http://wiki.qmailtoaster.org:80/api.php?action=feedcontributions&feedformat=atom&user=Ebroch QmailToaster - User contributions [en] 2026-04-09T02:55:49Z User contributions MediaWiki 1.41.0 http://wiki.qmailtoaster.org:80/index.php?title=Systemd&diff=1641 Systemd 2025-08-23T19:39:32Z <p>Ebroch: </p> <hr /> <div> '''Systemd conversion'''&lt;br&gt;<br /> # /etc/init.d/vusaged stop<br /> # qmailctl stop<br /> # unlink /usr/bin/qmailctl<br /> # mv /etc/init.d/qmail /etc/init.d/vusaged /var/qmail/bin<br /> # ln -s /var/qmail/bin/qmail /usr/bin/qmailctl<br /> <br /> # cat &gt; /etc/systemd/system/qmail.service &lt;&lt;EOF<br /> [Unit]<br /> Documentation=man:systemd-sysv-generator(8)<br /> SourcePath=/var/qmail/bin/qmail<br /> Description=SYSV: Qmailtoaster MTA<br /> Before=multi-user.target<br /> Before=graphical.target&lt;br&gt;<br /> [Service]<br /> Type=forking<br /> Restart=no<br /> TimeoutSec=5min<br /> IgnoreSIGPIPE=no<br /> KillMode=process<br /> GuessMainPID=no<br /> RemainAfterExit=yes<br /> ExecStart=/var/qmail/bin/qmail start<br /> ExecStop=/var/qmail/bin/qmail stop<br /> ExecReload=/var/qmail/bin/qmail reload&lt;br&gt;<br /> [Install]<br /> WantedBy=default.target<br /> EOF<br /> <br /> cat &gt; /etc/systemd/system/vusaged.service&lt;&lt;EOF<br /> [Unit]<br /> Description=Usaged Service<br /> After=network.target&lt;br&gt;<br /> [Service]<br /> Type=forking<br /> ExecStart=/var/qmail/bin/vusaged start<br /> ExecStop=/var/qmail/bin/vusaged stop<br /> ExecReload=/var/qmail/bin/vusaged reload<br /> Restart=on-failure<br /> [Install]<br /> WantedBy=default.target<br /> EOF<br /> <br /> # systemctl daemon-reload<br /> # systemctl enable --now qmail vusaged<br /> <br /> Notes: All qmailctl functionlity is still intact.<br /> start, stop, restart, status, and reload can be accomplished with the command 'systemctl [command] qmail'</div> Ebroch http://wiki.qmailtoaster.org:80/index.php?title=Systemd&diff=1640 Systemd 2025-08-23T19:38:27Z <p>Ebroch: </p> <hr /> <div> '''Systemd conversion'''&lt;br&gt;<br /> # /etc/init.d/vusaged stop<br /> # qmailctl stop<br /> # unlink /usr/bin/qmailctl<br /> # mv /etc/init.d/qmail /etc/init.d/vusaged /var/qmail/bin<br /> # ln -s /var/qmail/bin/qmail /usr/bin/qmailctl<br /> <br /> # cat &gt; /etc/systemd/system/qmail.service &lt;&lt;EOF<br /> [Unit]<br /> Documentation=man:systemd-sysv-generator(8)<br /> SourcePath=/var/qmail/bin/qmail<br /> Description=SYSV: Qmailtoaster MTA<br /> Before=multi-user.target<br /> Before=graphical.target&lt;br&gt;<br /> [Service]<br /> Type=forking<br /> Restart=no<br /> TimeoutSec=5min<br /> IgnoreSIGPIPE=no<br /> KillMode=process<br /> GuessMainPID=no<br /> RemainAfterExit=yes<br /> ExecStart=/var/qmail/bin/qmail start<br /> ExecStop=/var/qmail/bin/qmail stop<br /> ExecReload=/var/qmail/bin/qmail reload&lt;br&gt;<br /> [Install]<br /> WantedBy=default.target<br /> EOF<br /> <br /> cat &gt; /etc/systemd/system/vusaged.service&lt;&lt;EOF<br /> [Unit]<br /> Description=Usaged Service<br /> After=network.target&lt;br&gt;<br /> [Service]<br /> Type=forking<br /> ExecStart=/var/qmail/bin/vusaged start<br /> ExecStop=/var/qmail/bin/vusaged stop<br /> ExecReload=/var/qmail/bin/vusaged reload<br /> Restart=on-failure<br /> [Install]<br /> WantedBy=default.target<br /> EOF<br /> <br /> # systemctl daemon-reload<br /> # reboot<br /> <br /> Notes: All qmailctl functionlity is still intact.<br /> start, stop, restart, status, and reload can be accomplished with the command 'systemctl [command] qmail'</div> Ebroch http://wiki.qmailtoaster.org:80/index.php?title=Systemd&diff=1639 Systemd 2025-08-23T19:36:32Z <p>Ebroch: </p> <hr /> <div> '''Systemd conversion'''&lt;br&gt;<br /> # kill `cat /run/vusaged.pid`<br /> # unlink /usr/bin/qmailctl<br /> # mv /etc/init.d/qmail /etc/init.d/vusaged /var/qmail/bin<br /> # ln -s /var/qmail/bin/qmail /usr/bin/qmailctl<br /> <br /> # cat &gt; /etc/systemd/system/qmail.service &lt;&lt;EOF<br /> [Unit]<br /> Documentation=man:systemd-sysv-generator(8)<br /> SourcePath=/var/qmail/bin/qmail<br /> Description=SYSV: Qmailtoaster MTA<br /> Before=multi-user.target<br /> Before=graphical.target&lt;br&gt;<br /> [Service]<br /> Type=forking<br /> Restart=no<br /> TimeoutSec=5min<br /> IgnoreSIGPIPE=no<br /> KillMode=process<br /> GuessMainPID=no<br /> RemainAfterExit=yes<br /> ExecStart=/var/qmail/bin/qmail start<br /> ExecStop=/var/qmail/bin/qmail stop<br /> ExecReload=/var/qmail/bin/qmail reload&lt;br&gt;<br /> [Install]<br /> WantedBy=default.target<br /> EOF<br /> <br /> cat &gt; /etc/systemd/system/vusaged.service&lt;&lt;EOF<br /> [Unit]<br /> Description=Usaged Service<br /> After=network.target&lt;br&gt;<br /> [Service]<br /> Type=forking<br /> ExecStart=/var/qmail/bin/vusaged start<br /> ExecStop=/var/qmail/bin/vusaged stop<br /> ExecReload=/var/qmail/bin/vusaged reload<br /> Restart=on-failure<br /> [Install]<br /> WantedBy=default.target<br /> EOF<br /> <br /> # systemctl daemon-reload<br /> # reboot<br /> <br /> Notes: All qmailctl functionlity is still intact.<br /> start, stop, restart, status, and reload can be accomplished with the command 'systemctl [command] qmail'</div> Ebroch http://wiki.qmailtoaster.org:80/index.php?title=Systemd&diff=1638 Systemd 2025-08-23T19:23:01Z <p>Ebroch: </p> <hr /> <div> '''Systemd conversion'''&lt;br&gt;<br /> # unlink /usr/bin/qmailctl<br /> # mv /etc/init.d/qmail /etc/init.d/vusaged /var/qmail/bin<br /> # ln -s /var/qmail/bin/qmail /usr/bin/qmailctl<br /> <br /> # cat &gt; /etc/systemd/system/qmail.service &lt;&lt;EOF<br /> [Unit]<br /> Documentation=man:systemd-sysv-generator(8)<br /> SourcePath=/var/qmail/bin/qmail<br /> Description=SYSV: Qmailtoaster MTA<br /> Before=multi-user.target<br /> Before=graphical.target&lt;br&gt;<br /> [Service]<br /> Type=forking<br /> Restart=no<br /> TimeoutSec=5min<br /> IgnoreSIGPIPE=no<br /> KillMode=process<br /> GuessMainPID=no<br /> RemainAfterExit=yes<br /> ExecStart=/var/qmail/bin/qmail start<br /> ExecStop=/var/qmail/bin/qmail stop<br /> ExecReload=/var/qmail/bin/qmail reload&lt;br&gt;<br /> [Install]<br /> WantedBy=default.target<br /> EOF<br /> <br /> cat &gt; /etc/systemd/system/vusaged.service&lt;&lt;EOF<br /> [Unit]<br /> Description=Usaged Service<br /> After=network.target&lt;br&gt;<br /> [Service]<br /> Type=forking<br /> ExecStart=/var/qmail/bin/vusaged start<br /> ExecStop=/var/qmail/bin/vusaged stop<br /> ExecReload=/var/qmail/bin/vusaged reload<br /> Restart=on-failure<br /> [Install]<br /> WantedBy=default.target<br /> EOF<br /> <br /> # reboot<br /> <br /> Notes: All qmailctl functionlity is still intact.<br /> start, stop, restart, status, and reload can be accomplished with the command 'systemctl [command] qmail'</div> Ebroch http://wiki.qmailtoaster.org:80/index.php?title=Systemd&diff=1637 Systemd 2025-08-23T19:22:29Z <p>Ebroch: </p> <hr /> <div> '''Systemd conversion'''&lt;br&gt;<br /> # unlink /usr/bin/qmailctl<br /> # mv /etc/init.d/qmail /etc/init.d/vusaged /var/qmail/bin<br /> # ln -s /var/qmail/bin/qmail /usr/bin/qmailctl<br /> <br /> # cat &gt; /etc/systemd/system/qmail.service &lt;&lt;EOF<br /> # Automatically generated by systemd-sysv-generator&lt;br&gt;<br /> [Unit]<br /> Documentation=man:systemd-sysv-generator(8)<br /> SourcePath=/var/qmail/bin/qmail<br /> Description=SYSV: Qmailtoaster MTA<br /> Before=multi-user.target<br /> Before=graphical.target&lt;br&gt;<br /> [Service]<br /> Type=forking<br /> Restart=no<br /> TimeoutSec=5min<br /> IgnoreSIGPIPE=no<br /> KillMode=process<br /> GuessMainPID=no<br /> RemainAfterExit=yes<br /> ExecStart=/var/qmail/bin/qmail start<br /> ExecStop=/var/qmail/bin/qmail stop<br /> ExecReload=/var/qmail/bin/qmail reload&lt;br&gt;<br /> [Install]<br /> WantedBy=default.target<br /> EOF<br /> <br /> cat &gt; /etc/systemd/system/vusaged.service&lt;&lt;EOF<br /> [Unit]<br /> Description=Usaged Service<br /> After=network.target&lt;br&gt;<br /> [Service]<br /> Type=forking<br /> ExecStart=/var/qmail/bin/vusaged start<br /> ExecStop=/var/qmail/bin/vusaged stop<br /> ExecReload=/var/qmail/bin/vusaged reload<br /> Restart=on-failure<br /> [Install]<br /> WantedBy=default.target<br /> EOF<br /> <br /> # reboot<br /> <br /> Notes: All qmailctl functionlity is still intact.<br /> start, stop, restart, status, and reload can be accomplished with the command 'systemctl [command] qmail'</div> Ebroch http://wiki.qmailtoaster.org:80/index.php?title=Systemd&diff=1636 Systemd 2025-08-23T19:21:44Z <p>Ebroch: </p> <hr /> <div> '''Systemd conversion'''&lt;br&gt;<br /> # unlink /usr/bin/qmailctl<br /> # mv /etc/init.d/qmail /etc/init.d/vusaged /var/qmail/bin<br /> # ln -s /var/qmail/bin/qmail /usr/bin/qmailctl<br /> <br /> # cat &gt; /etc/systemd/system/qmail.service &lt;&lt;EOF<br /> # Automatically generated by systemd-sysv-generator&lt;br&gt;<br /> [Unit]<br /> Documentation=man:systemd-sysv-generator(8)<br /> SourcePath=/var/qmail/bin/qmail<br /> Description=SYSV: Qmailtoaster MTA<br /> Before=multi-user.target<br /> Before=graphical.target&lt;br&gt;<br /> [Service]<br /> Type=forking<br /> Restart=no<br /> TimeoutSec=5min<br /> IgnoreSIGPIPE=no<br /> KillMode=process<br /> GuessMainPID=no<br /> RemainAfterExit=yes<br /> ExecStart=/var/qmail/bin/qmail start<br /> ExecStop=/var/qmail/bin/qmail stop<br /> ExecReload=/var/qmail/bin/qmail reload&lt;br&gt;<br /> [Install]<br /> WantedBy=default.target<br /> EOF<br /> <br /> cat &gt; /etc/systemd/system/vusaged.service&lt;&lt;EOF<br /> [Unit]<br /> Description=Usaged Service<br /> After=network.target<br /> [Service]<br /> Type=forking<br /> ExecStart=/var/qmail/bin/vusaged start<br /> ExecStop=/var/qmail/bin/vusaged stop<br /> ExecReload=/var/qmail/bin/vusaged reload<br /> Restart=on-failure<br /> [Install]<br /> WantedBy=default.target<br /> EOF<br /> <br /> # reboot<br /> <br /> Notes: All qmailctl functionlity is still intact.<br /> start, stop, restart, status, and reload can be accomplished with the command 'systemctl [command] qmail'</div> Ebroch http://wiki.qmailtoaster.org:80/index.php?title=Systemd&diff=1635 Systemd 2025-08-23T14:11:17Z <p>Ebroch: </p> <hr /> <div> '''Systemd conversion'''&lt;br&gt;<br /> # unlink /usr/bin/qmailctl<br /> # mv /etc/init.d/qmail /etc/init.d/vusaged /var/qmail/bin<br /> # ln -s /var/qmail/bin/qmail /usr/bin/qmailctl<br /> <br /> # cat &gt; /etc/systemd/system/qmail.service &lt;&lt;EOF<br /> # Automatically generated by systemd-sysv-generator&lt;br&gt;<br /> [Unit]<br /> Documentation=man:systemd-sysv-generator(8)<br /> SourcePath=/var/qmail/bin/qmail<br /> Description=SYSV: Qmailtoaster MTA<br /> Before=multi-user.target<br /> Before=graphical.target&lt;br&gt;<br /> [Service]<br /> Type=forking<br /> Restart=no<br /> TimeoutSec=5min<br /> IgnoreSIGPIPE=no<br /> KillMode=process<br /> GuessMainPID=no<br /> RemainAfterExit=yes<br /> ExecStart=/var/qmail/bin/qmail start<br /> ExecStop=/var/qmail/bin/qmail stop<br /> ExecReload=/var/qmail/bin/qmail reload&lt;br&gt;<br /> [Install]<br /> WantedBy=default.target<br /> EOF<br /> <br /> # reboot<br /> <br /> Notes: All qmailctl functionlity is still intact.<br /> start, stop, restart, status, and reload can be accomplished with the command 'systemctl [command] qmail'</div> Ebroch http://wiki.qmailtoaster.org:80/index.php?title=Systemd&diff=1634 Systemd 2025-08-22T19:10:07Z <p>Ebroch: </p> <hr /> <div> '''Systemd conversion'''&lt;br&gt;<br /> # unlink /usr/bin/qmailctl<br /> # mv /etc/init.d/qmail /etc/init.d/vusaged /var/qmail/bin<br /> # ln -s /var/qmail/bin/qmail /usr/bin/qmailctl<br /> <br /> # cat &gt; /etc/systemd/system/qmail.service &lt;&lt;EOF<br /> # Automatically generated by systemd-sysv-generator&lt;br&gt;<br /> [Unit]<br /> Documentation=man:systemd-sysv-generator(8)<br /> SourcePath=/var/qmail/bin/qmail<br /> Description=SYSV: Qmailtoaster MTA<br /> Before=multi-user.target<br /> Before=graphical.target&lt;br&gt;<br /> [Service]<br /> Type=forking<br /> Restart=no<br /> TimeoutSec=5min<br /> IgnoreSIGPIPE=no<br /> KillMode=process<br /> GuessMainPID=no<br /> RemainAfterExit=yes<br /> ExecStart=/var/qmail/bin/qmail start<br /> ExecStop=/var/qmail/bin/qmail stop<br /> ExecReload=/var/qmail/bin/qmail reload&lt;br&gt;<br /> [Install]<br /> WantedBy=default.target<br /> EOF<br /> <br /> # reboot<br /> <br /> Notes: All qmailctl functionlity is still intact.<br /> start, stop, status, and reload can be accomplished with the command 'systemctl [command] qmail'</div> Ebroch http://wiki.qmailtoaster.org:80/index.php?title=Systemd&diff=1633 Systemd 2025-08-22T19:07:43Z <p>Ebroch: </p> <hr /> <div> '''Systemd conversion'''&lt;br&gt;<br /> # unlink /usr/bin/qmailctl<br /> # mv /etc/init.d/qmail /etc/init.d/vusaged /var/qmail/bin<br /> # ln -s /var/qmail/bin/qmail /usr/bin/qmailctl<br /> <br /> # cat &gt; /etc/systemd/system/qmail.service &lt;&lt;EOF<br /> # Automatically generated by systemd-sysv-generator&lt;br&gt;<br /> [Unit]<br /> Documentation=man:systemd-sysv-generator(8)<br /> SourcePath=/var/qmail/bin/qmail<br /> Description=SYSV: Qmailtoaster MTA<br /> Before=multi-user.target<br /> Before=multi-user.target<br /> Before=multi-user.target<br /> Before=graphical.target&lt;br&gt;<br /> [Service]<br /> Type=forking<br /> Restart=no<br /> TimeoutSec=5min<br /> IgnoreSIGPIPE=no<br /> KillMode=process<br /> GuessMainPID=no<br /> RemainAfterExit=yes<br /> ExecStart=/var/qmail/bin/qmail start<br /> ExecStop=/var/qmail/bin/qmail stop<br /> ExecReload=/var/qmail/bin/qmail reload&lt;br&gt;<br /> [Install]<br /> WantedBy=default.target<br /> EOF<br /> <br /> # reboot<br /> <br /> Notes: All qmailctl functionlity is still intact.<br /> start, stop, status, and reload can be accomplished with the command 'systemctl [command] qmail'</div> Ebroch http://wiki.qmailtoaster.org:80/index.php?title=Systemd&diff=1632 Systemd 2025-08-22T19:05:48Z <p>Ebroch: </p> <hr /> <div> '''Systemd conversion'''&lt;br&gt;<br /> # unlink /usr/bin/qmailctl<br /> # mv /etc/init.d/qmail /etc/init.d/vusaged /var/qmail/bin<br /> # ln -s /var/qmail/bin/qmail /usr/bin/qmailctl<br /> <br /> # cat &gt; /etc/systemd/system/qmail.service &lt;&lt;EOF<br /> # Automatically generated by systemd-sysv-generator&lt;br&gt;<br /> [Unit]<br /> Documentation=man:systemd-sysv-generator(8)<br /> SourcePath=/var/qmail/bin/qmail<br /> Description=SYSV: Qmailtoaster MTA<br /> Before=multi-user.target<br /> Before=multi-user.target<br /> Before=multi-user.target<br /> Before=graphical.target&lt;br&gt;<br /> [Service]<br /> Type=forking<br /> Restart=no<br /> TimeoutSec=5min<br /> IgnoreSIGPIPE=no<br /> KillMode=process<br /> GuessMainPID=no<br /> RemainAfterExit=yes<br /> ExecStart=/var/qmail/bin/qmail start<br /> ExecStop=/var/qmail/bin/qmail stop<br /> ExecReload=/var/qmail/bin/qmail reload&lt;br&gt;<br /> [Install]<br /> WantedBy=default.target<br /> EOF<br /> <br /> # reboot<br /> <br /> Notes: All qmailctl functionlity is still intact.<br /> Starting, stopping, and reloading qmail can be accomplished with the command systemctl 'command' qmail</div> Ebroch http://wiki.qmailtoaster.org:80/index.php?title=Rocky,_Alma,_Springdale_10_QT_Install&diff=1631 Rocky, Alma, Springdale 10 QT Install 2025-08-22T19:03:30Z <p>Ebroch: </p> <hr /> <div>[[Main_Page#RHEL_10_&amp;_Derivatives|Back]]&lt;br&gt;<br /> =Enterprise Linux 10 Minimal Install= <br /> ==QMT Install ('Many-Domain')== <br /> &lt;nowiki&gt;#&lt;/nowiki&gt; curl -o /usr/local/bin/qt_install https://raw.githubusercontent.com/qmtoaster/scripts/master/qt_install_el10.sh<br /> &lt;nowiki&gt;#&lt;/nowiki&gt; chmod 755 /usr/local/bin/qt_install<br /> &lt;nowiki&gt;#&lt;/nowiki&gt; qt_install<br /> &lt;span style=&quot;color:red&quot;&gt; ...installing... &lt;/span&gt;<br /> &lt;nowiki&gt;#&lt;/nowiki&gt; toaststat&lt;br&gt;<br /> Status of toaster services<br /> send: up (pid 1323) 1517 seconds<br /> smtp: up (pid 1324) 1517 seconds<br /> submission: up (pid 1325) 1517 seconds<br /> send/log: up (pid 1316) 1517 seconds<br /> smtp/log: up (pid 1311) 1517 seconds<br /> submission/log: up (pid 1314) 1517 seconds&lt;br&gt;<br /> systemd service: clamd@scan: [&lt;span style=&quot;color:green&quot;&gt; OK &lt;/span&gt;]<br /> systemd service: clamav-freshclam: [&lt;span style=&quot;color:green&quot;&gt; OK &lt;/span&gt;]<br /> systemd service: spamassassin: [&lt;span style=&quot;color:green&quot;&gt; OK &lt;/span&gt;]<br /> systemd service: dovecot: [&lt;span style=&quot;color:green&quot;&gt; OK &lt;/span&gt;]<br /> systemd service: mariadb: [&lt;span style=&quot;color:green&quot;&gt; OK &lt;/span&gt;]<br /> systemd service: httpd: [&lt;span style=&quot;color:green&quot;&gt; OK &lt;/span&gt;]<br /> systemd service: named: [&lt;span style=&quot;color:green&quot;&gt; OK &lt;/span&gt;]<br /> systemd service: ntpd: [&lt;span style=&quot;color:green&quot;&gt; OK &lt;/span&gt;]<br /> systemd service: sshd: [&lt;span style=&quot;color:green&quot;&gt; OK &lt;/span&gt;]<br /> systemd service: network: [&lt;span style=&quot;color:green&quot;&gt; OK &lt;/span&gt;]<br /> systemd service: crond: [&lt;span style=&quot;color:green&quot;&gt; OK &lt;/span&gt;]<br /> systemd service: acpid: [&lt;span style=&quot;color:green&quot;&gt; OK &lt;/span&gt;]<br /> systemd service: atd: [&lt;span style=&quot;color:green&quot;&gt; OK &lt;/span&gt;]<br /> systemd service: autofs: [&lt;span style=&quot;color:green&quot;&gt; OK &lt;/span&gt;]<br /> systemd service: smartd: [&lt;span style=&quot;color:green&quot;&gt; OK &lt;/span&gt;]<br /> systemd service: irqbalance: [&lt;span style=&quot;color:green&quot;&gt; OK &lt;/span&gt;] (Multiple processors only)&lt;br&gt;<br /> &lt;nowiki&gt;#&lt;/nowiki&gt; [https://raw.githubusercontent.com/qmtoaster/scripts/master/conntest conntest]<br /> Enter a valid remote email account to which QMT will send mail: &lt;email address&gt;<br /> IMAPS: postmaster@domain.tld --&gt; &lt;span style=&quot;color:green&quot;&gt;success&lt;/span&gt;<br /> Submission: postmaster@domain.tld --&gt; &lt;span style=&quot;color:green&quot;&gt;success&lt;/span&gt;<br /> SMTPS: postmaster@domain.tld --&gt; &lt;span style=&quot;color:green&quot;&gt;success&lt;/span&gt;<br /> <br /> [http://wiki.qmailtoaster.org/index.php?title=Simscan Scanners]<br /> [http://wiki.qmailtoaster.org/index.php?title=Alias_Domains Many Domain Install (Alias Domain)]<br /> Qmail-1.03-3.3.12 (OpenSSL3)<br /> [https://github.com/qmtoaster/patches/blob/master/EL9/README.md Patches] applied<br /> <br /> == systemd ==<br /> [http://wiki.qmailtoaster.org/index.php?title=Systemd Systemd conversion]<br /> <br /> == Install certificate ==<br /> [[Certificate]] *Note: The certificate must be 2048 bits or more<br /> == Test certificate ==<br /> # curl --verbose smtps://mail.domain.tld<br /> # curl --verbose imaps://mail.domain.tld<br /> or<br /> # openssl s_client mail.domain.tld:465<br /> # openssl s_client mail.domain.tld:993 <br /> &lt;pre&gt;<br /> &lt;nowiki&gt;*&lt;/nowiki&gt; Server certificate:<br /> &lt;nowiki&gt;*&lt;/nowiki&gt; subject: CN=mail.domain.tld<br /> &lt;nowiki&gt;*&lt;/nowiki&gt; start date: Jul 30 09:16:16 2024 GMT<br /> &lt;nowiki&gt;*&lt;/nowiki&gt; expire date: Oct 28 09:16:15 2024 GMT<br /> &lt;nowiki&gt;*&lt;/nowiki&gt; subjectAltName: host &quot;mail.domain.tld&quot; matched cert's &quot;mail.domain.tld&quot;<br /> &lt;nowiki&gt;*&lt;/nowiki&gt; issuer: C=US; O=Let's Encrypt; CN=R11<br /> &lt;nowiki&gt;*&lt;/nowiki&gt; SSL certificate verify ok.<br /> &lt;/pre&gt;<br /> <br /> If the following error is encountered when testing the new certificate the certificate is most likely less than 2048 bits<br /> <br /> 806B7387577F0000:error:0A00010B:SSL routines:ssl3_get_record:wrong version number:ssl/record/ssl3_record.c:354<br /> <br /> Usually Let's Encrypt certificates are at least 2048 bits, but encountering 256 bits keys is possible. Correct by specifying the number of bits:<br /> <br /> certbot renew --cert-name -d domain.tld -d mail.domain.tld --apache &lt;span style=&quot;color:red&quot;&gt;--rsa-key-size 2048 --key-type rsa&lt;/span&gt;</div> Ebroch http://wiki.qmailtoaster.org:80/index.php?title=Rocky,_Alma,_Springdale_10_QT_Install&diff=1630 Rocky, Alma, Springdale 10 QT Install 2025-08-22T19:02:25Z <p>Ebroch: /* systemd */</p> <hr /> <div>[[Main_Page#RHEL_10_&amp;_Derivatives|Back]]&lt;br&gt;<br /> =Enterprise Linux 10 Minimal Install= <br /> ==QMT Install ('Many-Domain')== <br /> &lt;nowiki&gt;#&lt;/nowiki&gt; curl -o /usr/local/bin/qt_install https://raw.githubusercontent.com/qmtoaster/scripts/master/qt_install_el10.sh<br /> &lt;nowiki&gt;#&lt;/nowiki&gt; chmod 755 /usr/local/bin/qt_install<br /> &lt;nowiki&gt;#&lt;/nowiki&gt; qt_install<br /> &lt;span style=&quot;color:red&quot;&gt; ...installing... &lt;/span&gt;<br /> &lt;nowiki&gt;#&lt;/nowiki&gt; toaststat&lt;br&gt;<br /> Status of toaster services<br /> send: up (pid 1323) 1517 seconds<br /> smtp: up (pid 1324) 1517 seconds<br /> submission: up (pid 1325) 1517 seconds<br /> send/log: up (pid 1316) 1517 seconds<br /> smtp/log: up (pid 1311) 1517 seconds<br /> submission/log: up (pid 1314) 1517 seconds&lt;br&gt;<br /> systemd service: clamd@scan: [&lt;span style=&quot;color:green&quot;&gt; OK &lt;/span&gt;]<br /> systemd service: clamav-freshclam: [&lt;span style=&quot;color:green&quot;&gt; OK &lt;/span&gt;]<br /> systemd service: spamassassin: [&lt;span style=&quot;color:green&quot;&gt; OK &lt;/span&gt;]<br /> systemd service: dovecot: [&lt;span style=&quot;color:green&quot;&gt; OK &lt;/span&gt;]<br /> systemd service: mariadb: [&lt;span style=&quot;color:green&quot;&gt; OK &lt;/span&gt;]<br /> systemd service: httpd: [&lt;span style=&quot;color:green&quot;&gt; OK &lt;/span&gt;]<br /> systemd service: named: [&lt;span style=&quot;color:green&quot;&gt; OK &lt;/span&gt;]<br /> systemd service: ntpd: [&lt;span style=&quot;color:green&quot;&gt; OK &lt;/span&gt;]<br /> systemd service: sshd: [&lt;span style=&quot;color:green&quot;&gt; OK &lt;/span&gt;]<br /> systemd service: network: [&lt;span style=&quot;color:green&quot;&gt; OK &lt;/span&gt;]<br /> systemd service: crond: [&lt;span style=&quot;color:green&quot;&gt; OK &lt;/span&gt;]<br /> systemd service: acpid: [&lt;span style=&quot;color:green&quot;&gt; OK &lt;/span&gt;]<br /> systemd service: atd: [&lt;span style=&quot;color:green&quot;&gt; OK &lt;/span&gt;]<br /> systemd service: autofs: [&lt;span style=&quot;color:green&quot;&gt; OK &lt;/span&gt;]<br /> systemd service: smartd: [&lt;span style=&quot;color:green&quot;&gt; OK &lt;/span&gt;]<br /> systemd service: irqbalance: [&lt;span style=&quot;color:green&quot;&gt; OK &lt;/span&gt;] (Multiple processors only)&lt;br&gt;<br /> &lt;nowiki&gt;#&lt;/nowiki&gt; [https://raw.githubusercontent.com/qmtoaster/scripts/master/conntest conntest]<br /> Enter a valid remote email account to which QMT will send mail: &lt;email address&gt;<br /> IMAPS: postmaster@domain.tld --&gt; &lt;span style=&quot;color:green&quot;&gt;success&lt;/span&gt;<br /> Submission: postmaster@domain.tld --&gt; &lt;span style=&quot;color:green&quot;&gt;success&lt;/span&gt;<br /> SMTPS: postmaster@domain.tld --&gt; &lt;span style=&quot;color:green&quot;&gt;success&lt;/span&gt;<br /> <br /> [http://wiki.qmailtoaster.org/index.php?title=Simscan Scanners]<br /> [http://wiki.qmailtoaster.org/index.php?title=Alias_Domains Many Domain Install (Alias Domain)]<br /> Qmail-1.03-3.3.12 (OpenSSL3)<br /> [https://github.com/qmtoaster/patches/blob/master/EL9/README.md Patches] applied<br /> <br /> == systemd ==<br /> http://wiki.qmailtoaster.org/index.php?title=Systemd<br /> <br /> == Install certificate ==<br /> [[Certificate]] *Note: The certificate must be 2048 bits or more<br /> == Test certificate ==<br /> # curl --verbose smtps://mail.domain.tld<br /> # curl --verbose imaps://mail.domain.tld<br /> or<br /> # openssl s_client mail.domain.tld:465<br /> # openssl s_client mail.domain.tld:993 <br /> &lt;pre&gt;<br /> &lt;nowiki&gt;*&lt;/nowiki&gt; Server certificate:<br /> &lt;nowiki&gt;*&lt;/nowiki&gt; subject: CN=mail.domain.tld<br /> &lt;nowiki&gt;*&lt;/nowiki&gt; start date: Jul 30 09:16:16 2024 GMT<br /> &lt;nowiki&gt;*&lt;/nowiki&gt; expire date: Oct 28 09:16:15 2024 GMT<br /> &lt;nowiki&gt;*&lt;/nowiki&gt; subjectAltName: host &quot;mail.domain.tld&quot; matched cert's &quot;mail.domain.tld&quot;<br /> &lt;nowiki&gt;*&lt;/nowiki&gt; issuer: C=US; O=Let's Encrypt; CN=R11<br /> &lt;nowiki&gt;*&lt;/nowiki&gt; SSL certificate verify ok.