| 1 |
#!/bin/bash
|
1 |
#!/bin/bash
|
| 2 |
|
2 |
|
| 3 |
###########################################################################################
|
3 |
###########################################################################################
|
| 4 |
## ALCASAR MAIL SERVICE CONFIGURATION
|
4 |
## ALCASAR MAIL SERVICE CONFIGURATION
|
| 5 |
##
|
5 |
##
|
| 6 |
## Script by K@M3L & T3RRY (LaPlateform), joss_p & Rexy
|
6 |
## Script by K@M3L & T3RRY (LaPlateform), joss_p & Rexy
|
| 7 |
## This script configure PostFix
|
7 |
## This script configure PostFix
|
| 8 |
## 0 : no email autoregistration
|
8 |
## 0 : no email autoregistration
|
| 9 |
## 1 : PostFix is the SMTP server
|
9 |
## 1 : PostFix is the SMTP server
|
| 10 |
## 2 : PostFix relay to an other SMTP server
|
10 |
## 2 : PostFix relay to an other SMTP server
|
| 11 |
## 3 : PostFix use an external email address (with Cyrus-SASL)
|
11 |
## 3 : PostFix use an external email address (with Cyrus-SASL)
|
| 12 |
###########################################################################################
|
12 |
###########################################################################################
|
| 13 |
|
13 |
|
| 14 |
######################################################
|
14 |
######################################################
|
| 15 |
## Email configuration examples (mode = 3)
|
15 |
## Email configuration examples (mode = 3)
|
| 16 |
## common parameters : smtp_use_tls = yes, smtp_tls_security_level = encrypt, smtp_sasl_auth_enable = yes
|
16 |
## common parameters : smtp_use_tls = yes, smtp_tls_security_level = encrypt, smtp_sasl_auth_enable = yes
|
| 17 |
## common rules : 'myhostname' parameter should be the domain name of the sasl_email account
|
17 |
## common rules : 'myhostname' parameter should be the domain name of the sasl_email account
|
| 18 |
########## smtp.free.fr:465
|
18 |
########## smtp.free.fr:465 (expose mechanisms : PLAIN LOGIN CRAM-MD5 DIGEST-MD5)
|
| 19 |
## smtp_sasl_security_option = noanonymous, relayhost = [smtp.free.fr]:465, smtp_tls_wrappermode = yes
|
19 |
## smtp_sasl_security_option = noanonymous, relayhost = [smtp.free.fr]:465, smtp_tls_wrappermode = yes
|
| 20 |
########## smtp.free.fr:587
|
20 |
########## smtp.free.fr:587 (expose mechanismes
|
| 21 |
## smtp_sasl_security_option = noanonymous, relayhost = [smtp.free.fr]:587, smtp_tls_wrappermode = no
|
21 |
## smtp_sasl_security_option = noanonymous, relayhost = [smtp.free.fr]:587, smtp_tls_wrappermode = no
|
| - |
|
22 |
########## smtp.orange.fr:465 (expose mechanisms : LOGIN PLAIN)
|
| - |
|
23 |
