTP Authentication is used in the following cases:

If you use the No mail relay option for SMTP relay.
If you use the Relay mail for (Addresses) option, SMTP Authentication enables users who send from IP addresses that you do not list; for example, users who are traveling and do not have a static IP address.
0
 

Author Comment

by:coldfirenj
ID: 38311852
I greatly appreciate your help Bud. Still, I need advice on migrating from imail 11.03 to postfix. What the best way to achieve this with minimal user interruption?
0
 
LVL 17

Expert Comment

by:BudDurland
ID: 38313961
We've kinda circled back to my original post -- what will you be installing beside PostFix to handle the clients?  PostFix is a message transfer agent (MTA).  It knows how to deliver messages from one mail server to another, and how to accept messages for a domain and store them in a mailbox.  The installations I've seen then have some other software to handle client communication (via IMAP or POP) with the mail box; PostFix does not do that.
0
 

Author Comment

by:coldfirenj
ID: 38318071
Bud, I want to thank you again for your assistance. Here is our planned config. Ubuntu + Postfix + Courier IMAP + MySQL + Amavisd-new + SpamAssassin + ClamAV + SASL + TLS + SquirrelMail/Roundcube + Postgrey
0
 
LVL 17

Accepted Solution

by:
BudDurland earned 2000 total points
ID: 38318606
Ok.  You will likely have to be prepared to re-create all your user accounts by hand.  Sorry, I'm really not super familiar with linux, so I don't know of any easier way to do it.  There may be a way to export your current iMail users to a plain text file, then update the text file with passwords and import it into your system, but I am not familiar enough to know.

However, given the above config, the general plan would be:

Set up the new Linux server with Postfix & friends, with a temporary host name.  Use that name to test mail flow from inside your network.

Once the Linux testing is done, change the iMail host's IP address & host name to some temporary values.

Rename the Linux host to it's production name & IP address (there may be some PostFix related config files to edit), then bring it up.

Change your outside DNS server's MX records to point to the new Linux server, if necessary

At this point, NEW mail will come into the new server, and should be visible to users.  They, of course, will immediately begin to complain about old mail, which we will solve in the next step.

Google 'IMAPCOPY', or visit http://home.arcor.de/armin.diehl/imapcopy/imapcopy.html

IMAPCOPY is a utility that uses the IMAP protocol to copy ALL the messages stored on an account on one server to an account on a different server.  To make it work, you need everyone's mail login name and password.  I've used it a couple times and can tell you it works pretty well. Read the help (IMAPCOPY -h) carefully.  I recommend running it in "create folders only" mode until it goes error-free, then run to copy messages.
0
 

Author Closing Comment

by:coldfirenj
ID: 38321341
Thank you Bud you've been a tremendous help.
0

Featured Post

New feature and membership benefit!

New feature! Upgrade and increase expert visibility of your issues with Priority Questions.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Want to know how to use Exchange Server Eseutil command? Go through this article as it gives you the know-how.
Here in this article, you will get a step by step guidance on how to restore an Exchange database to a recovery database. Get a brief on Recovery Database and how it can be used to restore Exchange database in this section!
Internet Business Fax to Email Made Easy - With  eFax Corporate (http://www.enterprise.efax.com), you'll receive a dedicated online fax number, which is used the same way as a typical analog fax number. You'll receive secure faxes in your email, f…
Is your OST file inaccessible, Need to transfer OST file from one computer to another? Want to convert OST file to PST? If the answer to any of the above question is yes, then look no further. With the help of Stellar OST to PST Converter, you can e…
Suggested Courses
Course of the Month16 days, 1 hour left to enroll

850 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question