安装邮件系统详解EMOS EXTMAIL(含故障排除)

一、安装emos系统。

1、下载emos1.5的ISO文件。

以光盘影像形式刻录在光盘上。

2、安装光盘系统，参考文档：/blog/static/735577102010351522 2334/安装方法和CentOS差不多……分区可以在安装时一并把网络配置好，当然也可以在安装后再配置……GW和DNS也不要忘记设置了……要安装附加的软件吗？安装完成，reboot……设置域名设置FQDN名限制邮件大小……选择数据库类型Webman/DSPAM root 密码MySQL/Dspam root密码选择反垃圾邮件软件是否装入DSPAM 预体验数据？开启TLS选择服务器类型安装配置信息，如果需要进行修改，点No；否则Yes进入安装……安装结束，输入地址即可登陆……二、升级yum -y upgrade三、升级emos的组件3、备份extmail,extmanshell# service httpd stop# cd /var/www/extsuite# mv extmail extmail.bak# mv extman extman.bak4、升级extmail1.2 和extman1.1 。

参考地址：/forum/thread-17579-1-1.htmla、下载最新版本extmail1.2 和extman1.1，使用updatecf.pl 程序升级extmail/extman ，此脚本从旧配置文件中读取参数，再替换新配置文件的参数。

如果有新的参数将会保留默认值，以保正程序不会出错。

b、配置extman最新版本：（新建文件夹/root/src，先上传升级文件到/root/src下）shell# cd /var/www/extsuite# tar -zxvf /root/src/extman-1.1.tar.gz# mv extman-1.1 extman# cd extman# chmod +x ./contrib/updatecf.pl# ./contrib/updatecf.pl start --old=../extman.bak/webman.cf--def=./webman.cf.default > ./webman.cfc、配置extmail最新版本：shell# cd /var/www/extsuite# tar -zxvf /root/src/extmail-1.2.tar.gz# mv extmail-1.2 extmail# cd extmail# cp ../extman/contrib/updatecf.pl .# ./updatecf.pl start --old=../extmail.bak/webmail.cf--def=./webmail.cf.default > ./webmail.cfd、更改ExtMail，ExtMan的cgi目录权限shell# chown -R vuser:vgroup /var/www/extsuite/extmail/cgi/# chown -R vuser:vgroup /var/www/extsuite/extman/cgi/ e、这里要建２个目录，权限和上面一样mkdir /var/www/extsuite/extman/tmpchown -R vuser:vgroup /var/www/extsuite/extman/tmpmkdir /var/www/extsuite/extmail/tmpchown -R vuser:vgroup /var/www/extsuite/extmail/tmpf、启动服务并验证shell# service httpd start# service httpd startg、解决登陆extman 后提示Connection refused (链接拒绝)/var/www/extsuite/extman/daemon/cmdserver --daemonecho "/var/www/extsuite/extman/daemon/cmdserver--daemon" >> /etc/rc.local5、EMOS1.5 Clamav升级到最新版本sevice postfix stop/etc/init.d/postfix stop/etc/init.d/clamd stop/etc/init.d/amavisd stopvi /etc/yum.repos.d/dag.repo[dag]name=Dag RPM Repository for Red Hat Enterprise Linuxbaseurl=http://apt.sw.be/redhat/el$releasever/en/$basearch/daggpgcheck=1enabled=1#rpm --import http://apt.sw.be/RPM-GPG-KEY.dag.txt（记得一定要加入这个密钥，要不然yum升级不了！）# yum update clamavIs this ok [y/N]: y#cp /etc/clamd.conf.rpmnew /etc/clamd.conf提示是否覆盖原来的clamd.cond文件,输入y,覆盖它。