## smtp_sasl_security_option = noanonymous, relayhost = [smtp.orange.fr]:465, smtp_tls_wrappermode = yes
|
| - |
|
24 |
########## smtp.sfr.fr:465 (expose mechanisms : LOGIN PLAIN)
|
| - |
|
25 |
## smtp_sasl_security_option = noanonymous, relayhost = [smtp.sfr.fr]:465, smtp_tls_wrappermode = yes
|
| - |
|
26 |
########## smtp.laposte.net:465 (expose mechanisms : LOGIN PLAIN)
|
| - |
|
27 |
## smtp_sasl_security_option = noanonymous, relayhost = [laposte.net]:465, smtp_tls_wrappermode = yes
|
| - |
|
28 |
########## smtp.bbox.net:465 (expose mechanisms : LOGIN PLAIN)
|
| - |
|
29 |
## smtp_sasl_security_option = noanonymous, relayhost = [laposte.net]:465, smtp_tls_wrappermode = yes
|
| - |
|
30 |
########## smtp.gmail.com:587 (expose mechanisms : LOGIN PLAIN XOAUTH2 PLAIN-CLIENTTOKEN OAUTHBEARER XOAUTH)
|
| - |
|
31 |
## smtp_sasl_security_option = noanonymous, relayhost = [gmail.com]:587, smtp_tls_wrappermode = no
|
| 22 |
|
32 |
|
| 23 |
# ****** Paths *******
|
33 |
# ****** Paths *******
|
| 24 |
SED="/bin/sed -i"
|
34 |
SED="/bin/sed -i"
|
| 25 |
CONF_FILE="/usr/local/etc/alcasar.conf"
|
35 |
CONF_FILE="/usr/local/etc/alcasar.conf"
|
| 26 |
POSTFIX_CONF_FILE="/etc/postfix/main.cf"
|
36 |
POSTFIX_CONF_FILE="/etc/postfix/main.cf"
|
| 27 |
LOCAL_IPTABLE_FILE="/usr/local/etc/alcasar-iptables-local.sh"
|
37 |
LOCAL_IPTABLE_FILE="/usr/local/etc/alcasar-iptables-local.sh"
|
| 28 |
SASLPATH="/etc/postfix/sasl"
|
38 |
SASLPATH="/etc/postfix/sasl"
|
| 29 |
smtpIP="0.0.0.0/0"
|
39 |
smtpIP="0.0.0.0/0"
|
| 30 |
hostName=`grep ^HOSTNAME= $CONF_FILE|cut -d"=" -f2`
|
40 |
hostName=`grep ^HOSTNAME= $CONF_FILE|cut -d"=" -f2`
|
| 31 |
domainName=`grep ^DOMAIN= $CONF_FILE|cut -d"=" -f2`
|
41 |
domainName=`grep ^DOMAIN= $CONF_FILE|cut -d"=" -f2`
|
| 32 |
usage="Usage: alcasar-mail_install.sh -h|-0|-1|-2|-3"
|
42 |
usage="Usage: alcasar-mail_install.sh -h|-0|-1|-2|-3"
|
| 33 |
|
43 |
|
| 34 |
nb_args=$#
|
44 |
nb_args=$#
|
| 35 |
if [ $nb_args -eq 0 ]; then # apply alcasar.conf
|
45 |
if [ $nb_args -eq 0 ]; then # apply alcasar.conf
|
| 36 |
mail=`grep ^MAIL= $CONF_FILE|cut -d"=" -f2`
|
46 |
mail=`grep ^MAIL= $CONF_FILE|cut -d"=" -f2`
|
| 37 |
if [ "$mail" = "off" ]; then
|
47 |
if [ "$mail" = "off" ]; then
|
| 38 |
TYPE_MAIL=0
|
48 |
TYPE_MAIL=0
|
| 39 |
else
|
49 |
else
|
| 40 |
TYPE_MAIL=`grep ^MAIL_TYPE= $CONF_FILE|cut -d"=" -f2`
|
50 |
TYPE_MAIL=`grep ^MAIL_TYPE= $CONF_FILE|cut -d"=" -f2`
|
| 41 |
smtpPort=`grep ^MAIL_SMTP_PORT= $CONF_FILE|cut -d"=" -f2`
|
51 |
smtpPort=`grep ^MAIL_SMTP_PORT= $CONF_FILE|cut -d"=" -f2`
|
| 42 |
smtpIP=`grep ^MAIL_SMTP_IP= $CONF_FILE|cut -d"=" -f2`
|
52 |
smtpIP=`grep ^MAIL_SMTP_IP= $CONF_FILE|cut -d"=" -f2`
