Difference between revisions of "Email/fr"

Backup MX

tracepath google.com

config setprop InternalInterface MTU 1492
signal-event post-upgrade; signal-event reboot

Apr 20 17:29:53 mail [4614]: PHP Fatal error:  Call to a member function on a non-object in /home/httpd/html/horde/imp/lib/Block/tree_folders.php on line 65
Apr 20 17:29:53 mail [4614]: PHP Warning:  Unknown(): Unable to call () - function does not exist in Unknown on line 0

https://servername/webmail

db accounts setprop NomUtilisateur SortSpam disabled
db accounts show NomUtilisateur                                   # seulement pour afficher les réglages
signal-event user-modify NomUtilisateur

config setprop spamassassin SortSpam enabled
signal-event email-update

db configuration setprop spamassassin MessageRetentionTime 60  
signal-event email-update

/usr/bin/yum install --enablerepo=smecontribs smeserver-qpsmtpd-spamassassinlevelstars
signal-event email-update

db configuration setprop spamassassin MaxMessageSize 2000000 

signal-event email-update

 mkdir -p /etc/e-smith/templates-custom/etc/mail/spamassassin/local.cf
 cd /etc/e-smith/templates-custom/etc/mail/spamassassin/local.cf
 echo "score SARE_ADULT2 20.000" >> 20localscores
 signal-event email-update

nano -w /etc/e-smith/templates-custom/etc/mail/spamassassin/local.cf/20localscores
signal-event email-update

rm -f /etc/e-smith/templates-custom/etc/mail/spamassassin/local.cf/20localscores
signal-event email-update

mkdir -p /etc/e-smith/templates-custom/var/service/qpsmtpd/config/peers/0/
cd /etc/e-smith/templates-custom/var/service/qpsmtpd/config/peers/0/
echo sender_permitted_from spf_deny 1 > 30spf
/sbin/e-smith/expand-template /var/service/qpsmtpd/config/peers/0

echo "score SPF_SOFTFAIL 6.000" >> 20localscores 
echo "score SPF_FAIL 14.000" >> 20localscores
signal-event email-update

mkdir -p /etc/e-smith/templates/etc/mail/spamassassin/local.cf/50pyzor_timeout
cd /etc/e-smith/templates/etc/mail/spamassassin/local.cf/50pyzor_timeout
nano 50pyzor_timeout

{
  my $pyzor_timeout = ($spamassassin{PyzorTimeout} || 0);
  if ($pyzor_timeout ne '0')
  {
     return "pyzor_timeout " . ($pyzor_timeout);
  }
}

config setprop spamassassin PyzorTimeout 15
signal-event email-update

db spamassassin setprop wbl.global *@vonage.com White
db spamassassin setprop wbl.global *domain2.com White
db spamassassin setprop wbl.global user@domain3.com White
db spamassassin setprop wbl.global spammer@spamdomain.com Black

db spamassassin setprop wbl.global *@*.xyz Black
db spamassassin setprop wbl.global *@*.link Black

signal-event email-update

db spamassassin show

sa-learn --dump magic

tail -50 /var/log/spamd/current | tai64nlocal

spamassassin -D --lint

warn: bayes: cannot open bayes databases /etc/mail/spamassassin/bayes_* R/W: tie failed: Permission denied

chown :spamd /var/spool/spamd/.spamassassin/*
chmod g+rw /var/spool/spamd/.spamassassin/*

config setprop qpsmtpd DNSBL enabled RHSBL enabled
signal-event email-update

config show qpsmtpd

config setprop qpsmtpd RBLList <rbl-list-name>
signal-event email-update

config setprop qpsmtpd RBLList zen.spamhaus.org
signal-event email-update

config setprop qpsmtpd SBLList dbl.spamhaus.org
signal-event email-update

config setprop qpsmtpd SBLList multi.surbl.org:rhsbl.sorbs.net:dbl.spamhaus.org
signal-event email-update

      combined.njabl.org
      list.dsbl.org
      multihop.dsbl.org
      dnsbl.ahbl.org

      blackhole.securitysage.com
      bulk.rhs.mailpolice.com
      fraud.rhs.mailpolice.com
      porn.rhs.mailpolice.com
      adult.rhs.mailpolice.com
      bogusmx.rfc-ignorant.org
      ex.dnsbl.org

config setprop spamassassin UseBayes 1
config setprop spamassassin BayesAutoLearnThresholdSpam 6.00
config setprop spamassassin BayesAutoLearnThresholdNonspam 0.10
config setprop spamassassin UseBayesAutoLearn 1
expand-template /etc/mail/spamassassin/local.cf
sa-learn --sync --dbpath /var/spool/spamd/.spamassassin -u spamd
chown spamd.spamd /var/spool/spamd/.spamassassin/bayes_*
chown spamd.spamd /var/spool/spamd/.spamassassin/bayes.mutex
chmod 640 /var/spool/spamd/.spamassassin/bayes_* 
config setprop spamassassin status enabled
config setprop spamassassin RejectLevel 12
config setprop spamassassin TagLevel 4
config setprop spamassassin Sensitivity custom
config setprop spamd SpamLearning enabled
signal-event email-update

Note : SpamAssassin a besoin d'au moins 3 points de l'objet (header) et de 3 points du corps pour auto-apprendre à détecter un pourriel.
Par conséquent, la valeur minimale de fonctionnement de cette option est 6, à modifier par incrément de 3, 12 étant considéré comme une bonne valeur de fonctionnement.