<br /> &lt;/pre&gt;<br /> <br /> If the following error is encountered when testing the new certificate the certificate is most likely less than 2048 bits<br /> <br /> 806B7387577F0000:error:0A00010B:SSL routines:ssl3_get_record:wrong version number:ssl/record/ssl3_record.c:354<br /> <br /> Usually Let's Encrypt certificates are at least 2048 bits, but encountering 256 bits keys is possible. Correct by specifying the number of bits:<br /> <br /> certbot renew --cert-name -d domain.tld -d mail.domain.tld --apache &lt;span style=&quot;color:red&quot;&gt;--rsa-key-size 2048 --key-type rsa&lt;/span&gt;</div> Ebroch http://wiki.qmailtoaster.org:80/index.php?title=Systemd&diff=1629 Systemd 2025-08-22T19:00:09Z <p>Ebroch: </p> <hr /> <div> '''Systemd conversion'''&lt;br&gt;<br /> # unlink /usr/bin/qmailctl<br /> # mv /etc/init.d/qmail /etc/init.d/vusaged /var/qmail/bin<br /> # ln -s /var/qmail/bin/qmail /usr/bin/qmailctl<br /> <br /> # cat &gt; /etc/systemd/system/qmail.service &lt;&lt;EOF<br /> # Automatically generated by systemd-sysv-generator&lt;br&gt;<br /> [Unit]<br /> Documentation=man:systemd-sysv-generator(8)<br /> SourcePath=/var/qmail/bin/qmail<br /> Description=SYSV: Qmailtoaster MTA<br /> Before=multi-user.target<br /> Before=multi-user.target<br /> Before=multi-user.target<br /> Before=graphical.target&lt;br&gt;<br /> [Service]<br /> Type=forking<br /> Restart=no<br /> TimeoutSec=5min<br /> IgnoreSIGPIPE=no<br /> KillMode=process<br /> GuessMainPID=no<br /> RemainAfterExit=yes<br /> ExecStart=/var/qmail/bin/qmail start<br /> ExecStop=/var/qmail/bin/qmail stop<br /> ExecReload=/var/qmail/bin/qmail reload&lt;br&gt;<br /> [Install]<br /> WantedBy=default.target<br /> EOF<br /> <br /> # reboot</div> Ebroch http://wiki.qmailtoaster.org:80/index.php?title=Systemd&diff=1628 Systemd 2025-08-22T18:59:30Z <p>Ebroch: </p> <hr /> <div> '''Systemd conversion'''&lt;br&gt;<br /> # unlink /usr/bin/qmailctl<br /> # mv /etc/init.d/qmail /etc/init.d/vusaged /var/qmail/bin<br /> # ln -s /var/qmail/bin/qmail /usr/bin/qmailctl<br /> # cat &gt; /etc/systemd/system/qmail.service &lt;&lt;EOF<br /> # Automatically generated by systemd-sysv-generator&lt;br&gt;<br /> [Unit]<br /> Documentation=man:systemd-sysv-generator(8)<br /> SourcePath=/var/qmail/bin/qmail<br /> Description=SYSV: Qmailtoaster MTA<br /> Before=multi-user.target<br /> Before=multi-user.target<br /> Before=multi-user.target<br /> Before=graphical.target&lt;br&gt;<br /> [Service]<br /> Type=forking<br /> Restart=no<br /> TimeoutSec=5min<br /> IgnoreSIGPIPE=no<br /> KillMode=process<br /> GuessMainPID=no<br /> RemainAfterExit=yes<br /> ExecStart=/var/qmail/bin/qmail start<br /> ExecStop=/var/qmail/bin/qmail stop<br /> ExecReload=/var/qmail/bin/qmail reload&lt;br&gt;<br /> [Install]<br /> WantedBy=default.target<br /> EOF<br /> <br /> # reboot</div> Ebroch http://wiki.qmailtoaster.org:80/index.php?title=Systemd&diff=1627 Systemd 2025-08-22T18:59:04Z <p>Ebroch: </p> <hr /> <div> '''Systemd conversion'''&lt;br&gt;<br /> # unlink /usr/bin/qmailctl<br /> # mv /etc/init.d/qmail /etc/init.d/vusaged /var/qmail/bin<br /> # ln -s /var/qmail/bin/qmail /usr/bin/qmailctl<br /> cat &gt; /etc/systemd/system/qmail.service &lt;&lt;EOF<br /> # Automatically generated by systemd-sysv-generator&lt;br&gt;<br /> [Unit]<br /> Documentation=man:systemd-sysv-generator(8)<br /> SourcePath=/var/qmail/bin/qmail<br /> Description=SYSV: Qmailtoaster MTA<br /> Before=multi-user.target<br /> Before=multi-user.target<br /> Before=multi-user.target<br /> Before=graphical.target&lt;br&gt;<br /> [Service]<br /> Type=forking<br /> Restart=no<br /> TimeoutSec=5min<br /> IgnoreSIGPIPE=no<br /> KillMode=process<br /> GuessMainPID=no<br /> RemainAfterExit=yes<br /> ExecStart=/var/qmail/bin/qmail start<br /> ExecStop=/var/qmail/bin/qmail stop<br /> ExecReload=/var/qmail/bin/qmail reload&lt;br&gt;<br /> [Install]<br /> WantedBy=default.target<br /> EOF<br /> <br /> # reboot</div> Ebroch http://wiki.qmailtoaster.org:80/index.php?title=Systemd&diff=1626 Systemd 2025-08-22T18:58:26Z <p>Ebroch: </p> <hr /> <div> '''Systemd conversion'''&lt;br&gt;<br /> # unlink /usr/bin/qmailctl<br /> # mv /etc/init.d/qmail /etc/init.d/vusaged /var/qmail/bin<br /> # ln -s /usr/qmail/bin/qmail /usr/bin/qmailctl<br /> cat &gt; /etc/systemd/system/qmail.service &lt;&lt;EOF<br /> # Automatically generated by systemd-sysv-generator&lt;br&gt;<br /> [Unit]<br /> Documentation=man:systemd-sysv-generator(8)<br /> SourcePath=/var/qmail/bin/qmail<br /> Description=SYSV: Qmailtoaster MTA<br /> Before=multi-user.target<br /> Before=multi-user.target<br /> Before=multi-user.target<br /> Before=graphical.target&lt;br&gt;<br /> [Service]<br /> Type=forking<br /> Restart=no<br /> TimeoutSec=5min<br /> IgnoreSIGPIPE=no<br /> KillMode=process<br /> GuessMainPID=no<br /> RemainAfterExit=yes<br /> ExecStart=/var/qmail/bin/qmail start<br /> ExecStop=/var/qmail/bin/qmail stop<br /> ExecReload=/var/qmail/bin/qmail reload&lt;br&gt;<br /> [Install]<br /> WantedBy=default.target<br /> EOF<br /> <br /> # reboot</div> Ebroch http://wiki.qmailtoaster.org:80/index.php?title=Systemd&diff=1625 Systemd 2025-08-22T18:58:08Z <p>Ebroch: </p> <hr /> <div> '''Systemd conversion'''&lt;br&gt;<br /> # unlink /usr/bin/qmailctl<br /> # mv /etc/init.d/qmail /etc/init.d/vusaged /var/qmail/bin<br /> # ln -s /usr/qmail/bin/qmail /usr/bin/qmailctl<br /> cat &gt; /etc/systemd/system/qmail.service &lt;&lt;EOF&lt;br&gt;<br /> # Automatically generated by systemd-sysv-generator&lt;br&gt;<br /> [Unit]<br /> Documentation=man:systemd-sysv-generator(8)<br /> SourcePath=/var/qmail/bin/qmail<br /> Description=SYSV: Qmailtoaster MTA<br /> Before=multi-user.target<br /> Before=multi-user.target<br /> Before=multi-user.target<br /> Before=graphical.target&lt;br&gt;<br /> [Service]<br /> Type=forking<br /> Restart=no<br /> TimeoutSec=5min<br /> IgnoreSIGPIPE=no<br /> KillMode=process<br /> GuessMainPID=no<br /> RemainAfterExit=yes<br /> ExecStart=/var/qmail/bin/qmail start<br /> ExecStop=/var/qmail/bin/qmail stop<br /> ExecReload=/var/qmail/bin/qmail reload&lt;br&gt;<br /> [Install]<br /> WantedBy=default.target<br /> EOF<br /> <br /> # reboot</div> Ebroch http://wiki.qmailtoaster.org:80/index.php?title=Systemd&diff=1624 Systemd 2025-08-22T18:57:28Z <p>Ebroch: </p> <hr /> <div> '''Systemd conversion'''<br /> <br /> # unlink /usr/bin/qmailctl<br /> # mv /etc/init.d/qmail /etc/init.d/vusaged /var/qmail/bin<br /> # ln -s /usr/qmail/bin/qmail /usr/bin/qmailctl<br /> cat &gt; /etc/systemd/system/qmail.service &lt;&lt;EOF&lt;br&gt;<br /> # Automatically generated by systemd-sysv-generator&lt;br&gt;<br /> [Unit]<br /> Documentation=man:systemd-sysv-generator(8)<br /> SourcePath=/var/qmail/bin/qmail<br /> Description=SYSV: Qmailtoaster MTA<br /> Before=multi-user.target<br /> Before=multi-user.target<br /> Before=multi-user.target<br /> Before=graphical.target&lt;br&gt;<br /> [Service]<br /> Type=forking<br /> Restart=no<br /> TimeoutSec=5min<br /> IgnoreSIGPIPE=no<br /> KillMode=process<br /> GuessMainPID=no<br /> RemainAfterExit=yes<br /> ExecStart=/var/qmail/bin/qmail start<br /> ExecStop=/var/qmail/bin/qmail stop<br /> ExecReload=/var/qmail/bin/qmail reload&lt;br&gt;<br /> [Install]<br /> WantedBy=default.target<br /> EOF<br /> <br /> # reboot</div> Ebroch http://wiki.qmailtoaster.org:80/index.php?title=Systemd&diff=1623 Systemd 2025-08-22T18:56:38Z <p>Ebroch: Created page with &quot; &#039;&#039;&#039;Systemd conversion&#039;&#039;&#039; # unlink /usr/bin/qmailctl # mv /etc/init.d/qmail /etc/init.d/vusaged /var/qmail/bin # ln -s /usr/qmail/bin/qmail /usr/bin/qmailctl cat &gt; /etc/systemd/system/qmail.service &lt;&lt;EOF # Automatically generated by systemd-sysv-generator [Unit] Documentation=man:systemd-sysv-generator(8) SourcePath=/var/qmail/bin/qmail Description=SYSV: Qmailtoaster MTA Before=multi-user.target Before=multi-user.target Before=multi-user.target Before=gra...&quot;</p> <hr /> <div> '''Systemd conversion'''<br /> <br /> # unlink /usr/bin/qmailctl<br /> # mv /etc/init.d/qmail /etc/init.d/vusaged /var/qmail/bin<br /> # ln -s /usr/qmail/bin/qmail /usr/bin/qmailctl<br /> cat &gt; /etc/systemd/system/qmail.service &lt;&lt;EOF<br /> <br /> # Automatically generated by systemd-sysv-generator<br /> <br /> [Unit]<br /> Documentation=man:systemd-sysv-generator(8)<br /> SourcePath=/var/qmail/bin/qmail<br /> Description=SYSV: Qmailtoaster MTA<br /> Before=multi-user.target<br /> Before=multi-user.target<br /> Before=multi-user.target<br /> Before=graphical.target<br /> <br /> [Service]<br /> Type=forking<br /> Restart=no<br /> TimeoutSec=5min<br /> IgnoreSIGPIPE=no<br /> KillMode=process<br /> GuessMainPID=no<br /> RemainAfterExit=yes<br /> ExecStart=/var/qmail/bin/qmail start<br /> ExecStop=/var/qmail/bin/qmail stop<br /> ExecReload=/var/qmail/bin/qmail reload<br /> <br /> [Install]<br /> WantedBy=default.target<br /> EOF<br /> <br /> # reboot</div> Ebroch http://wiki.qmailtoaster.org:80/index.php?title=Rocky,_Alma,_Springdale_10_QT_Install&diff=1622 Rocky, Alma, Springdale 10 QT Install 2025-08-22T18:46:49Z <p>Ebroch: /* SYSV to systemd */</p> <hr /> <div>[[Main_Page#RHEL_10_&amp;_Derivatives|Back]]&lt;br&gt;<br /> =Enterprise Linux 10 Minimal Install= <br /> ==QMT Install ('Many-Domain')== <br /> &lt;nowiki&gt;#&lt;/nowiki&gt; curl -o /usr/local/bin/qt_install https://raw.githubusercontent.com/qmtoaster/scripts/master/qt_install_el10.sh<br /> &lt;nowiki&gt;#&lt;/nowiki&gt; chmod 755 /usr/local/bin/qt_install<br /> &lt;nowiki&gt;#&lt;/nowiki&gt; qt_install<br /> &lt;span style=&quot;color:red&quot;&gt; ...installing... &lt;/span&gt;<br /> &lt;nowiki&gt;#&lt;/nowiki&gt; toaststat&lt;br&gt;<br /> Status of toaster services<br /> send: up (pid 1323) 1517 seconds<br /> smtp: up (pid 1324) 1517 seconds<br /> submission: up (pid 1325) 1517 seconds<br /> send/log: up (pid 1316) 1517 seconds<br /> smtp/log: up (pid 1311) 1517 seconds<br /> submission/log: up (pid 1314) 1517 seconds&lt;br&gt;<br /> systemd service: clamd@scan: [&lt;span style=&quot;color:green&quot;&gt; OK &lt;/span&gt;]<br /> systemd service: clamav-freshclam: [&lt;span style=&quot;color:green&quot;&gt; OK &lt;/span&gt;]<br /> systemd service: spamassassin: [&lt;span style=&quot;color:green&quot;&gt; OK &lt;/span&gt;]<br /> systemd service: dovecot: [&lt;span style=&quot;color:green&quot;&gt; OK &lt;/span&gt;]<br /> systemd service: mariadb: [&lt;span style=&quot;color:green&quot;&gt; OK &lt;/span&gt;]<br /> systemd service: httpd: [&lt;span style=&quot;color:green&quot;&gt; OK &lt;/span&gt;]<br /> systemd service: named: [&lt;span style=&quot;color:green&quot;&gt; OK &lt;/span&gt;]<br /> systemd service: ntpd: [&lt;span style=&quot;color:green&quot;&gt; OK &lt;/span&gt;]<br /> systemd service: sshd: [&lt;span style=&quot;color:green&quot;&gt; OK &lt;/span&gt;]<br /> systemd service: network: [&lt;span style=&quot;color:green&quot;&gt; OK &lt;/span&gt;]<br /> systemd service: crond: [&lt;span style=&quot;color:green&quot;&gt; OK &lt;/span&gt;]<br /> systemd service: acpid: [&lt;span style=&quot;color:green&quot;&gt; OK &lt;/span&gt;]<br /> systemd service: atd: [&lt;span style=&quot;color:green&quot;&gt; OK &lt;/span&gt;]<br /> systemd service: autofs: [&lt;span style=&quot;color:green&quot;&gt; OK &lt;/span&gt;]<br /> systemd service: smartd: [&lt;span style=&quot;color:green&quot;&gt; OK &lt;/span&gt;]<br /> systemd service: irqbalance: [&lt;span style=&quot;color:green&quot;&gt; OK &lt;/span&gt;] (Multiple processors only)&lt;br&gt;<br /> &lt;nowiki&gt;#&lt;/nowiki&gt; [https://raw.githubusercontent.com/qmtoaster/scripts/master/conntest conntest]<br /> Enter a valid remote email account to which QMT will send mail: &lt;email address&gt;<br /> IMAPS: postmaster@domain.tld --&gt; &lt;span style=&quot;color:green&quot;&gt;success&lt;/span&gt;<br /> Submission: postmaster@domain.tld --&gt; &lt;span style=&quot;color:green&quot;&gt;success&lt;/span&gt;<br /> SMTPS: postmaster@domain.tld --&gt; &lt;span style=&quot;color:green&quot;&gt;success&lt;/span&gt;<br /> <br /> [http://wiki.qmailtoaster.org/index.php?title=Simscan Scanners]<br /> [http://wiki.qmailtoaster.org/index.php?title=Alias_Domains Many Domain Install (Alias Domain)]<br /> Qmail-1.03-3.3.12 (OpenSSL3)<br /> [https://github.com/qmtoaster/patches/blob/master/EL9/README.md Patches] applied<br /> <br /> == systemd ==<br /> <br /> == Install certificate ==<br /> [[Certificate]] *Note: The certificate must be 2048 bits or more<br /> == Test certificate ==<br /> # curl --verbose smtps://mail.domain.tld<br /> # curl --verbose imaps://mail.domain.tld<br /> or<br /> # openssl s_client mail.domain.tld:465<br /> # openssl s_client mail.domain.tld:993 <br /> &lt;pre&gt;<br /> &lt;nowiki&gt;*&lt;/nowiki&gt; Server certificate:<br /> &lt;nowiki&gt;*&lt;/nowiki&gt; subject: CN=mail.domain.tld<br /> &lt;nowiki&gt;*&lt;/nowiki&gt; start date: Jul 30 09:16:16 2024 GMT<br /> &lt;nowiki&gt;*&lt;/nowiki&gt; expire date: Oct 28 09:16:15 2024 GMT<br /> &lt;nowiki&gt;*&lt;/nowiki&gt; subjectAltName: host &quot;mail.domain.tld&quot; matched cert's &quot;mail.domain.tld&quot;<br /> &lt;nowiki&gt;*&lt;/nowiki&gt; issuer: C=US; O=Let's Encrypt; CN=R11<br /> &lt;nowiki&gt;*&lt;/nowiki&gt; SSL certificate verify ok.<br /> &lt;/pre&gt;<br /> <br /> If the following error is encountered when testing the new certificate the certificate is most likely less than 2048 bits<br /> <br /> 806B7387577F0000:error:0A00010B:SSL routines:ssl3_get_record:wrong version number:ssl/record/ssl3_record.c:354<br /> <br /> Usually Let's Encrypt certificates are at least 2048 bits, but encountering 256 bits keys is possible. Correct by specifying the number of bits:<br /> <br /> certbot renew --cert-name -d domain.tld -d mail.domain.tld --apache &lt;span style=&quot;color:red&quot;&gt;--rsa-key-size 2048 --key-type rsa&lt;/span&gt;</div> Ebroch http://wiki.qmailtoaster.org:80/index.php?title=Rocky,_Alma,_Springdale_10_QT_Install&diff=1621 Rocky, Alma, Springdale 10 QT Install 2025-08-22T18:46:31Z <p>Ebroch: /* SYSV to systemd */</p> <hr /> <div>[[Main_Page#RHEL_10_&amp;_Derivatives|Back]]&lt;br&gt;<br /> =Enterprise Linux 10 Minimal Install= <br /> ==QMT Install ('Many-Domain')== <br /> &lt;nowiki&gt;#&lt;/nowiki&gt; curl -o /usr/local/bin/qt_install https://raw.githubusercontent.com/qmtoaster/scripts/master/qt_install_el10.sh<br /> &lt;nowiki&gt;#&lt;/nowiki&gt; chmod 755 /usr/local/bin/qt_install<br /> &lt;nowiki&gt;#&lt;/nowiki&gt; qt_install<br /> &lt;span style=&quot;color:red&quot;&gt; ...installing... &lt;/span&gt;<br /> &lt;nowiki&gt;#&lt;/nowiki&gt; toaststat&lt;br&gt;<br /> Status of toaster services<br /> send: up (pid 1323) 1517 seconds<br /> smtp: up (pid 1324) 1517 seconds<br /> submission: up (pid 1325) 1517 seconds<br /> send/log: up (pid 1316) 1517 seconds<br /> smtp/log: up (pid 1311) 1517 seconds<br /> submission/log: up (pid 1314) 1517 seconds&lt;br&gt;<br /> systemd service: clamd@scan: [&lt;span style=&quot;color:green&quot;&gt; OK &lt;/span&gt;]<br /> systemd service: clamav-freshclam: [&lt;span style=&quot;color:green&quot;&gt; OK &lt;/span&gt;]<br /> systemd service: spamassassin: [&lt;span style=&quot;color:green&quot;&gt; OK &lt;/span&gt;]<br /> systemd service: dovecot: [&lt;span style=&quot;color:green&quot;&gt; OK &lt;/span&gt;]<br /> systemd service: mariadb: [&lt;span style=&quot;color:green&quot;&gt; OK &lt;/span&gt;]<br /> systemd service: httpd: [&lt;span style=&quot;color:green&quot;&gt; OK &lt;/span&gt;]<br /> systemd service: named: [&lt;span style=&quot;color:green&quot;&gt; OK &lt;/span&gt;]<br /> systemd service: ntpd: [&lt;span style=&quot;color:green&quot;&gt; OK &lt;/span&gt;]<br /> systemd service: sshd: [&lt;span style=&quot;color:green&quot;&gt; OK &lt;/span&gt;]<br /> systemd service: network: [&lt;span style=&quot;color:green&quot;&gt; OK &lt;/span&gt;]<br /> systemd service: crond: [&lt;span style=&quot;color:green&quot;&gt; OK &lt;/span&gt;]<br /> systemd service: acpid: [&lt;span style=&quot;color:green&quot;&gt; OK &lt;/span&gt;]<br /> systemd service: atd: [&lt;span style=&quot;color:green&quot;&gt; OK &lt;/span&gt;]<br /> systemd service: autofs: [&lt;span style=&quot;color:green&quot;&gt; OK &lt;/span&gt;]<br /> systemd service: smartd: [&lt;span style=&quot;color:green&quot;&gt; OK &lt;/span&gt;]<br /> systemd service: irqbalance: [&lt;span style=&quot;color:green&quot;&gt; OK &lt;/span&gt;] (Multiple processors only)&lt;br&gt;<br /> &lt;nowiki&gt;#&lt;/nowiki&gt; [https://raw.githubusercontent.com/qmtoaster/scripts/master/conntest conntest]<br /> Enter a valid remote email account to which QMT will send mail: &lt;email address&gt;<br /> IMAPS: postmaster@domain.tld --&gt; &lt;span style=&quot;color:green&quot;&gt;success&lt;/span&gt;<br /> Submission: postmaster@domain.tld --&gt; &lt;span style=&quot;color:green&quot;&gt;success&lt;/span&gt;<br /> SMTPS: postmaster@domain.tld --&gt; &lt;span style=&quot;color:green&quot;&gt;success&lt;/span&gt;<br /> <br /> [http://wiki.qmailtoaster.org/index.php?title=Simscan Scanners]<br /> [http://wiki.qmailtoaster.org/index.php?title=Alias_Domains Many Domain Install (Alias Domain)]<br /> Qmail-1.03-3.3.12 (OpenSSL3)<br /> [https://github.com/qmtoaster/patches/blob/master/EL9/README.md Patches] applied<br /> <br /> == SYSV to systemd ==<br /> <br /> == Install certificate ==<br /> [[Certificate]] *Note: The certificate must be 2048 bits or more<br /> == Test certificate ==<br /> # curl --verbose smtps://mail.domain.tld<br /> # curl --verbose imaps://mail.domain.tld<br /> or<br /> # openssl s_client mail.domain.tld:465<br /> # openssl s_client mail.domain.tld:993 <br /> &lt;pre&gt;<br /> &lt;nowiki&gt;*&lt;/nowiki&gt; Server certificate:<br /> &lt;nowiki&gt;*&lt;/nowiki&gt; subject: CN=mail.domain.tld<br /> &lt;nowiki&gt;*&lt;/nowiki&gt; start date: Jul 30 09:16:16 2024 GMT<br /> &lt;nowiki&gt;*&lt;/nowiki&gt; expire date: Oct 28 09:16:15 2024 GMT<br /> &lt;nowiki&gt;*&lt;/nowiki&gt; subjectAltName: host &quot;mail.domain.tld&quot; matched cert's &quot;mail.domain.tld&quot;<br /> &lt;nowiki&gt;*&lt;/nowiki&gt; issuer: C=US; O=Let's Encrypt; CN=R11<br /> &lt;nowiki&gt;*&lt;/nowiki&gt; SSL certificate verify ok.<br /> &lt;/pre&gt;<br /> <br /> If the following error is encountered when testing the new certificate the certificate is most likely less than 2048 bits<br /> <br /> 806B7387577F0000:error:0A00010B:SSL routines:ssl3_get_record:wrong version number:ssl/record/ssl3_record.c:354<br /> <br /> Usually Let's Encrypt certificates are at least 2048 bits, but encountering 256 bits keys is possible. Correct by specifying the number of bits:<br /> <br /> certbot renew --cert-name -d domain.tld -d mail.domain.tld --apache &lt;span style=&quot;color:red&quot;&gt;--rsa-key-size 2048 --key-type rsa&lt;/span&gt;</div> Ebroch http://wiki.qmailtoaster.org:80/index.php?title=Configuration&diff=1620 Configuration 2025-08-22T18:45:40Z <p>Ebroch: </p> <hr /> <div>[[Main_Page#Configuration|Back]]<br /> == [[ Initial Configuration ]] ==<br /> <br /> == [[Domains]] ==<br /> Follow this link for information about configuring domains.<br /> <br /> == [[Users]] ==<br /> Follow this link for information about configuring users.<br /> <br /> List of [[Mobile Device]] which succesfully connect to QmailToaster with SMTP-Auth and Submission Port<br /> <br /> List of [[Wapmail]] for mobile users with GPRS and Wap Browser Handphone<br /> <br /> == Control Files ==<br /> The majority of the configuration files are located in the '''/var/qmail/control ''' directory.<br /> <br /> <br /> man '''qmail-control''' excerpt:<br /> <br /> You can change the behavior of the '''qmail''' system by modifying '''qmail''''s &lt;u&gt;control&lt;/u&gt; &lt;u&gt;files&lt;/u&gt; in '''/var/qmail/control'''.<br /> <br /> '''qmail''' [but not Qmail-Toaster] can survive with just one control file, [[me]], containing the fully-qualified name of the current host. This file is used as the default for other hostname-related control files.<br /> <br /> Comments are allowed in [[badhelo]], [[badmailfrom]], [[badmailfromnorelay]], [[badmailto]], [[badmailtonorelay]], [[locals]], [[percenthack]], [[qmqpservers]], [[rcpthosts]], [[smtproutes]], and [[virtualdomains]]. Trailing spaces and tabs are allowed in any [qmail] control file.<br /> <br /> <br /> === [[Control Files List]] ===<br /> === [[Control Files by Name]] ===<br /> Table of Control Files organized alphabetically with default values, included with Qmail-Toaster, and used by information.<br /> === [[Control Files by Function]] ===<br /> Links to Control File descriptions organized by module.<br /> <br /> <br /> == Filtering ==<br /> === Pre Receipt ===<br /> ==== [[chkuser]] ====<br /> <br /> ==== [[RBLs]] ====<br /> <br /> ==== [[SPF]] ====<br /> <br /> ==== [[Spamdyke]] ====<br /> <br /> === Post Receipt ===<br /> ==== [[Simscan]] ====<br /> <br /> ==== [[Clamav]] ====<br /> <br /> ==== [[Spamassassin]] ====<br /> <br /> ==== [[Amavis]] ====<br /> <br /> ==== [[Spam Throttle]] ====<br /> <br /> ==== [[SURBL]] ====<br /> <br /> ==== [[Dspam|Dspam]] ====<br /> <br /> ===== [[Dspam w/PostgreSQL]] =====<br /> <br /> ==== [[Domainkeys]] &lt;span style=&quot;color:red&quot;&gt;***Obsolete***&lt;/span&gt; ====<br /> <br /> == Networking ==<br /> === [[DNS Server]] ===<br /> <br /> ===[[SRS]]===<br /> <br /> === [[tcp.smtp]] ===<br /> <br /> === [[tcpserver]] ===<br /> <br /> === [[DKIM]] ===<br /> <br /> == Security ==<br /> === [[Certificate]] ===<br /> <br /> === [[eMPF]] ===<br /> <br /> === [[Fail2ban]] ===<br /> <br /> === [[SMTPS]] ===<br /> <br /> === [[Submission]] ===<br /> <br /> === [[Securing SquirrelMail|SquirrelMail]] ===<br /> <br /> === [[ Secure /admin-toaster/ ]] ===<br /> <br /> == [[Dovecot]] ==<br /> <br /> == [[Vpopmail]] ==<br /> <br /> == [[PHP]] ==<br /> <br /> == [[Qmail queue]] ==<br /> <br /> == [[Qmail Dovecot Authentication]] ==<br /> <br /> == [[Qmail Active Directory Authentication]] ==<br /> <br /> == [[Dovecot Active Directory Authentication]] ==<br /> <br /> == [[IMAP/SMTP Authentication tests]] ==<br /> <br /> == [[Redirection]] ==<br /> Follow this link for information about how to redirect email to different addresses.<br /> <br /> == [[systemd]] ==</div> Ebroch http://wiki.qmailtoaster.org:80/index.php?title=Rocky,_Alma,_Springdale_10_QT_Install&diff=1619 Rocky, Alma, Springdale 10 QT Install 2025-08-22T18:43:25Z <p>Ebroch: /* SYSV to systemd */</p> <hr /> <div>[[Main_Page#RHEL_10_&amp;_Derivatives|Back]]&lt;br&gt;<br /> =Enterprise Linux 10 Minimal Install= <br /> ==QMT Install ('Many-Domain')== <br /> &lt;nowiki&gt;#&lt;/nowiki&gt; curl -o /usr/local/bin/qt_install https://raw.githubusercontent.com/qmtoaster/scripts/master/qt_install_el10.sh<br /> &lt;nowiki&gt;#&lt;/nowiki&gt; chmod 755 /usr/local/bin/qt_install<br /> &lt;nowiki&gt;#&lt;/nowiki&gt; qt_install<br /> &lt;span style=&quot;color:red&quot;&gt; ...installing... &lt;/span&gt;<br /> &lt;nowiki&gt;#&lt;/nowiki&gt; toaststat&lt;br&gt;<br /> Status of toaster services<br /> send: up (pid 1323) 1517 seconds<br /> smtp: up (pid 1324) 1517 seconds<br /> submission: up (pid 1325) 1517 seconds<br /> send/log: up (pid 1316) 1517 seconds<br /> smtp/log: up (pid 1311) 1517 seconds<br /> submission/log: up (pid 1314) 1517 seconds&lt;br&gt;<br /> systemd service: clamd@scan: [&lt;span style=&quot;color:green&quot;&gt; OK &lt;/span&gt;]<br /> systemd service: clamav-freshclam: [&lt;span style=&quot;color:green&quot;&gt; OK &lt;/span&gt;]<br /> systemd service: spamassassin: [&lt;span style=&quot;color:green&quot;&gt; OK &lt;/span&gt;]<br /> systemd service: dovecot: [&lt;span style=&quot;color:green&quot;&gt; OK &lt;/span&gt;]<br /> systemd service: mariadb: [&lt;span style=&quot;color:green&quot;&gt; OK &lt;/span&gt;]<br /> systemd service: httpd: [&lt;span style=&quot;color:green&quot;&gt; OK &lt;/span&gt;]<br /> systemd service: named: [&lt;span style=&quot;color:green&quot;&gt; OK &lt;/span&gt;]<br /> systemd service: ntpd: [&lt;span style=&quot;color:green&quot;&gt; OK &lt;/span&gt;]<br /> systemd service: sshd: [&lt;span style=&quot;color:green&quot;&gt; OK &lt;/span&gt;]<br /> systemd service: network: [&lt;span style=&quot;color:green&quot;&gt; OK &lt;/span&gt;]<br /> systemd service: crond: [&lt;span style=&quot;color:green&quot;&gt; OK &lt;/span&gt;]<br /> systemd service: acpid: [&lt;span style=&quot;color:green&quot;&gt; OK &lt;/span&gt;]<br /> systemd service: atd: [&lt;span style=&quot;color:green&quot;&gt; OK &lt;/span&gt;]<br /> systemd service: autofs: [&lt;span style=&quot;color:green&quot;&gt; OK &lt;/span&gt;]<br /> systemd service: smartd: [&lt;span style=&quot;color:green&quot;&gt; OK &lt;/span&gt;]<br /> systemd service: irqbalance: [&lt;span style=&quot;color:green&quot;&gt; OK &lt;/span&gt;] (Multiple processors only)&lt;br&gt;<br /> &lt;nowiki&gt;#&lt;/nowiki&gt; [https://raw.githubusercontent.com/qmtoaster/scripts/master/conntest conntest]<br /> Enter a valid remote email account to which QMT will send mail: &lt;email address&gt;<br /> IMAPS: postmaster@domain.tld --&gt; &lt;span style=&quot;color:green&quot;&gt;success&lt;/span&gt;<br /> Submission: postmaster@domain.tld --&gt; &lt;span style=&quot;color:green&quot;&gt;success&lt;/span&gt;<br /> SMTPS: postmaster@domain.tld --&gt; &lt;span style=&quot;color:green&quot;&gt;success&lt;/span&gt;<br /> <br /> [http://wiki.qmailtoaster.org/index.php?title=Simscan Scanners]<br /> [http://wiki.qmailtoaster.org/index.php?title=Alias_Domains Many Domain Install (Alias Domain)]<br /> Qmail-1.03-3.3.12 (OpenSSL3)<br /> [https://github.com/qmtoaster/patches/blob/master/EL9/README.md Patches] applied<br /> <br /> == SYSV to systemd ==<br /> [http://wiki.qmailtoaster.org/index.php?title=systemd]<br /> <br /> == Install certificate ==<br /> [[Certificate]] *Note: The certificate must be 2048 bits or more<br /> == Test certificate ==<br /> # curl --verbose smtps://mail.domain.tld<br /> # curl --verbose imaps://mail.domain.tld<br /> or<br /> # openssl s_client mail.domain.tld:465<br /> # openssl s_client mail.domain.tld:993 <br /> &lt;pre&gt;<br /> &lt;nowiki&gt;*&lt;/nowiki&gt; Server certificate:<br /> &lt;nowiki&gt;*&lt;/nowiki&gt; subject: CN=mail.domain.tld<br /> &lt;nowiki&gt;*&lt;/nowiki&gt; start date: Jul 30 09:16:16 2024 GMT<br /> &lt;nowiki&gt;*&lt;/nowiki&gt; expire date: Oct 28 09:16:15 2024 GMT<br /> &lt;nowiki&gt;*&lt;/nowiki&gt; subjectAltName: host &quot;mail.domain.tld&quot; matched cert's &quot;mail.domain.tld&quot;<br /> &lt;nowiki&gt;*&lt;/nowiki&gt; issuer: C=US; O=Let's Encrypt; CN=R11<br /> &lt;nowiki&gt;*&lt;/nowiki&gt; SSL certificate verify ok.