server config part-1: logging, move backup files and users, mysql, procmail, bogofilter, sasl2, dovecot, sendmail

1 files changed, 145 insertions, 0 deletions

diff --git a/server/setup/05-service-settings/etc/mail/access b/server/setup/05-service-settings/etc/mail/access
new file mode 100644
index 0000000..b5f0643
--- /dev/null
+++ b/server/setup/05-service-settings/etc/mail/access
@@ -0,0 +1,145 @@
+# /etc/mail/access
+# Copyright (c) 1998,2004 Richard Nelson <[email protected]>.
+# Time-stamp: <1998/10/27 10:00:00 cowboy>
+# GPL'd config file, please feed any gripes, suggestions, etc. to me
+#
+# Function:
+#	 Access Control for this smtp server - determines:
+#		 * Who we accept mail from
+#		 * Who we accept relaying from
+#		 * Who we will not send to
+#
+# Usage:
+#	 FEATURE(access_db[, type [-o] /etc/mail/access])dnl
+#	 makemap hash access < access
+#
+# Format:
+#	 lhs:
+#		 email addr		 <user@[host.domain]>
+#		 domain name	 unless  FEATURE(relay_hosts_only) is used,
+#			 then this is a fqdn - and relay-domains ($=R)
+#			 must also be fqdns.
+#		 network number  must end on an octet boundary, or
+#			 you're stuck going the longwinded way ;-{
+#	 rhs:
+#		 OK				 accept mail even if other rules in the
+#						 running ruleset would reject it.
+#		 RELAY			 Allow domain to relay through your SMTP
+#						 server.  RELAY also serves an implicit
+#						 OK for the other checks.
+#		 REJECT			 reject the sender/recipient with a general
+#						 purpose message that can be customized.
+#						 confREJECT_MSG [550 Access denied] will be issued
+#		 DISCARD		 discard the message completely using
+#						 the $#discard mailer.
+#		 ### any text	 where ### is an RFC 821 compliant error code
+#				 and "any text" is a message to return for
+#			 the command
+# Examples:
+#	[email protected]			REJECT
+#	FREE.STEALTH.MAILER@	550 Spam not accepted
+#
+# Notes:
+#	With FEATURE(blacklist_recipients) this is also possible:
+#	badlocaluser				 550 Mailbox disabled for this username
+#	host.mydomain.com			 550 That host does not accept mail
+#	[email protected]  550 Mailbox disabled for this recipient
+#
+# Related:
+#	 define(`confREJECT_MSG', `550 Access denied')dnl
+#	 define(`confCR_FILE', `-o /etc/mail/relay-domains')dnl <<- $=R
+#	 FEATURE(relay_hosts_only)dnl
+#	 FEATURE(relay_entire_domain)dnl <<- relays any host in the $=m class
+#	 FEATURE(relay_based_on_MX)dnl <<- relaying for boxes MX'd to you
+#	 FEATURE(blacklist_recipients)dnl
+#	 FEATURE(rbl[,alternate server])dnl
+#	 FEATURE(orbs[,alternate server])dnl   <<- Debian addition
+#	 FEATURE(orca[,alternate server])dnl   <<- Debian addition
+#	 FEATURE(accept_unqualified_senders)dnl
+#	 FEATURE(accept_unresolvable_domains)dnl
+#
+# Local addresses 10.x.x.x, 127.x.x.x, 172.16-31.x.x 192.168.x.x can relay
+# Note Well! You *must* make sure these address can't be spoofed externally
+# Note, outbound relaying is controlled by connection and/or auth
+#	If you're not firewalled, and you don't have a lan, comment these out
+#	If you're not firewalled, and you have a lan, get firewalled *NOW*
+# GreetPause - delay to check for spammers
+# Client Connection rate (and #) control
+Connect:localhost		RELAY
+GreetPause:localhost	0
+ClientRate:localhost	0
+ClientConn:localhost	0
+#Connect:10				RELAY
+#GreetPause:10			0
+#ClientRate:10			0
+#ClientConn:10			0
+Connect:127				RELAY
+GreetPause:127			0
+ClientRate:127			0
+ClientConn:127			0
+Connect:IPv6:::1		RELAY
+GreetPause:IPv6:::1		0
+ClientRate:IPv6:::1		0
+ClientConn:IPv6:::1		0
+#Connect:172.16			RELAY
+#Connect:172.17			RELAY
+#Connect:172.18			RELAY
+#Connect:172.19			RELAY
+#Connect:172.20			RELAY
+#Connect:172.21			RELAY
+#Connect:172.22			RELAY
+#Connect:172.23			RELAY
+#Connect:172.24			RELAY
+#Connect:172.25			RELAY
+#Connect:172.26			RELAY
+#Connect:172.27			RELAY
+#Connect:172.28			RELAY
+#Connect:172.29			RELAY
+#Connect:172.30			RELAY
+#Connect:172.31			RELAY
+#Connect:192.168			RELAY
+#GreetPause:192.168		0
+#ClientRate:192.168		0
+#ClientConn:192.168		0
+
+Connect:144.76.84.102           RELAY
+Connect:2a01:4f8:192:1165::2	RELAY
+GreetPause:144.76.84.102        0
+GreetPause:2a01:4f8:192:1165::2 0
+
+# Defaults
+GreetPause:				5000
+ClientRate:				10
+ClientConn:				10
+#
+# Don't offer AUTH on local network
+#SRV_Features:192.168.1	A
+#
+# Hosts with to allow relaying
+#
+#
+# Hosts that validly forward to me
+#GreetPause:<ip>		0
+#ClientRate:<ip>		30
+#ClientConn:<ip>		0
+#
+# Whitelisted users
+#
+Spam:postmaster@	FRIEND
+Spam:abuse@		FRIEND
+Spam:spam@		FRIEND
+#
+# Blacklisted users
+#
+#Connect:rampellsoft.com 554 Email directly, not through didtheyreadit.com
+reject@			REJECT
+#cyberpromo.com	REJECT
+#From:[email protected] REJECT
+#
+# Block invalid IPs
+#
+#Connect:0      REJECT whilst invalid, this also blocks sendmail -bs -Am
+Connect:169.254 REJECT
+Connect:192.0.2 REJECT
+Connect:224		REJECT
+Connect:255		REJECT