sa-learn --dump magic

#!/bin/bash
#  ContaLearn.sh

#for compatibility with older versions without rpm, testing
[  `/sbin/e-smith/db configuration getprop LearnAsSpam dir` ] &&
LearnAsSpam=`/sbin/e-smith/db configuration getprop LearnAsSpam dir` || LearnAsSpam='LearnAsSpam';
[  `/sbin/e-smith/db configuration getprop LearnAsHam dir` ] &&
LearnAsHam=`/sbin/e-smith/db configuration getprop LearnAsHam dir` || LearnAsHam='LearnAsSpam';
JunkMail='junkmail';

echo
date
declare -i tspam
declare -i tham
declare -i tleft
declare -i tnseen

printf "%-25s %-11s %-11s %-11s %-11s \n" "User" "LearnAsSpam" "LearnAsHam" "JunkMail" "NotSeen"
pushd /home/e-smith/files/users/ >>/dev/nul
for u in `ls ` #| grep -v admin`
do
[ "$u" = "admin" ] && mailpath="/home/e-smith/" ||  mailpath="/home/e-smith/files/users/$u" ;
  spam=`ls -1 $mailpath/Maildir/.$LearnAsSpam/cur |wc -l`
  ham=`ls -1 $mailpath/Maildir/.$LearnAsHam/cur |wc -l`
  left=`ls -1 $mailpath/Maildir/.$JunkMail/cur |wc -l`
  nseen=`ls -1 $mailpath/Maildir/.$JunkMail/new |wc -l`
  if  [[ $spam > 0 ]] || [[ $ham > 0 ]] || [[ $left > 0 ]] || [[ $nseen > 0 ]];   then
     printf "%-25s %-11d %-11d %-11d %-11d \n" $u $spam $ham $left $nseen
  fi
  tspam=$tspam+$spam
  tham=$tham+$ham
  tleft=$tleft+$left
  tnseen=$tnseen+$nseen
done
echo "----------------------------------------------------------------------"
printf "%-25s %-11d %-11d %-11d %-11d \n" "Total:" $tspam $tham $tleft $tnseen
echo
popd >>/dev/nul

config setprop spamassassin UseBayes 0
signal-event email-update
'rm' /var/spool/spamd/.spamassassin/bayes* 

config setprop spamassassin UseBayes 1
expand-template /etc/mail/spamassassin/local.cf
sa-learn --sync --dbpath /var/spool/spamd/.spamassassin -u spamd
chown spamd.spamd /var/spool/spamd/.spamassassin/bayes_*
chown spamd.spamd /var/spool/spamd/.spamassassin/bayes.mutex
chmod 640 /var/spool/spamd/.spamassassin/bayes_* 
signal-event email-update

 config setprop clamav HeuristicScanPrecedence yes
 expand-template /etc/clamd.conf
 sv t clamd

db configuration getprop imap ConcurrencyLimit || echo 400
db configuration getprop imap ConcurrencyLimitPerIP || echo 12

config setprop imap ConcurrencyLimitPerIP 20
config setprop imaps ConcurrencyLimitPerIP 20
signal-event post-upgrade; signal-event reboot

config show imap

tail -f /var/log/dovecot/current | tai64nlocal  #anciennement

tcpsvd: info: pid 30693 from 10.1.0.104
tcpsvd: info: concurrency 30693 10.1.0.104 21/20
tcpsvd: info: deny 30693 0:10.1.0.21 ::10.1.0.104:49332 ./peers/10.1.0

-open OUTLOOK
-click TOOLS > ACCOUNTS
-click CHANGE (on the right-hand side)
-find INCOMING MAIL SERVER & OUTGOING MAIL SERVER (on right-hand side)
-type: mail.yourdomain.tld (in both places)
-click MORE SETTINGS (on bottom-right)
-click OUTGOING SERVER tab (at the top)
-checkmark "MY OUTGOING SERVER REQUIRES AUTHENTICATION"
-bullet "USE SAME SETTINGS AS INCOMING MAIL SERVER"
-click ADVANCED tab (at the top)
-find OUTGOING SERVER
-checkmark "THIS SERVER REQUIRES A SECURE CONNECTION" (under outgoing server)
-change 25 to 465
-[possibly required, secure IMAP is 993]
-click OK > NEXT > FINISHED
-you're finished, your email should work now

[HKEY_LOCAL_MACHINE\Software\Microsoft\Cryptography\Protect\Providers\df9d8cd0-1501-11d1-8c7a-00c04fc297eb] "ProtectionPolicy"=dword:00000001

 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS1.2\Client]
 "DisabledByDefault"=dword:00000001
 "Enabled"=dword:00000000

mkdir -p /etc/e-smith/templates-custom/var/service/qpsmtpd/config/peers/local
cd /etc/e-smith/templates-custom/var/service/qpsmtpd/config/peers/local
echo "# 17check_basicheaders disabled by custom template" > \
17check_basicheaders
signal-event email-update

mkdir -p /etc/e-smith/templates-custom/var/service/qpsmtpd/config/peers/0
cd /etc/e-smith/templates-custom/var/service/qpsmtpd/config/peers/0
echo "# 17check_basicheaders disabled by custom template" > \
17check_basicheaders
signal-event email-update

1. Login to your Mac as a user with administrative privileges

2. Open Safari and browse to https://smeserver/server-manager.  
   When you receive the warning about your certificate:
   - click on "Show Certificate"
   - click and drag the gold-rimmed image of a certificate to your desktop.  
   You will now have myserver.mydomain.tld.cer on your desktop.