<br /> &lt;/pre&gt;<br /> <br /> If the following error is encountered when testing the new certificate the certificate is most likely less than 2048 bits<br /> <br /> 806B7387577F0000:error:0A00010B:SSL routines:ssl3_get_record:wrong version number:ssl/record/ssl3_record.c:354<br /> <br /> Usually Let's Encrypt certificates are at least 2048 bits, but encountering 256 bits keys is possible. Correct by specifying the number of bits:<br /> <br /> certbot renew --cert-name -d domain.tld -d mail.domain.tld --apache &lt;span style=&quot;color:red&quot;&gt;--rsa-key-size 2048 --key-type rsa&lt;/span&gt;</div> Ebroch http://wiki.qmailtoaster.org:80/index.php?title=Rocky,_Alma,_Springdale_10_QT_Install&diff=1618 Rocky, Alma, Springdale 10 QT Install 2025-08-22T18:42:50Z <p>Ebroch: </p> <hr /> <div>[[Main_Page#RHEL_10_&amp;_Derivatives|Back]]&lt;br&gt;<br /> =Enterprise Linux 10 Minimal Install= <br /> ==QMT Install ('Many-Domain')== <br /> &lt;nowiki&gt;#&lt;/nowiki&gt; curl -o /usr/local/bin/qt_install https://raw.githubusercontent.com/qmtoaster/scripts/master/qt_install_el10.sh<br /> &lt;nowiki&gt;#&lt;/nowiki&gt; chmod 755 /usr/local/bin/qt_install<br /> &lt;nowiki&gt;#&lt;/nowiki&gt; qt_install<br /> &lt;span style=&quot;color:red&quot;&gt; ...installing... &lt;/span&gt;<br /> &lt;nowiki&gt;#&lt;/nowiki&gt; toaststat&lt;br&gt;<br /> Status of toaster services<br /> send: up (pid 1323) 1517 seconds<br /> smtp: up (pid 1324) 1517 seconds<br /> submission: up (pid 1325) 1517 seconds<br /> send/log: up (pid 1316) 1517 seconds<br /> smtp/log: up (pid 1311) 1517 seconds<br /> submission/log: up (pid 1314) 1517 seconds&lt;br&gt;<br /> systemd service: clamd@scan: [&lt;span style=&quot;color:green&quot;&gt; OK &lt;/span&gt;]<br /> systemd service: clamav-freshclam: [&lt;span style=&quot;color:green&quot;&gt; OK &lt;/span&gt;]<br /> systemd service: spamassassin: [&lt;span style=&quot;color:green&quot;&gt; OK &lt;/span&gt;]<br /> systemd service: dovecot: [&lt;span style=&quot;color:green&quot;&gt; OK &lt;/span&gt;]<br /> systemd service: mariadb: [&lt;span style=&quot;color:green&quot;&gt; OK &lt;/span&gt;]<br /> systemd service: httpd: [&lt;span style=&quot;color:green&quot;&gt; OK &lt;/span&gt;]<br /> systemd service: named: [&lt;span style=&quot;color:green&quot;&gt; OK &lt;/span&gt;]<br /> systemd service: ntpd: [&lt;span style=&quot;color:green&quot;&gt; OK &lt;/span&gt;]<br /> systemd service: sshd: [&lt;span style=&quot;color:green&quot;&gt; OK &lt;/span&gt;]<br /> systemd service: network: [&lt;span style=&quot;color:green&quot;&gt; OK &lt;/span&gt;]<br /> systemd service: crond: [&lt;span style=&quot;color:green&quot;&gt; OK &lt;/span&gt;]<br /> systemd service: acpid: [&lt;span style=&quot;color:green&quot;&gt; OK &lt;/span&gt;]<br /> systemd service: atd: [&lt;span style=&quot;color:green&quot;&gt; OK &lt;/span&gt;]<br /> systemd service: autofs: [&lt;span style=&quot;color:green&quot;&gt; OK &lt;/span&gt;]<br /> systemd service: smartd: [&lt;span style=&quot;color:green&quot;&gt; OK &lt;/span&gt;]<br /> systemd service: irqbalance: [&lt;span style=&quot;color:green&quot;&gt; OK &lt;/span&gt;] (Multiple processors only)&lt;br&gt;<br /> &lt;nowiki&gt;#&lt;/nowiki&gt; [https://raw.githubusercontent.com/qmtoaster/scripts/master/conntest conntest]<br /> Enter a valid remote email account to which QMT will send mail: &lt;email address&gt;<br /> IMAPS: postmaster@domain.tld --&gt; &lt;span style=&quot;color:green&quot;&gt;success&lt;/span&gt;<br /> Submission: postmaster@domain.tld --&gt; &lt;span style=&quot;color:green&quot;&gt;success&lt;/span&gt;<br /> SMTPS: postmaster@domain.tld --&gt; &lt;span style=&quot;color:green&quot;&gt;success&lt;/span&gt;<br /> <br /> [http://wiki.qmailtoaster.org/index.php?title=Simscan Scanners]<br /> [http://wiki.qmailtoaster.org/index.php?title=Alias_Domains Many Domain Install (Alias Domain)]<br /> Qmail-1.03-3.3.12 (OpenSSL3)<br /> [https://github.com/qmtoaster/patches/blob/master/EL9/README.md Patches] applied<br /> <br /> == SYSV to systemd ==<br /> [http://wiki.qmailtoaster.org/index.php?title=SYSV-systemd]<br /> <br /> == Install certificate ==<br /> [[Certificate]] *Note: The certificate must be 2048 bits or more<br /> == Test certificate ==<br /> # curl --verbose smtps://mail.domain.tld<br /> # curl --verbose imaps://mail.domain.tld<br /> or<br /> # openssl s_client mail.domain.tld:465<br /> # openssl s_client mail.domain.tld:993 <br /> &lt;pre&gt;<br /> &lt;nowiki&gt;*&lt;/nowiki&gt; Server certificate:<br /> &lt;nowiki&gt;*&lt;/nowiki&gt; subject: CN=mail.domain.tld<br /> &lt;nowiki&gt;*&lt;/nowiki&gt; start date: Jul 30 09:16:16 2024 GMT<br /> &lt;nowiki&gt;*&lt;/nowiki&gt; expire date: Oct 28 09:16:15 2024 GMT<br /> &lt;nowiki&gt;*&lt;/nowiki&gt; subjectAltName: host &quot;mail.domain.tld&quot; matched cert's &quot;mail.domain.tld&quot;<br /> &lt;nowiki&gt;*&lt;/nowiki&gt; issuer: C=US; O=Let's Encrypt; CN=R11<br /> &lt;nowiki&gt;*&lt;/nowiki&gt; SSL certificate verify ok.<br /> &lt;/pre&gt;<br /> <br /> If the following error is encountered when testing the new certificate the certificate is most likely less than 2048 bits<br /> <br /> 806B7387577F0000:error:0A00010B:SSL routines:ssl3_get_record:wrong version number:ssl/record/ssl3_record.c:354<br /> <br /> Usually Let's Encrypt certificates are at least 2048 bits, but encountering 256 bits keys is possible. Correct by specifying the number of bits:<br /> <br /> certbot renew --cert-name -d domain.tld -d mail.domain.tld --apache &lt;span style=&quot;color:red&quot;&gt;--rsa-key-size 2048 --key-type rsa&lt;/span&gt;</div> Ebroch http://wiki.qmailtoaster.org:80/index.php?title=Rocky,_Alma,_Springdale_10_QT_Install&diff=1617 Rocky, Alma, Springdale 10 QT Install 2025-08-22T18:40:16Z <p>Ebroch: </p> <hr /> <div>[[Main_Page#RHEL_10_&amp;_Derivatives|Back]]&lt;br&gt;<br /> =Enterprise Linux 10 Minimal Install= <br /> ==QMT Install ('Many-Domain')== <br /> &lt;nowiki&gt;#&lt;/nowiki&gt; curl -o /usr/local/bin/qt_install https://raw.githubusercontent.com/qmtoaster/scripts/master/qt_install_el10.sh<br /> &lt;nowiki&gt;#&lt;/nowiki&gt; chmod 755 /usr/local/bin/qt_install<br /> &lt;nowiki&gt;#&lt;/nowiki&gt; qt_install<br /> &lt;span style=&quot;color:red&quot;&gt; ...installing... &lt;/span&gt;<br /> &lt;nowiki&gt;#&lt;/nowiki&gt; toaststat&lt;br&gt;<br /> Status of toaster services<br /> send: up (pid 1323) 1517 seconds<br /> smtp: up (pid 1324) 1517 seconds<br /> submission: up (pid 1325) 1517 seconds<br /> send/log: up (pid 1316) 1517 seconds<br /> smtp/log: up (pid 1311) 1517 seconds<br /> submission/log: up (pid 1314) 1517 seconds&lt;br&gt;<br /> systemd service: clamd@scan: [&lt;span style=&quot;color:green&quot;&gt; OK &lt;/span&gt;]<br /> systemd service: clamav-freshclam: [&lt;span style=&quot;color:green&quot;&gt; OK &lt;/span&gt;]<br /> systemd service: spamassassin: [&lt;span style=&quot;color:green&quot;&gt; OK &lt;/span&gt;]<br /> systemd service: dovecot: [&lt;span style=&quot;color:green&quot;&gt; OK &lt;/span&gt;]<br /> systemd service: mariadb: [&lt;span style=&quot;color:green&quot;&gt; OK &lt;/span&gt;]<br /> systemd service: httpd: [&lt;span style=&quot;color:green&quot;&gt; OK &lt;/span&gt;]<br /> systemd service: named: [&lt;span style=&quot;color:green&quot;&gt; OK &lt;/span&gt;]<br /> systemd service: ntpd: [&lt;span style=&quot;color:green&quot;&gt; OK &lt;/span&gt;]<br /> systemd service: sshd: [&lt;span style=&quot;color:green&quot;&gt; OK &lt;/span&gt;]<br /> systemd service: network: [&lt;span style=&quot;color:green&quot;&gt; OK &lt;/span&gt;]<br /> systemd service: crond: [&lt;span style=&quot;color:green&quot;&gt; OK &lt;/span&gt;]<br /> systemd service: acpid: [&lt;span style=&quot;color:green&quot;&gt; OK &lt;/span&gt;]<br /> systemd service: atd: [&lt;span style=&quot;color:green&quot;&gt; OK &lt;/span&gt;]<br /> systemd service: autofs: [&lt;span style=&quot;color:green&quot;&gt; OK &lt;/span&gt;]<br /> systemd service: smartd: [&lt;span style=&quot;color:green&quot;&gt; OK &lt;/span&gt;]<br /> systemd service: irqbalance: [&lt;span style=&quot;color:green&quot;&gt; OK &lt;/span&gt;] (Multiple processors only)&lt;br&gt;<br /> &lt;nowiki&gt;#&lt;/nowiki&gt; [https://raw.githubusercontent.com/qmtoaster/scripts/master/conntest conntest]<br /> Enter a valid remote email account to which QMT will send mail: &lt;email address&gt;<br /> IMAPS: postmaster@domain.tld --&gt; &lt;span style=&quot;color:green&quot;&gt;success&lt;/span&gt;<br /> Submission: postmaster@domain.tld --&gt; &lt;span style=&quot;color:green&quot;&gt;success&lt;/span&gt;<br /> SMTPS: postmaster@domain.tld --&gt; &lt;span style=&quot;color:green&quot;&gt;success&lt;/span&gt;<br /> <br /> [http://wiki.qmailtoaster.org/index.php?title=Simscan Scanners]<br /> [http://wiki.qmailtoaster.org/index.php?title=Alias_Domains Many Domain Install (Alias Domain)]<br /> Qmail-1.03-3.3.12 (OpenSSL3)<br /> [https://github.com/qmtoaster/patches/blob/master/EL9/README.md Patches] applied<br /> <br /> == SYSV to systemd ==<br /> <br /> == Install certificate ==<br /> [[Certificate]] *Note: The certificate must be 2048 bits or more<br /> == Test certificate ==<br /> # curl --verbose smtps://mail.domain.tld<br /> # curl --verbose imaps://mail.domain.tld<br /> or<br /> # openssl s_client mail.domain.tld:465<br /> # openssl s_client mail.domain.tld:993 <br /> &lt;pre&gt;<br /> &lt;nowiki&gt;*&lt;/nowiki&gt; Server certificate:<br /> &lt;nowiki&gt;*&lt;/nowiki&gt; subject: CN=mail.domain.tld<br /> &lt;nowiki&gt;*&lt;/nowiki&gt; start date: Jul 30 09:16:16 2024 GMT<br /> &lt;nowiki&gt;*&lt;/nowiki&gt; expire date: Oct 28 09:16:15 2024 GMT<br /> &lt;nowiki&gt;*&lt;/nowiki&gt; subjectAltName: host &quot;mail.domain.tld&quot; matched cert's &quot;mail.domain.tld&quot;<br /> &lt;nowiki&gt;*&lt;/nowiki&gt; issuer: C=US; O=Let's Encrypt; CN=R11<br /> &lt;nowiki&gt;*&lt;/nowiki&gt; SSL certificate verify ok.<br /> &lt;/pre&gt;<br /> <br /> If the following error is encountered when testing the new certificate the certificate is most likely less than 2048 bits<br /> <br /> 806B7387577F0000:error:0A00010B:SSL routines:ssl3_get_record:wrong version number:ssl/record/ssl3_record.c:354<br /> <br /> Usually Let's Encrypt certificates are at least 2048 bits, but encountering 256 bits keys is possible. Correct by specifying the number of bits:<br /> <br /> certbot renew --cert-name -d domain.tld -d mail.domain.tld --apache &lt;span style=&quot;color:red&quot;&gt;--rsa-key-size 2048 --key-type rsa&lt;/span&gt;</div> Ebroch http://wiki.qmailtoaster.org:80/index.php?title=Simscan&diff=1616 Simscan 2025-08-21T21:13:23Z <p>Ebroch: </p> <hr /> <div>[[Configuration#Simscan|Back]]&lt;br&gt;<br /> == Scanning ==<br /> <br /> In /etc/tcprules.d/tcp.smtp set environment variable QMAILQUEUE to simscan binary <br /> ...,QMAILQUEUE=&quot;/var/qmail/bin/simscan&quot;,...<br /> Rebuild tcp.smtp<br /> # qmailctl cdb<br /> <br /> == Control ==<br /> <br /> Simscan's control file is /var/qmail/control/simcontrol<br /> It's format looks like thus:&lt;br&gt;<br /> :clam=yes,spam=yes,spam_hits=9.5,spam_passthru=yes,attach=.vbs:.lnk:.scr:.wsh:.hta:.pif<br /> This tells simscan for all domains to scan with ClamAV, Spamassassin, filter attachments, queueing all mail after filtering&lt;br&gt;<br /> Consider the following format:&lt;br&gt;<br /> domain.tld:dspam=yes,rspam=yes,clam=yes,spam=yes,spam_passthru=yes,...<br /> This tells simscan for domain.tld to scan with Dspam, Rspam, ClamAV, Spamassassin,...&lt;br&gt;<br /> Upon edit of simcontrol the file must be put into proper format for use, run<br /> # qmailctl cdb&lt;br&gt;<br /> Note: simscan automatically runs dspam client (/usr/bin/dspamc). So the dspam server must be running. <br /> In order to run dspam (/usr/bin/dspam) instead set the environment variable DSPAM_BIN in either <br /> /etc/tcprules.d/tcp.smtp or in the smtp run script.<br /> <br /> == Ramdisk ==<br /> <br /> Use htop or other program to determine available memory for ramdisk (size=)<br /> # clamgid=$(test -z &quot;$(cat /etc/passwd | grep ^clamav)&quot; &amp;&amp; id -g clamscan 2&gt;/dev/null || id -g clamav 2&gt;/dev/null) &amp;&amp; echo $clamgid<br /> # qmailctl stop<br /> # mount -t tmpfs -o size=1024m,nodev,noexec,noatime,uid=$clamgid,gid=0,mode=0750 myramdisk /var/qmail/simscan<br /> # ls -ld /var/qmail/simscan<br /> drwxr-x--- 2 clamscan root 6 Aug 17 13:28 /var/qmail/simscan<br /> # qmailctl start<br /> # df -h /var/qmail/simscan<br /> Filesystem Size Used Avail Use% Mounted on<br /> myramdisk 1.0G 0 1.0G 0% /var/qmail/simscan<br /> # cp /etc/fstab /etc/fstab.bak<br /> # echo &quot;myramdisk /var/qmail/simscan tmpfs size=1024m,nodev,noexec,noatime,uid=$clamgid,gid=0,mode=0750 0 0&quot; &gt;&gt; /etc/fstab<br /> Make sure /etc/fstab file is okay before a reboot<br /> # cat /etc/fstab<br /> <br /> == Filtering ==<br /> <br /> Install Dspam, Rspam, SA userprefs&lt;br&gt;<br /> '''# Fedora EL8'''&lt;br&gt;<br /> cat &gt;&gt; /etc/yum.repos.d/fedoramirrors &lt;&lt; EOF<br /> https://d2lzkl7pfhq30w.cloudfront.net/pub/archive/fedora/linux/releases/28/Everything/x86_64/os/<br /> http://mirror.math.princeton.edu/pub/fedora-archive/fedora/linux/releases/28/Everything/x86_64/os/<br /> http://pubmirror1.math.uh.edu/fedora-buffet/archive/fedora/linux/releases/28/Everything/x86_64/os/<br /> https://pubmirror2.math.uh.edu/fedora-buffet/archive/fedora/linux/releases/28/Everything/x86_64/os/<br /> http://mirrors.kernel.org/fedora-buffet/archive/fedora/linux/releases/28/Everything/x86_64/os/<br /> https://dl.fedoraproject.org/pub/archive/fedora/linux/releases/28/Everything/x86_64/os/<br /> EOF&lt;br&gt;<br /> cat &gt;&gt; /etc/yum.repos.d/fedora28.repo &lt;&lt; EOF<br /> [fedora]<br /> name=Fedora 28<br /> mirrorlist=file:///etc/yum.repos.d/fedoramirrors<br /> enabled=0<br /> gpgcheck=0<br /> priority=100<br /> EOF&lt;br&gt;<br /> '''# Fedora EL9'''&lt;br&gt;<br /> cat &gt;&gt; /etc/yum.repos.d/fedoramirrors &lt;&lt; EOF<br /> https://d2lzkl7pfhq30w.cloudfront.net/pub/archive/fedora/linux/releases/34/Everything/x86_64/os/<br /> http://mirror.math.princeton.edu/pub/fedora-archive/fedora/linux/releases/34/Everything/x86_64/os/<br /> http://pubmirror1.math.uh.edu/fedora-buffet/archive/fedora/linux/releases/34/Everything/x86_64/os/<br /> https://pubmirror2.math.uh.edu/fedora-buffet/archive/fedora/linux/releases/34/Everything/x86_64/os/<br /> http://mirrors.kernel.org/fedora-buffet/archive/fedora/linux/releases/34/Everything/x86_64/os/<br /> https://dl.fedoraproject.org/pub/archive/fedora/linux/releases/34/Everything/x86_64/os/<br /> EOF&lt;br&gt;<br /> cat &gt;&gt; /etc/yum.repos.d/fedora34.repo &lt;&lt; EOF<br /> [fedora]<br /> name=Fedora 34<br /> mirrorlist=file:///etc/yum.repos.d/fedoramirrors<br /> enabled=0<br /> gpgcheck=0<br /> priority=100<br /> EOF&lt;br&gt;<br /> '''# Fedora EL10'''&lt;br&gt;<br /> cat &gt;&gt; /etc/yum.repos.d/fedora41.repo &lt;&lt; EOF<br /> [fedora41]<br /> name=Fedora 41 RPM - x86_64<br /> baseurl=https://dl.fedoraproject.org/pub/fedora/linux/releases/41/Everything/\$basearch/os/<br /> enabled=0<br /> gpgcheck=0<br /> priority=100<br /> [fedora41-source]<br /> name=Fedora 41 SRPM - x86_64 Source<br /> baseurl=https://dl.fedoraproject.org/pub/fedora/linux/releases/41/Everything/source/tree/<br /> enabled=0<br /> gpgcheck=0<br /> priority=100<br /> EOF<br /> <br /> # Begin DSpam DB Install, Skip if already installed<br /> wget https://raw.githubusercontent.com/qmtoaster/dspam/master/dspamdb.sql<br /> if [ &quot;$?&quot; != &quot;0&quot; ]; then<br /> echo &quot;Error downloading dspam db: ($?), exiting...&quot;<br /> exit 1<br /> fi<br /> MYSQLPW=<br /> # Get DB password for administrator and check validity.<br /> if [ -z &quot;$MYSQLPW&quot; ]; then<br /> read -s -p &quot;Enter MySQL/MariaDB admin password to create dspam database: &quot; MYSQLPW<br /> fi<br /> credfile=~/sql.cnf<br /> echo -e &quot;[client]\nuser=root\npassword='$MYSQLPW'\nhost=localhost&quot; &gt; $credfile<br /> mysqladmin --defaults-extra-file=$credfile status &gt; /dev/null 2&gt;&amp;1<br /> if [ &quot;$?&quot; != &quot;0&quot; ]; then<br /> echo &quot;Bad MySQL/MariaDB administrator password or MySQL/MariaDB is not running. Exiting...&quot;<br /> exit 1<br /> fi<br /> echo &quot;&quot;<br /> echo &quot;Dropping Dspam database if it exists already...&quot;<br /> mysql --defaults-extra-file=$credfile -e &quot;use dspam&quot; &amp;&gt; /dev/null<br /> [ &quot;$?&quot; = &quot;0&quot; ] &amp;&amp; mysqldump --defaults-extra-file=$credfile dspam &gt; dspam.sql \<br /> &amp;&amp; mysql --defaults-extra-file=$credfile -e &quot;drop database dspam&quot; \<br /> &amp;&amp; echo &quot;dspam db saved to dspam.sql and dropped...&quot;<br /> <br /> # Create dspam with correct permissions<br /> echo &quot;Creating Dspam database...&quot;<br /> mysqladmin --defaults-extra-file=$credfile reload<br /> mysqladmin --defaults-extra-file=$credfile refresh<br /> mysqladmin --defaults-extra-file=$credfile create dspam<br /> mysqladmin --defaults-extra-file=$credfile reload<br /> mysqladmin --defaults-extra-file=$credfile refresh<br /> echo &quot;Adding dspam users and privileges...&quot;<br /> mysql --defaults-extra-file=$credfile -e &quot;CREATE USER dspam@localhost IDENTIFIED BY 'p4ssw3rd'&quot;<br /> mysql --defaults-extra-file=$credfile -e &quot;GRANT ALL PRIVILEGES ON dspam.* TO dspam@localhost&quot;<br /> mysqladmin --defaults-extra-file=$credfile reload<br /> mysqladmin --defaults-extra-file=$credfile refresh<br /> echo &quot;Done with dspam database...&quot;<br /> mysql --defaults-extra-file=$credfile dspam &lt; dspamdb.sql<br /> mysqladmin --defaults-extra-file=$credfile reload<br /> mysqladmin --defaults-extra-file=$credfile refresh<br /> # End DSpam DB install<br /> <br /> <br /> # Rspam Installation:<br /> wget https://rspamd.com/rpm-stable/centos-$rel/rspamd.repo -O /etc/yum.repos.d/rspamd.repo<br /> <br /> dnf $FEDORAREPO --enablerepo=qmt-devel install dspam dspam-libs dspam-client dspam-mysql dspam-web rspamd<br /> systemctl enable --now dspam<br /> systemctl status dspam<br /> systemctl enable --now rspamd<br /> systemctl status rspamd<br /> <br /> # Update Simscan<br /> dnf --enablerepo=qmt-devel update simscan<br /> <br /> # Up qmail limits<br /> sed -i 's/softlimit -m.*\\/softlimit -m 256000000 \\/' /var/qmail/supervise/smtp/run<br /> qmailctl stop<br /> qmailctl start<br /> <br /> <br /> # SA user prefs<br /> <br /> # Create SA DB and load table into MySQL<br /> cat &gt;&gt; ./sadb.sql &lt;&lt; EOF<br /> CREATE TABLE userpref (<br /> username varchar(100) NOT NULL default '',<br /> preference varchar(50) NOT NULL default '',<br /> value varchar(255) NOT NULL default '',<br /> prefid int(11) NOT NULL auto_increment,<br /> ts timestamp NOT NULL DEFAULT current_timestamp() ON UPDATE current_timestamp(),<br /> PRIMARY KEY (prefid),<br /> KEY username (username)<br /> ) ENGINE=InnoDB;<br /> EOF<br /> mysqladmin --defaults-extra-file=$credfile create spamassassin<br /> mysql --defaults-extra-file=$credfile -e &quot;CREATE USER spamassassin@localhost IDENTIFIED BY 'p4ssw3rd'&quot;<br /> mysql --defaults-extra-file=$credfile -e &quot;GRANT ALL PRIVILEGES ON spamassassin.* TO spamassassin@localhost&quot;<br /> mysqladmin --defaults-extra-file=$credfile reload<br /> mysqladmin --defaults-extra-file=$credfile refresh<br /> mysql --defaults-extra-file=$credfile spamassassin &lt; sadb.sql<br /> <br /> # Read SA SQL DB<br /> cat &gt;&gt; /etc/mail/spamassassin/sql.cf &lt;&lt; EOF<br /> user_scores_dsn DBI:mysql:spamassassin:localhost:3306<br /> user_scores_sql_password p4ssw3rd<br /> user_scores_sql_username spamassassin<br /> user_scores_sql_custom_query SELECT preference, value FROM _TABLE_ WHERE username = _USERNAME_ OR username = '$GLOBAL' OR username = <br /> CONCAT('%',_DOMAIN_) ORDER BY username ASC<br /> EOF<br /> echo &quot;include sql.cf&quot; &gt;&gt; /etc/mail/spamassassin/local.cf<br /> <br /> # Add Per User Settings in SA SQL DB (Yours may differ)<br /> echo &quot;INSERT INTO userpref (username,preference,value) VALUES ('\$GLOBAL','required_hits','5.0');&quot; | mysql -u root -p spamassassin<br /> echo &quot;INSERT INTO userpref (username,preference,value) VALUES ('user@dom.com','required_hits','7.0');&quot; | mysql -u root -p spamassassin<br /> echo &quot;INSERT INTO userpref (username,preference,value) VALUES ('globalspam','required_hits','5.0');&quot; | mysql -u root -p spamassassin<br /> echo &quot;select * from userpref&quot; | mysql -u root -p spamassassin<br /> <br /> # Tell SA Daemon To Use SQL DB<br /> sed -i 's/SPAMDOPTIONS=&quot;.*&quot;/SPAMDOPTIONS=&quot;--create-prefs -m10 -q -x -u clamscan&quot;/' /etc/sysconfig/spamassassin<br /> <br /> # Bayesian Filtering<br /> mkdir /etc/mail/spamassassin/.spamassassin<br /> chown -R clamscan:clamscan /etc/mail/spamassassin/.spamassassin<br /> cat &gt;&gt; /etc/mail/spamassassin/bayes.cf &lt;&lt; EOF<br /> use_bayes 1<br /> use_bayes_rules 1<br /> bayes_auto_learn 1<br /> bayes_path /etc/mail/spamassassin/.spamassassin/bayes<br /> bayes_auto_learn_threshold_spam 6.0<br /> bayes_file_mode 0775<br /> EOF<br /> echo &quot;include bayes.cf&quot; &gt;&gt; /etc/mail/spamassassin/local.cf<br /> systemctl restart spamassassin<br /> <br /> <br /> # Tell simscan, append to simcontrol, reload cdb<br /> dspam=yes,rspam=yes,regex<br /> optional: dspamuser=globalspam (Otherwise the first envelope 'rcpt to' address is used)<br /> optional: spamuser=globalspam (Add to userprefs table)<br /> optional: remove spam_hits=* (Otherwise userprefs will not be used)<br /> qmailctl cdb<br /> <br /> # This is my configuration:<br /> :clam=yes,spam=yes,rspam=yes,dspam=yes,spam_passthru=yes,attach=.exe:.pif:.scr</div> Ebroch http://wiki.qmailtoaster.org:80/index.php?title=Simscan&diff=1615 Simscan 2025-08-21T20:37:04Z <p>Ebroch: </p> <hr /> <div>[[Configuration#Simscan|Back]]&lt;br&gt;<br /> == Scanning ==<br /> <br /> In /etc/tcprules.d/tcp.smtp set environment variable QMAILQUEUE to simscan binary <br /> ...,QMAILQUEUE=&quot;/var/qmail/bin/simscan&quot;,...<br /> Rebuild tcp.smtp<br /> # qmailctl cdb<br /> <br /> == Control ==<br /> <br /> Simscan's control file is /var/qmail/control/simcontrol<br /> It's format looks like thus:&lt;br&gt;<br /> :clam=yes,spam=yes,spam_hits=9.5,spam_passthru=yes,attach=.vbs:.lnk:.scr:.wsh:.hta:.pif<br /> This tells simscan for all domains to scan with ClamAV, Spamassassin, filter attachments, queueing all mail after filtering&lt;br&gt;<br /> Consider the following format:&lt;br&gt;<br /> domain.tld:dspam=yes,rspam=yes,clam=yes,spam=yes,spam_passthru=yes,...<br /> This tells simscan for domain.tld to scan with Dspam, Rspam, ClamAV, Spamassassin,...