1 |
#!/bin/bash
|
1 |
#!/bin/bash
|
2 |
|
2 |
|
3 |
###########################################################################################
|
3 |
###########################################################################################
|
4 |
## ALCASAR MAIL SERVICE CONFIGURATION
|
4 |
## ALCASAR MAIL SERVICE CONFIGURATION
|
5 |
##
|
5 |
##
|
6 |
## Script by K@M3L & T3RRY (LaPlateform), joss_p & Rexy
|
6 |
## Script by K@M3L & T3RRY (LaPlateform), joss_p & Rexy
|
7 |
## This script configure PostFix
|
7 |
## This script configure PostFix
|
8 |
## 0 : no email autoregistration
|
8 |
## 0 : no email autoregistration
|
9 |
## 1 : PostFix is the SMTP server
|
9 |
## 1 : PostFix is the SMTP server
|
10 |
## 2 : PostFix relay to an other SMTP server
|
10 |
## 2 : PostFix relay to an other SMTP server
|
11 |
## 2 : PostFix use an external email address (with SASL)
|
11 |
## 2 : PostFix use an external email address (with SASL)
|
12 |
###########################################################################################
|
12 |
###########################################################################################
|
13 |
|
13 |
|
14 |
# ****** Paths *******
|
14 |
# ****** Paths *******
|
15 |
SED="/bin/sed -i"
|
15 |
SED="/bin/sed -i"
|
16 |
CONF_FILE="/usr/local/etc/alcasar.conf"
|
16 |
CONF_FILE="/usr/local/etc/alcasar.conf"
|
17 |
POSTFIX_CONF_FILE="/etc/postfix/main.cf"
|
17 |
POSTFIX_CONF_FILE="/etc/postfix/main.cf"
|
18 |
LOCAL_IPTABLE_FILE="/usr/local/etc/alcasar-iptables-local.sh"
|
18 |
LOCAL_IPTABLE_FILE="/usr/local/etc/alcasar-iptables-local.sh"
|
19 |
SASLPATH="/etc/postfix/sasl"
|
19 |
SASLPATH="/etc/postfix/sasl"
|
20 |
smtpIP="0.0.0.0/0"
|
20 |
smtpIP="0.0.0.0/0"
|
21 |
usage="Usage: alcasar-mail_install.sh -h|-0|-1|-2|-3"
|
21 |
usage="Usage: alcasar-mail_install.sh -h|-0|-1|-2|-3"
|
22 |
|
22 |
|
23 |
nb_args=$#
|
23 |
nb_args=$#
|
24 |
if [ $nb_args -eq 0 ] # apply alcasar.conf
|
24 |
if [ $nb_args -eq 0 ] # apply alcasar.conf
|
25 |
then
|
25 |
then
|
26 |
mail=`grep ^MAIL= $CONF_FILE|cut -d"=" -f2`
|
26 |
mail=`grep ^MAIL= $CONF_FILE|cut -d"=" -f2`
|
27 |
if [ "$mail" = "off" ]; then
|
27 |
if [ "$mail" = "off" ]; then
|
28 |
TYPE_MAIL=0
|
28 |
TYPE_MAIL=0
|
29 |
else
|
29 |
else
|
30 |
TYPE_MAIL=`grep ^MAIL_TYPE= $CONF_FILE|cut -d"=" -f2`