|
| 43 |
mailAddr=`grep ^MAIL_ADDR= $CONF_FILE|cut -d"=" -f2`
|
53 |
mailAddr=`grep ^MAIL_ADDR= $CONF_FILE|cut -d"=" -f2`
|
| 44 |
[ -e ${SASLPATH}/sasl_passwd ] && mailMdp=`cat $SASLPATH/sasl_passwd|cut -d":" -f3`
|
54 |
[ -e ${SASLPATH}/sasl_passwd ] && mailMdp=`cat $SASLPATH/sasl_passwd|cut -d":" -f3`
|
| 45 |
adminMail=`grep ^MAIL_ADMIN= $CONF_FILE|cut -d"=" -f2`
|
55 |
adminMail=`grep ^MAIL_ADMIN= $CONF_FILE|cut -d"=" -f2`
|
| 46 |
whiteDomain=`grep ^MAIL_WHITEDOMAIN= $CONF_FILE|cut -d"=" -f2`
|
56 |
whiteDomain=`grep ^MAIL_WHITEDOMAIN= $CONF_FILE|cut -d"=" -f2`
|
| 47 |
fi
|
57 |
fi
|
| 48 |
else # apply args
|
58 |
else # apply args
|
| 49 |
if [ "$1" = "-h" ] || [ "$1" = "--h" ]; then
|
59 |
if [ "$1" = "-h" ] || [ "$1" = "--h" ]; then
|
| 50 |
echo $usage
|
60 |
echo $usage
|
| 51 |
exit 0
|
61 |
exit 0
|
| 52 |
fi
|
62 |
fi
|
| 53 |
while getopts ":h:s:p:m:o:a:w:0123" option
|
63 |
while getopts ":h:s:p:m:o:a:w:0123" option
|
| 54 |
do
|
64 |
do
|
| 55 |
case $option in
|
65 |
case $option in
|
| 56 |
0)
|
66 |
0)
|
| 57 |
TYPE_MAIL=0
|
67 |
TYPE_MAIL=0
|
| 58 |
;;
|
68 |
;;
|
| 59 |
1)
|
69 |
1)
|
| 60 |
TYPE_MAIL=1
|
70 |
TYPE_MAIL=1
|
| 61 |
;;
|
71 |
;;
|
| 62 |
2)
|
72 |
2)
|
| 63 |
TYPE_MAIL=2
|
73 |
TYPE_MAIL=2
|
| 64 |
;;
|
74 |
;;
|
| 65 |
3)
|
75 |
3)
|
| 66 |
TYPE_MAIL=3
|
76 |
TYPE_MAIL=3
|
| 67 |
;;
|
77 |
;;
|
| 68 |
p)
|
78 |
p)
|
| 69 |
smtpPort=$OPTARG
|
79 |
smtpPort=$OPTARG
|
| 70 |
;;
|
80 |
;;
|
| 71 |
s)
|
81 |
s)
|
| 72 |
smtpIP=$OPTARG
|
82 |
smtpIP=$OPTARG
|
| 73 |
;;
|
83 |
;;
|
| 74 |
m)
|
84 |
m)
|
| 75 |
mailAddr=$OPTARG
|
85 |
mailAddr=$OPTARG
|
| 76 |
;;
|
86 |
;;
|
| 77 |
o)
|
87 |
o)
|
| 78 |
mailMdp=$OPTARG
|
88 |
mailMdp=$OPTARG
|
| 79 |
;;
|
89 |
;;
|
| 80 |
a)
|
90 |
a)
|
| 81 |
adminMail=$OPTARG
|
91 |
adminMail=$OPTARG
|
| 82 |
;;
|
92 |
;;
|
| 83 |
w)
|
93 |
w)
|
| 84 |
whiteDomain=$OPTARG
|
94 |
whiteDomain=$OPTARG
|
| 85 |
;;
|
95 |
;;
|
| 86 |
:)
|
96 |
:)
|
| 87 |
echo "L'option $OPTARG requiert un argument"
|
97 |
echo "L'option $OPTARG requiert un argument"
|
| 88 |
exit 1
|
98 |
exit 1
|
| 89 |
;;
|
99 |
;;
|
| 90 |
\?)
|
100 |
\?)
|
| 91 |
echo "$OPTARG : option invalide"
|
101 |
echo "$OPTARG : option invalide"
|
| 92 |
exit 1
|
102 |
exit 1
|
| 93 |
;;
|
103 |
;;
|
| 94 |
esac
|
104 |
esac
|
| 95 |
done
|
105 |
done
|
| 96 |
fi
|
106 |
fi
|
| 97 |
if [[ $TYPE_MAIL -eq 0 ]]; then # disable mail service
|
107 |
if [[ $TYPE_MAIL -eq 0 ]]; then # disable mail service
|
| 98 |
$SED "s/^MAIL=.*/MAIL=off/" $CONF_FILE
|
108 |
$SED "s/^MAIL=.*/MAIL=off/" $CONF_FILE
|
| 99 |
$SED "s/^MAIL_TYPE=.*/MAIL_TYPE=/" $CONF_FILE
|
109 |