&lt;br&gt;<br /> Upon edit of simcontrol the file must be put into proper format for use, run<br /> # qmailctl cdb&lt;br&gt;<br /> Note: simscan automatically runs dspam client (/usr/bin/dspamc). So the dspam server must be running. <br /> In order to run dspam (/usr/bin/dspam) instead set the environment variable DSPAM_BIN in either <br /> /etc/tcprules.d/tcp.smtp or in the smtp run script.<br /> <br /> == Ramdisk ==<br /> <br /> Use htop or other program to determine available memory for ramdisk (size=)<br /> # clamgid=$(test -z &quot;$(cat /etc/passwd | grep ^clamav)&quot; &amp;&amp; id -g clamscan 2&gt;/dev/null || id -g clamav 2&gt;/dev/null) &amp;&amp; echo $clamgid<br /> # qmailctl stop<br /> # mount -t tmpfs -o size=1024m,nodev,noexec,noatime,uid=$clamgid,gid=0,mode=0750 myramdisk /var/qmail/simscan<br /> # ls -ld /var/qmail/simscan<br /> drwxr-x--- 2 clamscan root 6 Aug 17 13:28 /var/qmail/simscan<br /> # qmailctl start<br /> # df -h /var/qmail/simscan<br /> Filesystem Size Used Avail Use% Mounted on<br /> myramdisk 1.0G 0 1.0G 0% /var/qmail/simscan<br /> # cp /etc/fstab /etc/fstab.bak<br /> # echo &quot;myramdisk /var/qmail/simscan tmpfs size=1024m,nodev,noexec,noatime,uid=$clamgid,gid=0,mode=0750 0 0&quot; &gt;&gt; /etc/fstab<br /> Make sure /etc/fstab file is okay before a reboot<br /> # cat /etc/fstab<br /> <br /> == Filtering ==<br /> <br /> Install Dspam, Rspam, SA userprefs&lt;br&gt;<br /> # Fedora EL8&lt;br&gt;<br /> cat &gt;&gt; /etc/yum.repos.d/fedoramirrors &lt;&lt; EOF<br /> https://d2lzkl7pfhq30w.cloudfront.net/pub/archive/fedora/linux/releases/28/Everything/x86_64/os/<br /> http://mirror.math.princeton.edu/pub/fedora-archive/fedora/linux/releases/28/Everything/x86_64/os/<br /> http://pubmirror1.math.uh.edu/fedora-buffet/archive/fedora/linux/releases/28/Everything/x86_64/os/<br /> https://pubmirror2.math.uh.edu/fedora-buffet/archive/fedora/linux/releases/28/Everything/x86_64/os/<br /> http://mirrors.kernel.org/fedora-buffet/archive/fedora/linux/releases/28/Everything/x86_64/os/<br /> https://dl.fedoraproject.org/pub/archive/fedora/linux/releases/28/Everything/x86_64/os/<br /> EOF&lt;br&gt;<br /> cat &gt;&gt; /etc/yum.repos.d/fedora28.repo &lt;&lt; EOF<br /> [fedora]<br /> name=Fedora 28<br /> mirrorlist=file:///etc/yum.repos.d/fedoramirrors<br /> enabled=0<br /> gpgcheck=0<br /> priority=100<br /> EOF&lt;br&gt;<br /> # Fedora EL9&lt;br&gt;<br /> cat &gt;&gt; /etc/yum.repos.d/fedoramirrors &lt;&lt; EOF<br /> https://d2lzkl7pfhq30w.cloudfront.net/pub/archive/fedora/linux/releases/34/Everything/x86_64/os/<br /> http://mirror.math.princeton.edu/pub/fedora-archive/fedora/linux/releases/34/Everything/x86_64/os/<br /> http://pubmirror1.math.uh.edu/fedora-buffet/archive/fedora/linux/releases/34/Everything/x86_64/os/<br /> https://pubmirror2.math.uh.edu/fedora-buffet/archive/fedora/linux/releases/34/Everything/x86_64/os/<br /> http://mirrors.kernel.org/fedora-buffet/archive/fedora/linux/releases/34/Everything/x86_64/os/<br /> https://dl.fedoraproject.org/pub/archive/fedora/linux/releases/34/Everything/x86_64/os/<br /> EOF&lt;br&gt;<br /> cat &gt;&gt; /etc/yum.repos.d/fedora34.repo &lt;&lt; EOF<br /> [fedora]<br /> name=Fedora 34<br /> mirrorlist=file:///etc/yum.repos.d/fedoramirrors<br /> enabled=0<br /> gpgcheck=0<br /> priority=100<br /> EOF&lt;br&gt;<br /> # Fedora EL10&lt;br&gt;<br /> cat &gt;&gt; /etc/yum.repos.d/fedora41.repo &lt;&lt; EOF<br /> [fedora41]<br /> name=Fedora 41 RPM - x86_64<br /> baseurl=https://dl.fedoraproject.org/pub/fedora/linux/releases/41/Everything/\$basearch/os/<br /> enabled=0<br /> gpgcheck=0<br /> priority=100<br /> [fedora41-source]<br /> name=Fedora 41 SRPM - x86_64 Source<br /> baseurl=https://dl.fedoraproject.org/pub/fedora/linux/releases/41/Everything/source/tree/<br /> enabled=0<br /> gpgcheck=0<br /> priority=100<br /> EOF<br /> <br /> # Begin DSpam DB Install, Skip if already installed<br /> wget https://raw.githubusercontent.com/qmtoaster/dspam/master/dspamdb.sql<br /> if [ &quot;$?&quot; != &quot;0&quot; ]; then<br /> echo &quot;Error downloading dspam db: ($?), exiting...&quot;<br /> exit 1<br /> fi<br /> MYSQLPW=<br /> # Get DB password for administrator and check validity.<br /> if [ -z &quot;$MYSQLPW&quot; ]; then<br /> read -s -p &quot;Enter MySQL/MariaDB admin password to create dspam database: &quot; MYSQLPW<br /> fi<br /> credfile=~/sql.cnf<br /> echo -e &quot;[client]\nuser=root\npassword='$MYSQLPW'\nhost=localhost&quot; &gt; $credfile<br /> mysqladmin --defaults-extra-file=$credfile status &gt; /dev/null 2&gt;&amp;1<br /> if [ &quot;$?&quot; != &quot;0&quot; ]; then<br /> echo &quot;Bad MySQL/MariaDB administrator password or MySQL/MariaDB is not running. Exiting...&quot;<br /> exit 1<br /> fi<br /> echo &quot;&quot;<br /> echo &quot;Dropping Dspam database if it exists already...&quot;<br /> mysql --defaults-extra-file=$credfile -e &quot;use dspam&quot; &amp;&gt; /dev/null<br /> [ &quot;$?&quot; = &quot;0&quot; ] &amp;&amp; mysqldump --defaults-extra-file=$credfile dspam &gt; dspam.sql \<br /> &amp;&amp; mysql --defaults-extra-file=$credfile -e &quot;drop database dspam&quot; \<br /> &amp;&amp; echo &quot;dspam db saved to dspam.sql and dropped...&quot;<br /> <br /> # Create dspam with correct permissions<br /> echo &quot;Creating Dspam database...&quot;<br /> mysqladmin --defaults-extra-file=$credfile reload<br /> mysqladmin --defaults-extra-file=$credfile refresh<br /> mysqladmin --defaults-extra-file=$credfile create dspam<br /> mysqladmin --defaults-extra-file=$credfile reload<br /> mysqladmin --defaults-extra-file=$credfile refresh<br /> echo &quot;Adding dspam users and privileges...&quot;<br /> mysql --defaults-extra-file=$credfile -e &quot;CREATE USER dspam@localhost IDENTIFIED BY 'p4ssw3rd'&quot;<br /> mysql --defaults-extra-file=$credfile -e &quot;GRANT ALL PRIVILEGES ON dspam.* TO dspam@localhost&quot;<br /> mysqladmin --defaults-extra-file=$credfile reload<br /> mysqladmin --defaults-extra-file=$credfile refresh<br /> echo &quot;Done with dspam database...&quot;<br /> mysql --defaults-extra-file=$credfile dspam &lt; dspamdb.sql<br /> mysqladmin --defaults-extra-file=$credfile reload<br /> mysqladmin --defaults-extra-file=$credfile refresh<br /> # End DSpam DB install<br /> <br /> <br /> # Rspam Installation:<br /> wget https://rspamd.com/rpm-stable/centos-$rel/rspamd.repo -O /etc/yum.repos.d/rspamd.repo<br /> <br /> dnf $FEDORAREPO --enablerepo=qmt-devel install dspam dspam-libs dspam-client dspam-mysql dspam-web rspamd<br /> systemctl enable --now dspam<br /> systemctl status dspam<br /> systemctl enable --now rspamd<br /> systemctl status rspamd<br /> <br /> # Update Simscan<br /> dnf --enablerepo=qmt-devel update simscan<br /> <br /> # Up qmail limits<br /> sed -i 's/softlimit -m.*\\/softlimit -m 256000000 \\/' /var/qmail/supervise/smtp/run<br /> qmailctl stop<br /> qmailctl start<br /> <br /> <br /> # SA user prefs<br /> <br /> # Create SA DB and load table into MySQL<br /> cat &gt;&gt; ./sadb.sql &lt;&lt; EOF<br /> CREATE TABLE userpref (<br /> username varchar(100) NOT NULL default '',<br /> preference varchar(50) NOT NULL default '',<br /> value varchar(255) NOT NULL default '',<br /> prefid int(11) NOT NULL auto_increment,<br /> ts timestamp NOT NULL DEFAULT current_timestamp() ON UPDATE current_timestamp(),<br /> PRIMARY KEY (prefid),<br /> KEY username (username)<br /> ) ENGINE=InnoDB;<br /> EOF<br /> mysqladmin --defaults-extra-file=$credfile create spamassassin<br /> mysql --defaults-extra-file=$credfile -e &quot;CREATE USER spamassassin@localhost IDENTIFIED BY 'p4ssw3rd'&quot;<br /> mysql --defaults-extra-file=$credfile -e &quot;GRANT ALL PRIVILEGES ON spamassassin.* TO spamassassin@localhost&quot;<br /> mysqladmin --defaults-extra-file=$credfile reload<br /> mysqladmin --defaults-extra-file=$credfile refresh<br /> mysql --defaults-extra-file=$credfile spamassassin &lt; sadb.sql<br /> <br /> # Read SA SQL DB<br /> cat &gt;&gt; /etc/mail/spamassassin/sql.cf &lt;&lt; EOF<br /> user_scores_dsn DBI:mysql:spamassassin:localhost:3306<br /> user_scores_sql_password p4ssw3rd<br /> user_scores_sql_username spamassassin<br /> user_scores_sql_custom_query SELECT preference, value FROM _TABLE_ WHERE username = _USERNAME_ OR username = '$GLOBAL' OR username = <br /> CONCAT('%',_DOMAIN_) ORDER BY username ASC<br /> EOF<br /> echo &quot;include sql.cf&quot; &gt;&gt; /etc/mail/spamassassin/local.cf<br /> <br /> # Add Per User Settings in SA SQL DB (Yours may differ)<br /> echo &quot;INSERT INTO userpref (username,preference,value) VALUES ('\$GLOBAL','required_hits','5.0');&quot; | mysql -u root -p spamassassin<br /> echo &quot;INSERT INTO userpref (username,preference,value) VALUES ('user@dom.com','required_hits','7.0');&quot; | mysql -u root -p spamassassin<br /> echo &quot;INSERT INTO userpref (username,preference,value) VALUES ('globalspam','required_hits','5.0');&quot; | mysql -u root -p spamassassin<br /> echo &quot;select * from userpref&quot; | mysql -u root -p spamassassin<br /> <br /> # Tell SA Daemon To Use SQL DB<br /> sed -i 's/SPAMDOPTIONS=&quot;.*&quot;/SPAMDOPTIONS=&quot;--create-prefs -m10 -q -x -u clamscan&quot;/' /etc/sysconfig/spamassassin<br /> <br /> # Bayesian Filtering<br /> mkdir /etc/mail/spamassassin/.spamassassin<br /> chown -R clamscan:clamscan /etc/mail/spamassassin/.spamassassin<br /> cat &gt;&gt; /etc/mail/spamassassin/bayes.cf &lt;&lt; EOF<br /> use_bayes 1<br /> use_bayes_rules 1<br /> bayes_auto_learn 1<br /> bayes_path /etc/mail/spamassassin/.spamassassin/bayes<br /> bayes_auto_learn_threshold_spam 6.0<br /> bayes_file_mode 0775<br /> EOF<br /> echo &quot;include bayes.cf&quot; &gt;&gt; /etc/mail/spamassassin/local.cf<br /> systemctl restart spamassassin<br /> <br /> <br /> # Tell simscan, append to simcontrol, reload cdb<br /> dspam=yes,rspam=yes,regex<br /> optional: dspamuser=globalspam (Otherwise the first envelope 'rcpt to' address is used)<br /> optional: spamuser=globalspam (Add to userprefs table)<br /> optional: remove spam_hits=* (Otherwise userprefs will not be used)<br /> qmailctl cdb<br /> <br /> # This is my configuration:<br /> :clam=yes,spam=yes,rspam=yes,dspam=yes,spam_passthru=yes,attach=.exe:.pif:.scr</div> Ebroch http://wiki.qmailtoaster.org:80/index.php?title=Simscan&diff=1614 Simscan 2025-08-21T20:32:04Z <p>Ebroch: </p> <hr /> <div>[[Configuration#Simscan|Back]]&lt;br&gt;<br /> == Scanning ==<br /> <br /> In /etc/tcprules.d/tcp.smtp set environment variable QMAILQUEUE to simscan binary <br /> ...,QMAILQUEUE=&quot;/var/qmail/bin/simscan&quot;,...<br /> Rebuild tcp.smtp<br /> # qmailctl cdb<br /> <br /> == Control ==<br /> <br /> Simscan's control file is /var/qmail/control/simcontrol<br /> It's format looks like thus:&lt;br&gt;<br /> :clam=yes,spam=yes,spam_hits=9.5,spam_passthru=yes,attach=.vbs:.lnk:.scr:.wsh:.hta:.pif<br /> This tells simscan for all domains to scan with ClamAV, Spamassassin, filter attachments, queueing all mail after filtering&lt;br&gt;<br /> Consider the following format:&lt;br&gt;<br /> domain.tld:dspam=yes,rspam=yes,clam=yes,spam=yes,spam_passthru=yes,...<br /> This tells simscan for domain.tld to scan with Dspam, Rspam, ClamAV, Spamassassin,...&lt;br&gt;<br /> Upon edit of simcontrol the file must be put into proper format for use, run<br /> # qmailctl cdb&lt;br&gt;<br /> Note: simscan automatically runs dspam client (/usr/bin/dspamc). So the dspam server must be running. <br /> In order to run dspam (/usr/bin/dspam) instead set the environment variable DSPAM_BIN in either <br /> /etc/tcprules.d/tcp.smtp or in the smtp run script.<br /> <br /> == Ramdisk ==<br /> <br /> Use htop or other program to determine available memory for ramdisk (size=)<br /> # clamgid=$(test -z &quot;$(cat /etc/passwd | grep ^clamav)&quot; &amp;&amp; id -g clamscan 2&gt;/dev/null || id -g clamav 2&gt;/dev/null) &amp;&amp; echo $clamgid<br /> # qmailctl stop<br /> # mount -t tmpfs -o size=1024m,nodev,noexec,noatime,uid=$clamgid,gid=0,mode=0750 myramdisk /var/qmail/simscan<br /> # ls -ld /var/qmail/simscan<br /> drwxr-x--- 2 clamscan root 6 Aug 17 13:28 /var/qmail/simscan<br /> # qmailctl start<br /> # df -h /var/qmail/simscan<br /> Filesystem Size Used Avail Use% Mounted on<br /> myramdisk 1.0G 0 1.0G 0% /var/qmail/simscan<br /> # cp /etc/fstab /etc/fstab.bak<br /> # echo &quot;myramdisk /var/qmail/simscan tmpfs size=1024m,nodev,noexec,noatime,uid=$clamgid,gid=0,mode=0750 0 0&quot; &gt;&gt; /etc/fstab<br /> Make sure /etc/fstab file is okay before a reboot<br /> # cat /etc/fstab<br /> <br /> == Filtering ==<br /> <br /> Install Dspam, Rspam, SA userprefs&lt;br&gt;<br /> # Fedora EL8&lt;br&gt;<br /> cat &gt;&gt; /etc/yum.repos.d/fedoramirrors &lt;&lt; EOF<br /> https://d2lzkl7pfhq30w.cloudfront.net/pub/archive/fedora/linux/releases/28/Everything/x86_64/os/<br /> http://mirror.math.princeton.edu/pub/fedora-archive/fedora/linux/releases/28/Everything/x86_64/os/<br /> http://pubmirror1.math.uh.edu/fedora-buffet/archive/fedora/linux/releases/28/Everything/x86_64/os/<br /> https://pubmirror2.math.uh.edu/fedora-buffet/archive/fedora/linux/releases/28/Everything/x86_64/os/<br /> http://mirrors.kernel.org/fedora-buffet/archive/fedora/linux/releases/28/Everything/x86_64/os/<br /> https://dl.fedoraproject.org/pub/archive/fedora/linux/releases/28/Everything/x86_64/os/<br /> EOF&lt;br&gt;<br /> cat &gt;&gt; /etc/yum.repos.d/fedora28.repo &lt;&lt; EOF<br /> [fedora]<br /> name=Fedora 28<br /> mirrorlist=file:///etc/yum.repos.d/fedoramirrors<br /> enabled=0<br /> gpgcheck=0<br /> priority=100<br /> EOF&lt;br&gt;<br /> # Fedora EL9&lt;br&gt;<br /> cat &gt;&gt; /etc/yum.repos.d/fedoramirrors &lt;&lt; EOF<br /> https://d2lzkl7pfhq30w.cloudfront.net/pub/archive/fedora/linux/releases/34/Everything/x86_64/os/<br /> http://mirror.math.princeton.edu/pub/fedora-archive/fedora/linux/releases/34/Everything/x86_64/os/<br /> http://pubmirror1.math.uh.edu/fedora-buffet/archive/fedora/linux/releases/34/Everything/x86_64/os/<br /> https://pubmirror2.math.uh.edu/fedora-buffet/archive/fedora/linux/releases/34/Everything/x86_64/os/<br /> http://mirrors.kernel.org/fedora-buffet/archive/fedora/linux/releases/34/Everything/x86_64/os/<br /> https://dl.fedoraproject.org/pub/archive/fedora/linux/releases/34/Everything/x86_64/os/<br /> EOF&lt;br&gt;<br /> cat &gt;&gt; /etc/yum.repos.d/fedora34.repo &lt;&lt; EOF<br /> [fedora]<br /> name=Fedora 34<br /> mirrorlist=file:///etc/yum.repos.d/fedoramirrors<br /> enabled=0<br /> gpgcheck=0<br /> priority=100<br /> EOF&lt;br&gt;<br /> # Fedora EL10&lt;br&gt;<br /> cat &gt;&gt; /etc/yum.repos.d/fedora41.repo &lt;&lt; EOF<br /> [fedora41]<br /> name=Fedora 41 RPM - x86_64<br /> baseurl=https://dl.fedoraproject.org/pub/fedora/linux/releases/41/Everything/$basearch/os/<br /> enabled=0<br /> gpgcheck=0<br /> priority=100<br /> [fedora41-source]<br /> name=Fedora 41 SRPM - x86_64 Source<br /> baseurl=https://dl.fedoraproject.org/pub/fedora/linux/releases/41/Everything/source/tree/<br /> enabled=0<br /> gpgcheck=0<br /> priority=100<br /> EOF<br /> <br /> # Begin DSpam DB Install, Skip if already installed<br /> wget https://raw.githubusercontent.com/qmtoaster/dspam/master/dspamdb.sql<br /> if [ &quot;$?&quot; != &quot;0&quot; ]; then<br /> echo &quot;Error downloading dspam db: ($?), exiting...&quot;<br /> exit 1<br /> fi<br /> MYSQLPW=<br /> # Get DB password for administrator and check validity.<br /> if [ -z &quot;$MYSQLPW&quot; ]; then<br /> read -s -p &quot;Enter MySQL/MariaDB admin password to create dspam database: &quot; MYSQLPW<br /> fi<br /> credfile=~/sql.cnf<br /> echo -e &quot;[client]\nuser=root\npassword='$MYSQLPW'\nhost=localhost&quot; &gt; $credfile<br /> mysqladmin --defaults-extra-file=$credfile status &gt; /dev/null 2&gt;&amp;1<br /> if [ &quot;$?&quot; != &quot;0&quot; ]; then<br /> echo &quot;Bad MySQL/MariaDB administrator password or MySQL/MariaDB is not running. Exiting...&quot;<br /> exit 1<br /> fi<br /> echo &quot;&quot;<br /> echo &quot;Dropping Dspam database if it exists already...&quot;<br /> mysql --defaults-extra-file=$credfile -e &quot;use dspam&quot; &amp;&gt; /dev/null<br /> [ &quot;$?&quot; = &quot;0&quot; ] &amp;&amp; mysqldump --defaults-extra-file=$credfile dspam &gt; dspam.sql \<br /> &amp;&amp; mysql --defaults-extra-file=$credfile -e &quot;drop database dspam&quot; \<br /> &amp;&amp; echo &quot;dspam db saved to dspam.sql and dropped...&quot;<br /> <br /> # Create dspam with correct permissions<br /> echo &quot;Creating Dspam database...&quot;<br /> mysqladmin --defaults-extra-file=$credfile reload<br /> mysqladmin --defaults-extra-file=$credfile refresh<br /> mysqladmin --defaults-extra-file=$credfile create dspam<br /> mysqladmin --defaults-extra-file=$credfile reload<br /> mysqladmin --defaults-extra-file=$credfile refresh<br /> echo &quot;Adding dspam users and privileges...&quot;<br /> mysql --defaults-extra-file=$credfile -e &quot;CREATE USER dspam@localhost IDENTIFIED BY 'p4ssw3rd'&quot;<br /> mysql --defaults-extra-file=$credfile -e &quot;GRANT ALL PRIVILEGES ON dspam.* TO dspam@localhost&quot;<br /> mysqladmin --defaults-extra-file=$credfile reload<br /> mysqladmin --defaults-extra-file=$credfile refresh<br /> echo &quot;Done with dspam database...&quot;<br /> mysql --defaults-extra-file=$credfile dspam &lt; dspamdb.sql<br /> mysqladmin --defaults-extra-file=$credfile reload<br /> mysqladmin --defaults-extra-file=$credfile refresh<br /> # End DSpam DB install<br /> <br /> <br /> # Rspam Installation:<br /> wget https://rspamd.com/rpm-stable/centos-$rel/rspamd.repo -O /etc/yum.repos.d/rspamd.repo<br /> <br /> dnf $FEDORAREPO --enablerepo=qmt-devel install dspam dspam-libs dspam-client dspam-mysql dspam-web rspamd<br /> systemctl enable --now dspam<br /> systemctl status dspam<br /> systemctl enable --now rspamd<br /> systemctl status rspamd<br /> <br /> # Update Simscan<br /> dnf --enablerepo=qmt-devel update simscan<br /> <br /> # Up qmail limits<br /> sed -i 's/softlimit -m.*\\/softlimit -m 256000000 \\/' /var/qmail/supervise/smtp/run<br /> qmailctl stop<br /> qmailctl start<br /> <br /> <br /> # SA user prefs<br /> <br /> # Create SA DB and load table into MySQL<br /> cat &gt;&gt; ./sadb.sql &lt;&lt; EOF<br /> CREATE TABLE userpref (<br /> username varchar(100) NOT NULL default '',<br /> preference varchar(50) NOT NULL default '',<br /> value varchar(255) NOT NULL default '',<br /> prefid int(11) NOT NULL auto_increment,<br /> ts timestamp NOT NULL DEFAULT current_timestamp() ON UPDATE current_timestamp(),<br /> PRIMARY KEY (prefid),<br /> KEY username (username)<br /> ) ENGINE=InnoDB;<br /> EOF<br /> mysqladmin --defaults-extra-file=$credfile create spamassassin<br /> mysql --defaults-extra-file=$credfile -e &quot;CREATE USER spamassassin@localhost IDENTIFIED BY 'p4ssw3rd'&quot;<br /> mysql --defaults-extra-file=$credfile -e &quot;GRANT ALL PRIVILEGES ON spamassassin.* TO spamassassin@localhost&quot;<br /> mysqladmin --defaults-extra-file=$credfile reload<br /> mysqladmin --defaults-extra-file=$credfile refresh<br /> mysql --defaults-extra-file=$credfile spamassassin &lt; sadb.sql<br /> <br /> # Read SA SQL DB<br /> cat &gt;&gt; /etc/mail/spamassassin/sql.cf &lt;&lt; EOF<br /> user_scores_dsn DBI:mysql:spamassassin:localhost:3306<br /> user_scores_sql_password p4ssw3rd<br /> user_scores_sql_username spamassassin<br /> user_scores_sql_custom_query SELECT preference, value FROM _TABLE_ WHERE username = _USERNAME_ OR username = '$GLOBAL' OR username = <br /> CONCAT('%',_DOMAIN_) ORDER BY username ASC<br /> EOF<br /> echo &quot;include sql.cf&quot; &gt;&gt; /etc/mail/spamassassin/local.cf<br /> <br /> # Add Per User Settings in SA SQL DB (Yours may differ)<br /> echo &quot;INSERT INTO userpref (username,preference,value) VALUES ('\$GLOBAL','required_hits','5.0');&quot; | mysql -u root -p spamassassin<br /> echo &quot;INSERT INTO userpref (username,preference,value) VALUES ('user@dom.com','required_hits','7.0');&quot; | mysql -u root -p spamassassin<br /> echo &quot;INSERT INTO userpref (username,preference,value) VALUES ('globalspam','required_hits','5.0');&quot; | mysql -u root -p spamassassin<br /> echo &quot;select * from userpref&quot; | mysql -u root -p spamassassin<br /> <br /> # Tell SA Daemon To Use SQL DB<br /> sed -i 's/SPAMDOPTIONS=&quot;.*&quot;/SPAMDOPTIONS=&quot;--create-prefs -m10 -q -x -u clamscan&quot;/' /etc/sysconfig/spamassassin<br /> <br /> # Bayesian Filtering<br /> mkdir /etc/mail/spamassassin/.spamassassin<br /> chown -R clamscan:clamscan /etc/mail/spamassassin/.spamassassin<br /> cat &gt;&gt; /etc/mail/spamassassin/bayes.cf &lt;&lt; EOF<br /> use_bayes 1<br /> use_bayes_rules 1<br /> bayes_auto_learn 1<br /> bayes_path /etc/mail/spamassassin/.spamassassin/bayes<br /> bayes_auto_learn_threshold_spam 6.0<br /> bayes_file_mode 0775<br /> EOF<br /> echo &quot;include bayes.cf&quot; &gt;&gt; /etc/mail/spamassassin/local.cf<br /> systemctl restart spamassassin<br /> <br /> <br /> # Tell simscan, append to simcontrol, reload cdb<br /> dspam=yes,rspam=yes,regex<br /> optional: dspamuser=globalspam (Otherwise the first envelope 'rcpt to' address is used)<br /> optional: spamuser=globalspam (Add to userprefs table)<br /> optional: remove spam_hits=* (Otherwise userprefs will not be used)<br /> qmailctl cdb<br /> <br /> # This is my configuration:<br /> :clam=yes,spam=yes,rspam=yes,dspam=yes,spam_passthru=yes,attach=.exe:.pif:.scr</div> Ebroch http://wiki.qmailtoaster.org:80/index.php?title=Simscan&diff=1613 Simscan 2025-08-21T20:28:23Z <p>Ebroch: </p> <hr /> <div>[[Configuration#Simscan|Back]]&lt;br&gt;<br /> == Scanning ==<br /> <br /> In /etc/tcprules.d/tcp.smtp set environment variable QMAILQUEUE to simscan binary <br /> ...,QMAILQUEUE=&quot;/var/qmail/bin/simscan&quot;,...<br /> Rebuild tcp.smtp<br /> # qmailctl cdb<br /> <br /> == Control ==<br /> <br /> Simscan's control file is /var/qmail/control/simcontrol<br /> It's format looks like thus:&lt;br&gt;<br /> :clam=yes,spam=yes,spam_hits=9.5,spam_passthru=yes,attach=.vbs:.lnk:.scr:.wsh:.hta:.pif<br /> This tells simscan for all domains to scan with ClamAV, Spamassassin, filter attachments, queueing all mail after filtering&lt;br&gt;<br /> Consider the following format:&lt;br&gt;<br /> domain.tld:dspam=yes,rspam=yes,clam=yes,spam=yes,spam_passthru=yes,...<br /> This tells simscan for domain.tld to scan with Dspam, Rspam, ClamAV, Spamassassin,...&lt;br&gt;<br /> Upon edit of simcontrol the file must be put into proper format for use, run<br /> # qmailctl cdb&lt;br&gt;<br /> Note: simscan automatically runs dspam client (/usr/bin/dspamc). So the dspam server must be running. <br /> In order to run dspam (/usr/bin/dspam) instead set the environment variable DSPAM_BIN in either <br /> /etc/tcprules.d/tcp.smtp or in the smtp run script.<br /> <br /> == Ramdisk ==<br /> <br /> Use htop or other program to determine available memory for ramdisk (size=)<br /> # clamgid=$(test -z &quot;$(cat /etc/passwd | grep ^clamav)&quot; &amp;&amp; id -g clamscan 2&gt;/dev/null || id -g clamav 2&gt;/dev/null) &amp;&amp; echo $clamgid<br /> # qmailctl stop<br /> # mount -t tmpfs -o size=1024m,nodev,noexec,noatime,uid=$clamgid,gid=0,mode=0750 myramdisk /var/qmail/simscan<br /> # ls -ld /var/qmail/simscan<br /> drwxr-x--- 2 clamscan root 6 Aug 17 13:28 /var/qmail/simscan<br /> # qmailctl start<br /> # df -h /var/qmail/simscan<br /> Filesystem Size Used Avail Use% Mounted on<br /> myramdisk 1.0G 0 1.0G 0% /var/qmail/simscan<br /> # cp /etc/fstab /etc/fstab.bak<br /> # echo &quot;myramdisk /var/qmail/simscan tmpfs size=1024m,nodev,noexec,noatime,uid=$clamgid,gid=0,mode=0750 0 0&quot; &gt;&gt; /etc/fstab<br /> Make sure /etc/fstab file is okay before a reboot<br /> # cat /etc/fstab<br /> <br /> == Filtering ==<br /> <br /> Install Dspam, Rspam, SA userprefs&lt;br&gt;<br /> # Fedora EL8&lt;br&gt;<br /> cat &gt;&gt; /etc/yum.repos.d/fedoramirrors &lt;&lt; EOF<br /> https://d2lzkl7pfhq30w.cloudfront.net/pub/archive/fedora/linux/releases/28/Everything/x86_64/os/<br /> http://mirror.math.princeton.edu/pub/fedora-archive/fedora/linux/releases/28/Everything/x86_64/os/<br /> http://pubmirror1.math.uh.edu/fedora-buffet/archive/fedora/linux/releases/28/Everything/x86_64/os/<br /> https://pubmirror2.math.uh.edu/fedora-buffet/archive/fedora/linux/releases/28/Everything/x86_64/os/<br /> http://mirrors.kernel.org/fedora-buffet/archive/fedora/linux/releases/28/Everything/x86_64/os/<br /> https://dl.fedoraproject.org/pub/archive/fedora/linux/releases/28/Everything/x86_64/os/<br /> EOF&lt;br&gt;<br /> cat &gt;&gt; /etc/yum.repos.d/fedora28.repo &lt;&lt; EOF<br /> [fedora]<br /> name=Fedora 28<br /> mirrorlist=file:///etc/yum.repos.d/fedoramirrors<br /> enabled=0<br /> gpgcheck=0<br /> priority=100<br /> EOF&lt;br&gt;<br /> # Fedora EL9&lt;br&gt;<br /> cat &gt;&gt; /etc/yum.repos.d/fedoramirrors &lt;&lt; EOF<br /> https://d2lzkl7pfhq30w.cloudfront.net/pub/archive/fedora/linux/releases/34/Everything/x86_64/os/<br /> http://mirror.math.princeton.edu/pub/fedora-archive/fedora/linux/releases/34/Everything/x86_64/os/<br /> http://pubmirror1.math.uh.edu/fedora-buffet/archive/fedora/linux/releases/34/Everything/x86_64/os/<br /> https://pubmirror2.math.uh.edu/fedora-buffet/archive/fedora/linux/releases/34/Everything/x86_64/os/<br /> http://mirrors.kernel.org/fedora-buffet/archive/fedora/linux/releases/34/Everything/x86_64/os/<br /> https://dl.fedoraproject.org/pub/archive/fedora/linux/releases/34/Everything/x86_64/os/<br /> EOF&lt;br&gt;<br /> cat &gt;&gt; /etc/yum.repos.d/fedora34.repo &lt;&lt; EOF<br /> [fedora]<br /> name=Fedora 34<br /> mirrorlist=file:///etc/yum.repos.d/fedoramirrors<br /> enabled=0<br /> gpgcheck=0<br /> priority=100<br /> EOF&lt;br&gt;<br /> <br /> <br /> # Begin DSpam DB Install, Skip if already installed<br /> wget https://raw.githubusercontent.com/qmtoaster/dspam/master/dspamdb.sql<br /> if [ &quot;$?