centos

hostnamectl --static set-hostname mail.jaranguda.com

yum remove exim* sendmail*

yum install mariadb-server mariadb

service mariadb start

mysql_secure_installation

create database email;
GRANT ALL PRIVILEGES ON email.* TO "dbmail"@"localhost" IDENTIFIED BY "sFRjKXVkUef3VHxTXiLT";

mkdir /etc/postfix/ssl;
cd /etc/postfix/ssl;
openssl req -x509 -nodes -newkey rsa:2048 -keyout mail.xxx.com.key -out mail.xxx.com.crt -nodes -days 3650

$ openssl req -x509 -nodes -newkey rsa:2048 -keyout mail.xxx.com.key -out mail.indounix.com.crt -nodes -days 3650
Generating a 2048 bit RSA private key
.............................................................................................+++
..................................................................+++
writing new private key to 'mail.xxx.com.key'
-----
You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
-----
Country Name (2 letter code) [XX]:ID
State or Province Name (full name) []:Jakarta
Locality Name (eg, city) [Default City]:Jakarta
Organization Name (eg, company) [Default Company Ltd]:SSL
Organizational Unit Name (eg, section) []:SSL
Common Name (eg, your name or your server's hostname) []:mail.xxx.com
Email Address []:[email protected]
[[email protected]] /etc/postfix/ssl 
$ ls
mail.xxx.com.crt  mail.xxx.com.key

yum -y --enablerepo=centosplus install postfix

user = dbmail
password = sFRjKXVkUef3VHxTXiLT
dbname = email
query = SELECT domain AS virtual FROM domains WHERE domain='%s'
hosts = 127.0.0.1

user = dbmail
password = sFRjKXVkUef3VHxTXiLT
dbname = email
query = SELECT email FROM users WHERE email='%s'
hosts = 127.0.0.1

user = dbmail
password = sFRjKXVkUef3VHxTXiLT
dbname = email
query = SELECT destination FROM forwardings WHERE source='%s'
hosts = 127.0.0.1

user = dbmail
password = sFRjKXVkUef3VHxTXiLT
dbname = email
query = SELECT CONCAT(SUBSTRING_INDEX(email,'@',-1),'/',SUBSTRING_INDEX(email,'@',1),'/') FROM users WHERE email='%s'
hosts = 127.0.0.1

submission inet n	-	n	-	-	smtpd
  -o syslog_name=postfix/submission
  -o smtpd_tls_security_level=encrypt
  -o smtpd_sasl_auth_enable=yes
  -o smtpd_reject_unlisted_recipient=no

#myhostname = host.domain.tld
#mydomain = domain.tld
#myorigin = $myhostname
#inet_interfaces = all

myhostname = mail.indounix.com
mydomain = indounix.com
myorigin = $myhostname
inet_interfaces = all

smtpd_use_tls = yes
smtpd_tls_auth_only = yes
smtpd_tls_cert_file = /etc/postfix/ssl/mail.indounix.com.crt
smtpd_tls_key_file = /etc/postfix/ssl/mail.indounix.com.key
smtpd_tls_mandatory_protocols=!SSLv2,!SSLv3
smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache
smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache
 
virtual_transport = lmtp:unix:private/dovecot-lmtp
virtual_alias_maps = proxy:mysql:/etc/postfix/mysql-virtual_forwardings.cf, mysql:/etc/postfix/mysql-virtual_email2email.cf
virtual_mailbox_domains = proxy:mysql:/etc/postfix/mysql-virtual_domains.cf
virtual_mailbox_maps = proxy:mysql:/etc/postfix/mysql-virtual_mailboxes.cf
virtual_mailbox_base = /home/vmail
 
#SASL
smtpd_sasl_type = dovecot
smtpd_sasl_path = private/auth
smtpd_sasl_auth_enable = yes
broken_sasl_auth_clients = yes
smtpd_sasl_authenticated_header = yes
 