$SED "s/^MAIL_TYPE=.*/MAIL_TYPE=/" $CONF_FILE
|
| 100 |
$SED "s/^MAIL_SMTP_IP=.*/MAIL_SMTP_IP=/" $CONF_FILE
|
110 |
$SED "s/^MAIL_SMTP_IP=.*/MAIL_SMTP_IP=/" $CONF_FILE
|
| 101 |
$SED "s/^MAIL_SMTP_PORT=.*/MAIL_SMTP_PORT=/" $CONF_FILE
|
111 |
$SED "s/^MAIL_SMTP_PORT=.*/MAIL_SMTP_PORT=/" $CONF_FILE
|
| 102 |
$SED "s/^MAIL_ADDR=.*/MAIL_ADDR=/" $CONF_FILE
|
112 |
$SED "s/^MAIL_ADDR=.*/MAIL_ADDR=/" $CONF_FILE
|
| 103 |
$SED "s/^MAIL_WHITEDOMAIN=.*/MAIL_WHITEDOMAIN=/" $CONF_FILE
|
113 |
$SED "s/^MAIL_WHITEDOMAIN=.*/MAIL_WHITEDOMAIN=/" $CONF_FILE
|
| 104 |
$SED "s/^MAIL_ADMIN=.*/MAIL_ADMIN=/" $CONF_FILE
|
114 |
$SED "s/^MAIL_ADMIN=.*/MAIL_ADMIN=/" $CONF_FILE
|
| 105 |
$SED "/^SMTP_IP=/ s/^/#/" $LOCAL_IPTABLE_FILE
|
115 |
$SED "/^SMTP_IP=/ s/^/#/" $LOCAL_IPTABLE_FILE
|
| 106 |
$SED "/^SMTP_PORT=/ s/^/#/" $LOCAL_IPTABLE_FILE
|
116 |
$SED "/^SMTP_PORT=/ s/^/#/" $LOCAL_IPTABLE_FILE
|
| 107 |
$SED "s/^\$IPTABLES -A OUTPUT -p tcp --dport \$SMTP_PORT.*/#\$IPTABLES -A OUTPUT -p tcp --dport \$SMTP_PORT -d \$SMTP_IP -m conntrack --ctstate NEW,ESTABLISHED -j ACCEPT/" $LOCAL_IPTABLE_FILE
|
117 |
$SED "s/^\$IPTABLES -A OUTPUT -p tcp --dport \$SMTP_PORT.*/#\$IPTABLES -A OUTPUT -p tcp --dport \$SMTP_PORT -d \$SMTP_IP -m conntrack --ctstate NEW,ESTABLISHED -j ACCEPT/" $LOCAL_IPTABLE_FILE
|
| 108 |
$SED "s/^\$IPTABLES -A INPUT -p tcp --sport \$SMTP_PORT.*/#\$IPTABLES -A INPUT -p tcp --sport \$SMTP_PORT -s \$SMTP_IP -m conntrack --ctstate ESTABLISHED -j ACCEPT/" $LOCAL_IPTABLE_FILE
|
118 |
$SED "s/^\$IPTABLES -A INPUT -p tcp --sport \$SMTP_PORT.*/#\$IPTABLES -A INPUT -p tcp --sport \$SMTP_PORT -s \$SMTP_IP -m conntrack --ctstate ESTABLISHED -j ACCEPT/" $LOCAL_IPTABLE_FILE
|
| 109 |
$SED "s/^relayhost =.*/relayhost =/" $POSTFIX_CONF_FILE
|
119 |
$SED "s/^relayhost =.*/relayhost =/" $POSTFIX_CONF_FILE
|
| 110 |
$SED "s/^smtp_tls_security_level =.*/smtp_tls_security_level = may/g" $POSTFIX_CONF_FILE
|
120 |
$SED "s/^smtp_tls_security_level =.*/smtp_tls_security_level = may/g" $POSTFIX_CONF_FILE
|
| 111 |
$SED "s/^smtp_tls_wrappermode =.*/smtp_tls_wrappermode = no/g" $POSTFIX_CONF_FILE
|
121 |
$SED "s/^smtp_tls_wrappermode =.*/smtp_tls_wrappermode = no/g" $POSTFIX_CONF_FILE
|
| 112 |
$SED "s/^myhostname =.*/myhostname = $hostName.$domainName/g" $POSTFIX_CONF_FILE
|
122 |
$SED "s/^myhostname =.*/myhostname = $hostName.$domainName/g" $POSTFIX_CONF_FILE
|
| 113 |
[ -e ${SASLPATH}/sasl_passwd ] && rm -f ${SASLPATH}/*
|
123 |
[ -e ${SASLPATH}/sasl_passwd ] && rm -f ${SASLPATH}/*
|
| 114 |
elif [[ $TYPE_MAIL -eq 1 ]]; then # Enable mail service (act as smtp server)
|
124 |
elif [[ $TYPE_MAIL -eq 1 ]]; then # Enable mail service (act as smtp server)