接下来需要修改新的clamd.conf三个地方。

#vi /etc/clamd.confLocalSocket /var/run/clamav/clamd.sock#TCPSocket 3310 说明注释掉该行AllowSupplementaryGroups yes启动postfix,clamd,amavisd/etc/init.d/postfix start/etc/init.d/clamd start/etc/init.d/amavisd start最后更新一下病毒库#freshclam–-verbose6、导入Dspam数据库安装方法：# cd /root/src# gzip -d dspam-trained-data.sql.gz# cd /var/lib/mysql# rm -rf dspam/ (备注：如果没有dspam的库，可以不用执行)# mysql -u root -p -e "create database dspam"# mysql -u root -p -e "grant all on dspam.* to dspam@localhost identified by 'dspam'"# mysql -u dspam -pdspam dspam < /root/src/dspam-trained-data.sql执行：crontab -e修改/usr/bin/mysql -u dspam -p'dspam' dspam < /usr/share/dspam/sql/mysql/purge.sql修改/etc/dspam/dspam.conf中的ServerPID /var/spool/dspam/dspamd.pid修改/etc/dspam/dspam.conf里面的MySQLUser和MySQLPass配置不正确，修改MySQLUser dspamMySQLPass dspamMySQLDb dspam升级到Dspam-3.9一、配置Dspam-3.91、卸载Dspam-3.8 （因为Dspam-3.9的一些目录改变了，所以卸载早期版本后重新安装）# service dspamd stop# service dspam-webd stop# rpm -qa |grep dspam |xargs rpm -e --nodeps# rm /usr/share/dspam/2、安装Dspam-3.9以下为软件的存放目录：/root/rpm ,安装和配置全部以root身份进行# cd /root/rpm# rpm -ivh dspam-libs-3.9.0-7ext.i386.rpmrpm -ivh dspam-3.9.0-7ext.i386.rpmrpm -ivh dspam-client-3.9.0-7ext.i386.rpmrpm -ivh dspam-mysql-3.9.0-7ext.i386.rpmrpm -ivh dspam-web-3.9.0-7ext.i386.rpm3、配置dspam.conf 文件，内容如下：# vi /etc/dspam/dspam.confHome /var/lib/dspamStorageDriver /usr/lib/dspam/libmysql_drv.soTrustedDeliveryAgent "/usr/bin/sendmail"DeliveryHost 127.0.0.1DeliveryPort 10024DeliveryIdent localhostDeliveryProto SMTPOnFail errorTrust rootTrust dspamTrust extmailTrainingMode teftTestConditionalTraining onFeature whitelistAlgorithm graham burtonTokenizer chainPValue bcrWebStats onPreference "trainingMode=TEFT" # { TOE | TUM | TEFT | NOTRAIN } -> default:teft Preference "spamAction=quarantine" # { quarantine | tag | deliver } -> default:quarantine Preference "spamSubject=[SPAM]" # { string } -> default:[SPAM]Preference "statisticalSedation=5" # { 0 - 10 } -> default:0Preference "enableBNR=on" # { on | off } -> default:offPreference "enableWhitelist=on" # { on | off } -> default:onPreference "signatureLocation=message" # { message | headers } -> default:message Preference "tagSpam=off" # { on | off }Preference "tagNonspam=off" # { on | off }Preference "showFactors=off" # { on | off } -> default:offPreference "optIn=off" # { on | off }Preference "optOut=off" # { on | off }Preference "whitelistThreshold=10" # { Integer } -> default:10Preference "makeCorpus=off" # { on | off } -> default:offPreference "storeFragments=off" # { on | off } -> default:offPreference "localStore=" # { on | off } -> default:usernamePreference "processorBias=on" # { on | off } -> default:onPreference "fallbackDomain=off" # { on | off } -> default:offPreference "trainPristine=off" # { on | off } -> default:offPreference "optOutClamA V=off" # { on | off } -> default:offPreference "ignoreRBLLookups=off" # { on | off } -> default:offPreference "RBLInoculate=off" # { on | off } -> default:offAllowOverride enableBNRAllowOverride enableWhitelistAllowOverride fallbackDomainAllowOverride ignoreGroupsAllowOverride ignoreRBLLookupsAllowOverride localStoreAllowOverride makeCorpusAllowOverride optInAllowOverride optOutAllowOverride optOutClamA VAllowOverride processorBiasAllowOverride RBLInoculateAllowOverride showFactorsAllowOverride signatureLocationAllowOverride spamActionAllowOverride spamSubjectAllowOverride statisticalSedationAllowOverride storeFragmentsAllowOverride tagNonspamAllowOverride