#Limit
smtpd_recipient_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_unauth_destination

systemctl restart  postfix.service

yum install dovecot dovecot-mysql

groupadd -g 5000 vmail
useradd -g vmail -u 5000 vmail -d /home/vmail -m
chown -R vmail.vmail /home/vmail

#separator = 
#mail_location =

separator = .
mail_location = maildir:/home/vmail/%d/%n/Maildir

auth_mechanisms = plain
!include auth-system.conf.ext
#!include auth-sql.conf.ext

auth_mechanisms = plain login
#!include auth-system.conf.ext
!include auth-sql.conf.ext

#unix_listener /var/spool/postfix/private/auth {
#  mode = 0666
#}

unix_listener /var/spool/postfix/private/auth {
  mode = 0660
  user = postfix
  group = postfix
}

ssl = required
ssl_cert = </etc/pki/dovecot/certs/dovecot.pem
ssl_key = </etc/pki/dovecot/private/dovecot.pem

ssl = yes
ssl_cert = </etc/postfix/ssl/mail.indounix.com.crt
ssl_key = </etc/postfix/ssl/mail.indounix.com.key

  mailbox Drafts {
    special_use = \Drafts
  }
  mailbox Junk {
    special_use = \Junk
  }
  mailbox Trash {
    special_use = \Trash
  }

  mailbox Drafts {
    auto = subscribe
    special_use = \Drafts
  }
  mailbox Junk {
    auto = subscribe
    special_use = \Junk
  }
  mailbox Trash {
    auto = subscribe
    special_use = \Trash
  }

// 5000 disini sesuaikan waktu membuat user vmail
user_query = SELECT ('5000') as 'uid',('5000') as 'gid'
driver = mysql
connect = host=127.0.0.1 dbname=email user=email password=sFRjKXVkUef3VHxTXiLT
default_pass_scheme = SHA256-CRYPT
password_query = SELECT email as user, password FROM users WHERE email='%u';

service lmtp {
  unix_listener lmtp {
    #mode = 0666
  }
 
  # Create inet listener only if you can't use the above UNIX socket
  #inet_listener lmtp {
    # Avoid making LMTP visible for the entire internet
    #address =
    #port =
  #}
}

service lmtp {
 
  unix_listener /var/spool/postfix/private/dovecot-lmtp {
    mode = 0600
    group = postfix
    user = postfix
  }
 
}

service dovecot restart

postconf virtual_transport=lmtp:unix:private/dovecot-lmtp

service postfix restart

$ netstat -tunlp
Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address           Foreign Address         State       PID/Program name    
tcp        0      0 0.0.0.0:3306            0.0.0.0:*               LISTEN      15928/mysqld        
tcp        0      0 127.0.0.1:587           0.0.0.0:*               LISTEN      16376/master        
tcp        0      0 127.0.0.1:25            0.0.0.0:*               LISTEN      16376/master        
tcp        0      0 0.0.0.0:38400           0.0.0.0:*               LISTEN      4649/sshd           
tcp6       0      0 ::1:587                 :::*                    LISTEN      16376/master        
tcp6       0      0 ::1:25                  :::*                    LISTEN      16376/master        
tcp6       0      0 :::38400                :::*                    LISTEN      4649/sshd           
udp        0      0 127.0.0.1:323           0.0.0.0:*                           3201/chronyd        
udp6       0      0 ::1:323                 :::*                                3201/chronyd

yum install telnet -y

$ telnet localhost 25
Trying ::1...
Connected to localhost.
Escape character is '^]'.
220 mail.xxx.com ESMTP Postfix
quit
Connection closed by foreign host.
 
$ telnet localhost 587
Trying ::1...
Connected to localhost.
Escape character is '^]'.
220 mail.xxx.com ESMTP Postfix
quit
221 2.0.0 Bye
Connection closed by foreign host.

yum install mailx -y

$ mailx emailanda@gmail.com
Subject: Mail Server CentOS 7
ini isi email dari : Mail Server CentOS 7

INSERT INTO domains (domain) VALUES ('jaranguda.com');

INSERT INTO users (email, password) VALUES ('[email protected]', ENCRYPT('PASSWORD'));