|
30 |
TYPE_MAIL=`grep ^MAIL_TYPE= $CONF_FILE|cut -d"=" -f2`
|
31 |
port=`grep ^MAIL_PORT= $CONF_FILE|cut -d"=" -f2`
|
31 |
smtpPort=`grep ^MAIL_SMTP_PORT= $CONF_FILE|cut -d"=" -f2`
|
32 |
smtpIP=`grep ^MAIL_SMTP_IP= $CONF_FILE|cut -d"=" -f2`
|
32 |
smtpIP=`grep ^MAIL_SMTP_IP= $CONF_FILE|cut -d"=" -f2`
|
33 |
mailAddr=`grep ^MAIL_ADDR= $CONF_FILE|cut -d"=" -f2`
|
33 |
mailAddr=`grep ^MAIL_ADDR= $CONF_FILE|cut -d"=" -f2`
|
34 |
mailMdp=`grep ^MAIL_PASSWORD= $CONF_FILE|cut -d"=" -f2`
|
34 |
mailMdp=`grep ^MAIL_PASSWORD= $CONF_FILE|cut -d"=" -f2`
|
35 |
adminMail=`grep ^MAIL_ADMIN= $CONF_FILE|cut -d"=" -f2`
|
35 |
adminMail=`grep ^MAIL_ADMIN= $CONF_FILE|cut -d"=" -f2`
|
36 |
whiteDomain=`grep ^MAIL_WHTEDOMAIN= $CONF_FILE|cut -d"=" -f2`
|
36 |
whiteDomain=`grep ^MAIL_WHTEDOMAIN= $CONF_FILE|cut -d"=" -f2`
|
37 |
fi
|
37 |
fi
|
38 |
else # apply args
|
38 |
else # apply args
|
39 |
if [ "$1" = "-h" ] || [ "$1" = "--h" ]; then
|
39 |
if [ "$1" = "-h" ] || [ "$1" = "--h" ]; then
|
40 |
echo $usage
|
40 |
echo $usage
|
41 |
exit 0
|
41 |
exit 0
|
42 |
fi
|
42 |
fi
|
43 |
while getopts ":h:s:p:m:o:a:w:0123" option
|
43 |
while getopts ":h:s:p:m:o:a:w:0123" option
|
44 |
do
|
44 |
do
|
45 |
case $option in
|
45 |
case $option in
|
46 |
0)
|
46 |
0)
|
47 |
TYPE_MAIL=0
|
47 |
TYPE_MAIL=0
|
48 |
;;
|
48 |
;;
|
49 |
1)
|
49 |
1)
|
50 |
TYPE_MAIL=1
|
50 |
TYPE_MAIL=1
|
51 |
;;
|
51 |
;;
|
52 |
2)
|
52 |
2)
|
53 |
TYPE_MAIL=2
|
53 |
TYPE_MAIL=2
|
54 |
;;
|
54 |
;;
|
55 |
3)
|
55 |
3)
|
56 |
TYPE_MAIL=3
|
56 |
TYPE_MAIL=3
|
57 |
;;
|
57 |
;;
|
58 |
p)
|
58 |
p)
|
59 |
port=$OPTARG
|
59 |
smtpPort=$OPTARG
|
60 |
;;
|
60 |
;;
|
61 |
s)
|
61 |
s)
|
62 |
smtpIP=$OPTARG
|
62 |
smtpIP=$OPTARG
|
63 |
;;
|
63 |
;;
|
64 |
m)
|
64 |
m)
|
65 |
mailAddr=$OPTARG
|
65 |
mailAddr=$OPTARG
|
66 |
;;
|
66 |
;;
|
67 |
o)
|
67 |
o)
|
68 |
mailMdp=$OPTARG
|
68 |
mailMdp=$OPTARG
|
69 |
;;
|
69 |
;;
|
70 |
a)
|
70 |
a)
|
71 |
adminMail=$OPTARG
|
71 |
adminMail=$OPTARG
|
72 |
;;
|
72 |
;;
|
73 |
w)
|
73 |
w)
|
74 |
whiteDomain=$OPTARG
|
74 |
whiteDomain=$OPTARG
|
75 |
;;
|
75 |
;;
|
76 |
:)
|
76 |
:)
|
77 |
echo "L'option $OPTARG requiert un argument"
|
77 |
echo "L'option $OPTARG requiert un argument"
|
78 |
exit 1
|
78 |
exit 1
|
79 |
;;
|
79 |
;;
|
80 |
\?)
|
80 |
\?)