|
| 115 |
$SED "s/^MAIL=.*/MAIL=on/" $CONF_FILE
|
125 |
$SED "s/^MAIL=.*/MAIL=on/" $CONF_FILE
|
| 116 |
$SED "s/^MAIL_TYPE=.*/MAIL_TYPE=1/" $CONF_FILE
|
126 |
$SED "s/^MAIL_TYPE=.*/MAIL_TYPE=1/" $CONF_FILE
|
| 117 |
$SED "s/^MAIL_SMTP_IP=.*/MAIL_SMTP_IP=/" $CONF_FILE
|
127 |
$SED "s/^MAIL_SMTP_IP=.*/MAIL_SMTP_IP=/" $CONF_FILE
|
| 118 |
$SED "s/^MAIL_SMTP_PORT=.*/MAIL_SMTP_PORT=$smtpPort/" $CONF_FILE
|
128 |
$SED "s/^MAIL_SMTP_PORT=.*/MAIL_SMTP_PORT=$smtpPort/" $CONF_FILE
|
| 119 |
$SED "s/^MAIL_ADDR=.*/MAIL_ADDR=/" $CONF_FILE
|
129 |
$SED "s/^MAIL_ADDR=.*/MAIL_ADDR=/" $CONF_FILE
|
| 120 |
$SED "s/^MAIL_WHITEDOMAIN=.*/MAIL_WHITEDOMAIN=$whiteDomain/" $CONF_FILE
|
130 |
$SED "s/^MAIL_WHITEDOMAIN=.*/MAIL_WHITEDOMAIN=$whiteDomain/" $CONF_FILE
|
| 121 |
$SED "s/^MAIL_ADMIN=.*/MAIL_ADMIN=$adminMail/" $CONF_FILE
|
131 |
$SED "s/^MAIL_ADMIN=.*/MAIL_ADMIN=$adminMail/" $CONF_FILE
|
| 122 |
$SED "/^SMTP_IP=/ s/^/#/" $LOCAL_IPTABLE_FILE
|
132 |
$SED "/^SMTP_IP=/ s/^/#/" $LOCAL_IPTABLE_FILE
|
| 123 |
$SED "s/^SMTP_PORT=.*/SMTP_PORT=$smtpPort/" $LOCAL_IPTABLE_FILE
|
133 |
$SED "s/^SMTP_PORT=.*/SMTP_PORT=$smtpPort/" $LOCAL_IPTABLE_FILE
|
| 124 |
$SED "s/^\$IPTABLES -A OUTPUT -p tcp --dport \$SMTP_PORT.*/\$IPTABLES -A OUTPUT -p tcp --dport \$SMTP_PORT -m conntrack --ctstate NEW,ESTABLISHED -j ACCEPT/" $LOCAL_IPTABLE_FILE
|
134 |
$SED "s/^\$IPTABLES -A OUTPUT -p tcp --dport \$SMTP_PORT.*/\$IPTABLES -A OUTPUT -p tcp --dport \$SMTP_PORT -m conntrack --ctstate NEW,ESTABLISHED -j ACCEPT/" $LOCAL_IPTABLE_FILE
|
| 125 |
$SED "s/^\$IPTABLES -A INPUT -p tcp --sport \$SMTP_PORT.*/\$IPTABLES -A INPUT -p tcp --sport \$SMTP_PORT -m conntrack --ctstate ESTABLISHED -j ACCEPT/" $LOCAL_IPTABLE_FILE
|
135 |
$SED "s/^\$IPTABLES -A INPUT -p tcp --sport \$SMTP_PORT.*/\$IPTABLES -A INPUT -p tcp --sport \$SMTP_PORT -m conntrack --ctstate ESTABLISHED -j ACCEPT/" $LOCAL_IPTABLE_FILE
|
| 126 |
$SED "s/^#SMTP_PORT=.*/SMTP_PORT=$smtpPort/" $LOCAL_IPTABLE_FILE
|
136 |
$SED "s/^#SMTP_PORT=.*/SMTP_PORT=$smtpPort/" $LOCAL_IPTABLE_FILE
|
| 127 |
$SED "s/^#\$IPTABLES -A OUTPUT -p tcp --dport \$SMTP_PORT.*/\$IPTABLES -A OUTPUT -p tcp --dport \$SMTP_PORT -m conntrack --ctstate NEW,ESTABLISHED -j ACCEPT/" $LOCAL_IPTABLE_FILE
|
137 |
$SED "s/^#\$IPTABLES -A OUTPUT -p tcp --dport \$SMTP_PORT.*/\$IPTABLES -A OUTPUT -p tcp --dport \$SMTP_PORT -m conntrack --ctstate NEW,ESTABLISHED -j ACCEPT/" $LOCAL_IPTABLE_FILE
|
| 128 |
$SED "s/^#\$IPTABLES -A INPUT -p tcp --sport \$SMTP_PORT.*/\$IPTABLES -A INPUT -p tcp --sport \$SMTP_PORT -m conntrack --ctstate ESTABLISHED -j ACCEPT/" $LOCAL_IPTABLE_FILE
|
138 |
