07.06.2014 Views

2 - Raspberry PI Community Projects

2 - Raspberry PI Community Projects

2 - Raspberry PI Community Projects

SHOW MORE
SHOW LESS

Create successful ePaper yourself

Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.

alias_database = hash:/etc/aliases<br />

myorigin = /etc/mailname<br />

mydestination = mail.falcot.com, falcot.com, localhost, localhost.localdomain<br />

relayhost =<br />

mynetworks = 127.0.0.0/8 192.168.0.0/16<br />

mailbox_command = procmail -a "$EXTENSION"<br />

mailbox_size_limit = 0<br />

recipient_delimiter = +<br />

inet_interfaces = all<br />

inet_protocols = all<br />

Example 11.1<br />

Initial /etc/postfix/main.cf file<br />

SECURITY<br />

Snake oil SSL certificates<br />

The snake oil certificates, like the snake oil “medicine” sold by unscrupulous<br />

quacks in old times, have absolutely no value, since they are generated similarly<br />

on all Debian systems, with the same “private” part. They should only be<br />

used for testing purposes, and normal service must use real certificates; these<br />

can be generated with the procedure described in Section 10.2.1.1, “Public Key<br />

Infrastructure: easy-rsa” (page 225).<br />

11.1.2. Configuring Virtual Domains<br />

The mail server can receive emails addressed to other domains besides the main domain; these<br />

are then known as virtual domains. In most cases where this happens, the emails are not ultimately<br />

destined to local users. Postfix provides two interesting features for handling virtual<br />

domains.<br />

CAUTION<br />

Virtual domains and<br />

canonical domains<br />

None of the virtual domains must be referenced in the mydestination variable;<br />

this variable only contains the names of the “canonical” domains directly<br />

associated to the machine and its local users.<br />

11.1.2.1. Virtual Alias Domains<br />

A virtual alias domain only contains aliases, i.e. addresses that only forward emails to other<br />

addresses.<br />

Such a domain is enabled by adding its name to the virtual_alias_domains variable, and referencing<br />

an address mapping file in the virtual_alias_maps variable.<br />

Chapter 11 — Network Services: Postfix, Apache, NFS, Samba, Squid, LDAP<br />

255

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!