3. Locate and open the Microsoft Cert Manager
   - "Import" the certificate you downloaded in step 2.

4. Highlight the imported certificate and "Export" it. 
   - Select the "PEM..." format
   - add "pem." to the beginning of the filename
   - export it to your Desktop

5. Double-click on the new pem.myserver.mydomain.tld.cer  
   - Apple's Keychain Access application will open.
   - Select the X509Anchors Keychain and click "OK"

6. While still in Apple's Keychain Access, select the "Certificates" category
   - Drag pem.myserver.mydomain.tld.cer into the certificates window.

config setprop qmail ConcurrencyLocal 6
signal-event email-update

config setprop qmail ConcurrencyRemote 10
signal-event email-update

mkdir -p /etc/e-smith/templates-custom/var/qmail/control
echo 172800 > /etc/e-smith/templates-custom/var/qmail/control/queuelifetime
expand-template /var/qmail/control/queuelifetime
sv t qmail

 config setprop qmail DoubleBounceTo nom_d_utilisateur
 signal-event email-update

 config setprop qmail DoubleBounceTo devnull
 signal-event email-update

config setprop qpsmtpd Bcc enabled
signal-event email-update

config setprop qpsmtpd BccMode bcc

config setprop qpsmtpd BccUser someuser

mkdir -p /etc/e-smith/templates-custom/var/service/qpsmtpd/config/peers/0/
cp /etc/e-smith/templates/var/service/qpsmtpd/config/peers/0/13bcc /etc/e-smith/templates-custom/var/service/qpsmtpd/config/peers/0/
cd /etc/e-smith/templates-custom/var/service/qpsmtpd/config/peers/0/
nano -w 13bcc

{
     return "# bcc disabled" unless ($qpsmtpd{Bcc} eq "enabled");
     return "bcc mode " . $qpsmtpd{BccMode} . " outgoing " . $qpsmtpd{BccUser};
}

signal-event email-update

perldoc /usr/share/qpsmtpd/plugins/bcc

config setprop smtpd HeloHost mydomainname
signal-event email-update

config set DomainName mydomainname
signal-event domain-modify
signal-event email-update

signal-event email-update

 db configuration setprop spamassassin MaxMessageSize 2000000 

signal-event email-update

config setprop horde Name "MyDomain Mail"
signal-event email-update

config setprop horde Administration enabled 
signal-event email-update

Mar 13 00:00:12 box1 httpd: PHP Fatal error:  Allowed memory size of 33554432 bytes exhausted (tried to allocate 154 bytes) in /home/httpd/html/horde/imp/lib/MIME/Contents.php on line 173

Allowed memory size of 33554432 bytes exhausted (tried to allocate 0 bytes)

db configuration setprop php MemoryLimit XXM
expand-template /etc/php.ini
sv t httpd-e-smith

db accounts setprop groupname/username/pseudonym Visible internal
signal-event email-update

db accounts delprop groupname/username/pseudonym Visible
signal-event email-update

db accounts show | awk -F "="  '/\=user/ {print $1}' |while read USER; do db accounts setprop $USER Visible internal; done
signal-event email-update

db accounts show | awk -F "="  '/\=user/ {print $1}' |while read USER; do db accounts delprop $USER Visible; done
signal-event email-update

-login to SERVER-MANAGER
-click DOMAINS (on the left)
-click ADD
-type: mail.domain.tld

config set qpsmtpd UnauthenticatedRelayClients IP1,IP2,IP3
signal-event email-update

db networks setprop {$network} RelayRequiresAuth disabled
signal-event email-update

mkdir -p /etc/e-smith/templates-custom/var/service/qpsmtpd/config/relayclients
# a subnetwork by only using a prefix of full ip
echo "10.10.0.">>  /etc/e-smith/templates-custom/var/service/qpsmtpd/config/relayclients/80custom
# an external ip
echo "99.10.1.23" >> /etc/e-smith/templates-custom/var/service/qpsmtpd/config/relayclients/80custom
# an external network you control
echo "164.163.12.1/30" >> /etc/e-smith/templates-custom/var/service/qpsmtpd/config/relayclients/80custom
signal-event email-update

config setprop qpsmtpd RelayRequiresAuth disabled
signal-event email-update

config setprop qpsmtpd TlsBeforeAuth 0
signal-event email-update

config setprop qpsmtpd TlsBeforeAuth 1
signal-event email-update

<internet providers mail server name or ip-address>:<alternative port>

config setprop smtpd disclaimer enabled
nano -w /service/qpsmtpd/config/disclaimer

Ctrl o
Ctrl x

signal-event email-update

rm  /service/qpsmtpd/config/disclaimer
config setprop smtpd disclaimer enabled
nano -w /service/qpsmtpd/config/disclaimer_domain1.com.au
nano -w /service/qpsmtpd/config/disclaimer_domain2.com
nano -w /service/qpsmtpd/config/disclaimer_domain3.org

Ctrl o
Ctrl x

signal-event email-update

config setprop smtpd disclaimer disabled
signal-event email-update

 DNSBL status      - DNSBL is an abbreviation for "DNS blacklist". 
                     It is a list of IP addresses known to be spammers.
 RHSBL status      - RHSBL is an abbreviation for "Right Hand Side Blacklist". 
                     It is a list of domain names known to be spammers.
 qpsmtpd badhelo   - Check a HELO message delivered from a connecting host. 
                     Reject any that appear in badhelo during the 'helo' stage.
 qmail badmailfrom - Check envelope sender addresses. 
                     Reject any that appear (@host or user@host) in badmailfrom during the 'mail'           
                     stage.
 spamassassin blacklist_from - Any envelope sender of a mail (*@host or user@host) matching an 
                               entry in blacklist_from will be rejected by spamassassin.