$SED "s/^#\$IPTABLES -A INPUT -p tcp --sport \$SMTP_PORT.*/\$IPTABLES -A INPUT -p tcp --sport \$SMTP_PORT -m conntrack --ctstate ESTABLISHED -j ACCEPT/" $LOCAL_IPTABLE_FILE
|
| 129 |
$SED "s/^relayhost =.*/relayhost =/" $POSTFIX_CONF_FILE
|
139 |
$SED "s/^relayhost =.*/relayhost =/" $POSTFIX_CONF_FILE
|
| 130 |
$SED "s/^smtp_tls_security_level =.*/smtp_tls_security_level = may/g" $POSTFIX_CONF_FILE
|
140 |
$SED "s/^smtp_tls_security_level =.*/smtp_tls_security_level = may/g" $POSTFIX_CONF_FILE
|
| 131 |
$SED "s/^smtp_tls_wrappermode =.*/smtp_tls_wrappermode = no/g" $POSTFIX_CONF_FILE
|
141 |
$SED "s/^smtp_tls_wrappermode =.*/smtp_tls_wrappermode = no/g" $POSTFIX_CONF_FILE
|
| 132 |
$SED "s/^myhostname =.*/myhostname = $hostName.$domainName/g" $POSTFIX_CONF_FILE
|
142 |
$SED "s/^myhostname =.*/myhostname = $hostName.$domainName/g" $POSTFIX_CONF_FILE
|
| 133 |
[ -e ${SASLPATH}/sasl_passwd ] && rm -f ${SASLPATH}/*
|
143 |
[ -e ${SASLPATH}/sasl_passwd ] && rm -f ${SASLPATH}/*
|
| 134 |
elif [[ $TYPE_MAIL -eq 2 ]]; then # Enable mail service (relaying to an extern mail server)
|
144 |
elif [[ $TYPE_MAIL -eq 2 ]]; then # Enable mail service (relaying to an extern mail server)
|
| 135 |
$SED "s/^MAIL=.*/MAIL=on/" $CONF_FILE
|
145 |
$SED "s/^MAIL=.*/MAIL=on/" $CONF_FILE
|
| 136 |
$SED "s/^MAIL_TYPE=.*/MAIL_TYPE=2/" $CONF_FILE
|
146 |
$SED "s/^MAIL_TYPE=.*/MAIL_TYPE=2/" $CONF_FILE
|
| 137 |
$SED "s/^MAIL_SMTP_IP=.*/MAIL_SMTP_IP=$smtpIP/" $CONF_FILE
|
147 |
$SED "s/^MAIL_SMTP_IP=.*/MAIL_SMTP_IP=$smtpIP/" $CONF_FILE
|
| 138 |
$SED "s/^MAIL_SMTP_PORT=.*/MAIL_SMTP_PORT=$smtpPort/" $CONF_FILE
|
148 |
$SED "s/^MAIL_SMTP_PORT=.*/MAIL_SMTP_PORT=$smtpPort/" $CONF_FILE
|
| 139 |
$SED "s/^MAIL_ADDR=.*/MAIL_ADDR=/" $CONF_FILE
|
149 |
$SED "s/^MAIL_ADDR=.*/MAIL_ADDR=/" $CONF_FILE
|
| 140 |
$SED "s/^MAIL_WHITEDOMAIN=.*/MAIL_WHITEDOMAIN=$whiteDomain/" $CONF_FILE
|
150 |
$SED "s/^MAIL_WHITEDOMAIN=.*/MAIL_WHITEDOMAIN=$whiteDomain/" $CONF_FILE
|
| 141 |
$SED "s/^MAIL_ADMIN=.*/MAIL_ADMIN=$adminMail/" $CONF_FILE
|
151 |
$SED "s/^MAIL_ADMIN=.*/MAIL_ADMIN=$adminMail/" $CONF_FILE
|
| 142 |
$SED "s/^SMTP_IP=.*/SMTP_IP=$smtpIP/" $LOCAL_IPTABLE_FILE
|
152 |
$SED "s/^SMTP_IP=.*/SMTP_IP=$smtpIP/" $LOCAL_IPTABLE_FILE
|
| 143 |
$SED "s/^SMTP_PORT=.*/SMTP_PORT=$smtpPort/" $LOCAL_IPTABLE_FILE
|
153 |
$SED "s/^SMTP_PORT=.*/SMTP_PORT=$smtpPort/" $LOCAL_IPTABLE_FILE
|
| 144 |
$SED "s/^\$IPTABLES -A OUTPUT -p tcp --dport \$SMTP_PORT.*/\$IPTABLES -A OUTPUT -p tcp --dport \$SMTP_PORT -d \$SMTP_IP -m conntrack --ctstate NEW,ESTABLISHED -j ACCEPT/" $LOCAL_IPTABLE_FILE
|
154 |
$SED "s/^\$IPTABLES -A OUTPUT -p tcp --dport \$SMTP_PORT.*/\$IPTABLES -A OUTPUT -p tcp --dport \$SMTP_PORT -d \$SMTP_IP -m conntrack --ctstate NEW,ESTABLISHED -j ACCEPT/" $LOCAL_IPTABLE_FILE
