Port 587

Credits

Various bits of code, scripts, and procedures were put together with information from John Simpson's qmail.jms1.net website. It's an excellent resource on managing and setting up a Qmail server.

A TLS-encrypted SMTP service so your users can send mail through your server without passing clear-text passwords across the network.

Set up the service directory, download John Simpson's SMTP run script, and set it's permissions:

cd /var/service
mkdir -m 1755 smtp-tls
cd smtp-tls
wget http://qmail.jms1.net/scripts/service-qmail-smtpd-run
mv service-qmail-smtpd-run run
chmod 700 run

Edit /var/service/smtp-tls/run and set the appropriate options:

IP=<IP ADDRESS TO LISTEN ON>
PORT=587
SSL=0
FORCE_TLS=1
DENY_TLS=0
AUTH=1
REQUIRE_AUTH=1
ALLOW_INSECURE_AUTH=0
AUTH_CDB="$VQ/control/auth.cdb"
CHECKPW="/home/vpopmail/bin/vchkpw"

Unless for some reason you want to be using validrcptto on your authenticated SMTP services, you should disable it in the run script:

#VALIDRCPTTO_CDB="$VQ/control/validrcptto.cdb"
#VALIDRCPTTO_LIMIT=10
#VALIDRCPTTO_LOG=2

Set up the "log" directory, download its "run" script, and set its permissions:

mkdir -m 755 log
cd log
wget http://qmail.jms1.net/scripts/run.log
mv run.log run
chmod 700 run

Create /var/qmail/control/tlsserverciphers with the contents:

ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:ECDH+3DES:DH+3DES:RSA+AESGCM:RSA+AES:RSA+3DES:!aNULL:!MD5:!DSS

Create the symbolic link in /service to start the service:

ln -s /var/service/smtp-tls /service/

Recent Updates

  • nginx
    8 months 3 weeks ago
    1.27.2 update
  • lighttpd
    9 months 4 days ago
    Drupal 10/11 config
  • Drupal 11
    9 months 5 days ago
  • PHP
    9 months 6 days ago
    PHP 8.3.11 and AlmaLinux
  • Pound SSL Proxy
    9 months 6 days ago
    New version of Pound