 Whitelists status           - White Lists: ACCEPT
 qpsmtpd whitelisthosts      - Any IP address listed in whitelisthosts will be exempted 
                               from any further validation during the 'connect' stage.
 qpsmtpd whitelisthelo       - Any host that issues a HELO matching an entry in whitelisthelo 
                               will be exempted from further validation during the 'helo' stage.
 qpsmtpd whitelistsenders    - Any envelope sender of a mail (host or user@host) matching an 
                               entry in whitelistsenders will be exempted from further validation
                               during the 'mail' stage.
 spamassassin whitelist_from - Any envelope sender of a mail (*@host or user@host) matching an 
                               entry in whitelist_from will be exempted from spamassassin rejection.

mkdir -p /etc/e-smith/templates-custom/var/service/qpsmtpd/config/peers/0
mkdir -p /etc/e-smith/templates-custom/var/service/qpsmtpd/config/plugins
echo "check_badmailfromto" > /etc/e-smith/templates-custom/var/service/qpsmtpd/config/plugins/31check_badmailfromto
ln -s /etc/e-smith/templates-custom/var/service/qpsmtpd/config/plugins/31check_badmailfromto /etc/e-smith/templates-custom/var/service/qpsmtpd/config/peers/0/31check_badmailfromto
signal-event email-update

mkdir -p /etc/e-smith/templates-custom/var/service/qpsmtpd/config/peers/local
ln -s /etc/e-smith/templates-custom/var/service/qpsmtpd/config/plugins/31check_badmailfromto /etc/e-smith/templates-custom/var/service/qpsmtpd/config/peers/local/31check_badmailfromto
signal-event email-update

rm /etc/e-smith/templates-custom/var/service/qpsmtpd/config/plugins/31check_badmailfromto \
/etc/e-smith/templates-custom/var/service/qpsmtpd/config/peers/0/31check_badmailfromto \
/etc/e-smith/templates-custom/var/service/qpsmtpd/config/peers/local/31check_badmailfromto

mkdir -p /etc/e-smith/templates-custom/var/service/qpsmtpd/config/peers/0
mkdir -p /etc/e-smith/templates-custom/var/service/qpsmtpd/config/plugins
echo "badmailfromto" > /etc/e-smith/templates-custom/var/service/qpsmtpd/config/plugins/31badmailfromto
ln -s /etc/e-smith/templates-custom/var/service/qpsmtpd/config/plugins/31badmailfromto /etc/e-smith/templates-custom/var/service/qpsmtpd/config/peers/0/31badmailfromto
signal-event email-update

mkdir -p /etc/e-smith/templates-custom/var/service/qpsmtpd/config/peers/local
ln -s /etc/e-smith/templates-custom/var/service/qpsmtpd/config/plugins/31badmailfromto /etc/e-smith/templates-custom/var/service/qpsmtpd/config/peers/local/31badmailfromto
signal-event email-update

mkdir -p /etc/e-smith/templates-custom/var/qmail/control/badmailfromto
nano -w /etc/e-smith/templates-custom/var/qmail/control/badmailfromto/template-begin

user@bad-domain.com tab user@yourdomain.com enter
user@bad-domain2 tab user2@yourdomain enter

john@aol.com      mary@yourdomain
bill@yahoo.com      paul@yourdomain.com

Ctrl o
Ctrl x

expand-template /var/qmail/control/badmailfromto

signal-event email-update

db domains setprop mail.dom.ain TemplatePath ProxyPassVirtualHosts ProxyPassTarget http://sme.dom.ain/webmail
signal-event remoteaccess-update

fetchmail: warning: multidrop for pop3.mypopserver.com requires envelope option!
fetchmail: warning: Do not ask for support if all mail goes to postmaster!

fetchmail: warning: multidrop for my.isp.domain requires envelope option! 
fetchmail: warning: Do not ask for support if all mail goes to postmaster! 

db accounts setprop username EveryoneEmail no
signal-event user-modify username

db accounts setprop group1 EmailExcludeUsers tom,jack 
signal-event group-modify group1

db accounts setprop group1  EmailExcludeGroups group2
signal-event group-modify group1

config show qpsmtpd

db configuration setprop qpsmtpd KeepLogFiles 15

sv t /service/qpsmtpd/log

ps aux | grep qpsmtpd | grep multi

mkdir /var/service/qpsmtpd/config/dkimkeys/

cd /var/service/qpsmtpd/config/dkimkeys/
openssl genrsa -out dkim.private 1024
openssl rsa -in dkim.private -pubout -out dkim.public
chown qpsmtpd:qpsmtpd -R /var/service/qpsmtpd/config/dkimkeys/
chmod 0700 dkim.private

cp -a dkim.private <fully qualified domain name>.private (less the <> brackets)

mkdir --parent /etc/e-smith/templates-custom/var/service/qpsmtpd/config/peers/local
echo "dkim_sign keys dkim">/etc/e-smith/templates-custom/var/service/qpsmtpd/config/peers/local/69dkim_sign
signal-event email-update

db configuration setprop qpsmtpd DKIMSigning enabled
signal-event email-update

qpsmtpd-print-dns <nom_de_domaine>

cd /home/e-smith/dkim_keys/default
mv private private.long
mv public public.long
openssl genrsa -out private 1024
openssl rsa -in private -pubout -out public
chown qpsmtpd:qpsmtpd private
chown root:qpsmtpd public
chmod 0400 private
signal-event email-update
qpsmtpd-print-dns

db configuration setprop qpsmtpd DKIMSigning enabled 
signal-event email-update

db domains setprop domain.com DKIMSigning disabled 
signal-event email-update

cd /home/e-smith/dkim_keys 
mkdir domain.net 
cd domain.net 
echo default > selector 
openssl genrsa -out private 2048 
openssl rsa -in private -out public -pubout 
chown qpsmtpd:qpsmtpd private 
chmod 400 private 
signal-event email-update

deferral: Temporary_error_on_maildir_delivery._(#4.3.0)/

config setprop imap access public
signal-event email-update

config setprop pop3 access public
signal-event email-update

config setprop pop3 access public
signal-event email-update
svc -t /service/pop3s  

www
  contribs
        org

# config show dovecot
 dovecot=service
   Quotas=enabled
   status=enabled

# config setprop dovecot Idle_Notify 20
# config show dovecot
 dovecot=service
   Idle_Notify=20
   Quotas=enabled
   status=enabled