|
| 145 |
$SED "s/^\$IPTABLES -A INPUT -p tcp --sport \$SMTP_PORT.*/\$IPTABLES -A INPUT -p tcp --sport \$SMTP_PORT -s \$SMTP_IP -m conntrack --ctstate ESTABLISHED -j ACCEPT/" $LOCAL_IPTABLE_FILE
|
155 |
$SED "s/^\$IPTABLES -A INPUT -p tcp --sport \$SMTP_PORT.*/\$IPTABLES -A INPUT -p tcp --sport \$SMTP_PORT -s \$SMTP_IP -m conntrack --ctstate ESTABLISHED -j ACCEPT/" $LOCAL_IPTABLE_FILE
|
| 146 |
$SED "s/^#SMTP_IP=.*/SMTP_IP=$smtpIP/" $LOCAL_IPTABLE_FILE
|
156 |
$SED "s/^#SMTP_IP=.*/SMTP_IP=$smtpIP/" $LOCAL_IPTABLE_FILE
|
| 147 |
$SED "s/^#SMTP_PORT=.*/SMTP_PORT=$smtpPort/" $LOCAL_IPTABLE_FILE
|
157 |
$SED "s/^#SMTP_PORT=.*/SMTP_PORT=$smtpPort/" $LOCAL_IPTABLE_FILE
|
| 148 |
$SED "s/^#\$IPTABLES -A OUTPUT -p tcp --dport \$SMTP_PORT.*/\$IPTABLES -A OUTPUT -p tcp --dport \$SMTP_PORT -d \$SMTP_IP -m conntrack --ctstate NEW,ESTABLISHED -j ACCEPT/" $LOCAL_IPTABLE_FILE
|
158 |
$SED "s/^#\$IPTABLES -A OUTPUT -p tcp --dport \$SMTP_PORT.*/\$IPTABLES -A OUTPUT -p tcp --dport \$SMTP_PORT -d \$SMTP_IP -m conntrack --ctstate NEW,ESTABLISHED -j ACCEPT/" $LOCAL_IPTABLE_FILE
|
| 149 |
$SED "s/^#\$IPTABLES -A INPUT -p tcp --sport \$SMTP_PORT.*/\$IPTABLES -A INPUT -p tcp --sport \$SMTP_PORT -s \$SMTP_IP -m conntrack --ctstate ESTABLISHED -j ACCEPT/" $LOCAL_IPTABLE_FILE
|
159 |
$SED "s/^#\$IPTABLES -A INPUT -p tcp --sport \$SMTP_PORT.*/\$IPTABLES -A INPUT -p tcp --sport \$SMTP_PORT -s \$SMTP_IP -m conntrack --ctstate ESTABLISHED -j ACCEPT/" $LOCAL_IPTABLE_FILE
|
| 150 |
$SED "s/^relayhost =.*/relayhost = [$smtpIP]:$smtpPort/g" $POSTFIX_CONF_FILE
|
160 |
$SED "s/^relayhost =.*/relayhost = [$smtpIP]:$smtpPort/g" $POSTFIX_CONF_FILE
|
| 151 |
$SED "s/^smtp_tls_security_level =.*/smtp_tls_security_level = may/g" $POSTFIX_CONF_FILE
|
161 |
$SED "s/^smtp_tls_security_level =.*/smtp_tls_security_level = may/g" $POSTFIX_CONF_FILE
|
| 152 |
$SED "s/^smtp_tls_wrappermode =.*/smtp_tls_wrappermode = no/g" $POSTFIX_CONF_FILE
|
162 |
$SED "s/^smtp_tls_wrappermode =.*/smtp_tls_wrappermode = no/g" $POSTFIX_CONF_FILE
|
| 153 |
$SED "s/^myhostname =.*/myhostname = $hostName.$domainName/g" $POSTFIX_CONF_FILE
|
163 |
$SED "s/^myhostname =.*/myhostname = $hostName.$domainName/g" $POSTFIX_CONF_FILE
|
| 154 |
[ -e ${SASLPATH}/sasl_passwd ] && rm -f ${SASLPATH}/*
|
164 |
[ -e ${SASLPATH}/sasl_passwd ] && rm -f ${SASLPATH}/*
|
| 155 |
elif [[ $TYPE_MAIL -eq 3 ]]; then # Enable mail service (using an email address)
|
165 |
elif [[ $TYPE_MAIL -eq 3 ]]; then # Enable mail service (using an email address)
|
| 156 |
$SED "s/^MAIL=.*/MAIL=on/" $CONF_FILE
|
166 |
