computing:mailserver
Differences
This shows you the differences between two versions of the page.
| Both sides previous revisionPrevious revisionNext revision | Previous revision | ||
| computing:mailserver [2025/04/20 20:30] – oemb1905 | computing:mailserver [2025/05/15 19:21] (current) – oemb1905 | ||
|---|---|---|---|
| Line 11: | Line 11: | ||
| ------------------------------------------- | ------------------------------------------- | ||
| - | This tutorial is for users of Debian GNU/Linux who want to set up a proper email server.. This tutorial assumes you know how to set up A, AAAA, SPF, DKIM, DMARC, MX, and PTR records. Set an A record for example.org and mail.example.org. If you don't know how, then learn up, and do not proceed. //Thanks to LinuxBabe for a great jumping off point//. Let's begin by editing our hosts file '' | + | This tutorial is for users of Debian GNU/Linux who want to set up a proper email server.. This tutorial assumes you know how to set up A, AAAA, SPF, DKIM, DMARC, MX, and PTR records. Set an A record for example.org and mail.example.org |
| 127.0.1.1 example.org example | 127.0.1.1 example.org example | ||
| Line 187: | Line 187: | ||
| | | ||
| | | ||
| + | |||
| + | You also need to make sure that your spf policy is not set to reject emails by default. | ||
| + | |||
| + | nano / | ||
| + | | ||
| + | Make sure that '' | ||
| + | |||
| + | HELO_reject = False | ||
| + | Mail_From_reject = False | ||
| Now, it is time to set up DKIM on your server. After creating the DKIM record/key on your server, you will need to create a corresponding TXT record for it to establish that anything over smtp with that signature is, in fact, you/your server. Let's install opendkim with '' | Now, it is time to set up DKIM on your server. After creating the DKIM record/key on your server, you will need to create a corresponding TXT record for it to establish that anything over smtp with that signature is, in fact, you/your server. Let's install opendkim with '' | ||
| Line 256: | Line 265: | ||
| AuthservID OpenDMARC | AuthservID OpenDMARC | ||
| TrustedAuthservIDs mail.yourdomain.com | TrustedAuthservIDs mail.yourdomain.com | ||
| - | RejectFailures | + | RejectFailures |
| IgnoreAuthenticatedClients true | IgnoreAuthenticatedClients true | ||
| RequireHeaders true | RequireHeaders true | ||
| Line 369: | Line 378: | ||
| # | # | ||
| report_safe 0 | report_safe 0 | ||
| - | | + | add_header all Spam-Flag _YESNO_ |
| - | #add_header all Flag _YESNO_ | + | |
| - | | + | add_header all Report _REPORT_ |
| - | | + | add_header all Level _STARS_ |
| - | #add_header all Level _STARS_ | + | |
| - | #add_header all Checker-Version " | + | add_header all Checker-Version " |
| + | # | ||
| + | # | ||
| I included some header options, which can help with debugging. Also, I disable safe reporting and Subject rewriting because they alter the original email, which I think is overkill. In order to activate all that spam assassin can do, we need to have our own recursive DNS resolver, required by RBL services. Let's use the DNS server unbound and install it as follows '' | I included some header options, which can help with debugging. Also, I disable safe reporting and Subject rewriting because they alter the original email, which I think is overkill. In order to activate all that spam assassin can do, we need to have our own recursive DNS resolver, required by RBL services. Let's use the DNS server unbound and install it as follows '' | ||
| Line 477: | Line 488: | ||
| nano / | nano / | ||
| < | < | ||
| + | |||
| + | To setup autodiscovery, | ||
| + | |||
| + | _imap._tcp | ||
| + | _submission._tcp | ||
| + | _imaps._tcp | ||
| + | _submissions._tcp | ||
| + | _autodiscover._tcp | ||
| + | autodiscover | ||
| + | autodiscover | ||
| + | |||
| + | After that, setup your '' | ||
| + | |||
| + | sudo nano / | ||
| | | ||
| - | To check record health after you set your DNS records, you can do the following: | + | Inside that file, enter something similar to this entry below, obviously adjusting for your priority, weight, and desired client configuration behavior: |
| + | |||
| + | <?xml version=" | ||
| + | < | ||
| + | < | ||
| + | < | ||
| + | < | ||
| + | < | ||
| + | < | ||
| + | < | ||
| + | < | ||
| + | < | ||
| + | < | ||
| + | < | ||
| + | < | ||
| + | </ | ||
| + | < | ||
| + | < | ||
| + | < | ||
| + | < | ||
| + | < | ||
| + | < | ||
| + | < | ||
| + | </ | ||
| + | < | ||
| + | < | ||
| + | < | ||
| + | < | ||
| + | < | ||
| + | < | ||
| + | < | ||
| + | </ | ||
| + | < | ||
| + | < | ||
| + | < | ||
| + | < | ||
| + | < | ||
| + | < | ||
| + | < | ||
| + | </ | ||
| + | </ | ||
| + | </ | ||
| + | </ | ||
| + | |||
| + | Pretty much everything one needs is now setup. | ||
| | | ||
| dig txt +short _dmarc.jonathanhaack.com | dig txt +short _dmarc.jonathanhaack.com | ||
| Line 504: | Line 573: | ||
| These tools prove helpful if/when emails get stuck, etc. | These tools prove helpful if/when emails get stuck, etc. | ||
| - | --- // | + | --- // |
computing/mailserver.1745181040.txt.gz · Last modified: 2025/04/20 20:30 by oemb1905
Page Tools
Except where otherwise noted, content on this wiki is licensed under the following license: GNU Free Documentation License 1.3