# expand-template /etc/dovecot/dovecot.conf
# dovecot -a |grep imap_idle_notify_interval
  imap_idle_notify_interval = 20 mins

db configuration setprop qpsmtpd Karma enabled KarmaNegative 3
signal-event email-update

db configuration setprop qpsmtpd URIBL enabled UBLList multi.surbl.org,black.uribl.com
signal-event email-update

db configuration setprop qpsmtpd HeloPolicy rfc
signal-event email-update

db configuration setprop qpsmtpd DMARCReject disabled SPFRejectPolicy 2
signal-event email-update

db configuration setprop qpsmtpd DKIMSigning enabled
signal-event email-update

db domains setprop domain.com DKIMSigning disabled
signal-event email-update

cd /home/e-smith/dkim_keys
mkdir domain.net
cd domain.net
echo default > selector
openssl genrsa -out private 2048
openssl rsa -in private -out public -pubout
chown qpsmtpd:qpsmtpd private
chmod 400 private
signal-event email-update

qpsmtpd-print-dns <nom_de_domaine>

default._domainkey IN TXT "v=DKIM1; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/Qq3Ntpx2QNdRxGKMeKc2r9ULvyYW633IbLivHznN9JvjJIbS54PGIEk3sSxvZSdpTRAvYlxn/nRi329VmcDK0vJYb2ut2rnZ3VO3r5srm+XEvTNPxij5eU4gqw+5ayySDjqzAMEMc5V7lUMpZ/YiqnscA075XiMF7iEq8Quv1y0LokmgwtxzOXEZap34WXlKyhYzH+D""fabF6SUllmA0ovODNvudzvEOanPlViQ7q7d+Mc3b7X/fzgJfh5P9f5U+iSmzgyGctSb6GX8sqsDMNVEsRZpSE3jd2Z33RDWyW21PGOKB/ZrLiliKfdJbd3Wo7AN7bWsZpQsei2Hsv1niQIDAQAB"
@ IN SPF "v=spf1 mx a -all"
@ IN TXT "v=spf1 mx a -all"
_dmarc IN TXT "v=DMARC1; p=none; adkim=s; aspf=r; rua=mailto:dmarc-feedback@domain.net; pct=100"

yum --enablerepo=epel install libspf2 libspf2-progs

spfquery -ip=11.22.33.44 -sender=user@aol.com -helo=spammer.tld

dig -t TXT +short somedomain.co.uk

db domains setprop test.com MailServer a.b.c.d
signal-event email-update

db domains setprop test.com MailServer aspmx.l.google.com
signal-event email-update

db domains delprop test.com MailServer
signal-event email-update

su <username> -s /bin/bash 
cd ~
for m in <fullpath to maildirectory>/cur/*; do echo $m; procmail < $m && rm $m; done