tagSpamAllowOverride trainPristineAllowOverride trainingModeAllowOverride whitelistThresholdAllowOverride dailyQuarantineSummaryMySQLServer /var/lib/mysql/mysql.sockMySQLUser dspamMySQLPass dspamMySQLDb dspamMySQLCompress trueMySQLReconnect trueMySQLConnectionCache 1 MySQLUIDInSignature onNotifications offPurgeSignatures 14 # Stale signaturesPurgeNeutral 90 # Tokens with neutralish probabilities PurgeUnused 90 # Unused tokensPurgeHapaxes 30 # Tokens with less than 5 hits (hapaxes) PurgeHits1S 15 # Tokens with only 1 spam hit PurgeHits1I 15 # Tokens with only 1 innocent hitLocalMX 127.0.0.1SystemLog onUserLog onOpt outServerPort 10028ServerQueueSize 32ServerPID /var/run/dspamd.pidServerMode autoServerPass.Relay1 "secret"ServerParameters "--user extmail --deliver=innocent,spam -d %u"ServerIdent "localhost.localdomain"ClientHost 127.0.0.1ClientPort 10028ClientIdent "secret@Relay1"ProcessorURLContext onProcessorBias onStripRcptDomain off4、启动Dspam 进程:# chkconfig dspam on# service dspam start查看Dspam启动进程# ps aux |grep dspamroot 23465 0.2 0.8 7408 2128 pts/0 S 18:15 0:00 /usr/bin/dspam --daemonroot 23468 1.0 0.2 3908 700 pts/1 S+ 18:15 0:00 grep dspam二、升级Dspam-3.8数据库1、备份Dspam-3.8数据库# mysqldump -u root -p --opt dspam > /root/dspam-3.8.sql2、升级Dspam-3.8数据库执行以下脚本升级MySQL的架构到3.9.0模式：# mysql -u root -p < upgrade_3.8_to_3.93、DSPAM的token数据库的定时清理：# crontab -e修改以下内容：0 0 * * * /usr/bin/mysql -u dspam -p'dspam' dspam < /usr/share/dspam/sql-scripts/mysql/purge-4.1.sql0 0 * * * /usr/bin/dspam_logrotate -a 30 -d /var/lib/dspam/data7、4、重启Mysql服务# service mysqld restart三、配置DSPAM Web 界面备注：因为以EMOS 为基础，里面包含了perl-GD ，如果没有安装perl-GD 的，请自行安装1、创建dspam-web 认证用户:# cd /usr/share/dspam/webui/cgi-bin# echo "extmail" > admins# htpasswd -c .htpasswd extmail输入认证密码New password:Re-type new password:2、启动dspam-web 进程# service dspam-webd start这实际是启动了mini_httpd进程，查看mini_httpd 是否启动正常：# ps aux |grep minidspam 23695 0.0 0.2 5084 764 ? Ss 18:22 0:00 /usr/bin/mini_httpd -C /etc/dspam/webui.confroot 23698 0.0 0.2 3908 704 pts/1 S+ 18:22 0:00 grep mini3、重启apache# service httpd restart4、访问Dspam-web/dspam输入你在.htpasswd 文件中创建的用户和密码8、解决Encode::IMAPUTF7 一直报错1、下载并解压# axel -a /CPAN/auth ... MAPUTF7-1.05.tar.gz（官方当前最新版本）# mv /var/www/extsuite/extman/libs/Encode/var/www/extsuite/extman/libs/Encode.bakmkdir /var/www/extsuite/extman/libs/Encodecd /root/srctar -zxvf Encode-IMAPUTF7-1.05.tar.gz2、编译并复制到目标目录覆盖源文件（建议覆盖前将源文件备份）# cd Encode-IMAPUTF7-1.05# perl Makefile.PL# cd lib/Encode# cp IMAPUTF7.pm /var/www/extsuite/extman/libs/Encode （此处请根据实际输入正确的extman路径）批量增加用户./userctl.pl --mod=badd --file=username/user.txt--setuid=1000 --setgid=10000 4 * * * /var/www/extsuite/extman/tools/expireusers.pl -all postmaster@30 4 * * * /var/www/extsuite/extman/tools/reportusage.pl -all/home/domains postmaster@0 0 1 * * wget -N -P /usr/share/spamassassin/spam/sa/Chinese_rules.cf0 5 * * sun /usr/local/slockd/tools/log-rotate /usr/bin/gzip0 0 * * * /usr/bin/mysql -u dspam -p'dspam' dspam </usr/share/dspam/sql/mysql/purge.sql0 0 * * * /usr/bin/dspam_logrotate -a 30 -d /var/spool/dspam/data* * * * * /usr/bin/php /var/www/extsuite/monitor/update.php &> /dev/null01 */1 * * * /usr/bin/perl /var/www/extsuite/extmail/tools/cleansid.pl /var/www/extsuite/extmail/tmp/ &> /dev/null修改/etc/postfix/main.cf,将smtpd_recipient_restrictions =permit_mynetworkspermit_sasl_authenticatedreject_unauth_destinationreject_rbl_client reject_rbl_client reject_rbl_client reject_rbl_client # check_policy_service unix:/var/spool/postfix/postgrey/socket 最后一行注释掉。