This shows you the differences between two versions of the page.
Next revision | Previous revision | ||
computing:mailserver-trixie [2025/05/31 18:36] – created oemb1905 | computing:mailserver-trixie [2025/06/05 19:05] (current) – oemb1905 | ||
---|---|---|---|
Line 13: | Line 13: | ||
This tutorial is for users of Debian GNU/Linux who want to set up a proper email server. This particular version is a work in progress and will contain adjustments needed for Trixie. So far, I've found the following differences: | This tutorial is for users of Debian GNU/Linux who want to set up a proper email server. This particular version is a work in progress and will contain adjustments needed for Trixie. So far, I've found the following differences: | ||
- | ``` | + | |
- | # Editing authentication settings | + | sudo nano / |
- | sudo nano / | + | auth_username_format = %{user|username|lower} |
- | auth_username_format = %{user|username|lower} | + | # |
- | # | + | # Editing mailbox location settings |
- | # Editing mailbox location settings | + | sudo nano / |
- | sudo nano / | + | mail_driver = maildir |
- | mail_driver = maildir | + | mail_path = ~/Maildir |
- | mail_path = ~/Maildir | + | mail_inbox_path = ~/ |
- | mail_inbox_path = ~/ | + | #old one was |
- | #old one was | + | # |
- | # | + | # |
- | # | + | # Editing SSL/TLS settings |
- | # Editing SSL/TLS settings | + | sudo nano / |
- | sudo nano / | + | #new format for cert and key, longer name, removes the classic “<” character |
- | #new format for cert and key, longer name, removes the classic “<” character | + | ssl_server_cert_file = / |
- | ssl_server_cert_file = / | + | ssl_server_key_file = / |
- | ssl_server_key_file = / | + | #comment out diffy helman, now deprecated |
- | #comment out diffy helman, now deprecated | + | # |
- | # | + | # Editing Sieve filter settings |
- | # Editing Sieve filter settings | + | sudo nano / |
- | sudo nano / | + | #updating where dovecot looks for sieve rules by default, new format |
- | #updating where dovecot looks for sieve rules by default, new format | + | sieve_script personal { |
- | sieve_script personal { | + | driver = file |
- | driver = file | + | path = ~/sieve |
- | path = ~/sieve | + | active_path = ~/ |
- | active_path = ~/ | + | } |
- | } | + | #old one was |
- | #old one was | + | #plugin { |
- | #plugin { | + | #sieve = file: |
- | #sieve = file: | + | #} |
- | #} | + | # Editing main Dovecot configuration |
- | # Editing main Dovecot configuration | + | sudo nano / |
- | sudo nano / | + | #declare versions |
- | #declare versions | + | dovecot_storage_version = 2.4.1 |
- | dovecot_storage_version = 2.4.1 | + | dovecot_config_version = 2.4 |
- | dovecot_config_version = 2.4 | + | #comment out dictionary (unless you set it up) |
- | #comment out dictionary (unless you set it up) | + | #dict { |
- | #dict { | + | # quota = file:/ |
- | # quota = file:/ | + | #} |
- | #} | + | |
- | ``` | + | In May 2025, the Validity RBL switched to a locked model, so you need to disable queries to it in spamassassin by editing '' |
+ | |||
+ | dns_query_restriction deny bl.score.senderscore.com | ||
+ | dns_query_restriction deny sa-accredit.habeas.com | ||
+ | dns_query_restriction deny sa-trusted.bondedsender.org | ||
+ | #score RCVD_IN_VALIDITY_RPBL | ||
+ | |||
+ | Over the weeks and months ahead, I will merge the changes documented above into the body of the tutorial below. It will be some months before I merge, however, since Trixie is not yet stable and there will likely be more changes on the server I am testing in production. Below, please find the Bookworm tutorial: | ||
+ | -- -- Original -- -- | ||
This tutorial assumes you know how to set up A, AAAA, SPF, DKIM, DMARC, MX, and PTR records. Set an A record for example.org and mail.example.org and make sure you or your ISP has set a PTR record to mail.example.org for the IPv4 and IPv6 addresses. If you don't know how, then learn up, and do not proceed. //Thanks to LinuxBabe for a great jumping off point//. Let's begin by editing our hosts file '' | This tutorial assumes you know how to set up A, AAAA, SPF, DKIM, DMARC, MX, and PTR records. Set an A record for example.org and mail.example.org and make sure you or your ISP has set a PTR record to mail.example.org for the IPv4 and IPv6 addresses. If you don't know how, then learn up, and do not proceed. //Thanks to LinuxBabe for a great jumping off point//. Let's begin by editing our hosts file '' | ||
Line 619: | Line 627: | ||
These tools prove helpful if/when emails get stuck, etc. | These tools prove helpful if/when emails get stuck, etc. | ||
- | --- // | + | --- // |