|
81 |
echo "$OPTARG : option invalide"
|
81 |
echo "$OPTARG : option invalide"
|
82 |
exit 1
|
82 |
exit 1
|
83 |
;;
|
83 |
;;
|
84 |
esac
|
84 |
esac
|
85 |
done
|
85 |
done
|
86 |
fi
|
86 |
fi
|
87 |
echo "Type=$TYPE_MAIL - port=$port - smtpIP=$smtpIP - mailAddr=$mailAddr - mailMdp=$mailMdp - adminMail=$adminMail - whitedomain=$whiteDomain"
|
87 |
echo "Type=$TYPE_MAIL - port=$port - smtpIP=$smtpIP - mailAddr=$mailAddr - mailMdp=$mailMdp - adminMail=$adminMail - whitedomain=$whiteDomain"
|
88 |
if [[ $TYPE_MAIL -eq 0 ]]; then # disable mail service
|
88 |
if [[ $TYPE_MAIL -eq 0 ]]; then # disable mail service
|
89 |
$SED "s/^MAIL=.*/MAIL=off/" $CONF_FILE
|
89 |
$SED "s/^MAIL=.*/MAIL=off/" $CONF_FILE
|
90 |
$SED "s/^MAIL_TYPE=.*/MAIL_TYPE=/" $CONF_FILE
|
90 |
$SED "s/^MAIL_TYPE=.*/MAIL_TYPE=/" $CONF_FILE
|
91 |
$SED "s/^MAIL_SMTP_IP=.*/MAIL_SMTP_IP=/" $CONF_FILE
|
91 |
$SED "s/^MAIL_SMTP_IP=.*/MAIL_SMTP_IP=/" $CONF_FILE
|
92 |
$SED "s/^MAIL_PORT=.*/MAIL_PORT=/" $CONF_FILE
|
92 |
$SED "s/^MAIL_SMTP_PORT=.*/MAIL_SMTP_PORT=/" $CONF_FILE
|
93 |
$SED "s/^MAIL_ADDR=.*/MAIL_ADDR=/" $CONF_FILE
|
93 |
$SED "s/^MAIL_ADDR=.*/MAIL_ADDR=/" $CONF_FILE
|
94 |
$SED "s/^MAIL_PASSWORD=.*/MAIL_PASSWORD=/" $CONF_FILE
|
94 |
$SED "s/^MAIL_PASSWORD=.*/MAIL_PASSWORD=/" $CONF_FILE
|
95 |
$SED "s/^MAIL_WHITEDOMAIN=.*/MAIL_WHITEDOMAIN=/" $CONF_FILE
|
95 |
$SED "s/^MAIL_WHITEDOMAIN=.*/MAIL_WHITEDOMAIN=/" $CONF_FILE
|
96 |
$SED "s/^MAIL_ADMIN=.*/MAIL_ADMIN=/" $CONF_FILE
|
96 |
$SED "s/^MAIL_ADMIN=.*/MAIL_ADMIN=/" $CONF_FILE
|
97 |
$SED "/^SMTP_IP=/ s/^/#/" $LOCAL_IPTABLE_FILE
|
97 |
$SED "/^SMTP_IP=/ s/^/#/" $LOCAL_IPTABLE_FILE
|
98 |
$SED "/^SMTP_PORT=/ s/^/#/" $LOCAL_IPTABLE_FILE
|
98 |
$SED "/^SMTP_PORT=/ s/^/#/" $LOCAL_IPTABLE_FILE
|
99 |
$SED "s/^\$IPTABLES -A OUTPUT -p tcp --dport \$SMTP_PORT.*/#\$IPTABLES -A OUTPUT -p tcp --dport \$SMTP_PORT -d \$SMTP_IP -m conntrack --ctstate NEW,ESTABLISHED -j ACCEPT/" $LOCAL_IPTABLE_FILE
|
99 |
$SED "s/^\$IPTABLES -A OUTPUT -p tcp --dport \$SMTP_PORT.*/#\$IPTABLES -A OUTPUT -p tcp --dport \$SMTP_PORT -d \$SMTP_IP -m conntrack --ctstate NEW,ESTABLISHED -j ACCEPT/" $LOCAL_IPTABLE_FILE
|
100 |
