Files

Script Shadow acbe11489c Initial commit: VPS tutorial complet (105 etapes)

2026-04-08 16:15:11 +02:00

3.6 KiB

Raw Blame History

7. Mail

Desactiver amavisd

systemctl stop amavisd-new 2>/dev/null
systemctl disable amavisd-new 2>/dev/null

Configurer Rspamd

Voir scripts/setup_rspamd.py pour le script complet. Fichiers crees :

/etc/rspamd/local.d/classifier-bayes.conf — apprentissage Bayes + Redis
/etc/rspamd/local.d/redis.conf — serveur Redis
/etc/rspamd/local.d/metrics.conf — seuils spam
/etc/rspamd/local.d/history_redis.conf — historique
/etc/rspamd/local.d/url_reputation.conf — reputation URLs
/etc/rspamd/local.d/mx_check.conf — verification MX
/etc/rspamd/local.d/neural.conf — reseau de neurones
/etc/rspamd/local.d/neural_group.conf — groupes neurones
/etc/rspamd/local.d/milter_headers.conf — headers spam
/etc/rspamd/local.d/arc.conf — protocole ARC
/etc/rspamd/local.d/antivirus.conf — ClamAV
/etc/rspamd/local.d/groups.conf — groupes antivirus
/etc/rspamd/local.d/antivirus_group.conf — detection virus

a2enmod proxy
systemctl restart apache2
systemctl restart rspamd

Dovecot Sieve (apprentissage spam/ham)

Voir scripts/setup_dovecot_sieve.py. Configure :

Deplacement vers Junk = apprend comme spam
Deplacement depuis Junk = apprend comme ham
Quota warning a 90%

Installer les plugins necessaires :

apt install dovecot-sieve dovecot-managesieved

Creer le domaine mail

ISPConfig > Email > Domain > Add new Domain

Domain : <DOMAINE>
Enable DKIM : cocher
Generate DKIM Private-key

Ajouter DMARC

ISPConfig > DNS > Zones > <DOMAINE> > Records > TXT :

Hostname : _dmarc
Text : v=DMARC1;p=reject;sp=quarantine;pct=100;rua=mailto:<EMAIL>

Verifier SPF

Doit deja exister (cree par le template) :

TXT <DOMAINE>. v=spf1 mx a ~all

Configurer Postfix

# Verifier dans /etc/postfix/main.cf :
myhostname = mail.<DOMAINE>

Sous-domaine webmail (Roundcube)

DNS A mail -> <IP>
ISPConfig > Sites > Subdomain (vhost) : mail.<DOMAINE>
Apache Directives :

<Proxy *>
Order deny,allow
Allow from all
</Proxy>

ProxyRequests Off
ProxyPass /stats !
ProxyPass /.well-known/acme-challenge !

SetEnvIf Authorization "(.*)" HTTP_AUTHORIZATION=$1
SSLProxyEngine On
ProxyPreserveHost    On
SSLProxyVerify none
SSLProxyCheckPeerCN off
SSLProxyCheckPeerName off
SSLProxyCheckPeerExpire off

ProxyPass /webmail https://localhost:8080/webmail/
ProxyPass / https://localhost:8080/webmail/
ProxyPassReverse / https://localhost:8080/webmail/

RedirectMatch ^/$ https://mail.<DOMAINE>

Sous-domaine Rspamd

Meme principe avec proxy vers https://<DOMAINE>:8081/rspamd/.

Autoconfig (Thunderbird/Android)

Sous-domaine autoconfig.<DOMAINE> avec Apache Directives :

<FilesMatch "^.+\.xml$">
        SetHandler "proxy:unix:/run/php/php8.3-fpm.sock|fcgi://localhost"
</FilesMatch>

<FilesMatch "^.+\.json$">
        SetHandler "proxy:unix:/run/php/php8.3-fpm.sock|fcgi://localhost"
</FilesMatch>

AddHandler application/x-httpd-php .php .xml .json

<IfModule mod_speling.c>
    CheckCaseOnly on
    CheckSpelling on
</IfModule>

Creer le fichier autoconfig/mail/config-v1.1.xml (voir scripts/setup_autoconfig.py)
Mettre a jour PHP-FPM : ajouter .xml .json dans security.limit_extensions

Autodiscover (Outlook)

Meme sous-domaine pointant vers le meme dossier autoconfig. Creer autoconfig/Autodiscover/Autodiscover.xml.

Creer une boite mail

ISPConfig > Email > Email Mailbox > Add new Mailbox

Tester l'envoi

echo "Test" | mail -s "Test" -r contact@<DOMAINE> votre@email.com

MAILER_DSN pour Symfony

MAILER_DSN=smtp://127.0.0.1:25?auto_tls=false

3.6 KiB Raw Blame History