@@ Line 365: / Line 365: @@
 Pour l'installation :
-<ol>
+* Activez la base de données bayes comme décrit dans [[Email/fr#Autoapprentissage_bay.C3.A9sien | Auto-apprentissage bayésien]] (ce n'est pas la meilleure approche, préférez l'apprentissage manuel par l'utilisateur), ou
-<li>Activer la base de données bayes comme décrit dans [[Email/fr#Autoapprentissage_bay.C3.A9sien | Auto-apprentissage bayésien]]</li>
+* Installez smeserver-learn comme indiqué sur la page du wiki [[Learn/fr | Learn]] (et maintenez l'autoapprentissage désactivé), puis
-<li>Installez smeserver-learn comme indiqué sur la page du wiki [[Learn/fr | Learn]]</li>
+* Demandez à vos utilisateurs de déplacer tout le courrier indésirable trouvé dans leur boîte de réception vers leur dossier LearnAsSpam et de COPIER tout courriel non spam (ham) trouvé dans leur dossier junkmail dans leur dossier LearnAsHam.
-<li>Demandez à vos utilisateurs de déplacer tout le courrier indésirable trouvé dans leur boîte de réception vers leur dossier LearnAsSpam et de COPIER tout courriel non spam (ham) trouvé dans leur dossier junkmail dans leur dossier LearnAsHam.
-.</li>
-</ol>
 C'est un moyen très efficace de réduire l'impact du spam sur votre installation. Ne craignez pas de réexécuter des fichiers étiquetés en tant que SPAM, car ils seront soit ignorés si tous leurs modèles sont connus, soit les Bayes risquent d’attraper un modèle de plus qui pourrait vous aider à éviter le prochain SPAM entrant d'être accepté.
@@ Line 1,142: / Line 1,139: @@
   db accounts setprop username EveryoneEmail no
-  signal-event user-modify
+  signal-event user-modify username
- /etc/init.d/qmail restart
 ===How do I remove an email address from any regular group===
@@ Line 1,250: / Line 1,245: @@
 Voir aussi [[bugzilla:9694]] et https://wikit.firewall-services.com/doku.php/smedev/qpsmtpd_096#documentation .
-Plus de détails sont disponibles [https://wiki.contribs.org/Email#Inbound_DKIM_.2F_SPF_.2F_DMARC ici.]
+Plus de détails sur les entrées DNS à créer sont disponibles [https://wiki.contribs.org/Email/fr#Inbound_DKIM_.2F_SPF_.2F_DMARC ici.]
 La vérification DKIM entrante est également activée par défaut.
@@ Line 1,628: / Line 1,623: @@
 Now, the emails using a domain.net sender address will be signed by this new key instead of the default one.
-====Publishing your DNS entries====
+====Publier vos entrées DNS====
+La signature de vos courriels sortants n'est qu'une partie du processus. Vous devez maintenant publier certaines entrées DNS afin que chacun puisse vérifier si le courriel qu'il reçoit correspond à votre politique. Cette partie n'est pas à faire sur votre serveur Koozali SME, mais sur votre fournisseur public de DNS. Un script vous aide en créant des exemples d'entrées DNS déjà formatées pour un fichier de zone de type bind. Pour l'utiliser :
+ qpsmtpd-print-dns <nom_de_domaine>
-Signing your outbound emails is just part of the process. You now need to publish some DNS entries so everyone can check if the email they receive matches your policy. This part is not to be done on your SME Server, but on your public DNS provider. A script helps you by creating some sample DNS entries already formatted for a bind-like zone file. To use it:
+S'il est omis, le nom de domaine principal est inclus.
- qpsmtpd-print-dns <domain name>
-If omitted, the primary domain name is assumed.
-Example output:
+Exemple de retour de la commande
- Here are sample DNS entries you should add in your public DNS
+Voici des exemples d'entrées DNS que vous devriez ajouter dans votre DNS public.
- The DKIM entry can be copied as is, but others will probably need to be adjusted
+L'entrée DKIM peut être copiée telle quelle, mais d'autres devront probablement être ajustées à votre besoin. Par exemple, vous devez soit modifier l'adresse courriel de signalement pour DMARC (ou créez le pseudonyme nécessaire).
- to your need. For example, you should either change the reporting email adress
- for DMARC (or create the needed pseudonym)
   default._domainkey IN TXT "v=DKIM1; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/Qq3Ntpx2QNdRxGKMeKc2r9ULvyYW633IbLivHznN9JvjJIbS54PGIEk3sSxvZSdpTRAvYlxn/nRi329VmcDK0vJYb2ut2rnZ3VO3r5srm+XEvTNPxij5eU4gqw+5ayySDjqzAMEMc5V7lUMpZ/YiqnscA075XiMF7iEq8Quv1y0LokmgwtxzOXEZap34WXlKyhYzH+D""fabF6SUllmA0ovODNvudzvEOanPlViQ7q7d+Mc3b7X/fzgJfh5P9f5U+iSmzgyGctSb6GX8sqsDMNVEsRZpSE3jd2Z33RDWyW21PGOKB/ZrLiliKfdJbd3Wo7AN7bWsZpQsei2Hsv1niQIDAQAB"
@@ Line 1,645: / Line 1,638: @@
   @ IN TXT "v=spf1 mx a -all"
   _dmarc IN TXT "v=DMARC1; p=none; adkim=s; aspf=r; rua=mailto:dmarc-feedback@domain.net; pct=100"
-All you have to do now is publish those records, but do note that there is a point to consider when publishing the default._domainkey DNS record, as produced by the ''qpsmtpd-print-dns'' command: if the DNS record includes '';t=y'' then as per the DKIM specification ([http://dkim.org/specs/rfc4871-dkimbase.html#keys RFC4781 section 3.6.1]) this means that your ''"...domain is testing DKIM. Verifiers MUST NOT treat messages from signers in testing mode differently from unsigned email, even should the signature fail to verify. Verifiers MAY wish to track testing mode results to assist the signer."''
-On the other hand, if no '';t=y'' is included, then it means you are intending to use DKIM in production mode. It might be a good idea to publish the DKIM DNS record first in testing mode ('';t=y'' included), check how things go and if everything is alright, remove the '';t=y'' part.
+Tout ce que vous avez à faire maintenant est de publier ces enregistrements, mais notez qu'il y a un point à prendre en compte lors de la publication de l'enregistrement DNS default._domainkey, tel que produit par la commande ''qpsmtpd-print-dns'' : si l'enregistrement DNS inclut '';t=y'' alors selon la spécification DKIM ([http://dkim.org/specs/rfc4871-dkimbase.html#keys RFC4781 section 3.6.1]) cela signifie que votre ''"... domaine teste DKIM. Les vérificateurs NE DOIVENT PAS traiter les messages des signataires en mode test différemment des courriels non signés, même si la signature n'est pas vérifiée. Les vérificateurs PEUVENT souhaiter suivre les résultats du mode test pour aider le signataire."''
+D'un autre côté, si aucun '';t=y'' n'est inclus, cela signifie que vous avez l'intention d'utiliser DKIM en mode production. Il peut être judicieux de publier d'abord l'enregistrement DNS DKIM en mode test ('';t=y'' inclus), de vérifier comment ça se passe et si tout va bien, de supprimer la partie '';t=y''.
 ====Testing====

Sensibilité	Niveau de marquage de pourriel	Niveau de rejet de pourriel
Personnalisé	Valeur du niveau de marquage (niveau personnalisé du marquage)	Valeur du niveau de rejet (niveau de rejet personnalisé)
Très haut	2	Pas de rejet
Haut	3	Pas de rejet
Moyen	5	Pas de rejet
Bas	7	Pas de rejet
Très bas	9	Pas de rejet