$SED "s/^\$IPTABLES -A INPUT -p tcp --sport \$SMTP_PORT.*/#\$IPTABLES -A INPUT -p tcp --sport \$SMTP_PORT -s \$SMTP_IP -m conntrack --ctstate ESTABLISHED -j ACCEPT/" $LOCAL_IPTABLE_FILE
|
100 |
$SED "s/^\$IPTABLES -A INPUT -p tcp --sport \$SMTP_PORT.*/#\$IPTABLES -A INPUT -p tcp --sport \$SMTP_PORT -s \$SMTP_IP -m conntrack --ctstate ESTABLISHED -j ACCEPT/" $LOCAL_IPTABLE_FILE
|
101 |
$SED "s/^relayhost =.*/relayhost =/" $POSTFIX_CONF_FILE
|
101 |
$SED "s/^relayhost =.*/relayhost =/" $POSTFIX_CONF_FILE
|
102 |
[ -e ${SASLPATH}/sasl_passwd ] && rm -f ${SASLPATH}/sasl_passwd
|
102 |
[ -e ${SASLPATH}/sasl_passwd ] && rm -f ${SASLPATH}/sasl_passwd
|
103 |
elif [[ $TYPE_MAIL -eq 2 ]]; then # Enable mail service (relaying to an extern mail server)
|
103 |
elif [[ $TYPE_MAIL -eq 2 ]]; then # Enable mail service (relaying to an extern mail server)
|
104 |
$SED "s/^MAIL=.*/MAIL=on/" $CONF_FILE
|
104 |
$SED "s/^MAIL=.*/MAIL=on/" $CONF_FILE
|
105 |
$SED "s/^MAIL_TYPE=.*/MAIL_TYPE=2/" $CONF_FILE
|
105 |
$SED "s/^MAIL_TYPE=.*/MAIL_TYPE=2/" $CONF_FILE
|
106 |
$SED "s/^MAIL_SMTP_IP=.*/MAIL_SMTP_IP=$smtpIP/" $CONF_FILE
|
106 |
$SED "s/^MAIL_SMTP_IP=.*/MAIL_SMTP_IP=$smtpIP/" $CONF_FILE
|
107 |
$SED "s/^MAIL_PORT=.*/MAIL_PORT=$port/" $CONF_FILE
|
107 |
$SED "s/^MAIL_SMTP_PORT=.*/MAIL_SMTP_PORT=$smtpPort/" $CONF_FILE
|
108 |
$SED "s/^MAIL_ADDR=.*/MAIL_ADDR=/" $CONF_FILE
|
108 |
$SED "s/^MAIL_ADDR=.*/MAIL_ADDR=/" $CONF_FILE
|
109 |
$SED "s/^MAIL_PASSWORD=.*/MAIL_PASSWORD=/" $CONF_FILE
|
109 |
$SED "s/^MAIL_PASSWORD=.*/MAIL_PASSWORD=/" $CONF_FILE
|
110 |
$SED "s/^MAIL_WHITEDOMAIN=.*/MAIL_WHITEDOMAIN=$whiteDomain/" $CONF_FILE
|
110 |
$SED "s/^MAIL_WHITEDOMAIN=.*/MAIL_WHITEDOMAIN=$whiteDomain/" $CONF_FILE
|
111 |
$SED "s/^MAIL_ADMIN=.*/MAIL_ADMIN=$adminMail/" $CONF_FILE
|
111 |
$SED "s/^MAIL_ADMIN=.*/MAIL_ADMIN=$adminMail/" $CONF_FILE
|
112 |
$SED "s/^#SMTP_IP=.*/SMTP_IP=$smtpIP/" $LOCAL_IPTABLE_FILE
|
112 |
$SED "s/^#SMTP_IP=.*/SMTP_IP=$smtpIP/" $LOCAL_IPTABLE_FILE
|
113 |
$SED "s/^#SMTP_PORT=.*/SMTP_PORT=$port/" $LOCAL_IPTABLE_FILE
|
113 |
$SED "s/^#SMTP_PORT=.*/SMTP_PORT=$smtpPort/" $LOCAL_IPTABLE_FILE
|
114 |
$SED "s/^#\$IPTABLES -A OUTPUT -p tcp --dport \$SMTP_PORT.*/\$IPTABLES -A OUTPUT -p tcp --dport \$SMTP_PORT -d \$SMTP_IP -m conntrack --ctstate NEW,ESTABLISHED -j ACCEPT/" $LOCAL_IPTABLE_FILE