&quot; != &quot;0&quot; ]; then<br /> echo &quot;Error downloading dspam db: ($?), exiting...&quot;<br /> exit 1<br /> fi<br /> MYSQLPW=<br /> # Get DB password for administrator and check validity.<br /> if [ -z &quot;$MYSQLPW&quot; ]; then<br /> read -s -p &quot;Enter MySQL/MariaDB admin password to create dspam database: &quot; MYSQLPW<br /> fi<br /> credfile=~/sql.cnf<br /> echo -e &quot;[client]\nuser=root\npassword='$MYSQLPW'\nhost=localhost&quot; &gt; $credfile<br /> mysqladmin --defaults-extra-file=$credfile status &gt; /dev/null 2&gt;&amp;1<br /> if [ &quot;$?&quot; != &quot;0&quot; ]; then<br /> echo &quot;Bad MySQL/MariaDB administrator password or MySQL/MariaDB is not running. Exiting...&quot;<br /> exit 1<br /> fi<br /> echo &quot;&quot;<br /> echo &quot;Dropping Dspam database if it exists already...&quot;<br /> mysql --defaults-extra-file=$credfile -e &quot;use dspam&quot; &amp;&gt; /dev/null<br /> [ &quot;$?&quot; = &quot;0&quot; ] &amp;&amp; mysqldump --defaults-extra-file=$credfile dspam &gt; dspam.sql \<br /> &amp;&amp; mysql --defaults-extra-file=$credfile -e &quot;drop database dspam&quot; \<br /> &amp;&amp; echo &quot;dspam db saved to dspam.sql and dropped...&quot;<br /> <br /> # Create dspam with correct permissions<br /> echo &quot;Creating Dspam database...&quot;<br /> mysqladmin --defaults-extra-file=$credfile reload<br /> mysqladmin --defaults-extra-file=$credfile refresh<br /> mysqladmin --defaults-extra-file=$credfile create dspam<br /> mysqladmin --defaults-extra-file=$credfile reload<br /> mysqladmin --defaults-extra-file=$credfile refresh<br /> echo &quot;Adding dspam users and privileges...&quot;<br /> mysql --defaults-extra-file=$credfile -e &quot;CREATE USER dspam@localhost IDENTIFIED BY 'p4ssw3rd'&quot;<br /> mysql --defaults-extra-file=$credfile -e &quot;GRANT ALL PRIVILEGES ON dspam.* TO dspam@localhost&quot;<br /> mysqladmin --defaults-extra-file=$credfile reload<br /> mysqladmin --defaults-extra-file=$credfile refresh<br /> echo &quot;Done with dspam database...&quot;<br /> mysql --defaults-extra-file=$credfile dspam &lt; dspamdb.sql<br /> mysqladmin --defaults-extra-file=$credfile reload<br /> mysqladmin --defaults-extra-file=$credfile refresh<br /> # End DSpam DB install<br /> <br /> <br /> # Rspam Installation:<br /> wget https://rspamd.com/rpm-stable/centos-$rel/rspamd.repo -O /etc/yum.repos.d/rspamd.repo<br /> <br /> dnf $FEDORAREPO --enablerepo=qmt-devel install dspam dspam-libs dspam-client dspam-mysql dspam-web rspamd<br /> systemctl enable --now dspam<br /> systemctl status dspam<br /> systemctl enable --now rspamd<br /> systemctl status rspamd<br /> <br /> # Update Simscan<br /> dnf --enablerepo=qmt-devel update simscan<br /> <br /> # Up qmail limits<br /> sed -i 's/softlimit -m.*\\/softlimit -m 256000000 \\/' /var/qmail/supervise/smtp/run<br /> qmailctl stop<br /> qmailctl start<br /> <br /> <br /> # SA user prefs<br /> <br /> # Create SA DB and load table into MySQL<br /> cat &gt;&gt; ./sadb.sql &lt;&lt; EOF<br /> CREATE TABLE userpref (<br /> username varchar(100) NOT NULL default '',<br /> preference varchar(50) NOT NULL default '',<br /> value varchar(255) NOT NULL default '',<br /> prefid int(11) NOT NULL auto_increment,<br /> ts timestamp NOT NULL DEFAULT current_timestamp() ON UPDATE current_timestamp(),<br /> PRIMARY KEY (prefid),<br /> KEY username (username)<br /> ) ENGINE=InnoDB;<br /> EOF<br /> mysqladmin --defaults-extra-file=$credfile create spamassassin<br /> mysql --defaults-extra-file=$credfile -e &quot;CREATE USER spamassassin@localhost IDENTIFIED BY 'p4ssw3rd'&quot;<br /> mysql --defaults-extra-file=$credfile -e &quot;GRANT ALL PRIVILEGES ON spamassassin.* TO spamassassin@localhost&quot;<br /> mysqladmin --defaults-extra-file=$credfile reload<br /> mysqladmin --defaults-extra-file=$credfile refresh<br /> mysql --defaults-extra-file=$credfile spamassassin &lt; sadb.sql<br /> <br /> # Read SA SQL DB<br /> cat &gt;&gt; /etc/mail/spamassassin/sql.cf &lt;&lt; EOF<br /> user_scores_dsn DBI:mysql:spamassassin:localhost:3306<br /> user_scores_sql_password p4ssw3rd<br /> user_scores_sql_username spamassassin<br /> user_scores_sql_custom_query SELECT preference, value FROM _TABLE_ WHERE username = _USERNAME_ OR username = '$GLOBAL' OR username = <br /> CONCAT('%',_DOMAIN_) ORDER BY username ASC<br /> EOF<br /> echo &quot;include sql.cf&quot; &gt;&gt; /etc/mail/spamassassin/local.cf<br /> <br /> # Add Per User Settings in SA SQL DB (Yours may differ)<br /> echo &quot;INSERT INTO userpref (username,preference,value) VALUES ('\$GLOBAL','required_hits','5.0');&quot; | mysql -u root -p spamassassin<br /> echo &quot;INSERT INTO userpref (username,preference,value) VALUES ('user@dom.com','required_hits','7.0');&quot; | mysql -u root -p spamassassin<br /> echo &quot;INSERT INTO userpref (username,preference,value) VALUES ('globalspam','required_hits','5.0');&quot; | mysql -u root -p spamassassin<br /> echo &quot;select * from userpref&quot; | mysql -u root -p spamassassin<br /> <br /> # Tell SA Daemon To Use SQL DB<br /> sed -i 's/SPAMDOPTIONS=&quot;.*&quot;/SPAMDOPTIONS=&quot;--create-prefs -m10 -q -x -u clamscan&quot;/' /etc/sysconfig/spamassassin<br /> <br /> # Bayesian Filtering<br /> mkdir /etc/mail/spamassassin/.spamassassin<br /> chown -R clamscan:clamscan /etc/mail/spamassassin/.spamassassin<br /> cat &gt;&gt; /etc/mail/spamassassin/bayes.cf &lt;&lt; EOF<br /> use_bayes 1<br /> use_bayes_rules 1<br /> bayes_auto_learn 1<br /> bayes_path /etc/mail/spamassassin/.spamassassin/bayes<br /> bayes_auto_learn_threshold_spam 6.0<br /> bayes_file_mode 0775<br /> EOF<br /> echo &quot;include bayes.cf&quot; &gt;&gt; /etc/mail/spamassassin/local.cf<br /> systemctl restart spamassassin<br /> <br /> <br /> # Tell simscan, append to simcontrol, reload cdb<br /> dspam=yes,rspam=yes,regex<br /> optional: dspamuser=globalspam (Otherwise the first envelope 'rcpt to' address is used)<br /> optional: spamuser=globalspam (Add to userprefs table)<br /> optional: remove spam_hits=* (Otherwise userprefs will not be used)<br /> qmailctl cdb<br /> <br /> # This is my configuration:<br /> :clam=yes,spam=yes,rspam=yes,dspam=yes,spam_passthru=yes,attach=.exe:.pif:.scr</div> Ebroch http://wiki.qmailtoaster.org:80/index.php?title=Simscan&diff=1612 Simscan 2025-08-21T20:23:32Z <p>Ebroch: </p> <hr /> <div>[[Configuration#Simscan|Back]]&lt;br&gt;<br /> == Scanning ==<br /> <br /> In /etc/tcprules.d/tcp.smtp set environment variable QMAILQUEUE to simscan binary <br /> ...,QMAILQUEUE=&quot;/var/qmail/bin/simscan&quot;,...<br /> Rebuild tcp.smtp<br /> # qmailctl cdb<br /> <br /> == Control ==<br /> <br /> Simscan's control file is /var/qmail/control/simcontrol<br /> It's format looks like thus:&lt;br&gt;<br /> :clam=yes,spam=yes,spam_hits=9.5,spam_passthru=yes,attach=.vbs:.lnk:.scr:.wsh:.hta:.pif<br /> This tells simscan for all domains to scan with ClamAV, Spamassassin, filter attachments, queueing all mail after filtering&lt;br&gt;<br /> Consider the following format:&lt;br&gt;<br /> domain.tld:dspam=yes,rspam=yes,clam=yes,spam=yes,spam_passthru=yes,...<br /> This tells simscan for domain.tld to scan with Dspam, Rspam, ClamAV, Spamassassin,...&lt;br&gt;<br /> Upon edit of simcontrol the file must be put into proper format for use, run<br /> # qmailctl cdb&lt;br&gt;<br /> Note: simscan automatically runs dspam client (/usr/bin/dspamc). So the dspam server must be running. <br /> In order to run dspam (/usr/bin/dspam) instead set the environment variable DSPAM_BIN in either <br /> /etc/tcprules.d/tcp.smtp or in the smtp run script.<br /> <br /> == Ramdisk ==<br /> <br /> Use htop or other program to determine available memory for ramdisk (size=)<br /> # clamgid=$(test -z &quot;$(cat /etc/passwd | grep ^clamav)&quot; &amp;&amp; id -g clamscan 2&gt;/dev/null || id -g clamav 2&gt;/dev/null) &amp;&amp; echo $clamgid<br /> # qmailctl stop<br /> # mount -t tmpfs -o size=1024m,nodev,noexec,noatime,uid=$clamgid,gid=0,mode=0750 myramdisk /var/qmail/simscan<br /> # ls -ld /var/qmail/simscan<br /> drwxr-x--- 2 clamscan root 6 Aug 17 13:28 /var/qmail/simscan<br /> # qmailctl start<br /> # df -h /var/qmail/simscan<br /> Filesystem Size Used Avail Use% Mounted on<br /> myramdisk 1.0G 0 1.0G 0% /var/qmail/simscan<br /> # cp /etc/fstab /etc/fstab.bak<br /> # echo &quot;myramdisk /var/qmail/simscan tmpfs size=1024m,nodev,noexec,noatime,uid=$clamgid,gid=0,mode=0750 0 0&quot; &gt;&gt; /etc/fstab<br /> Make sure /etc/fstab file is okay before a reboot<br /> # cat /etc/fstab<br /> <br /> == Filtering ==<br /> <br /> Install Dspam, Rspam, SA userprefs<br /> <br /> # Begin Fedora Install CentOS 8 ***** ONLY *****<br /> cat &gt;&gt; ./ttt &lt;&lt; EOF<br /> https://d2lzkl7pfhq30w.cloudfront.net/pub/archive/fedora/linux/releases/28/Everything/x86_64/os/<br /> http://mirror.math.princeton.edu/pub/fedora-archive/fedora/linux/releases/28/Everything/x86_64/os/<br /> http://pubmirror1.math.uh.edu/fedora-buffet/archive/fedora/linux/releases/28/Everything/x86_64/os/<br /> https://pubmirror2.math.uh.edu/fedora-buffet/archive/fedora/linux/releases/28/Everything/x86_64/os/<br /> http://mirrors.kernel.org/fedora-buffet/archive/fedora/linux/releases/28/Everything/x86_64/os/<br /> https://dl.fedoraproject.org/pub/archive/fedora/linux/releases/28/Everything/x86_64/os/<br /> EOF<br /> <br /> cat &gt;&gt; ./ttt1 &lt;&lt; EOF<br /> [fedora]<br /> name=Fedora 28<br /> mirrorlist=file:///etc/yum.repos.d/fedoramirrors<br /> enabled=0<br /> gpgcheck=0<br /> priority=100<br /> EOF<br /> <br /> # End Fedora Install CentOS 8 ***** ONLY *****<br /> <br /> # Begin DSpam DB Install, Skip if already installed<br /> wget https://raw.githubusercontent.com/qmtoaster/dspam/master/dspamdb.sql<br /> if [ &quot;$?&quot; != &quot;0&quot; ]; then<br /> echo &quot;Error downloading dspam db: ($?), exiting...&quot;<br /> exit 1<br /> fi<br /> MYSQLPW=<br /> # Get DB password for administrator and check validity.<br /> if [ -z &quot;$MYSQLPW&quot; ]; then<br /> read -s -p &quot;Enter MySQL/MariaDB admin password to create dspam database: &quot; MYSQLPW<br /> fi<br /> credfile=~/sql.cnf<br /> echo -e &quot;[client]\nuser=root\npassword='$MYSQLPW'\nhost=localhost&quot; &gt; $credfile<br /> mysqladmin --defaults-extra-file=$credfile status &gt; /dev/null 2&gt;&amp;1<br /> if [ &quot;$?&quot; != &quot;0&quot; ]; then<br /> echo &quot;Bad MySQL/MariaDB administrator password or MySQL/MariaDB is not running. Exiting...&quot;<br /> exit 1<br /> fi<br /> echo &quot;&quot;<br /> echo &quot;Dropping Dspam database if it exists already...&quot;<br /> mysql --defaults-extra-file=$credfile -e &quot;use dspam&quot; &amp;&gt; /dev/null<br /> [ &quot;$?&quot; = &quot;0&quot; ] &amp;&amp; mysqldump --defaults-extra-file=$credfile dspam &gt; dspam.sql \<br /> &amp;&amp; mysql --defaults-extra-file=$credfile -e &quot;drop database dspam&quot; \<br /> &amp;&amp; echo &quot;dspam db saved to dspam.sql and dropped...&quot;<br /> <br /> # Create dspam with correct permissions<br /> echo &quot;Creating Dspam database...&quot;<br /> mysqladmin --defaults-extra-file=$credfile reload<br /> mysqladmin --defaults-extra-file=$credfile refresh<br /> mysqladmin --defaults-extra-file=$credfile create dspam<br /> mysqladmin --defaults-extra-file=$credfile reload<br /> mysqladmin --defaults-extra-file=$credfile refresh<br /> echo &quot;Adding dspam users and privileges...&quot;<br /> mysql --defaults-extra-file=$credfile -e &quot;CREATE USER dspam@localhost IDENTIFIED BY 'p4ssw3rd'&quot;<br /> mysql --defaults-extra-file=$credfile -e &quot;GRANT ALL PRIVILEGES ON dspam.* TO dspam@localhost&quot;<br /> mysqladmin --defaults-extra-file=$credfile reload<br /> mysqladmin --defaults-extra-file=$credfile refresh<br /> echo &quot;Done with dspam database...&quot;<br /> mysql --defaults-extra-file=$credfile dspam &lt; dspamdb.sql<br /> mysqladmin --defaults-extra-file=$credfile reload<br /> mysqladmin --defaults-extra-file=$credfile refresh<br /> # End DSpam DB install<br /> <br /> <br /> # Rspam Installation:<br /> wget https://rspamd.com/rpm-stable/centos-$rel/rspamd.repo -O /etc/yum.repos.d/rspamd.repo<br /> <br /> dnf $FEDORAREPO --enablerepo=qmt-devel install dspam dspam-libs dspam-client dspam-mysql dspam-web rspamd<br /> systemctl enable --now dspam<br /> systemctl status dspam<br /> systemctl enable --now rspamd<br /> systemctl status rspamd<br /> <br /> # Update Simscan<br /> dnf --enablerepo=qmt-devel update simscan<br /> <br /> # Up qmail limits<br /> sed -i 's/softlimit -m.*\\/softlimit -m 256000000 \\/' /var/qmail/supervise/smtp/run<br /> qmailctl stop<br /> qmailctl start<br /> <br /> <br /> # SA user prefs<br /> <br /> # Create SA DB and load table into MySQL<br /> cat &gt;&gt; ./sadb.sql &lt;&lt; EOF<br /> CREATE TABLE userpref (<br /> username varchar(100) NOT NULL default '',<br /> preference varchar(50) NOT NULL default '',<br /> value varchar(255) NOT NULL default '',<br /> prefid int(11) NOT NULL auto_increment,<br /> ts timestamp NOT NULL DEFAULT current_timestamp() ON UPDATE current_timestamp(),<br /> PRIMARY KEY (prefid),<br /> KEY username (username)<br /> ) ENGINE=InnoDB;<br /> EOF<br /> mysqladmin --defaults-extra-file=$credfile create spamassassin<br /> mysql --defaults-extra-file=$credfile -e &quot;CREATE USER spamassassin@localhost IDENTIFIED BY 'p4ssw3rd'&quot;<br /> mysql --defaults-extra-file=$credfile -e &quot;GRANT ALL PRIVILEGES ON spamassassin.* TO spamassassin@localhost&quot;<br /> mysqladmin --defaults-extra-file=$credfile reload<br /> mysqladmin --defaults-extra-file=$credfile refresh<br /> mysql --defaults-extra-file=$credfile spamassassin &lt; sadb.sql<br /> <br /> # Read SA SQL DB<br /> cat &gt;&gt; /etc/mail/spamassassin/sql.cf &lt;&lt; EOF<br /> user_scores_dsn DBI:mysql:spamassassin:localhost:3306<br /> user_scores_sql_password p4ssw3rd<br /> user_scores_sql_username spamassassin<br /> user_scores_sql_custom_query SELECT preference, value FROM _TABLE_ WHERE username = _USERNAME_ OR username = '$GLOBAL' OR username = <br /> CONCAT('%',_DOMAIN_) ORDER BY username ASC<br /> EOF<br /> echo &quot;include sql.cf&quot; &gt;&gt; /etc/mail/spamassassin/local.cf<br /> <br /> # Add Per User Settings in SA SQL DB (Yours may differ)<br /> echo &quot;INSERT INTO userpref (username,preference,value) VALUES ('\$GLOBAL','required_hits','5.0');&quot; | mysql -u root -p spamassassin<br /> echo &quot;INSERT INTO userpref (username,preference,value) VALUES ('user@dom.com','required_hits','7.0');&quot; | mysql -u root -p spamassassin<br /> echo &quot;INSERT INTO userpref (username,preference,value) VALUES ('globalspam','required_hits','5.0');&quot; | mysql -u root -p spamassassin<br /> echo &quot;select * from userpref&quot; | mysql -u root -p spamassassin<br /> <br /> # Tell SA Daemon To Use SQL DB<br /> sed -i 's/SPAMDOPTIONS=&quot;.*&quot;/SPAMDOPTIONS=&quot;--create-prefs -m10 -q -x -u clamscan&quot;/' /etc/sysconfig/spamassassin<br /> <br /> # Bayesian Filtering<br /> mkdir /etc/mail/spamassassin/.spamassassin<br /> chown -R clamscan:clamscan /etc/mail/spamassassin/.spamassassin<br /> cat &gt;&gt; /etc/mail/spamassassin/bayes.cf &lt;&lt; EOF<br /> use_bayes 1<br /> use_bayes_rules 1<br /> bayes_auto_learn 1<br /> bayes_path /etc/mail/spamassassin/.spamassassin/bayes<br /> bayes_auto_learn_threshold_spam 6.0<br /> bayes_file_mode 0775<br /> EOF<br /> echo &quot;include bayes.cf&quot; &gt;&gt; /etc/mail/spamassassin/local.cf<br /> systemctl restart spamassassin<br /> <br /> <br /> # Tell simscan, append to simcontrol, reload cdb<br /> dspam=yes,rspam=yes,regex<br /> optional: dspamuser=globalspam (Otherwise the first envelope 'rcpt to' address is used)<br /> optional: spamuser=globalspam (Add to userprefs table)<br /> optional: remove spam_hits=* (Otherwise userprefs will not be used)<br /> qmailctl cdb<br /> <br /> # This is my configuration:<br /> :clam=yes,spam=yes,rspam=yes,dspam=yes,spam_passthru=yes,attach=.exe:.pif:.scr</div> Ebroch http://wiki.qmailtoaster.org:80/index.php?title=Simscan&diff=1611 Simscan 2025-08-21T20:08:05Z <p>Ebroch: </p> <hr /> <div>[[Configuration#Simscan|Back]]&lt;br&gt;<br /> == Scanning ==<br /> <br /> In /etc/tcprules.d/tcp.smtp set environment variable QMAILQUEUE to simscan binary <br /> ...,QMAILQUEUE=&quot;/var/qmail/bin/simscan&quot;,...<br /> Rebuild tcp.smtp<br /> # qmailctl cdb<br /> <br /> == Control ==<br /> <br /> Simscan's control file is /var/qmail/control/simcontrol<br /> It's format looks like thus:&lt;br&gt;<br /> :clam=yes,spam=yes,spam_hits=9.5,spam_passthru=yes,attach=.vbs:.lnk:.scr:.wsh:.hta:.pif<br /> This tells simscan for all domains to scan with ClamAV, Spamassassin, filter attachments, queueing all mail after filtering&lt;br&gt;<br /> Consider the following format:&lt;br&gt;<br /> domain.tld:dspam=yes,rspam=yes,clam=yes,spam=yes,spam_passthru=yes,...<br /> This tells simscan for domain.tld to scan with Dspam, Rspam, ClamAV, Spamassassin,...&lt;br&gt;<br /> Upon edit of simcontrol the file must be put into proper format for use, run<br /> # qmailctl cdb&lt;br&gt;<br /> Note: simscan automatically runs dspam client (/usr/bin/dspamc). So the dspam server must be running. <br /> In order to run dspam (/usr/bin/dspam) instead set the environment variable DSPAM_BIN in either <br /> /etc/tcprules.d/tcp.smtp or in the smtp run script.<br /> <br /> == Ramdisk ==<br /> <br /> Use htop or other program to determine available memory for ramdisk (size=)<br /> # clamgid=$(test -z &quot;$(cat /etc/passwd | grep ^clamav)&quot; &amp;&amp; id -g clamscan 2&gt;/dev/null || id -g clamav 2&gt;/dev/null) &amp;&amp; echo $clamgid<br /> # qmailctl stop<br /> # mount -t tmpfs -o size=1024m,nodev,noexec,noatime,uid=$clamgid,gid=0,mode=0750 myramdisk /var/qmail/simscan<br /> # ls -ld /var/qmail/simscan<br /> drwxr-x--- 2 clamscan root 6 Aug 17 13:28 /var/qmail/simscan<br /> # qmailctl start<br /> # df -h /var/qmail/simscan<br /> Filesystem Size Used Avail Use% Mounted on<br /> myramdisk 1.0G 0 1.0G 0% /var/qmail/simscan<br /> # cp /etc/fstab /etc/fstab.bak<br /> # echo &quot;myramdisk /var/qmail/simscan tmpfs size=1024m,nodev,noexec,noatime,uid=$clamgid,gid=0,mode=0750 0 0&quot; &gt;&gt; /etc/fstab<br /> Make sure /etc/fstab file is okay before a reboot<br /> # cat /etc/fstab<br /> <br /> == Filtering ==<br /> <br /> FEDORAREPO=<br /> Install Dspam, Rspam, SA userprefs<br /> <br /> # Begin Fedora Install CentOS 8 ***** ONLY *****<br /> rel=`grep &quot;release 8&quot; /etc/*-release`<br /> if [[ ! -z $rel ]]<br /> then<br /> rel=8<br /> FEDORAREPO=--enablerepo=fedora<br /> sites=( https://d2lzkl7pfhq30w.cloudfront.net/pub/archive/fedora/linux/releases/28/Everything/x86_64/os/ <br /> http://mirror.math.princeton.edu/pub/fedora-archive/fedora/linux/releases/28/Everything/x86_64/os/ <br /> http://pubmirror1.math.uh.edu/fedora-buffet/archive/fedora/linux/releases/28/Everything/x86_64/os/ <br /> https://pubmirror2.math.uh.edu/fedora-buffet/archive/fedora/linux/releases/28/Everything/x86_64/os/ <br /> http://mirrors.kernel.org/fedora-buffet/archive/fedora/linux/releases/28/Everything/x86_64/os/ <br /> https://dl.fedoraproject.org/pub/archive/fedora/linux/releases/28/Everything/x86_64/os/ )<br /> printf '%s\n%s\n%s\n%s\n%s\n%s\n' '[fedora]' 'name=Fedora 28' 'mirrorlist=file:///etc/yum.repos.d/fedoramirrors' \<br /> 'enabled=0' 'gpgcheck=0' 'priority=100' &gt; /etc/yum.repos.d/fedora28.repo<br /> printf '%s\n%s\n%s\n%s\n%s\n%s\n' &quot;${sites[0]}&quot; &quot;${sites[1]}&quot; &quot;${sites[2]}&quot; &quot;{$sites[3]}&quot; &quot;${sites[4]}&quot; &quot;${sites[5]}&quot; \<br /> &gt; /etc/yum.repos.d/fedoramirrors<br /> else<br /> rel=7<br /> fi<br /> # End Fedora Install CentOS 8 ***** ONLY *****<br /> <br /> # Begin DSpam DB Install, Skip if already installed<br /> wget https://raw.githubusercontent.com/qmtoaster/dspam/master/dspamdb.sql<br /> if [ &quot;$?&quot; != &quot;0&quot; ]; then<br /> echo &quot;Error downloading dspam db: ($?), exiting...&quot;<br /> exit 1<br /> fi<br /> MYSQLPW=<br /> # Get DB password for administrator and check validity.<br /> if [ -z &quot;$MYSQLPW&quot; ]; then<br /> read -s -p &quot;Enter MySQL/MariaDB admin password to create dspam database: &quot; MYSQLPW<br /> fi<br /> credfile=~/sql.cnf<br /> echo -e &quot;[client]\nuser=root\npassword='$MYSQLPW'\nhost=localhost&quot; &gt; $credfile<br /> mysqladmin --defaults-extra-file=$credfile status &gt; /dev/null 2&gt;&amp;1<br /> if [ &quot;$?&quot; != &quot;0&quot; ]; then<br /> echo &quot;Bad MySQL/MariaDB administrator password or MySQL/MariaDB is not running. Exiting...&quot;<br /> exit 1<br /> fi<br /> echo &quot;&quot;<br /> echo &quot;Dropping Dspam database if it exists already...&quot;<br /> mysql --defaults-extra-file=$credfile -e &quot;use dspam&quot; &amp;&gt; /dev/null<br /> [ &quot;$?&quot; = &quot;0&quot; ] &amp;&amp; mysqldump --defaults-extra-file=$credfile dspam &gt; dspam.sql \<br /> &amp;&amp; mysql --defaults-extra-file=$credfile -e &quot;drop database dspam&quot; \<br /> &amp;&amp; echo &quot;dspam db saved to dspam.sql and dropped...&quot;<br /> <br /> # Create dspam with correct permissions<br /> echo &quot;Creating Dspam database...&quot;<br /> mysqladmin --defaults-extra-file=$credfile reload<br /> mysqladmin --defaults-extra-file=$credfile refresh<br /> mysqladmin --defaults-extra-file=$credfile create dspam<br /> mysqladmin --defaults-extra-file=$credfile reload<br /> mysqladmin --defaults-extra-file=$credfile refresh<br /> echo &quot;Adding dspam users and privileges...&quot;<br /> mysql --defaults-extra-file=$credfile -e &quot;CREATE USER dspam@localhost IDENTIFIED BY 'p4ssw3rd'&quot;<br /> mysql --defaults-extra-file=$credfile -e &quot;GRANT ALL PRIVILEGES ON dspam.* TO dspam@localhost&quot;<br /> mysqladmin --defaults-extra-file=$credfile reload<br /> mysqladmin --defaults-extra-file=$credfile refresh<br /> echo &quot;Done with dspam database...&quot;<br /> mysql --defaults-extra-file=$credfile dspam &lt; dspamdb.sql<br /> mysqladmin --defaults-extra-file=$credfile reload<br /> mysqladmin --defaults-extra-file=$credfile refresh<br /> # End DSpam DB install<br /> <br /> <br /> # Rspam Installation:<br /> wget https://rspamd.com/rpm-stable/centos-$rel/rspamd.repo -O /etc/yum.repos.d/rspamd.repo<br /> <br /> dnf $FEDORAREPO --enablerepo=qmt-devel install dspam dspam-libs dspam-client dspam-mysql dspam-web rspamd<br /> systemctl enable --now dspam<br /> systemctl status dspam<br /> systemctl enable --now rspamd<br /> systemctl status rspamd<br /> <br /> # Update Simscan<br /> dnf --enablerepo=qmt-devel update simscan<br /> <br /> # Up qmail limits<br /> sed -i 's/softlimit -m.*\\/softlimit -m 256000000 \\/' /var/qmail/supervise/smtp/run<br /> qmailctl stop<br /> qmailctl start<br /> <br /> <br /> # SA user prefs<br /> <br /> # Create SA DB and load table into MySQL<br /> cat &gt;&gt; ./sadb.sql &lt;&lt; EOF<br /> CREATE TABLE userpref (<br /> username varchar(100) NOT NULL default '',<br /> preference varchar(50) NOT NULL default '',<br /> value varchar(255) NOT NULL default '',<br /> prefid int(11) NOT NULL auto_increment,<br /> ts timestamp NOT NULL DEFAULT current_timestamp() ON UPDATE current_timestamp(),<br /> PRIMARY KEY (prefid),<br /> KEY username (username)<br /> ) ENGINE=InnoDB;<br /> EOF<br /> mysqladmin --defaults-extra-file=$credfile create spamassassin<br /> mysql --defaults-extra-file=$credfile -e &quot;CREATE USER spamassassin@localhost IDENTIFIED BY 'p4ssw3rd'&quot;<br /> mysql --defaults-extra-file=$credfile -e &quot;GRANT ALL PRIVILEGES ON spamassassin.