Subsystem	Function	Default Limit	Command to change size	Notes
qmail	Delivers email to local mailboxes and to remote servers	15000000	config setprop qmail MaxMessageSize xx000000	Value is in BYTES. 15000000 equals approximately 15MB. No value means no limit.
clamav	Used to scan emails and attachments	15M	config setprop clamav MaxFileSize 15M	Value includes human-readable abbreviations. "15M" equals 15 MegaBytes.
clamd	Involved in attachment virus scanning	1400000000	config setprop clamd MemLimit 1400000000	May require increase per this forum topic
qpsmtpd	The clamav plugin to qpsmtpd is called with a specified size limit.	25000000	config setprop qpsmtpd MaxScannerSize xx000000	Value is in BYTES. Question: does this value override the setting of 'MaxFileSize', or will the smaller value prevail?
php	The php maximum file upload size will determine the largest file you can attach to an email message using horde (or any other php email client)	10M	config setprop php UploadMaxFilesize 10M

Plugin	Purpose	Default Status
hosts_allow	Prohibit more than "InstancesPerIP" connections from any single host (change with 'config setprop smtpd InstancesPerIP'). Allow or deny connections according to the contents of /var/service/qpsmtpd/config/hosts_allow. See hosts_allow SVN code for more details.	enabled
peers	Allow different plugin configuration based on the sending computer's IP address. By default SME maintains different configurations for the local networks (in /var/service/qpsmtpd/config/peers/local) and for everyone else (in /var/service/qpsmtpd/config/peers/0)	enabled
logging/logterse	Allow greater logging detail using smaller log files. Optionally supports qplogsumm.pl to compile qpsmtpd statistics.	enabled
auth/auth_cvm_unix_local	Allow authenticated smtp relay	enabled (remote) disabled (local)
check_earlytalker	reject email from servers that talk out of turn	enabled (remote) disabled (local)
count_unrecognized_commands	reject email from servers that issue X invalid commands	enabled (remote) disabled (local)
bcc	bcc all email to a specific address for archiving	disabled
check_relay	Check to see if relaying is allowed (in case the recipient is not listed in one of SME's local domains)	enabled
check_norelay	Check to see if the sending server is specifically forbidden to relay through us.	enabled
require_resolvable_fromhost	Check that the domain listed in the sender's email address is resolvable	enabled (remote) disabled (local)
check_basicheaders	reject email that lacks either a From: or Date: header	enabled
rhsbl	Reject email if the sender's email domain has a reputation for disregarding smtp RFCs.	disabled (always disabled for local connections)
dnsbl	Reject email from hosts listed in your configured dnsbl servers	disabled
check_badmailfrom	Reject email where the sender address is listed in /var/service/qpsmtpd/config/badmailfrom	enabled
check_badrcptto_patterns	Reject email addressed to any address matching an expression listed in /var/service/qpsmtpd/config/badrcptto_patterns	enabled
check_badrcptto	Reject email addressed to any address listed in /var/service/qpsmtpd/config/badrcptto	enabled
check_spamhelo	Reject email from hosts that say 'helo ...' using a value in /var/service/qpsmtpd/config/badhelo	enabled
check_smtp_forward	If config show DelegateMailServer or db domains show <domainname> MailServer is set (telling SME to deliver email for all domains or just <domainname> to another server), check_smtp_forward will connect to the specified server and will reject the message outright if the internal mail server would also reject it.	disabled unless an internal mail server is configured.
check_goodrcptto	Accept email only if the recipient address matches an entry in /var/service/qpsmtpd/config/goodrcptto. For domains that are configured to use an internal mail server, the entire domain name will be added to .../goodrcptto.	enabled
rcpt_ok	Return 'OK' if none of the other host checks has returned 'DENY' (??)	enabled
pattern_filter	Reject email according to content patterns (??)	disabled
tnef2mime	Convert MS TNEF (winmail.dat) and uuencoded attachments to MIME	enabled
disclaimer	Add a configurable disclaimer to email messages	disabled
spamassassin	Check email using spamassassin, and optionally reject it completely if the score exceeds a configurable value.	disabled (always disabled for local connections)
virus/clamav	Scan incoming email with ClamAV	enabled
queue/qmail-queue	Deliver the incoming message to qmail for delivery.	enabled

Plugin	Purpose	Default Status
connection_time	Track the total time for each qpsmtpd connection from 'Accepted connection' through 'click, disconnecting', and output the results to the qpsmtpd log file.	not installed - not clear if this works for SME9.2 (anyone?)
GeoIP	Track the geographic origin of incoming email and optionally reject email from specified countries	not installed - does work for SME 9.2 and later.

	Note :
	suivant les courrielleurs, le dossier « junkmail » est traduit en français ou non. S'il est traduit, ce peut être « Indésirables », ... Dans ce cas, noter que dans le serveur SME, le dossier reste nommé « junkmail ».

	Note :
	depuis SME8, cette fonctionnalité semble être incluse --Unnilennium (talk) 09:05, 3 February 2014 (MST)

	Attention :
	Veuillez noter que ces instructions ne s'appliquent pas à SME 9.2 où la version de qpsmtpd (0.96) fait tout cela en dehors de la boîte. En effet, si le modèle personnalisé ci-dessous est appliqué à (ou laissé dans ?) un système SME 9.2, alors vous pouvez constater que les courriels sont refusés alors qu'ils devraient être acceptés !

	Warning:
	SME server 7.# users be aware of an issue that can appear in the /var/log/spamd/current logs " pyzor: [5281] error: TERMINATED, signal 15 (000f)".

	Note :
	cela peut être un moyen grossier de bloquer le spam et aussi, potentiellement, de bloquer les utilisateurs légitimes !

	Note :
	pour SME9, seules les clés imap ont des propriétés ConcurrencyLimitPerIP, checkConcurrencyLimit, ProcessMemoryLimit. si vous réglez ces propriétés sur les clés imaps, un fragment de migration les supprimera automatiquement.