|
114 |
$SED "s/^#\$IPTABLES -A OUTPUT -p tcp --dport \$SMTP_PORT.*/\$IPTABLES -A OUTPUT -p tcp --dport \$SMTP_PORT -d \$SMTP_IP -m conntrack --ctstate NEW,ESTABLISHED -j ACCEPT/" $LOCAL_IPTABLE_FILE
|
115 |
$SED "s/^#\$IPTABLES -A INPUT -p tcp --sport \$SMTP_PORT.*/\$IPTABLES -A INPUT -p tcp --sport \$SMTP_PORT -s \$SMTP_IP -m conntrack --ctstate ESTABLISHED -j ACCEPT/" $LOCAL_IPTABLE_FILE
|
115 |
$SED "s/^#\$IPTABLES -A INPUT -p tcp --sport \$SMTP_PORT.*/\$IPTABLES -A INPUT -p tcp --sport \$SMTP_PORT -s \$SMTP_IP -m conntrack --ctstate ESTABLISHED -j ACCEPT/" $LOCAL_IPTABLE_FILE
|
116 |
$SED "s/^relayhost =.*/relayhost = $smtpIP:$port/g" $POSTFIX_CONF_FILE
|
116 |
$SED "s/^relayhost =.*/relayhost = $smtpIP:$port/g" $POSTFIX_CONF_FILE
|
117 |
[ -e ${SASLPATH}/sasl_passwd ] && rm -f ${SASLPATH}/sasl_passwd
|
117 |
[ -e ${SASLPATH}/sasl_passwd ] && rm -f ${SASLPATH}/sasl_passwd
|
118 |
elif [[ $TYPE_MAIL -eq 3 ]]; then # Enable mail service (using an email address)
|
118 |
elif [[ $TYPE_MAIL -eq 3 ]]; then # Enable mail service (using an email address)
|
119 |
$SED "s/^MAIL=.*/MAIL=on/" $CONF_FILE
|
119 |
$SED "s/^MAIL=.*/MAIL=on/" $CONF_FILE
|
120 |
$SED "s/^MAIL_TYPE=.*/MAIL_TYPE=3/" $CONF_FILE
|
120 |
$SED "s/^MAIL_TYPE=.*/MAIL_TYPE=3/" $CONF_FILE
|
121 |
$SED "s/^MAIL_SMTP_IP=.*/MAIL_SMTP_IP=$smtpIP/" $CONF_FILE
|
121 |
$SED "s/^MAIL_SMTP_IP=.*/MAIL_SMTP_IP=$smtpIP/" $CONF_FILE
|
122 |
$SED "s/^MAIL_PORT=.*/MAIL_PORT=$port/" $CONF_FILE
|
122 |
$SED "s/^MAIL_SMTP_PORT=.*/MAIL_SMTP_PORT=$smtpPort/" $CONF_FILE
|
123 |
$SED "s/^MAIL_ADDR=.*/MAIL_ADDR=$mailAddr/" $CONF_FILE
|
123 |
$SED "s/^MAIL_ADDR=.*/MAIL_ADDR=$mailAddr/" $CONF_FILE
|
124 |
$SED "s/^MAIL_PASSWORD=.*/MAIL_PASSWORD=$mailMdp/" $CONF_FILE
|
124 |
$SED "s/^MAIL_PASSWORD=.*/MAIL_PASSWORD=$mailMdp/" $CONF_FILE
|
125 |
$SED "s/^MAIL_WHITEDOMAIN=.*/MAIL_WHITEDOMAIN=$whiteDomain/" $CONF_FILE
|
125 |
$SED "s/^MAIL_WHITEDOMAIN=.*/MAIL_WHITEDOMAIN=$whiteDomain/" $CONF_FILE
|
126 |
$SED "s/^MAIL_ADMIN=.*/MAIL_ADMIN=$adminMail/" $CONF_FILE
|
126 |
$SED "s/^MAIL_ADMIN=.*/MAIL_ADMIN=$adminMail/" $CONF_FILE