* TO spamassassin@localhost&quot;<br /> mysqladmin --defaults-extra-file=$credfile reload<br /> mysqladmin --defaults-extra-file=$credfile refresh<br /> mysql --defaults-extra-file=$credfile spamassassin &lt; sadb.sql<br /> <br /> # Read SA SQL DB<br /> cat &gt;&gt; /etc/mail/spamassassin/sql.cf &lt;&lt; EOF<br /> user_scores_dsn DBI:mysql:spamassassin:localhost:3306<br /> user_scores_sql_password p4ssw3rd<br /> user_scores_sql_username spamassassin<br /> user_scores_sql_custom_query SELECT preference, value FROM _TABLE_ WHERE username = _USERNAME_ OR username = '$GLOBAL' OR username = <br /> CONCAT('%',_DOMAIN_) ORDER BY username ASC<br /> EOF<br /> echo &quot;include sql.cf&quot; &gt;&gt; /etc/mail/spamassassin/local.cf<br /> <br /> # Add Per User Settings in SA SQL DB (Yours may differ)<br /> echo &quot;INSERT INTO userpref (username,preference,value) VALUES ('\$GLOBAL','required_hits','5.0');&quot; | mysql -u root -p spamassassin<br /> echo &quot;INSERT INTO userpref (username,preference,value) VALUES ('user@dom.com','required_hits','7.0');&quot; | mysql -u root -p spamassassin<br /> echo &quot;INSERT INTO userpref (username,preference,value) VALUES ('globalspam','required_hits','5.0');&quot; | mysql -u root -p spamassassin<br /> echo &quot;select * from userpref&quot; | mysql -u root -p spamassassin<br /> <br /> # Tell SA Daemon To Use SQL DB<br /> sed -i 's/SPAMDOPTIONS=&quot;.*&quot;/SPAMDOPTIONS=&quot;--create-prefs -m10 -q -x -u clamscan&quot;/' /etc/sysconfig/spamassassin<br /> <br /> # Bayesian Filtering<br /> mkdir /etc/mail/spamassassin/.spamassassin<br /> chown -R clamscan:clamscan /etc/mail/spamassassin/.spamassassin<br /> cat &gt;&gt; /etc/mail/spamassassin/bayes.cf &lt;&lt; EOF<br /> use_bayes 1<br /> use_bayes_rules 1<br /> bayes_auto_learn 1<br /> bayes_path /etc/mail/spamassassin/.spamassassin/bayes<br /> bayes_auto_learn_threshold_spam 6.0<br /> bayes_file_mode 0775<br /> EOF<br /> echo &quot;include bayes.cf&quot; &gt;&gt; /etc/mail/spamassassin/local.cf<br /> systemctl restart spamassassin<br /> <br /> <br /> # Tell simscan, append to simcontrol, reload cdb<br /> dspam=yes,rspam=yes,regex<br /> optional: dspamuser=globalspam (Otherwise the first envelope 'rcpt to' address is used)<br /> optional: spamuser=globalspam (Add to userprefs table)<br /> optional: remove spam_hits=* (Otherwise userprefs will not be used)<br /> qmailctl cdb<br /> <br /> # This is my configuration:<br /> :clam=yes,spam=yes,rspam=yes,dspam=yes,spam_passthru=yes,attach=.exe:.pif:.scr</div> Ebroch http://wiki.qmailtoaster.org:80/index.php?title=Simscan&diff=1610 Simscan 2025-08-21T20:07:30Z <p>Ebroch: </p> <hr /> <div>[[Configuration#Simscan|Back]]&lt;br&gt;<br /> == Scanning ==<br /> <br /> In /etc/tcprules.d/tcp.smtp set environment variable QMAILQUEUE to simscan binary <br /> ...,QMAILQUEUE=&quot;/var/qmail/bin/simscan&quot;,...<br /> Rebuild tcp.smtp<br /> # qmailctl cdb<br /> <br /> == Control ==<br /> <br /> Simscan's control file is /var/qmail/control/simcontrol<br /> It's format looks like thus:&lt;br&gt;<br /> :clam=yes,spam=yes,spam_hits=9.5,spam_passthru=yes,attach=.vbs:.lnk:.scr:.wsh:.hta:.pif<br /> This tells simscan for all domains to scan with ClamAV, Spamassassin, filter attachments, queueing all mail after filtering&lt;br&gt;<br /> Consider the following format:&lt;br&gt;<br /> domain.tld:dspam=yes,rspam=yes,clam=yes,spam=yes,spam_passthru=yes,...<br /> This tells simscan for domain.tld to scan with Dspam, Rspam, ClamAV, Spamassassin,...&lt;br&gt;<br /> Upon edit of simcontrol the file must be put into proper format for use, run<br /> # qmailctl cdb&lt;br&gt;<br /> Note: simscan automatically runs dspam client (/usr/bin/dspamc). So the dspam server must be running. <br /> In order to run dspam (/usr/bin/dspam) set the environment variable DSPAM_BIN in either <br /> /etc/tcprules.d/tcp.smtp or in the smtp run script.<br /> <br /> == Ramdisk ==<br /> <br /> Use htop or other program to determine available memory for ramdisk (size=)<br /> # clamgid=$(test -z &quot;$(cat /etc/passwd | grep ^clamav)&quot; &amp;&amp; id -g clamscan 2&gt;/dev/null || id -g clamav 2&gt;/dev/null) &amp;&amp; echo $clamgid<br /> # qmailctl stop<br /> # mount -t tmpfs -o size=1024m,nodev,noexec,noatime,uid=$clamgid,gid=0,mode=0750 myramdisk /var/qmail/simscan<br /> # ls -ld /var/qmail/simscan<br /> drwxr-x--- 2 clamscan root 6 Aug 17 13:28 /var/qmail/simscan<br /> # qmailctl start<br /> # df -h /var/qmail/simscan<br /> Filesystem Size Used Avail Use% Mounted on<br /> myramdisk 1.0G 0 1.0G 0% /var/qmail/simscan<br /> # cp /etc/fstab /etc/fstab.bak<br /> # echo &quot;myramdisk /var/qmail/simscan tmpfs size=1024m,nodev,noexec,noatime,uid=$clamgid,gid=0,mode=0750 0 0&quot; &gt;&gt; /etc/fstab<br /> Make sure /etc/fstab file is okay before a reboot<br /> # cat /etc/fstab<br /> <br /> == Filtering ==<br /> <br /> FEDORAREPO=<br /> Install Dspam, Rspam, SA userprefs<br /> <br /> # Begin Fedora Install CentOS 8 ***** ONLY *****<br /> rel=`grep &quot;release 8&quot; /etc/*-release`<br /> if [[ ! -z $rel ]]<br /> then<br /> rel=8<br /> FEDORAREPO=--enablerepo=fedora<br /> sites=( https://d2lzkl7pfhq30w.cloudfront.net/pub/archive/fedora/linux/releases/28/Everything/x86_64/os/ <br /> http://mirror.math.princeton.edu/pub/fedora-archive/fedora/linux/releases/28/Everything/x86_64/os/ <br /> http://pubmirror1.math.uh.edu/fedora-buffet/archive/fedora/linux/releases/28/Everything/x86_64/os/ <br /> https://pubmirror2.math.uh.edu/fedora-buffet/archive/fedora/linux/releases/28/Everything/x86_64/os/ <br /> http://mirrors.kernel.org/fedora-buffet/archive/fedora/linux/releases/28/Everything/x86_64/os/ <br /> https://dl.fedoraproject.org/pub/archive/fedora/linux/releases/28/Everything/x86_64/os/ )<br /> printf '%s\n%s\n%s\n%s\n%s\n%s\n' '[fedora]' 'name=Fedora 28' 'mirrorlist=file:///etc/yum.repos.d/fedoramirrors' \<br /> 'enabled=0' 'gpgcheck=0' 'priority=100' &gt; /etc/yum.repos.d/fedora28.repo<br /> printf '%s\n%s\n%s\n%s\n%s\n%s\n' &quot;${sites[0]}&quot; &quot;${sites[1]}&quot; &quot;${sites[2]}&quot; &quot;{$sites[3]}&quot; &quot;${sites[4]}&quot; &quot;${sites[5]}&quot; \<br /> &gt; /etc/yum.repos.d/fedoramirrors<br /> else<br /> rel=7<br /> fi<br /> # End Fedora Install CentOS 8 ***** ONLY *****<br /> <br /> # Begin DSpam DB Install, Skip if already installed<br /> wget https://raw.githubusercontent.com/qmtoaster/dspam/master/dspamdb.sql<br /> if [ &quot;$?&quot; != &quot;0&quot; ]; then<br /> echo &quot;Error downloading dspam db: ($?), exiting...&quot;<br /> exit 1<br /> fi<br /> MYSQLPW=<br /> # Get DB password for administrator and check validity.<br /> if [ -z &quot;$MYSQLPW&quot; ]; then<br /> read -s -p &quot;Enter MySQL/MariaDB admin password to create dspam database: &quot; MYSQLPW<br /> fi<br /> credfile=~/sql.cnf<br /> echo -e &quot;[client]\nuser=root\npassword='$MYSQLPW'\nhost=localhost&quot; &gt; $credfile<br /> mysqladmin --defaults-extra-file=$credfile status &gt; /dev/null 2&gt;&amp;1<br /> if [ &quot;$?&quot; != &quot;0&quot; ]; then<br /> echo &quot;Bad MySQL/MariaDB administrator password or MySQL/MariaDB is not running. Exiting...&quot;<br /> exit 1<br /> fi<br /> echo &quot;&quot;<br /> echo &quot;Dropping Dspam database if it exists already...&quot;<br /> mysql --defaults-extra-file=$credfile -e &quot;use dspam&quot; &amp;&gt; /dev/null<br /> [ &quot;$?&quot; = &quot;0&quot; ] &amp;&amp; mysqldump --defaults-extra-file=$credfile dspam &gt; dspam.sql \<br /> &amp;&amp; mysql --defaults-extra-file=$credfile -e &quot;drop database dspam&quot; \<br /> &amp;&amp; echo &quot;dspam db saved to dspam.sql and dropped...&quot;<br /> <br /> # Create dspam with correct permissions<br /> echo &quot;Creating Dspam database...&quot;<br /> mysqladmin --defaults-extra-file=$credfile reload<br /> mysqladmin --defaults-extra-file=$credfile refresh<br /> mysqladmin --defaults-extra-file=$credfile create dspam<br /> mysqladmin --defaults-extra-file=$credfile reload<br /> mysqladmin --defaults-extra-file=$credfile refresh<br /> echo &quot;Adding dspam users and privileges...&quot;<br /> mysql --defaults-extra-file=$credfile -e &quot;CREATE USER dspam@localhost IDENTIFIED BY 'p4ssw3rd'&quot;<br /> mysql --defaults-extra-file=$credfile -e &quot;GRANT ALL PRIVILEGES ON dspam.* TO dspam@localhost&quot;<br /> mysqladmin --defaults-extra-file=$credfile reload<br /> mysqladmin --defaults-extra-file=$credfile refresh<br /> echo &quot;Done with dspam database...&quot;<br /> mysql --defaults-extra-file=$credfile dspam &lt; dspamdb.sql<br /> mysqladmin --defaults-extra-file=$credfile reload<br /> mysqladmin --defaults-extra-file=$credfile refresh<br /> # End DSpam DB install<br /> <br /> <br /> # Rspam Installation:<br /> wget https://rspamd.com/rpm-stable/centos-$rel/rspamd.repo -O /etc/yum.repos.d/rspamd.repo<br /> <br /> dnf $FEDORAREPO --enablerepo=qmt-devel install dspam dspam-libs dspam-client dspam-mysql dspam-web rspamd<br /> systemctl enable --now dspam<br /> systemctl status dspam<br /> systemctl enable --now rspamd<br /> systemctl status rspamd<br /> <br /> # Update Simscan<br /> dnf --enablerepo=qmt-devel update simscan<br /> <br /> # Up qmail limits<br /> sed -i 's/softlimit -m.*\\/softlimit -m 256000000 \\/' /var/qmail/supervise/smtp/run<br /> qmailctl stop<br /> qmailctl start<br /> <br /> <br /> # SA user prefs<br /> <br /> # Create SA DB and load table into MySQL<br /> cat &gt;&gt; ./sadb.sql &lt;&lt; EOF<br /> CREATE TABLE userpref (<br /> username varchar(100) NOT NULL default '',<br /> preference varchar(50) NOT NULL default '',<br /> value varchar(255) NOT NULL default '',<br /> prefid int(11) NOT NULL auto_increment,<br /> ts timestamp NOT NULL DEFAULT current_timestamp() ON UPDATE current_timestamp(),<br /> PRIMARY KEY (prefid),<br /> KEY username (username)<br /> ) ENGINE=InnoDB;<br /> EOF<br /> mysqladmin --defaults-extra-file=$credfile create spamassassin<br /> mysql --defaults-extra-file=$credfile -e &quot;CREATE USER spamassassin@localhost IDENTIFIED BY 'p4ssw3rd'&quot;<br /> mysql --defaults-extra-file=$credfile -e &quot;GRANT ALL PRIVILEGES ON spamassassin.* TO spamassassin@localhost&quot;<br /> mysqladmin --defaults-extra-file=$credfile reload<br /> mysqladmin --defaults-extra-file=$credfile refresh<br /> mysql --defaults-extra-file=$credfile spamassassin &lt; sadb.sql<br /> <br /> # Read SA SQL DB<br /> cat &gt;&gt; /etc/mail/spamassassin/sql.cf &lt;&lt; EOF<br /> user_scores_dsn DBI:mysql:spamassassin:localhost:3306<br /> user_scores_sql_password p4ssw3rd<br /> user_scores_sql_username spamassassin<br /> user_scores_sql_custom_query SELECT preference, value FROM _TABLE_ WHERE username = _USERNAME_ OR username = '$GLOBAL' OR username = <br /> CONCAT('%',_DOMAIN_) ORDER BY username ASC<br /> EOF<br /> echo &quot;include sql.cf&quot; &gt;&gt; /etc/mail/spamassassin/local.cf<br /> <br /> # Add Per User Settings in SA SQL DB (Yours may differ)<br /> echo &quot;INSERT INTO userpref (username,preference,value) VALUES ('\$GLOBAL','required_hits','5.0');&quot; | mysql -u root -p spamassassin<br /> echo &quot;INSERT INTO userpref (username,preference,value) VALUES ('user@dom.com','required_hits','7.0');&quot; | mysql -u root -p spamassassin<br /> echo &quot;INSERT INTO userpref (username,preference,value) VALUES ('globalspam','required_hits','5.0');&quot; | mysql -u root -p spamassassin<br /> echo &quot;select * from userpref&quot; | mysql -u root -p spamassassin<br /> <br /> # Tell SA Daemon To Use SQL DB<br /> sed -i 's/SPAMDOPTIONS=&quot;.*&quot;/SPAMDOPTIONS=&quot;--create-prefs -m10 -q -x -u clamscan&quot;/' /etc/sysconfig/spamassassin<br /> <br /> # Bayesian Filtering<br /> mkdir /etc/mail/spamassassin/.spamassassin<br /> chown -R clamscan:clamscan /etc/mail/spamassassin/.spamassassin<br /> cat &gt;&gt; /etc/mail/spamassassin/bayes.cf &lt;&lt; EOF<br /> use_bayes 1<br /> use_bayes_rules 1<br /> bayes_auto_learn 1<br /> bayes_path /etc/mail/spamassassin/.spamassassin/bayes<br /> bayes_auto_learn_threshold_spam 6.0<br /> bayes_file_mode 0775<br /> EOF<br /> echo &quot;include bayes.cf&quot; &gt;&gt; /etc/mail/spamassassin/local.cf<br /> systemctl restart spamassassin<br /> <br /> <br /> # Tell simscan, append to simcontrol, reload cdb<br /> dspam=yes,rspam=yes,regex<br /> optional: dspamuser=globalspam (Otherwise the first envelope 'rcpt to' address is used)<br /> optional: spamuser=globalspam (Add to userprefs table)<br /> optional: remove spam_hits=* (Otherwise userprefs will not be used)<br /> qmailctl cdb<br /> <br /> # This is my configuration:<br /> :clam=yes,spam=yes,rspam=yes,dspam=yes,spam_passthru=yes,attach=.exe:.pif:.scr</div> Ebroch http://wiki.qmailtoaster.org:80/index.php?title=Simscan&diff=1609 Simscan 2025-08-21T20:06:50Z <p>Ebroch: </p> <hr /> <div>[[Configuration#Simscan|Back]]&lt;br&gt;<br /> == Scanning ==<br /> <br /> In /etc/tcprules.d/tcp.smtp set environment variable QMAILQUEUE to simscan binary <br /> ...,QMAILQUEUE=&quot;/var/qmail/bin/simscan&quot;,...<br /> Rebuild tcp.smtp<br /> # qmailctl cdb<br /> <br /> == Control ==<br /> <br /> Simscan's control file is /var/qmail/control/simcontrol<br /> It's format looks like thus:&lt;br&gt;<br /> :clam=yes,spam=yes,spam_hits=9.5,spam_passthru=yes,attach=.vbs:.lnk:.scr:.wsh:.hta:.pif<br /> This tells simscan for all domains to scan with ClamAV, Spamassassin, filter attachments, queueing all mail after filtering&lt;br&gt;<br /> Consider the following format:&lt;br&gt;<br /> domain.tld:dspam=yes,rspam=yes,clam=yes,spam=yes,spam_passthru=yes,...<br /> This tells simscan for domain.tld to scan with Dspam, Rspam, ClamAV, Spamassassin,...&lt;br&gt;<br /> Upon edit of simcontrol the file must be put into proper format for use, run<br /> # qmailctl cdb<br /> <br /> Note: simscan automatically runs dspam client (/usr/bin/dspamc). So the dspam server must be running. <br /> In order to run dspam (/usr/bin/dspam) set the environment variable DSPAM_BIN in either <br /> /etc/tcprules.d/tcp.smtp or in the smtp run script.<br /> <br /> == Ramdisk ==<br /> <br /> Use htop or other program to determine available memory for ramdisk (size=)<br /> # clamgid=$(test -z &quot;$(cat /etc/passwd | grep ^clamav)&quot; &amp;&amp; id -g clamscan 2&gt;/dev/null || id -g clamav 2&gt;/dev/null) &amp;&amp; echo $clamgid<br /> # qmailctl stop<br /> # mount -t tmpfs -o size=1024m,nodev,noexec,noatime,uid=$clamgid,gid=0,mode=0750 myramdisk /var/qmail/simscan<br /> # ls -ld /var/qmail/simscan<br /> drwxr-x--- 2 clamscan root 6 Aug 17 13:28 /var/qmail/simscan<br /> # qmailctl start<br /> # df -h /var/qmail/simscan<br /> Filesystem Size Used Avail Use% Mounted on<br /> myramdisk 1.0G 0 1.0G 0% /var/qmail/simscan<br /> # cp /etc/fstab /etc/fstab.bak<br /> # echo &quot;myramdisk /var/qmail/simscan tmpfs size=1024m,nodev,noexec,noatime,uid=$clamgid,gid=0,mode=0750 0 0&quot; &gt;&gt; /etc/fstab<br /> Make sure /etc/fstab file is okay before a reboot<br /> # cat /etc/fstab<br /> <br /> == Filtering ==<br /> <br /> FEDORAREPO=<br /> Install Dspam, Rspam, SA userprefs<br /> <br /> # Begin Fedora Install CentOS 8 ***** ONLY *****<br /> rel=`grep &quot;release 8&quot; /etc/*-release`<br /> if [[ ! -z $rel ]]<br /> then<br /> rel=8<br /> FEDORAREPO=--enablerepo=fedora<br /> sites=( https://d2lzkl7pfhq30w.cloudfront.net/pub/archive/fedora/linux/releases/28/Everything/x86_64/os/ <br /> http://mirror.math.princeton.edu/pub/fedora-archive/fedora/linux/releases/28/Everything/x86_64/os/ <br /> http://pubmirror1.math.uh.edu/fedora-buffet/archive/fedora/linux/releases/28/Everything/x86_64/os/ <br /> https://pubmirror2.math.uh.edu/fedora-buffet/archive/fedora/linux/releases/28/Everything/x86_64/os/ <br /> http://mirrors.kernel.org/fedora-buffet/archive/fedora/linux/releases/28/Everything/x86_64/os/ <br /> https://dl.fedoraproject.org/pub/archive/fedora/linux/releases/28/Everything/x86_64/os/ )<br /> printf '%s\n%s\n%s\n%s\n%s\n%s\n' '[fedora]' 'name=Fedora 28' 'mirrorlist=file:///etc/yum.repos.d/fedoramirrors' \<br /> 'enabled=0' 'gpgcheck=0' 'priority=100' &gt; /etc/yum.repos.d/fedora28.repo<br /> printf '%s\n%s\n%s\n%s\n%s\n%s\n' &quot;${sites[0]}&quot; &quot;${sites[1]}&quot; &quot;${sites[2]}&quot; &quot;{$sites[3]}&quot; &quot;${sites[4]}&quot; &quot;${sites[5]}&quot; \<br /> &gt; /etc/yum.repos.d/fedoramirrors<br /> else<br /> rel=7<br /> fi<br /> # End Fedora Install CentOS 8 ***** ONLY *****<br /> <br /> # Begin DSpam DB Install, Skip if already installed<br /> wget https://raw.githubusercontent.com/qmtoaster/dspam/master/dspamdb.sql<br /> if [ &quot;$?&quot; != &quot;0&quot; ]; then<br /> echo &quot;Error downloading dspam db: ($?), exiting...&quot;<br /> exit 1<br /> fi<br /> MYSQLPW=<br /> # Get DB password for administrator and check validity.<br /> if [ -z &quot;$MYSQLPW&quot; ]; then<br /> read -s -p &quot;Enter MySQL/MariaDB admin password to create dspam database: &quot; MYSQLPW<br /> fi<br /> credfile=~/sql.cnf<br /> echo -e &quot;[client]\nuser=root\npassword='$MYSQLPW'\nhost=localhost&quot; &gt; $credfile<br /> mysqladmin --defaults-extra-file=$credfile status &gt; /dev/null 2&gt;&amp;1<br /> if [ &quot;$?&quot; != &quot;0&quot; ]; then<br /> echo &quot;Bad MySQL/MariaDB administrator password or MySQL/MariaDB is not running. Exiting...&quot;<br /> exit 1<br /> fi<br /> echo &quot;&quot;<br /> echo &quot;Dropping Dspam database if it exists already...&quot;<br /> mysql --defaults-extra-file=$credfile -e &quot;use dspam&quot; &amp;&gt; /dev/null<br /> [ &quot;$?&quot; = &quot;0&quot; ] &amp;&amp; mysqldump --defaults-extra-file=$credfile dspam &gt; dspam.sql \<br /> &amp;&amp; mysql --defaults-extra-file=$credfile -e &quot;drop database dspam&quot; \<br /> &amp;&amp; echo &quot;dspam db saved to dspam.sql and dropped...&quot;<br /> <br /> # Create dspam with correct permissions<br /> echo &quot;Creating Dspam database...&quot;<br /> mysqladmin --defaults-extra-file=$credfile reload<br /> mysqladmin --defaults-extra-file=$credfile refresh<br /> mysqladmin --defaults-extra-file=$credfile create dspam<br /> mysqladmin --defaults-extra-file=$credfile reload<br /> mysqladmin --defaults-extra-file=$credfile refresh<br /> echo &quot;Adding dspam users and privileges...&quot;<br /> mysql --defaults-extra-file=$credfile -e &quot;CREATE USER dspam@localhost IDENTIFIED BY 'p4ssw3rd'&quot;<br /> mysql --defaults-extra-file=$credfile -e &quot;GRANT ALL PRIVILEGES ON dspam.* TO dspam@localhost&quot;<br /> mysqladmin --defaults-extra-file=$credfile reload<br /> mysqladmin --defaults-extra-file=$credfile refresh<br /> echo &quot;Done with dspam database...&quot;<br /> mysql --defaults-extra-file=$credfile dspam &lt; dspamdb.sql<br /> mysqladmin --defaults-extra-file=$credfile reload<br /> mysqladmin --defaults-extra-file=$credfile refresh<br /> # End DSpam DB install<br /> <br /> <br /> # Rspam Installation:<br /> wget https://rspamd.com/rpm-stable/centos-$rel/rspamd.repo -O /etc/yum.repos.d/rspamd.repo<br /> <br /> dnf $FEDORAREPO --enablerepo=qmt-devel install dspam dspam-libs dspam-client dspam-mysql dspam-web rspamd<br /> systemctl enable --now dspam<br /> systemctl status dspam<br /> systemctl enable --now rspamd<br /> systemctl status rspamd<br /> <br /> # Update Simscan<br /> dnf --enablerepo=qmt-devel update simscan<br /> <br /> # Up qmail limits<br /> sed -i 's/softlimit -m.*\\/softlimit -m 256000000 \\/' /var/qmail/supervise/smtp/run<br /> qmailctl stop<br /> qmailctl start<br /> <br /> <br /> # SA user prefs<br /> <br /> # Create SA DB and load table into MySQL<br /> cat &gt;&gt; ./sadb.sql &lt;&lt; EOF<br /> CREATE TABLE userpref (<br /> username varchar(100) NOT NULL default '',<br /> preference varchar(50) NOT NULL default '',<br /> value varchar(255) NOT NULL default '',<br /> prefid int(11) NOT NULL auto_increment,<br /> ts timestamp NOT NULL DEFAULT current_timestamp() ON UPDATE current_timestamp(),<br /> PRIMARY KEY (prefid),<br /> KEY username (username)<br /> ) ENGINE=InnoDB;<br /> EOF<br /> mysqladmin --defaults-extra-file=$credfile create spamassassin<br /> mysql --defaults-extra-file=$credfile -e &quot;CREATE USER spamassassin@localhost IDENTIFIED BY 'p4ssw3rd'&quot;<br /> mysql --defaults-extra-file=$credfile -e &quot;GRANT ALL PRIVILEGES ON spamassassin.* TO spamassassin@localhost&quot;<br /> mysqladmin --defaults-extra-file=$credfile reload<br /> mysqladmin --defaults-extra-file=$credfile refresh<br /> mysql --defaults-extra-file=$credfile spamassassin &lt; sadb.sql<br /> <br /> # Read SA SQL DB<br /> cat &gt;&gt; /etc/mail/spamassassin/sql.cf &lt;&lt; EOF<br /> user_scores_dsn DBI:mysql:spamassassin:localhost:3306<br /> user_scores_sql_password p4ssw3rd<br /> user_scores_sql_username spamassassin<br /> user_scores_sql_custom_query SELECT preference, value FROM _TABLE_ WHERE username = _USERNAME_ OR username = '$GLOBAL' OR username = <br /> CONCAT('%',_DOMAIN_) ORDER BY username ASC<br /> EOF<br /> echo &quot;include sql.cf&quot; &gt;&gt; /etc/mail/spamassassin/local.cf<br /> <br /> # Add Per User Settings in SA SQL DB (Yours may differ)<br /> echo &quot;INSERT INTO userpref (username,preference,value) VALUES ('\$GLOBAL','required_hits','5.0');&quot; | mysql -u root -p spamassassin<br /> echo &quot;INSERT INTO userpref (username,preference,value) VALUES ('user@dom.com','required_hits','7.0');&quot; | mysql -u root -p spamassassin<br /> echo &quot;INSERT INTO userpref (username,preference,value) VALUES ('globalspam','required_hits','5.0');&quot; | mysql -u root -p spamassassin<br /> echo &quot;select * from userpref&quot; | mysql -u root -p spamassassin<br /> <br /> # Tell SA Daemon To Use SQL DB<br /> sed -i 's/SPAMDOPTIONS=&quot;.*&quot;/SPAMDOPTIONS=&quot;--create-prefs -m10 -q -x -u clamscan&quot;/' /etc/sysconfig/spamassassin<br /> <br /> # Bayesian Filtering<br /> mkdir /etc/mail/spamassassin/.spamassassin<br /> chown -R clamscan:clamscan /etc/mail/spamassassin/.spamassassin<br /> cat &gt;&gt; /etc/mail/spamassassin/bayes.cf &lt;&lt; EOF<br /> use_bayes 1<br /> use_bayes_rules 1<br /> bayes_auto_learn 1<br /> bayes_path /etc/mail/spamassassin/.spamassassin/bayes<br /> bayes_auto_learn_threshold_spam 6.0<br /> bayes_file_mode 0775<br /> EOF<br /> echo &quot;include bayes.cf&quot; &gt;&gt; /etc/mail/spamassassin/local.cf<br /> systemctl restart spamassassin<br /> <br /> <br /> # Tell simscan, append to simcontrol, reload cdb<br /> dspam=yes,rspam=yes,regex<br /> optional: dspamuser=globalspam (Otherwise the first envelope 'rcpt to' address is used)<br /> optional: spamuser=globalspam (Add to userprefs table)<br /> optional: remove spam_hits=* (Otherwise userprefs will not be used)<br /> qmailctl cdb<br /> <br /> # This is my configuration:<br /> :clam=yes,spam=yes,rspam=yes,dspam=yes,spam_passthru=yes,attach=.exe:.pif:.scr</div> Ebroch http://wiki.qmailtoaster.org:80/index.php?title=Simscan&diff=1608 Simscan 2025-08-21T20:05:58Z <p>Ebroch: /* Control */</p> <hr /> <div>[[Configuration#Simscan|Back]]&lt;br&gt;<br /> == Scanning ==<br /> <br /> In /etc/tcprules.d/tcp.smtp set environment variable QMAILQUEUE to simscan binary <br /> ...,QMAILQUEUE=&quot;/var/qmail/bin/simscan&quot;,...<br /> Rebuild tcp.smtp<br /> # qmailctl cdb<br /> <br /> == Control ==<br /> <br /> Simscan's control file is /var/qmail/control/simcontrol<br /> It's format looks like thus:&lt;br&gt;<br /> :clam=yes,spam=yes,spam_hits=9.5,spam_passthru=yes,attach=.vbs:.lnk:.scr:.wsh:.hta:.pif<br /> This tells simscan for all domains to scan with ClamAV, Spamassassin, filter attachments, queueing all mail after filtering&lt;br&gt;<br /> Consider the following format:&lt;br&gt;<br /> domain.tld:dspam=yes,rspam=yes,clam=yes,spam=yes,spam_passthru=yes,...<br /> This tells simscan for domain.tld to scan with Dspam, Rspam, ClamAV, Spamassassin,...&lt;br&gt;<br /> Upon edit of simcontrol the file must be put into proper format for use, run<br /> # qmailctl cdb<br /> <br /> <br /> Note: simscan automatically runs dspam client (/usr/bin/dspamc). So the dspam server must be running. <br /> In order to run dspam (/usr/bin/dspam) set the environment variable DSPAM_BIN in either /etc/tcprules.d/tcp.smtp<br /> or in the smtp run script.