	Astuce :
	certains clients de messagerie utilisent une connexion distincte par dossier imap, de sorte que les limites de simultanéité peuvent se produire pour les utilisateurs qui ont de nombreux dossiers imap.

	Note:
	You can set the MemoryLimit any value you like but be sure to add the capital M as a suffix for Megabytes.

	Note:
	Please note that admin and other system accounts can not be hidden from external network this way. Also note that Pseudonyms can be set to internal only using the server-manager.

	Work in Progress:
	trex1512 has marked this page as a Work in Progress. The contents off this page may be in flux, please have a look at this page history the to see list of changes.

	Warning:
	Keep in mind that your passwords, your data won't be protected and will be in clear text over Internet

	Warning:
	Keep in mind that your passwords, your data won't be protected and will be in clear text over Internet

	Warning:
	Keep in mind that your passwords, your data won't be protected and will be in clear text over Internet

	Tip:
	You can verify that your settings are correct by sending an email to check-auth@verifier.port25.com, a free service the purpose of which is to verify if your domain does not contradict mail policies. Please check the answer carefully. See ~~bugzilla:4558#c6~~

	Astuce :
	vous pouvez vérifier que vos paramètres sont corrects en envoyant un courriel à check-auth@verifier.port25.com, un service gratuit dont le but est de vérifier si votre domaine ne contredit pas les politiques de messagerie. Veuillez vérifier attentivement la réponse. Voir ~~bugzilla:4558#c6~~.

	Warning:
	There is a plugin for signing with DomainKeys but it is not installed by default. It has not been tested on Koozali SME Server: http://wiki.qpsmtpd.org/doku.php?id=plugins:spam:domainkeys_sign

	Warning:
	Please note that the version of qpsmtpd has been upgraded for SME version 9.2 and later to qpsptpd version 0.96. This change has resulted in a lot of changes to the way it works, the plugins (and their names!) and the corresponding database entries, so this section ONLY applies to SME Version 9.1 and earlier, except where the plugin has been retained, See the next section for the new details.

Difference between revisions of "Email/fr"

Latest revision as of 10:06, 10 June 2023

Dépannage

Envoi

Réception

Erreurs qpsmtpd « Connection Timed Out »

Webmail cassé après mise à jour

Pourriels

Spamassassin

Filtre à pourriels avec le gestionnaire du serveur

Comment ça marche

Activer/désactiver le filtrage par utilisateur

Utiliser le dossier « Junkmail »

Durée de rétention des messages

Niveau de score d'un pourriel et score pour le rejet d'un pourriel

En-tête « X-Spam-Level » dans les courriels

Taille limite de courriel pour le module d'extension qpsmtpd de Spamassassin

Niveaux de règles personnalisées

Politique de rejet / d'annulation de courrier électronique SPF

Pyzor Timeout

Liste blanche et liste noire

Tests

Liste « trou noir » en temps réel (RBL)

Problèmes possibles avec RBL

Listes obsolètes

Serveur seulement

Je veux activer GreyListing

Filtrage bayésien

Autoapprentissage bayésien

LearnAsSpam / LearnAsHam (apprentissage spam/ham)

Contribution Learn

Remettre la base de données Bayésienne à zéro

The Sonora Communications "Spam Filter Configuration for SME 7" howto

GeoIP : blocage de pourriel fondé sur des informations géographiques

Antivirus

Les signatures

Analyse heuristique

Filtrage des pièces jointes

Filtrage des pièces jointes

Clients de messagerie (courrielleurs)

Message « concurrency limit reached » en utilisation IMAP

« Mail server is not an IMAP4 mail server »

The Bat

Outlook/Outlook Express give error 10060/0x800CCC90

Outlook 2013 on Windows 10 gives "An unknown error occurred, error code 0x8004011c" when attempting an IMAP connection for a DOMAIN user

Outlook 2013 on Windows 8.1 gives error 0x800CCC1A when sending over SMTP port 465

Outlook test message doesn't come through

I can't receive/send email from my application (ACT!, vTiger, MS Outlook, etc)

Après avoir mis à niveau mon serveur SME, mes dossiers de messagerie ont disparu en utilisant l'IMAP

Entourage: Using SME's Self-Signed Certificate for SSL Connections from Entourage on OS X 10.4

Comment puis-je faire en sorte que mon courriel affiche l'adresse d'expéditeur correcte

Outlook 365 / Outlook 2019 IMAP Configuration

Réglages du serveur

qmail ConcurrencyLocal

qmail ConcurrencyRemote

Pendant combien de temps renvoyer un courriel avant de le déclarer comme non livrable

Messages à double rebond

Conservez une copie de tous les courriels

Keep a copy of outgoing emails only

Set Helo hostname

Set max email size

clamav

spamassassin

Change Horde Webmail Login Page 'Welcome To' Title

Add the admin user as an administrator for Horde

Large attachments not displaying in webmail

Disable mail to a user from an external network

I can't receive mail at: user@mail.domain.tld

How do I find out who is logged into webmail and what IP number.

Allow SMTP relay of mail without encryption/authentication

SMTP Authentication TLS before Auth disable & enable

Internet provider's outgoing port 25 is blocked: How to set an alternative outgoing port for the SMTP server

How do I enable and configure a disclaimer in email messages

Email WBL server manager panel

How to block email from one address to another address with check_badmailfromto plugin

Prior SME9.2 : qpsmtpd check_badmailfromto plugin

Since SME9.2 : qpsmtpd badmailfromto plugin

For Qmail

Redirect mail.domain.net to Webmail

E-mail Retrieval