|
127 |
$SED "s/^#SMTP_IP=.*/SMTP_IP=$smtpIP/" $LOCAL_IPTABLE_FILE
|
127 |
$SED "s/^#SMTP_IP=.*/SMTP_IP=$smtpIP/" $LOCAL_IPTABLE_FILE
|
128 |
$SED "s/^#SMTP_PORT=.*/SMTP_PORT=$port/" $LOCAL_IPTABLE_FILE
|
128 |
$SED "s/^#SMTP_PORT=.*/SMTP_PORT=$smtpPort/" $LOCAL_IPTABLE_FILE
|
129 |
$SED "s/^#\$IPTABLES -A OUTPUT -p tcp --dport \$SMTP_PORT.*/\$IPTABLES -A OUTPUT -p tcp --dport \$SMTP_PORT -m conntrack --ctstate NEW,ESTABLISHED -j ACCEPT/" $LOCAL_IPTABLE_FILE
|
129 |
$SED "s/^#\$IPTABLES -A OUTPUT -p tcp --dport \$SMTP_PORT.*/\$IPTABLES -A OUTPUT -p tcp --dport \$SMTP_PORT -m conntrack --ctstate NEW,ESTABLISHED -j ACCEPT/" $LOCAL_IPTABLE_FILE
|
130 |
$SED "s/^#\$IPTABLES -A INPUT -p tcp --sport \$SMTP_PORT.*/\$IPTABLES -A INPUT -p tcp --sport \$SMTP_PORT -m conntrack --ctstate ESTABLISHED -j ACCEPT/" $LOCAL_IPTABLE_FILE
|
130 |
$SED "s/^#\$IPTABLES -A INPUT -p tcp --sport \$SMTP_PORT.*/\$IPTABLES -A INPUT -p tcp --sport \$SMTP_PORT -m conntrack --ctstate ESTABLISHED -j ACCEPT/" $LOCAL_IPTABLE_FILE
|
131 |
$SED "s/^relayhost =.*/relayhost = $smtpIP:$port/g" $POSTFIX_CONF_FILE
|
131 |
$SED "s/^relayhost =.*/relayhost = $smtpIP:$port/g" $POSTFIX_CONF_FILE
|
132 |
[ -d ${SASLPATH} ] || mkdir ${SASLPATH}
|
132 |
[ -d ${SASLPATH} ] || mkdir ${SASLPATH}
|
133 |
echo "[${smtpIP}]:${port} ${mailAddr}:${mailMdp}" > ${SASLPATH}/sasl_passwd
|
133 |
echo "[${smtpIP}]:${port} ${mailAddr}:${mailMdp}" > ${SASLPATH}/sasl_passwd
|
134 |
postmap ${SASLPATH}/sasl_passwd
|
134 |
postmap ${SASLPATH}/sasl_passwd
|
135 |
chmod -R 644 ${SASLPATH}
|
135 |
chmod -R 644 ${SASLPATH}
|
136 |
chown root:root ${SASLPATH}/sasl_passwd*
|
136 |
chown root:root ${SASLPATH}/sasl_passwd*
|
137 |
chmod 0600 ${SASLPATH}/sasl_passwd*
|
137 |
chmod 0600 ${SASLPATH}/sasl_passwd*
|
138 |
else
|
138 |
else
|
139 |
echo "Erreur ! Aucun type de messagerie sélectionné !"
|
139 |
echo "Erreur ! Aucun type de messagerie sélectionné !"
|
140 |
exit 0
|
140 |
exit 0
|
141 |
fi
|
141 |
fi
|
142 |
/usr/local/bin/alcasar-iptables.sh
|
142 |
/usr/local/bin/alcasar-iptables.sh
|
143 |
systemctl restart postfix.service
|
143 |
systemctl restart postfix.service
|
144 |
exit 0
|
144 |
exit 0
|
145 |
|
145 |
|