<br /> <br /> == Ramdisk ==<br /> <br /> Use htop or other program to determine available memory for ramdisk (size=)<br /> # clamgid=$(test -z &quot;$(cat /etc/passwd | grep ^clamav)&quot; &amp;&amp; id -g clamscan 2&gt;/dev/null || id -g clamav 2&gt;/dev/null) &amp;&amp; echo $clamgid<br /> # qmailctl stop<br /> # mount -t tmpfs -o size=1024m,nodev,noexec,noatime,uid=$clamgid,gid=0,mode=0750 myramdisk /var/qmail/simscan<br /> # ls -ld /var/qmail/simscan<br /> drwxr-x--- 2 clamscan root 6 Aug 17 13:28 /var/qmail/simscan<br /> # qmailctl start<br /> # df -h /var/qmail/simscan<br /> Filesystem Size Used Avail Use% Mounted on<br /> myramdisk 1.0G 0 1.0G 0% /var/qmail/simscan<br /> # cp /etc/fstab /etc/fstab.bak<br /> # echo &quot;myramdisk /var/qmail/simscan tmpfs size=1024m,nodev,noexec,noatime,uid=$clamgid,gid=0,mode=0750 0 0&quot; &gt;&gt; /etc/fstab<br /> Make sure /etc/fstab file is okay before a reboot<br /> # cat /etc/fstab<br /> <br /> == Filtering ==<br /> <br /> FEDORAREPO=<br /> Install Dspam, Rspam, SA userprefs<br /> <br /> # Begin Fedora Install CentOS 8 ***** ONLY *****<br /> rel=`grep &quot;release 8&quot; /etc/*-release`<br /> if [[ ! -z $rel ]]<br /> then<br /> rel=8<br /> FEDORAREPO=--enablerepo=fedora<br /> sites=( https://d2lzkl7pfhq30w.cloudfront.net/pub/archive/fedora/linux/releases/28/Everything/x86_64/os/ <br /> http://mirror.math.princeton.edu/pub/fedora-archive/fedora/linux/releases/28/Everything/x86_64/os/ <br /> http://pubmirror1.math.uh.edu/fedora-buffet/archive/fedora/linux/releases/28/Everything/x86_64/os/ <br /> https://pubmirror2.math.uh.edu/fedora-buffet/archive/fedora/linux/releases/28/Everything/x86_64/os/ <br /> http://mirrors.kernel.org/fedora-buffet/archive/fedora/linux/releases/28/Everything/x86_64/os/ <br /> https://dl.fedoraproject.org/pub/archive/fedora/linux/releases/28/Everything/x86_64/os/ )<br /> printf '%s\n%s\n%s\n%s\n%s\n%s\n' '[fedora]' 'name=Fedora 28' 'mirrorlist=file:///etc/yum.repos.d/fedoramirrors' \<br /> 'enabled=0' 'gpgcheck=0' 'priority=100' &gt; /etc/yum.repos.d/fedora28.repo<br /> printf '%s\n%s\n%s\n%s\n%s\n%s\n' &quot;${sites[0]}&quot; &quot;${sites[1]}&quot; &quot;${sites[2]}&quot; &quot;{$sites[3]}&quot; &quot;${sites[4]}&quot; &quot;${sites[5]}&quot; \<br /> &gt; /etc/yum.repos.d/fedoramirrors<br /> else<br /> rel=7<br /> fi<br /> # End Fedora Install CentOS 8 ***** ONLY *****<br /> <br /> # Begin DSpam DB Install, Skip if already installed<br /> wget https://raw.githubusercontent.com/qmtoaster/dspam/master/dspamdb.sql<br /> if [ &quot;$?&quot; != &quot;0&quot; ]; then<br /> echo &quot;Error downloading dspam db: ($?), exiting...&quot;<br /> exit 1<br /> fi<br /> MYSQLPW=<br /> # Get DB password for administrator and check validity.<br /> if [ -z &quot;$MYSQLPW&quot; ]; then<br /> read -s -p &quot;Enter MySQL/MariaDB admin password to create dspam database: &quot; MYSQLPW<br /> fi<br /> credfile=~/sql.cnf<br /> echo -e &quot;[client]\nuser=root\npassword='$MYSQLPW'\nhost=localhost&quot; &gt; $credfile<br /> mysqladmin --defaults-extra-file=$credfile status &gt; /dev/null 2&gt;&amp;1<br /> if [ &quot;$?&quot; != &quot;0&quot; ]; then<br /> echo &quot;Bad MySQL/MariaDB administrator password or MySQL/MariaDB is not running. Exiting...&quot;<br /> exit 1<br /> fi<br /> echo &quot;&quot;<br /> echo &quot;Dropping Dspam database if it exists already...&quot;<br /> mysql --defaults-extra-file=$credfile -e &quot;use dspam&quot; &amp;&gt; /dev/null<br /> [ &quot;$?&quot; = &quot;0&quot; ] &amp;&amp; mysqldump --defaults-extra-file=$credfile dspam &gt; dspam.sql \<br /> &amp;&amp; mysql --defaults-extra-file=$credfile -e &quot;drop database dspam&quot; \<br /> &amp;&amp; echo &quot;dspam db saved to dspam.sql and dropped...&quot;<br /> <br /> # Create dspam with correct permissions<br /> echo &quot;Creating Dspam database...&quot;<br /> mysqladmin --defaults-extra-file=$credfile reload<br /> mysqladmin --defaults-extra-file=$credfile refresh<br /> mysqladmin --defaults-extra-file=$credfile create dspam<br /> mysqladmin --defaults-extra-file=$credfile reload<br /> mysqladmin --defaults-extra-file=$credfile refresh<br /> echo &quot;Adding dspam users and privileges...&quot;<br /> mysql --defaults-extra-file=$credfile -e &quot;CREATE USER dspam@localhost IDENTIFIED BY 'p4ssw3rd'&quot;<br /> mysql --defaults-extra-file=$credfile -e &quot;GRANT ALL PRIVILEGES ON dspam.* TO dspam@localhost&quot;<br /> mysqladmin --defaults-extra-file=$credfile reload<br /> mysqladmin --defaults-extra-file=$credfile refresh<br /> echo &quot;Done with dspam database...&quot;<br /> mysql --defaults-extra-file=$credfile dspam &lt; dspamdb.sql<br /> mysqladmin --defaults-extra-file=$credfile reload<br /> mysqladmin --defaults-extra-file=$credfile refresh<br /> # End DSpam DB install<br /> <br /> <br /> # Rspam Installation:<br /> wget https://rspamd.com/rpm-stable/centos-$rel/rspamd.repo -O /etc/yum.repos.d/rspamd.repo<br /> <br /> dnf $FEDORAREPO --enablerepo=qmt-devel install dspam dspam-libs dspam-client dspam-mysql dspam-web rspamd<br /> systemctl enable --now dspam<br /> systemctl status dspam<br /> systemctl enable --now rspamd<br /> systemctl status rspamd<br /> <br /> # Update Simscan<br /> dnf --enablerepo=qmt-devel update simscan<br /> <br /> # Up qmail limits<br /> sed -i 's/softlimit -m.*\\/softlimit -m 256000000 \\/' /var/qmail/supervise/smtp/run<br /> qmailctl stop<br /> qmailctl start<br /> <br /> <br /> # SA user prefs<br /> <br /> # Create SA DB and load table into MySQL<br /> cat &gt;&gt; ./sadb.sql &lt;&lt; EOF<br /> CREATE TABLE userpref (<br /> username varchar(100) NOT NULL default '',<br /> preference varchar(50) NOT NULL default '',<br /> value varchar(255) NOT NULL default '',<br /> prefid int(11) NOT NULL auto_increment,<br /> ts timestamp NOT NULL DEFAULT current_timestamp() ON UPDATE current_timestamp(),<br /> PRIMARY KEY (prefid),<br /> KEY username (username)<br /> ) ENGINE=InnoDB;<br /> EOF<br /> mysqladmin --defaults-extra-file=$credfile create spamassassin<br /> mysql --defaults-extra-file=$credfile -e &quot;CREATE USER spamassassin@localhost IDENTIFIED BY 'p4ssw3rd'&quot;<br /> mysql --defaults-extra-file=$credfile -e &quot;GRANT ALL PRIVILEGES ON spamassassin.* TO spamassassin@localhost&quot;<br /> mysqladmin --defaults-extra-file=$credfile reload<br /> mysqladmin --defaults-extra-file=$credfile refresh<br /> mysql --defaults-extra-file=$credfile spamassassin &lt; sadb.sql<br /> <br /> # Read SA SQL DB<br /> cat &gt;&gt; /etc/mail/spamassassin/sql.cf &lt;&lt; EOF<br /> user_scores_dsn DBI:mysql:spamassassin:localhost:3306<br /> user_scores_sql_password p4ssw3rd<br /> user_scores_sql_username spamassassin<br /> user_scores_sql_custom_query SELECT preference, value FROM _TABLE_ WHERE username = _USERNAME_ OR username = '$GLOBAL' OR username = <br /> CONCAT('%',_DOMAIN_) ORDER BY username ASC<br /> EOF<br /> echo &quot;include sql.cf&quot; &gt;&gt; /etc/mail/spamassassin/local.cf<br /> <br /> # Add Per User Settings in SA SQL DB (Yours may differ)<br /> echo &quot;INSERT INTO userpref (username,preference,value) VALUES ('\$GLOBAL','required_hits','5.0');&quot; | mysql -u root -p spamassassin<br /> echo &quot;INSERT INTO userpref (username,preference,value) VALUES ('user@dom.com','required_hits','7.0');&quot; | mysql -u root -p spamassassin<br /> echo &quot;INSERT INTO userpref (username,preference,value) VALUES ('globalspam','required_hits','5.0');&quot; | mysql -u root -p spamassassin<br /> echo &quot;select * from userpref&quot; | mysql -u root -p spamassassin<br /> <br /> # Tell SA Daemon To Use SQL DB<br /> sed -i 's/SPAMDOPTIONS=&quot;.*&quot;/SPAMDOPTIONS=&quot;--create-prefs -m10 -q -x -u clamscan&quot;/' /etc/sysconfig/spamassassin<br /> <br /> # Bayesian Filtering<br /> mkdir /etc/mail/spamassassin/.spamassassin<br /> chown -R clamscan:clamscan /etc/mail/spamassassin/.spamassassin<br /> cat &gt;&gt; /etc/mail/spamassassin/bayes.cf &lt;&lt; EOF<br /> use_bayes 1<br /> use_bayes_rules 1<br /> bayes_auto_learn 1<br /> bayes_path /etc/mail/spamassassin/.spamassassin/bayes<br /> bayes_auto_learn_threshold_spam 6.0<br /> bayes_file_mode 0775<br /> EOF<br /> echo &quot;include bayes.cf&quot; &gt;&gt; /etc/mail/spamassassin/local.cf<br /> systemctl restart spamassassin<br /> <br /> <br /> # Tell simscan, append to simcontrol, reload cdb<br /> dspam=yes,rspam=yes,regex<br /> optional: dspamuser=globalspam (Otherwise the first envelope 'rcpt to' address is used)<br /> optional: spamuser=globalspam (Add to userprefs table)<br /> optional: remove spam_hits=* (Otherwise userprefs will not be used)<br /> qmailctl cdb<br /> <br /> # This is my configuration:<br /> :clam=yes,spam=yes,rspam=yes,dspam=yes,spam_passthru=yes,attach=.exe:.pif:.scr</div> Ebroch http://wiki.qmailtoaster.org:80/index.php?title=Rocky,_Alma,_Springdale_10_QT_Install&diff=1607 Rocky, Alma, Springdale 10 QT Install 2025-08-21T16:35:32Z <p>Ebroch: </p> <hr /> <div>[[Main_Page#RHEL_10_&amp;_Derivatives|Back]]&lt;br&gt;<br /> =Enterprise Linux 10 Minimal Install= <br /> ==QMT Install ('Many-Domain')== <br /> &lt;nowiki&gt;#&lt;/nowiki&gt; curl -o /usr/local/bin/qt_install https://raw.githubusercontent.com/qmtoaster/scripts/master/qt_install_el10.sh<br /> &lt;nowiki&gt;#&lt;/nowiki&gt; chmod 755 /usr/local/bin/qt_install<br /> &lt;nowiki&gt;#&lt;/nowiki&gt; qt_install<br /> &lt;span style=&quot;color:red&quot;&gt; ...installing... &lt;/span&gt;<br /> &lt;nowiki&gt;#&lt;/nowiki&gt; toaststat&lt;br&gt;<br /> Status of toaster services<br /> send: up (pid 1323) 1517 seconds<br /> smtp: up (pid 1324) 1517 seconds<br /> submission: up (pid 1325) 1517 seconds<br /> send/log: up (pid 1316) 1517 seconds<br /> smtp/log: up (pid 1311) 1517 seconds<br /> submission/log: up (pid 1314) 1517 seconds&lt;br&gt;<br /> systemd service: clamd@scan: [&lt;span style=&quot;color:green&quot;&gt; OK &lt;/span&gt;]<br /> systemd service: clamav-freshclam: [&lt;span style=&quot;color:green&quot;&gt; OK &lt;/span&gt;]<br /> systemd service: spamassassin: [&lt;span style=&quot;color:green&quot;&gt; OK &lt;/span&gt;]<br /> systemd service: dovecot: [&lt;span style=&quot;color:green&quot;&gt; OK &lt;/span&gt;]<br /> systemd service: mariadb: [&lt;span style=&quot;color:green&quot;&gt; OK &lt;/span&gt;]<br /> systemd service: httpd: [&lt;span style=&quot;color:green&quot;&gt; OK &lt;/span&gt;]<br /> systemd service: named: [&lt;span style=&quot;color:green&quot;&gt; OK &lt;/span&gt;]<br /> systemd service: ntpd: [&lt;span style=&quot;color:green&quot;&gt; OK &lt;/span&gt;]<br /> systemd service: sshd: [&lt;span style=&quot;color:green&quot;&gt; OK &lt;/span&gt;]<br /> systemd service: network: [&lt;span style=&quot;color:green&quot;&gt; OK &lt;/span&gt;]<br /> systemd service: crond: [&lt;span style=&quot;color:green&quot;&gt; OK &lt;/span&gt;]<br /> systemd service: acpid: [&lt;span style=&quot;color:green&quot;&gt; OK &lt;/span&gt;]<br /> systemd service: atd: [&lt;span style=&quot;color:green&quot;&gt; OK &lt;/span&gt;]<br /> systemd service: autofs: [&lt;span style=&quot;color:green&quot;&gt; OK &lt;/span&gt;]<br /> systemd service: smartd: [&lt;span style=&quot;color:green&quot;&gt; OK &lt;/span&gt;]<br /> systemd service: irqbalance: [&lt;span style=&quot;color:green&quot;&gt; OK &lt;/span&gt;] (Multiple processors only)&lt;br&gt;<br /> &lt;nowiki&gt;#&lt;/nowiki&gt; [https://raw.githubusercontent.com/qmtoaster/scripts/master/conntest conntest]<br /> Enter a valid remote email account to which QMT will send mail: &lt;email address&gt;<br /> IMAPS: postmaster@domain.tld --&gt; &lt;span style=&quot;color:green&quot;&gt;success&lt;/span&gt;<br /> Submission: postmaster@domain.tld --&gt; &lt;span style=&quot;color:green&quot;&gt;success&lt;/span&gt;<br /> SMTPS: postmaster@domain.tld --&gt; &lt;span style=&quot;color:green&quot;&gt;success&lt;/span&gt;<br /> <br /> [http://wiki.qmailtoaster.org/index.php?title=Simscan Scanners]<br /> [http://wiki.qmailtoaster.org/index.php?title=Alias_Domains Many Domain Install (Alias Domain)]<br /> Qmail-1.03-3.3.12 (OpenSSL3)<br /> [https://github.com/qmtoaster/patches/blob/master/EL9/README.md Patches] applied<br /> <br /> == Install certificate ==<br /> [[Certificate]] *Note: The certificate must be 2048 bits or more<br /> == Test certificate ==<br /> # curl --verbose smtps://mail.domain.tld<br /> # curl --verbose imaps://mail.domain.tld<br /> or<br /> # openssl s_client mail.domain.tld:465<br /> # openssl s_client mail.domain.tld:993 <br /> &lt;pre&gt;<br /> &lt;nowiki&gt;*&lt;/nowiki&gt; Server certificate:<br /> &lt;nowiki&gt;*&lt;/nowiki&gt; subject: CN=mail.domain.tld<br /> &lt;nowiki&gt;*&lt;/nowiki&gt; start date: Jul 30 09:16:16 2024 GMT<br /> &lt;nowiki&gt;*&lt;/nowiki&gt; expire date: Oct 28 09:16:15 2024 GMT<br /> &lt;nowiki&gt;*&lt;/nowiki&gt; subjectAltName: host &quot;mail.domain.tld&quot; matched cert's &quot;mail.domain.tld&quot;<br /> &lt;nowiki&gt;*&lt;/nowiki&gt; issuer: C=US; O=Let's Encrypt; CN=R11<br /> &lt;nowiki&gt;*&lt;/nowiki&gt; SSL certificate verify ok.<br /> &lt;/pre&gt;<br /> <br /> If the following error is encountered when testing the new certificate the certificate is most likely less than 2048 bits<br /> <br /> 806B7387577F0000:error:0A00010B:SSL routines:ssl3_get_record:wrong version number:ssl/record/ssl3_record.c:354<br /> <br /> Usually Let's Encrypt certificates are at least 2048 bits, but encountering 256 bits keys is possible. Correct by specifying the number of bits:<br /> <br /> certbot renew --cert-name -d domain.tld -d mail.domain.tld --apache &lt;span style=&quot;color:red&quot;&gt;--rsa-key-size 2048 --key-type rsa&lt;/span&gt;</div> Ebroch http://wiki.qmailtoaster.org:80/index.php?title=Rocky,_Alma,_Springdale_10_QT_Install&diff=1606 Rocky, Alma, Springdale 10 QT Install 2025-08-21T16:34:40Z <p>Ebroch: Created page with &quot;Back&lt;br&gt; =Enterprise Linux 10 Minimal Install= ==QMT Install (&#039;Many-Domain&#039;)== &lt;nowiki&gt;#&lt;/nowiki&gt; curl -o /usr/local/bin/qt_install https://raw.githubusercontent.com/qmtoaster/scripts/master/qt_install_el10.sh &lt;nowiki&gt;#&lt;/nowiki&gt; chmod 755 /usr/local/bin/qt_install &lt;nowiki&gt;#&lt;/nowiki&gt; qt_install &lt;span style=&quot;color:red&quot;&gt; ...installing... &lt;/span&gt; &lt;nowiki&gt;#&lt;/nowiki&gt; toaststat&lt;br&gt; Status of toaster services send: up (pid 1323) 15...&quot;</p> <hr /> <div>[[Main_Page#RHEL_10_&amp;_Derivatives|Back]]&lt;br&gt;<br /> =Enterprise Linux 10 Minimal Install= <br /> ==QMT Install ('Many-Domain')== <br /> &lt;nowiki&gt;#&lt;/nowiki&gt; curl -o /usr/local/bin/qt_install https://raw.githubusercontent.com/qmtoaster/scripts/master/qt_install_el10.sh<br /> &lt;nowiki&gt;#&lt;/nowiki&gt; chmod 755 /usr/local/bin/qt_install<br /> &lt;nowiki&gt;#&lt;/nowiki&gt; qt_install<br /> &lt;span style=&quot;color:red&quot;&gt; ...installing... &lt;/span&gt;<br /> &lt;nowiki&gt;#&lt;/nowiki&gt; toaststat&lt;br&gt;<br /> Status of toaster services<br /> send: up (pid 1323) 1517 seconds<br /> smtp: up (pid 1324) 1517 seconds<br /> submission: up (pid 1325) 1517 seconds<br /> send/log: up (pid 1316) 1517 seconds<br /> smtp/log: up (pid 1311) 1517 seconds<br /> submission/log: up (pid 1314) 1517 seconds&lt;br&gt;<br /> systemd service: clamd@scan: [&lt;span style=&quot;color:green&quot;&gt; OK &lt;/span&gt;]<br /> systemd service: clamav-freshclam: [&lt;span style=&quot;color:green&quot;&gt; OK &lt;/span&gt;]<br /> systemd service: spamassassin: [&lt;span style=&quot;color:green&quot;&gt; OK &lt;/span&gt;]<br /> systemd service: dovecot: [&lt;span style=&quot;color:green&quot;&gt; OK &lt;/span&gt;]<br /> systemd service: mariadb: [&lt;span style=&quot;color:green&quot;&gt; OK &lt;/span&gt;]<br /> systemd service: httpd: [&lt;span style=&quot;color:green&quot;&gt; OK &lt;/span&gt;]<br /> systemd service: named: [&lt;span style=&quot;color:green&quot;&gt; OK &lt;/span&gt;]<br /> systemd service: ntpd: [&lt;span style=&quot;color:green&quot;&gt; OK &lt;/span&gt;]<br /> systemd service: sshd: [&lt;span style=&quot;color:green&quot;&gt; OK &lt;/span&gt;]<br /> systemd service: network: [&lt;span style=&quot;color:green&quot;&gt; OK &lt;/span&gt;]<br /> systemd service: crond: [&lt;span style=&quot;color:green&quot;&gt; OK &lt;/span&gt;]<br /> systemd service: acpid: [&lt;span style=&quot;color:green&quot;&gt; OK &lt;/span&gt;]<br /> systemd service: atd: [&lt;span style=&quot;color:green&quot;&gt; OK &lt;/span&gt;]<br /> systemd service: autofs: [&lt;span style=&quot;color:green&quot;&gt; OK &lt;/span&gt;]<br /> systemd service: smartd: [&lt;span style=&quot;color:green&quot;&gt; OK &lt;/span&gt;]<br /> systemd service: irqbalance: [&lt;span style=&quot;color:green&quot;&gt; OK &lt;/span&gt;] (Multiple processors only)&lt;br&gt;<br /> &lt;nowiki&gt;#&lt;/nowiki&gt; [https://raw.githubusercontent.com/qmtoaster/scripts/master/conntest conntest]<br /> Enter a valid remote email account to which QMT will send mail: &lt;email address&gt;<br /> IMAPS: postmaster@domain.tld --&gt; &lt;span style=&quot;color:green&quot;&gt;success&lt;/span&gt;<br /> Submission: postmaster@domain.tld --&gt; &lt;span style=&quot;color:green&quot;&gt;success&lt;/span&gt;<br /> SMTPS: postmaster@domain.tld --&gt; &lt;span style=&quot;color:green&quot;&gt;success&lt;/span&gt;<br /> <br /> [http://wiki.qmailtoaster.org/index.php?title=Simscan Scanners]<br /> [http://wiki.qmailtoaster.org/index.php?title=Alias_Domains Many Domain Install (Alias Domain)]<br /> Qmail-1.03-3.3.11 (OpenSSL3)<br /> [https://github.com/qmtoaster/patches/blob/master/EL9/README.md Patches] applied<br /> <br /> == Install certificate ==<br /> [[Certificate]] *Note: The certificate must be 2048 bits or more<br /> == Test certificate ==<br /> # curl --verbose smtps://mail.domain.tld<br /> # curl --verbose imaps://mail.domain.tld<br /> or<br /> # openssl s_client mail.domain.tld:465<br /> # openssl s_client mail.domain.tld:993 <br /> &lt;pre&gt;<br /> &lt;nowiki&gt;*&lt;/nowiki&gt; Server certificate:<br /> &lt;nowiki&gt;*&lt;/nowiki&gt; subject: CN=mail.domain.tld<br /> &lt;nowiki&gt;*&lt;/nowiki&gt; start date: Jul 30 09:16:16 2024 GMT<br /> &lt;nowiki&gt;*&lt;/nowiki&gt; expire date: Oct 28 09:16:15 2024 GMT<br /> &lt;nowiki&gt;*&lt;/nowiki&gt; subjectAltName: host &quot;mail.domain.tld&quot; matched cert's &quot;mail.domain.tld&quot;<br /> &lt;nowiki&gt;*&lt;/nowiki&gt; issuer: C=US; O=Let's Encrypt; CN=R11<br /> &lt;nowiki&gt;*&lt;/nowiki&gt; SSL certificate verify ok.<br /> &lt;/pre&gt;<br /> <br /> If the following error is encountered when testing the new certificate the certificate is most likely less than 2048 bits<br /> <br /> 806B7387577F0000:error:0A00010B:SSL routines:ssl3_get_record:wrong version number:ssl/record/ssl3_record.c:354<br /> <br /> Usually Let's Encrypt certificates are at least 2048 bits, but encountering 256 bits keys is possible. Correct by specifying the number of bits:<br /> <br /> certbot renew --cert-name -d domain.tld -d mail.domain.tld --apache &lt;span style=&quot;color:red&quot;&gt;--rsa-key-size 2048 --key-type rsa&lt;/span&gt;</div> Ebroch http://wiki.qmailtoaster.org:80/index.php?title=Main_Page&diff=1605 Main Page 2025-08-21T16:32:29Z <p>Ebroch: </p> <hr /> <div>Welcome to Qmailtoaster's Wiki page.<br /> <br /> == Background ==<br /> === Introduction ===<br /> <br /> Welcome to the Qmailtoaster wiki. Qmailtoaster is designed to be very stable and easy enough to install that even an inexperienced Linux user can install, operate, and maintain a full blown Qmail MTA. <br /> <br /> Everyone is encouraged to find ways to improve Qmailtoaster and to pass their knowledge on to others via the wiki and the [mailto:qmailtoaster-list-subscribe@qmailtoaster.com email list]. <br /> <br /> This wiki is maintained by Eric Broch and the rest of the Qmailtoaster community as a means of providing a centralized location for assisting all Qmailtoaster users.<br /> <br /> === History ===<br /> <br /> QmaitToaster was conceived by Miguel Beccari in June 2002. At the time, Miguel was an IT for Clikka.Com in Udine Italy. Miguel's goals were to provide a very stable rpm based Qmail MTA, and to build a &quot;Qmailtoaster&quot; community of users to support and develop the Qmailtoaster project. <br /> <br /> === Subsequent QmailToaster Maintainers ===<br /> <br /> 2003-2007, Nick Hemmesch<br /> <br /> 2006-2007, Erik Espinoza<br /> <br /> 2007-2011, Jake Vickers<br /> <br /> 2011-2014, Eric Shubert<br /> <br /> 2014-Present, Eric Broch<br /> <br /> <br /> For details on the evolution of the various QMailtoaster packages, see the [[Change Logs]].<br /> <br /> === Credits ===<br /> '''QMAIL''' D. J. Bernstein (http://cr.yp.to/qmail.html)<br /> <br /> '''DAEMONTOOLS''' D. J. Bernstein (http://cr.yp.to/daemontools.html)<br /> <br /> '''UCSPI-TCP''' D. J. Bernstein (http://cr.yp.to/ucspi-tcp.html)<br /> <br /> '''EZMLM''' (http://www.ezmlm.org)<br /> <br /> '''VPOPMAIL''' (http://www.inter7.com/vpopmail)<br /> <br /> '''QMAILADMIN''' (http://www.inter7.com/qmailadmin)<br /> <br /> '''VQADMIN''' (http://www.inter7.com/vqadmin)<br /> <br /> '''QMAILMRTG''' (http://www.inter7.com/qmailmrtg7)<br /> <br /> '''DOVECOT''' (https://www.dovecot.org/)<br /> <br /> == [[FAQs]] ==<br /> <br /> === Features ===<br /> <br /> * RPM packages for RHEL 7/8/9 &amp; derivatives (Rocky, Alma, &amp; Springdale)<br /> * DKIM, SPF and SRS<br /> * Integrated ClamAV, DSPAM, Rspam, Spamassassin, ClamAV.<br /> * Warlord virus and worm loader realtime MIME signature scanning<br /> * CHKUSER 2.0 functions for qmail-smtpd<br /> * Qmail-Tap provides email archive capability<br /> * Virtual Domains and Virtual Users using MySQL<br /> * Autoresponder for vacation/away from office messages<br /> * Integrated Mailing List (ezmlm)<br /> * Web-based email: Squirrelmail, Roundcube, Afterlogic, Rainloop.<br /> * Web-based admin: QmailAdmin<br /> * Dovecot: POP3, POP3-SSL, IMAP and IMAP-SSL<br /> * Submission port (587) allows roaming users to skip RBL checks and port 25 blocks<br /> * SMTPS port (465)<br /> * eMPF patch for advanced policy control over email<br /> <br /> === Additional Resources ===<br /> <br /> You have found the wiki, congratulations. There is a lot of good information here.<br /> <br /> There is a [http://www.mail-archive.com/qmailtoaster-list@qmailtoaster.com/info.html mailing list] which is a good source for help.<br /> <br /> The [http://www.mail-archive.com/qmailtoaster-list@qmailtoaster.com/info.html mailing list] has a [http://www.mail-archive.com/qmailtoaster-list@qmailtoaster.com/ searchable archive], and it is available for searching and news access as well from [http://dir.gmane.org/gmane.mail.qmail.toaster gmane.org]. Many questions have been answered in the archive, so please do some searching before asking a question on the list.<br /> <br /> There is the chat room #qmailtoaster at irc.freenode.net. You might find help there.<br /> <br /> There is a good graphic titled [http://www.nrg4u.com/ THE BIG Qmail PICTURE] available in several formats that explains how qmail works. The author does not indicate that is free to distribute, however it is free for personal use. Get a copy for yourself, as it is a handy reference.<br /> <br /> Also grab a copy of Sills' [http://www.lifewithqmail.org/ Life with qmail] in whatever format you choose. It too is a valuable reference.<br /> <br /> == Installation ==<br /> <br /> === RHEL 7 &amp; Derivatives ===<br /> [[CentOS 7 QT Install]]<br /> '''Patch''' [https://github.com/qmtoaster/patches/blob/master/cos7/README.md Current] [https://github.com/qmtoaster/patches/tree/master/cos7/3.3.11 Current MD OpenSSL111]<br /> <br /> === RHEL 8 &amp; Derivatives ===<br /> [[Rocky, Alma, Springdale 8 QT Install]]<br /> '''Patch''' [https://github.com/qmtoaster/patches/blob/master/EL9/README.md Testing]<br /> <br /> === RHEL 9 &amp; Derivatives ===<br /> [[Rocky, Alma, Springdale 9 QT Install]]<br /> '''Patch''' [https://github.com/qmtoaster/patches/tree/master/EL9 Testing]<br /> <br /> === RHEL 10 &amp; Derivatives ===<br /> [[Rocky, Alma, Springdale 10 QT Install]]<br /> '''Patch''' [https://github.com/qmtoaster/patches/tree/master/EL9 Testing] <br /> <br /> <br /> == [[Configuration]] ==<br /> <br /> == [[http://qtp.qmailtoaster.com/ QmailToaster-Plus]] ==<br /> <br /> == [[Migrate]] ==<br /> <br /> == [[Backup]] ==<br /> <br /> == [[Troubleshooting]] ==<br /> <br /> == [[User Tips &amp; Tricks]] ==<br /> <br /> == [[Change Logs]] ==<br /> <br /> == [[QMT Wiki]] ==<br /> <br /> == Modifications ==<br /> === [[Groupware]]===<br /> === [[Webmail]]===<br /> === [[Calendar]]===<br /> === [[ActiveSync (Z-push)]]===<br /> == [[Wish List]] ==</div> Ebroch http://wiki.qmailtoaster.org:80/index.php?title=Vconvert_Backend&diff=1604 Vconvert Backend 2025-06-17T00:40:42Z <p>Ebroch: </p> <hr /> <div>[[Migrate|Back]]<br /> '''Migrate'''<br /> [[EL7_to_EL_8_or_9|Instructions]] <br /> <br /> 1) On destination host<br /> # Convert vpasswd files to mysql vpopmail db, aliases must be handled manually<br /> /home/vpopmail/bin/vconvert -c -m<br /> qmailctl cdb &amp;&amp; qmailctl start &amp;&amp; sleep 2s &amp;&amp; systemctl start dovecot &amp;&amp; toaststat<br /> <br /> 2) In place conversion*<br /> # qmailctl stop &amp;&amp; systemctl stop dovecot<br /> # yum install -y yum-utils<br /> # yum-config-manager --enable qmt-current<br /> # yum reinstall qmail qmailadmin dovecot* ezmlm* vpopmail vqadmin<br /> # /home/vpopmail/bin/vconvert -c -m<br /> # qmailctl start &amp;&amp; sleep 2s &amp;&amp; systemctl start dovecot &amp;&amp; toaststat<br /> * Aliases must be done manually.<br /> Will convert to many domain format if <br /> vpopamil was compiled with this option<br /> <br /> Questions, comments, suggestions, corrections...contact Eric on the QMT list</div> Ebroch http://wiki.qmailtoaster.org:80/index.php?title=Vconvert_Backend&diff=1603 Vconvert Backend 2025-06-17T00:40:23Z <p>Ebroch: </p> <hr /> <div>[[Migrate|Back]]<br /> '''Migrate'''<br /> [[EL7_to_EL_8_or_9|Instructions]] <br /> <br /> 1) On destination host<br /> # Convert vpasswd files to mysql vpopmail db, aliases must be handled manually<br /> /home/vpopmail/bin/vconvert -c -m<br /> qmailctl cdb &amp;&amp; qmailctl start &amp;&amp; sleep 2s &amp;&amp; systemctl start dovecot &amp;&amp; toaststat<br /> <br /> 2) In place conversion*<br /> <br /> # qmailctl stop &amp;&amp; systemctl stop dovecot<br /> # yum install -y yum-utils<br /> # yum-config-manager --enable qmt-current<br /> # yum reinstall qmail qmailadmin dovecot* ezmlm* vpopmail vqadmin<br /> # /home/vpopmail/bin/vconvert -c -m<br /> # qmailctl start &amp;&amp; sleep 2s &amp;&amp; systemctl start dovecot &amp;&amp; toaststat<br /> * Aliases must be done manually.<br /> Will convert to many domain format if <br /> vpopamil was compiled with this option<br /> <br /> Questions, comments, suggestions, corrections...contact Eric on the QMT list</div> Ebroch http://wiki.qmailtoaster.org:80/index.php?title=Roundcube&diff=1602 Roundcube 2025-03-26T20:25:19Z <p>Ebroch: </p> <hr /> <div>[[Webmail|Back]]&lt;br&gt;<br /> EL 8 &amp; 9 should already have roundcubemail installed, otherwise...<br /> # dnf -y install epel-release<br /> # dnf config-manager --set-enabled powertools<br /> # dnf -y install https://rpms.remirepo.net/enterprise/remi-release-8.rpm<br /> # dnf -y module reset php<br /> # dnf module install php:remi-8.1<br /> # yum -y install git yum-utils epel-release php-mysql roundcubemail<br /> # mysql --defaults-extra-file=$credfile -e &quot;create database roundcube character set utf8 collate utf8_bin&quot;<br /> # mysql --defaults-extra-file=$credfile -e &quot;CREATE USER roundcube@localhost IDENTIFIED BY 'p4ssw3rd'&quot;<br /> # mysql --defaults-extra-file=$credfile -e &quot;GRANT ALL PRIVILEGES ON roundcube.* TO roundcube@localhost&quot;<br /> # mysql --defaults-extra-file=$credfile roundcube &lt; /usr/share/roundcubemail/SQL/mysql.initial.sql<br /> # cp -p /etc/httpd/conf.d/roundcubemail.conf /etc/httpd/conf.d/roundcubemail.conf.bak<br /> # wget -O /etc/roundcubemail/config.inc.php http://www.qmailtoaster.org/rc.default.config.rhelgt7<br /> # wget -O /etc/httpd/conf.d/roundcubemail.conf http://www.qmailtoaster.org/rc.httpd.config<br /> # sed -i 's/\;date.timezone.*/date.timezone = &quot;America\/Denver&quot;/' /etc/php.ini | sleep 2 | cat /etc/php.ini | grep date.timezone.*=<br /> # systemctl restart httpd<br /> <br /> Access https://my.roundcube.server/email<br /> <br /> Add password support [http://wiki.qmailtoaster.org/index.php?title=Vpopmail_daemon Daemonize vpopmail]<br /> # [ &quot;`grep \'password\', /etc/roundcubemail/config.inc.php`&quot; = &quot;&quot; ] &amp;&amp; \<br /> perl -ni -le 'BEGIN{ $q=chr(39), $pw=&quot;password&quot; } print; print &quot; $q$pw$q,&quot; if /$config.*'plugins'.*=.*array/' \<br /> /etc/roundcubemail/config.inc.php<br /> # wget -O /usr/share/roundcubemail/plugins/password/config.inc.php http://www.qmailtoaster.org/rc.password.config<br /> <br /> Add password support MySQL<br /> # [ &quot;`grep \'password\', /etc/roundcubemail/config.inc.php`&quot; = &quot;&quot; ] &amp;&amp; \<br /> perl -ni -le 'BEGIN{ $q=chr(39), $pw=&quot;password&quot; } print; print &quot; $q$pw$q,&quot; if /$config.*'plugins'.*=.*array/' \<br /> /etc/roundcubemail/config.inc.php<br /> (Many domain)<br /> # wget -O /usr/share/roundcubemail/plugins/password/config.inc.php http://www.qmailtoaster.org/rc.password.config.mysqlmd<br /> (Domain table<br /> # wget -O /usr/share/roundcubemail/plugins/password/config.inc.php http://www.qmailtoaster.org/rc.password.config.mysqldt<br /> <br /> Add Carddav (Everyone should logout of roundcube at this point)<br /> # cd /usr/share/roundcubemail/plugins<br /> # git clone https://github.com/blind-coder/rcmcarddav carddav<br /> # cd carddav<br /> # curl -sS https://getcomposer.org/installer | php<br /> # php composer.phar install<br /> # [ &quot;`grep \'carddav\', /etc/roundcubemail/config.inc.php`&quot; = &quot;&quot; ] &amp;&amp; \<br /> perl -ni -le 'BEGIN{ $q=chr(39), $cd=&quot;carddav&quot; } print; print &quot; $q$cd$q,&quot; if /$config.*'plugins'.*=.*array/' \<br /> /etc/roundcubemail/config.inc.php<br /> <br /> &lt;/pre&gt;</div> Ebroch http://wiki.qmailtoaster.org:80/index.php?title=Vpopmail_daemon&diff=1601 Vpopmail daemon 2025-03-26T20:10:17Z <p>Ebroch: </p> <hr /> <div>[[Vpopmail|Back]]<br /> &lt;pre&gt;<br /> # cd /var/qmail/supervise<br /> # install -d -m1751 vpopmaild &amp;&amp; chmod 1700 vpopmaild &amp;&amp; chown qmaill:qmail vpopmaild &amp;&amp; install -d -m751 vpopmaild/log &amp;&amp; chmod 0700 vpopmaild/log<br /> # printf '%s\n' \<br /> '#!/bin/sh' \<br /> 'QMAILDUID=`id -u vpopmail`' \<br /> 'NOFILESGID=`id -g vpopmail`' \<br /> 'VPOPD=/home/vpopmail/bin/vpopmaild' \<br /> '' \<br /> 'exec 2&gt;&amp;1' 'exec /usr/bin/tcpserver -vRHD -u &quot;$QMAILDUID&quot; -g &quot;$NOFILESGID&quot; 127.0.0.1 89 $VPOPD' \<br /> &gt;./vpopmaild/run<br /> <br /> # printf '%s\n' \<br /> '#!/bin/sh' \<br /> 'LOGSIZE=`cat /var/qmail/control/logsize`' \<br /> 'LOGCOUNT=`cat /var/qmail/control/logcount`' \<br /> 'exec /usr/bin/setuidgid qmaill \' \<br /> ' /usr/bin/multilog t s$LOGSIZE n$LOGCOUNT \' \<br /> ' /var/log/qmail/vpopmaild 2&gt;&amp;1' \<br /> &gt; ./vpopmaild/log/run<br /> <br /> # chown -R qmaill:qmail vpopmaild &amp;&amp; chmod 0751 ./vpopmaild/run &amp;&amp; chmod 0751 ./vpopmaild/log/run<br /> # firewall-cmd --zone=public --add-port=89/tcp --permanent &amp;&amp; firewall-cmd --reload<br /> # qmailctl stop &amp;&amp; sleep 2 &amp;&amp; qmailctl start<br /> # yum -y install telnet<br /> # telnet 127.0.0.1 89<br /> Trying 127.0.0.1...<br /> Connected to 127.0.0.1.<br /> Escape character is '^]'.<br /> +OK<br /> quit<br /> +OK<br /> Connection closed by foreign host.<br /> &lt;/pre&gt;</div> Ebroch http://wiki.qmailtoaster.org:80/index.php?title=Roundcube&diff=1600 Roundcube 2025-03-26T20:09:01Z <p>Ebroch: </p> <hr /> <div>[[Webmail|Back]]&lt;br&gt;<br /> EL 8 &amp; 9 should already have roundcubemail installed, otherwise...<br /> # dnf -y install epel-release<br /> # dnf config-manager --set-enabled powertools<br /> # dnf -y install https://rpms.remirepo.net/enterprise/remi-release-8.rpm<br /> # dnf -y module reset php<br /> # dnf module install php:remi-8.1<br /> # yum -y install git yum-utils epel-release php-mysql roundcubemail<br /> # mysql --defaults-extra-file=$credfile -e &quot;create database roundcube character set utf8 collate utf8_bin&quot;<br /> # mysql --defaults-extra-file=$credfile -e &quot;CREATE USER roundcube@localhost IDENTIFIED BY 'p4ssw3rd'&quot;<br /> # mysql --defaults-extra-file=$credfile -e &quot;GRANT ALL PRIVILEGES ON roundcube.* TO roundcube@localhost&quot;<br /> # mysql --defaults-extra-file=$credfile roundcube &lt; /usr/share/roundcubemail/SQL/mysql.initial.sql<br /> # cp -p /etc/httpd/conf.d/roundcubemail.conf /etc/httpd/conf.d/roundcubemail.conf.bak<br /> # wget -O /etc/roundcubemail/config.inc.php http://www.qmailtoaster.org/rc.default.config.rhelgt7<br /> # wget -O /etc/httpd/conf.d/roundcubemail.conf http://www.qmailtoaster.org/rc.httpd.config<br /> # sed -i 's/\;date.timezone.*/date.timezone = &quot;America\/Denver&quot;/' /etc/php.ini | sleep 2 | cat /etc/php.ini | grep date.timezone.*=<br /> # systemctl restart httpd<br /> <br /> Access https://my.roundcube.server/email<br /> <br /> Add password support [http://wiki.qmailtoaster.org/index.php?title=Vpopmail_daemon Daemonize vpopmail]<br /> # [ &quot;`grep \'password\', /etc/roundcubemail/config.inc.php`&quot; = &quot;&quot; ] &amp;&amp; \<br /> perl -ni -le 'BEGIN{ $q=chr(39), $pw=&quot;password&quot; } print; print &quot; $q$pw$q,&quot; if /$config.*'plugins'.*=.*array/' \<br /> /etc/roundcubemail/config.inc.php<br /> # wget -O /usr/share/roundcubemail/plugins/password/config.inc.php http://www.qmailtoaster.org/rc.password.config<br /> <br /> Add password support MySQL<br /> # [ &quot;`grep \'password\', /etc/roundcubemail/config.inc.php`&quot; = &quot;&quot; ] &amp;&amp; \<br /> perl -ni -le 'BEGIN{ $q=chr(39), $pw=&quot;password&quot; } print; print &quot; $q$pw$q,&quot; if /$config.*'plugins'.*=.*array/' \<br /> /etc/roundcubemail/config.inc.php<br /> (Many domain)<br /> # wget -O /usr/share/roundcubemail/plugins/password/config.inc.php http://www.qmailtoaster.org/rc.password.config.mysql<br /> (Domain table<br /> # wget -O /usr/share/roundcubemail/plugins/password/config.inc.php http://www.qmailtoaster.org/rc.password.config.mysql.2<br /> <br /> Add Carddav (Everyone should logout of roundcube at this point)<br /> # cd /usr/share/roundcubemail/plugins<br /> # git clone https://github.com/blind-coder/rcmcarddav carddav<br /> # cd carddav<br /> # curl -sS https://getcomposer.org/installer | php<br /> # php composer.phar install<br /> # [ &quot;`grep \'carddav\', /etc/roundcubemail/config.inc.php`&quot; = &quot;&quot; ] &amp;&amp; \<br /> perl -ni -le 'BEGIN{ $q=chr(39), $cd=&quot;carddav&quot; } print; print &quot; $q$cd$q,&quot; if /$config.*'plugins'.*=.*array/' \<br /> /etc/roundcubemail/config.inc.php<br /> <br /> &lt;/pre&gt;</div> Ebroch http://wiki.qmailtoaster.org:80/index.php?title=Roundcube&diff=1599 Roundcube 2025-03-26T20:08:17Z <p>Ebroch: </p> <hr /> <div>[[Webmail|Back]]&lt;br&gt;<br /> EL 8 &amp; 9 should already have roundcubemail installed, otherwise...<br /> # dnf -y install epel-release<br /> # dnf config-manager --set-enabled powertools<br /> # dnf -y install https://rpms.remirepo.net/enterprise/remi-release-8.rpm<br /> # dnf -y module reset php<br /> # dnf module install php:remi-8.1<br /> # yum -y install git yum-utils epel-release php-mysql roundcubemail<br /> # mysql --defaults-extra-file=$credfile -e &quot;create database roundcube character set utf8 collate utf8_bin&quot;<br /> # mysql --defaults-extra-file=$credfile -e &quot;CREATE USER roundcube@localhost IDENTIFIED BY 'p4ssw3rd'&quot;<br /> # mysql --defaults-extra-file=$credfile -e &quot;GRANT ALL PRIVILEGES ON roundcube.* TO roundcube@localhost&quot;<br /> # mysql --defaults-extra-file=$credfile roundcube &lt; /usr/share/roundcubemail/SQL/mysql.initial.sql<br /> # cp -p /etc/httpd/conf.d/roundcubemail.conf /etc/httpd/conf.d/roundcubemail.conf.bak<br /> # wget -O /etc/roundcubemail/config.inc.php http://www.qmailtoaster.org/rc.default.config.rhelgt7<br /> # wget -O /etc/httpd/conf.d/roundcubemail.conf http://www.qmailtoaster.org/rc.httpd.config<br /> # sed -i 's/\;date.timezone.*/date.timezone = &quot;America\/Denver&quot;/' /etc/php.ini | sleep 2 | cat /etc/php.ini | grep date.timezone.*=<br /> # systemctl restart httpd<br /> <br /> Access https://my.roundcube.server/email<br /> <br /> Add password support [http://wiki.qmailtoaster.org/index.php?title=Vpopmail_daemon Daemonize vpopmail]<br /> # [ &quot;`grep \'password\', /etc/roundcubemail/config.inc.php`&quot; = &quot;&quot; ] &amp;&amp; \<br /> perl -ni -le 'BEGIN{ $q=chr(39), $pw=&quot;password&quot; } print; print &quot; $q$pw$q,&quot; if /$config.*'plugins'.*=.*array/' \<br /> /etc/roundcubemail/config.inc.php<br /> # wget -O /usr/share/roundcubemail/plugins/password/config.inc.php http://www.qmailtoaster.org/rc.password.config<br /> <br /> Add password support mysql<br /> # [ &quot;`grep \'password\', /etc/roundcubemail/config.inc.php`&quot; = &quot;&quot; ] &amp;&amp; \<br /> perl -ni -le 'BEGIN{ $q=chr(39), $pw=&quot;password&quot; } print; print &quot; $q$pw$q,&quot; if /$config.*'plugins'.*=.*array/' \<br /> /etc/roundcubemail/config.inc.php<br /> (Many domain)<br /> # wget -O /usr/share/roundcubemail/plugins/password/config.inc.php http://www.qmailtoaster.org/rc.password.config.mysql<br /> (Domain table<br /> # wget -O /usr/share/roundcubemail/plugins/password/config.inc.php http://www.qmailtoaster.org/rc.password.config.mysql.2<br /> <br /> Add Carddav (Everyone should logout of roundcube at this point)<br /> # cd /usr/share/roundcubemail/plugins<br /> # git clone https://github.com/blind-coder/rcmcarddav carddav<br /> # cd carddav<br /> # curl -sS https://getcomposer.org/installer | php<br /> # php composer.phar install<br /> # [ &quot;`grep \'carddav\', /etc/roundcubemail/config.inc.php`&quot; = &quot;&quot; ] &amp;&amp; \<br /> perl -ni -le 'BEGIN{ $q=chr(39), $cd=&quot;carddav&quot; } print; print &quot; $q$cd$q,&quot; if /$config.*'plugins'.*=.*array/' \<br /> /etc/roundcubemail/config.inc.php<br /> <br /> &lt;/pre&gt;</div> Ebroch http://wiki.qmailtoaster.org:80/index.php?title=Roundcube&diff=1598 Roundcube 2025-03-26T20:07:01Z <p>Ebroch: </p> <hr /> <div>[[Webmail|Back]]&lt;br&gt;<br /> EL 8 &amp; 9 should already have roundcubemail installed, otherwise...<br /> # dnf -y install epel-release<br /> # dnf config-manager --set-enabled powertools<br /> # dnf -y install https://rpms.remirepo.net/enterprise/remi-release-8.rpm<br /> # dnf -y module reset php<br /> # dnf module install php:remi-8.1<br /> # yum -y install git yum-utils epel-release php-mysql roundcubemail<br /> # mysql --defaults-extra-file=$credfile -e &quot;create database roundcube character set utf8 collate utf8_bin&quot;<br /> # mysql --defaults-extra-file=$credfile -e &quot;CREATE USER roundcube@localhost IDENTIFIED BY 'p4ssw3rd'&quot;<br /> # mysql --defaults-extra-file=$credfile -e &quot;GRANT ALL PRIVILEGES ON roundcube.* TO roundcube@localhost&quot;<br /> # mysql --defaults-extra-file=$credfile roundcube &lt; /usr/share/roundcubemail/SQL/mysql.initial.sql<br /> # cp -p /etc/httpd/conf.d/roundcubemail.conf /etc/httpd/conf.d/roundcubemail.conf.bak<br /> # wget -O /etc/roundcubemail/config.inc.php http://www.qmailtoaster.org/rc.default.config.rhelgt7<br /> # wget -O /etc/httpd/conf.d/roundcubemail.conf http://www.qmailtoaster.org/rc.httpd.config<br /> # sed -i 's/\;date.timezone.*/date.timezone = &quot;America\/Denver&quot;/' /etc/php.ini | sleep 2 | cat /etc/php.ini | grep date.timezone.*=<br /> # systemctl restart httpd<br /> <br /> Access https://my.roundcube.server/email<br /> <br /> Add password support vpopmail daemon<br /> [http://wiki.qmailtoaster.org/index.php?title=Vpopmail_daemon Enable vpopmaild]<br /> # [ &quot;`grep \'password\', /etc/roundcubemail/config.inc.php`&quot; = &quot;&quot; ] &amp;&amp; \<br /> perl -ni -le 'BEGIN{ $q=chr(39), $pw=&quot;password&quot; } print; print &quot; $q$pw$q,&quot; if /$config.*'plugins'.*=.*array/' \<br /> /etc/roundcubemail/config.inc.php<br /> # wget -O /usr/share/roundcubemail/plugins/password/config.inc.php http://www.qmailtoaster.org/rc.password.config<br /> <br /> Add password support mysql<br /> # [ &quot;`grep \'password\', /etc/roundcubemail/config.inc.php`&quot; = &quot;&quot; ] &amp;&amp; \<br /> perl -ni -le 'BEGIN{ $q=chr(39), $pw=&quot;password&quot; } print; print &quot; $q$pw$q,&quot; if /$config.*'plugins'.*=.*array/' \<br /> /etc/roundcubemail/config.inc.php<br /> (Many domain)<br /> # wget -O /usr/share/roundcubemail/plugins/password/config.inc.php http://www.qmailtoaster.org/rc.password.config.mysql<br /> (Domain table<br /> # wget -O /usr/share/roundcubemail/plugins/password/config.inc.php http://www.qmailtoaster.org/rc.password.config.mysql.2<br /> <br /> Add Carddav (Everyone should logout of roundcube at this point)<br /> # cd /usr/share/roundcubemail/plugins<br /> # git clone https://github.com/blind-coder/rcmcarddav carddav<br /> # cd carddav<br /> # curl -sS https://getcomposer.org/installer | php<br /> # php composer.phar install<br /> # [ &quot;`grep \'carddav\', /etc/roundcubemail/config.inc.php`&quot; = &quot;&quot; ] &amp;&amp; \<br /> perl -ni -le 'BEGIN{ $q=chr(39), $cd=&quot;carddav&quot; } print; print &quot; $q$cd$q,&quot; if /$config.*'plugins'.*=.*array/' \<br /> /etc/roundcubemail/config.inc.php<br /> <br /> &lt;/pre&gt;</div> Ebroch http://wiki.qmailtoaster.org:80/index.php?title=Roundcube&diff=1597 Roundcube 2025-03-26T20:06:42Z <p>Ebroch: </p> <hr /> <div>[[Webmail|Back]]&lt;br&gt;<br /> EL 8 &amp; 9 should already have roundcubemail installed, otherwise...<br /> # dnf -y install epel-release<br /> # dnf config-manager --set-enabled powertools<br /> # dnf -y install https://rpms.remirepo.net/enterprise/remi-release-8.rpm<br /> # dnf -y module reset php<br /> # dnf module install php:remi-8.1<br /> # yum -y install git yum-utils epel-release php-mysql roundcubemail<br /> # mysql --defaults-extra-file=$credfile -e &quot;create database roundcube character set utf8 collate utf8_bin&quot;<br /> # mysql --defaults-extra-file=$credfile -e &quot;CREATE USER roundcube@localhost IDENTIFIED BY 'p4ssw3rd'&quot;<br /> # mysql --defaults-extra-file=$credfile -e &quot;GRANT ALL PRIVILEGES ON roundcube.* TO roundcube@localhost&quot;<br /> # mysql --defaults-extra-file=$credfile roundcube &lt; /usr/share/roundcubemail/SQL/mysql.initial.sql<br /> # cp -p /etc/httpd/conf.d/roundcubemail.conf /etc/httpd/conf.d/roundcubemail.conf.bak<br /> # wget -O /etc/roundcubemail/config.inc.php http://www.qmailtoaster.org/rc.default.config.rhelgt7<br /> # wget -O /etc/httpd/conf.d/roundcubemail.conf http://www.qmailtoaster.org/rc.httpd.config<br /> # sed -i 's/\;date.timezone.*/date.timezone = &quot;America\/Denver&quot;/' /etc/php.ini | sleep 2 | cat /etc/php.ini | grep date.timezone.*=<br /> # systemctl restart httpd<br /> <br /> Access https://my.roundcube.server/email<br /> <br /> Add password support vpopmail daemon<br /> [http://wiki.qmailtoaster.org/index.php?title=Vpopmail_daemon Enable vpopmaild]<br /> # [ &quot;`grep \'password\', /etc/roundcubemail/config.inc.php`&quot; = &quot;&quot; ] &amp;&amp; \<br /> perl -ni -le 'BEGIN{ $q=chr(39), $pw=&quot;password&quot; } print; print &quot; $q$pw$q,&quot; if /$config.*'plugins'.*=.*array/' \<br /> /etc/roundcubemail/config.inc.php<br /> # wget -O /usr/share/roundcubemail/plugins/password/config.inc.php http://www.qmailtoaster.org/rc.password.config<br /> <br /> Add password support mysql<br /> # [ &quot;`grep \'password\', /etc/roundcubemail/config.inc.php`&quot; = &quot;&quot; ] &amp;&amp; \<br /> perl -ni -le 'BEGIN{ $q=chr(39), $pw=&quot;password&quot; } print; print &quot; $q$pw$q,&quot; if /$config.*'plugins'.*=.*array/' \<br /> /etc/roundcubemail/config.inc.php<br /> (Many domain)<br /> # wget -O /usr/share/roundcubemail/plugins/password/config.inc.php http://www.qmailtoaster.org/rc.password.config.mysql<br /> (Domain table<br /> # wget -O /usr/share/roundcubemail/plugins/password/config.inc.php http://www.qmailtoaster.org/rc.password.config.mysql.2<br /> <br /> Add Carddav (Everyone should logout of roundcube at this point)<br /> # cd /usr/share/roundcubemail/plugins<br /> # git clone https://github.com/blind-coder/rcmcarddav carddav<br /> # cd carddav<br /> # curl -sS https://getcomposer.org/installer | php<br /> # php composer.phar install<br /> # [ &quot;`grep \'carddav\', /etc/roundcubemail/config.inc.php`&quot; = &quot;&quot; ] &amp;&amp; \<br /> perl -ni -le 'BEGIN{ $q=chr(39), $cd=&quot;carddav&quot; } print; print &quot; $q$cd$q,&quot; if /$config.*'plugins'.*=.*array/' \<br /> /etc/roundcubemail/config.inc.php<br /> <br /> &lt;/pre&gt;</div> Ebroch http://wiki.qmailtoaster.org:80/index.php?title=Dovecot_Active_Directory_Authentication&diff=1596 Dovecot Active Directory Authentication 2025-01-26T23:43:01Z <p>Ebroch: </p> <hr /> <div>[[Configuration#Dovecot_LDAP_Authentication|Back]]&lt;br&gt;<br /> <br /> Assumes working AD server<br /> <br /> # cd /etc/dovecot<br /> # cat &gt; dovecot-ldap.conf.ext &lt;&lt; __EOF__<br /> hosts = ad.domain.tld<br /> ldap_version = 3<br /> base = dc=domain,dc=tld<br /> auth_bind_userdn = %u<br /> auth_bind = yes<br /> __EOF__<br /> <br /> Change passdb; userdb untouched<br /> # Authenticates by AD server<br /> passdb {<br /> driver = ldap<br /> args = /etc/dovecot/dovecot-ldap.conf.ext<br /> }<br /> # Retrieves user home directory, mail directory, uid, and gid <br /> userdb {<br /> driver = sql<br /> args = /etc/dovecot/dovecot-sql.conf.ext<br /> }<br /> <br /> # systemctl restart dovecot<br /> <br /> [[Qmail_Dovecot_Authentication|Configure QMT Dovecot authorization]]</div> Ebroch http://wiki.qmailtoaster.org:80/index.php?title=Dovecot_Active_Directory_Authentication&diff=1595 Dovecot Active Directory Authentication 2025-01-26T23:42:09Z <p>Ebroch: </p> <hr /> <div>[[Configuration#Dovecot_LDAP_Authentication|Back]]&lt;br&gt;<br /> <br /> Assumes working AD server<br /> <br /> # cd /etc/dovecot<br /> # cat &gt; dovecot-ldap.conf.ext &lt;&lt; __EOF__<br /> hosts = ad.domain.tld<br /> ldap_version = 3<br /> base = dc=domain,dc=tld<br /> auth_bind_userdn = %u<br /> auth_bind = yes<br /> __EOF__<br /> <br /> Change passdb; userdb untouched<br /> # Authenticates by AD server<br /> passdb {<br /> driver = ldap<br /> args = /etc/dovecot/dovecot-ldap.conf.ext<br /> }<br /> # Retrieves user home directory, mail directory, uid, and gid <br /> userdb {<br /> driver = sql<br /> args = /etc/dovecot/dovecot-sql.conf.ext<br /> }<br /> <br /> # systemctl restart dovecot<br /> <br /> [[Qmail_Dovecot_Authentication|Configure QMT Dovecot authorization]]</div> Ebroch http://wiki.qmailtoaster.org:80/index.php?title=Dovecot_Active_Directory_Authentication&diff=1594 Dovecot Active Directory Authentication 2025-01-26T23:37:11Z <p>Ebroch: </p> <hr /> <div>[[Configuration#Dovecot_LDAP_Authentication|Back]]&lt;br&gt;<br /> <br /> Assumes working AD server<br /> <br /> # cd /etc/dovecot<br /> # cat &gt; dovecot-ldap.conf.ext &lt;&lt; __EOF__<br /> hosts = ad.domain.tld<br /> ldap_version = 3<br /> base = dc=domain,dc=tld<br /> auth_bind_userdn = %u<br /> auth_bind = yes<br /> __EOF__<br /> <br /> Change passdb, userdb should remain the same<br /> passdb {<br /> driver = ldap<br /> args = /etc/dovecot/dovecot-ldap.conf.ext<br /> }<br /> userdb {<br /> driver = sql<br /> args = /etc/dovecot/dovecot-sql.conf.ext<br /> }<br /> <br /> # systemctl restart dovecot<br /> <br /> [[Qmail_Dovecot_Authentication|Configure QMT Dovecot authorization]]</div> Ebroch http://wiki.qmailtoaster.org:80/index.php?title=Dovecot_Active_Directory_Authentication&diff=1593 Dovecot Active Directory Authentication 2025-01-13T18:29:35Z <p>Ebroch: </p> <hr /> <div>[[Configuration#Dovecot_LDAP_Authentication|Back]]&lt;br&gt;<br /> <br /> Assumes working AD server<br /> <br /> # cd /etc/dovecot<br /> # cat &gt; dovecot-ldap.conf.ext &lt;&lt; __EOF__<br /> hosts = ad.domain.tld<br /> ldap_version = 3<br /> base = dc=domain,dc=tld<br /> auth_bind_userdn = %u<br /> auth_bind = yes<br /> __EOF__<br /> <br /> Add to /etc/dovecot.conf while commenting any other passdb and userdb settings<br /> mail_location = maildir:~/Maildir/<br /> passdb {<br /> driver = ldap<br /> args = /etc/dovecot/dovecot-ldap.conf.ext<br /> }<br /> userdb {<br /> driver = static<br /> args = uid=89 gid=89 home=/home/vpopmail/domains/%d/%n<br /> }<br /> <br /> # systemctl restart dovecot<br /> <br /> [[Qmail_Dovecot_Authentication|Configure QMT Dovecot authorization]]</div> Ebroch http://wiki.qmailtoaster.org:80/index.php?title=Dovecot_Active_Directory_Authentication&diff=1592 Dovecot Active Directory Authentication 2025-01-13T18:28:30Z <p>Ebroch: </p> <hr /> <div>[[Configuration#Dovecot_LDAP_Authentication|Back]]&lt;br&gt;<br /> <br /> Assumes working AD server<br /> <br /> # cd /etc/dovecot<br /> # cat &gt; dovecot-ldap.conf.ext &lt;&lt; __EOF__<br /> hosts = ad.domain.tld<br /> ldap_version = 3<br /> base = dc=domain,dc=tld<br /> auth_bind_userdn = %u<br /> auth_bind = yes<br /> <br /> __EOF__<br /> <br /> Add to /etc/dovecot.conf while commenting any other passdb and userdb settings<br /> mail_location = maildir:~/Maildir/<br /> passdb {<br /> driver = ldap<br /> args = /etc/dovecot/dovecot-ldap.conf.ext<br /> }<br /> userdb {<br /> driver = static<br /> args = uid=89 gid=89 home=/home/vpopmail/domains/%d/%n<br /> }<br /> <br /> # systemctl restart dovecot<br /> <br /> [[Qmail_Dovecot_Authentication|Configure QMT Dovecot authorization]]</div> Ebroch