$SED "s/^MAIL=.*/MAIL=on/" $CONF_FILE
|
| 157 |
$SED "s/^MAIL_TYPE=.*/MAIL_TYPE=3/" $CONF_FILE
|
167 |
$SED "s/^MAIL_TYPE=.*/MAIL_TYPE=3/" $CONF_FILE
|
| 158 |
$SED "s/^MAIL_SMTP_IP=.*/MAIL_SMTP_IP=$smtpIP/" $CONF_FILE
|
168 |
$SED "s/^MAIL_SMTP_IP=.*/MAIL_SMTP_IP=$smtpIP/" $CONF_FILE
|
| 159 |
$SED "s/^MAIL_SMTP_PORT=.*/MAIL_SMTP_PORT=$smtpPort/" $CONF_FILE
|
169 |
$SED "s/^MAIL_SMTP_PORT=.*/MAIL_SMTP_PORT=$smtpPort/" $CONF_FILE
|
| 160 |
$SED "s/^MAIL_ADDR=.*/MAIL_ADDR=$mailAddr/" $CONF_FILE
|
170 |
$SED "s/^MAIL_ADDR=.*/MAIL_ADDR=$mailAddr/" $CONF_FILE
|
| 161 |
$SED "s/^MAIL_WHITEDOMAIN=.*/MAIL_WHITEDOMAIN=$whiteDomain/" $CONF_FILE
|
171 |
$SED "s/^MAIL_WHITEDOMAIN=.*/MAIL_WHITEDOMAIN=$whiteDomain/" $CONF_FILE
|
| 162 |
$SED "s/^MAIL_ADMIN=.*/MAIL_ADMIN=$adminMail/" $CONF_FILE
|
172 |
$SED "s/^MAIL_ADMIN=.*/MAIL_ADMIN=$adminMail/" $CONF_FILE
|
| 163 |
$SED "s/^SMTP_IP=.*/SMTP_IP=$smtpIP/" $LOCAL_IPTABLE_FILE
|
173 |
$SED "s/^SMTP_IP=.*/SMTP_IP=$smtpIP/" $LOCAL_IPTABLE_FILE
|
| 164 |
$SED "s/^SMTP_PORT=.*/SMTP_PORT=$smtpPort/" $LOCAL_IPTABLE_FILE
|
174 |
$SED "s/^SMTP_PORT=.*/SMTP_PORT=$smtpPort/" $LOCAL_IPTABLE_FILE
|
| 165 |
$SED "s/^\$IPTABLES -A OUTPUT -p tcp --dport \$SMTP_PORT.*/\$IPTABLES -A OUTPUT -p tcp --dport \$SMTP_PORT -m conntrack --ctstate NEW,ESTABLISHED -j ACCEPT/" $LOCAL_IPTABLE_FILE
|
175 |
$SED "s/^\$IPTABLES -A OUTPUT -p tcp --dport \$SMTP_PORT.*/\$IPTABLES -A OUTPUT -p tcp --dport \$SMTP_PORT -m conntrack --ctstate NEW,ESTABLISHED -j ACCEPT/" $LOCAL_IPTABLE_FILE
|
| 166 |
$SED "s/^\$IPTABLES -A INPUT -p tcp --sport \$SMTP_PORT.*/\$IPTABLES -A INPUT -p tcp --sport \$SMTP_PORT -m conntrack --ctstate ESTABLISHED -j ACCEPT/" $LOCAL_IPTABLE_FILE
|
176 |
$SED "s/^\$IPTABLES -A INPUT -p tcp --sport \$SMTP_PORT.*/\$IPTABLES -A INPUT -p tcp --sport \$SMTP_PORT -m conntrack --ctstate ESTABLISHED -j ACCEPT/" $LOCAL_IPTABLE_FILE
|
| 167 |
$SED "s/^#SMTP_IP=.*/SMTP_IP=$smtpIP/" $LOCAL_IPTABLE_FILE
|
177 |
$SED "s/^#SMTP_IP=.*/SMTP_IP=$smtpIP/" $LOCAL_IPTABLE_FILE
|
| 168 |
$SED "s/^#SMTP_PORT=.*/SMTP_PORT=$smtpPort/" $LOCAL_IPTABLE_FILE
|
178 |
$SED "s/^#SMTP_PORT=.*/SMTP_PORT=$smtpPort/" $LOCAL_IPTABLE_FILE
|
| 169 |
$SED "s/^#\$IPTABLES -A OUTPUT -p tcp --dport \$SMTP_PORT.*/\$IPTABLES -A OUTPUT -p tcp --dport \$SMTP_PORT -m conntrack --ctstate NEW,ESTABLISHED -j ACCEPT/" $LOCAL_IPTABLE_FILE
|
179 |
$SED "s/^#\$IPTABLES -A OUTPUT -p tcp --dport \$SMTP_PORT.*/\$IPTABLES -A OUTPUT -p tcp --dport \$SMTP_PORT -m conntrack --ctstate NEW,ESTABLISHED -j ACCEPT/" $LOCAL_IPTABLE_FILE
|
| 170 |
$SED "s/^#\$IPTABLES -A INPUT -p tcp --sport \$SMTP_PORT.*/\$IPTABLES -A INPUT -p tcp --sport \$SMTP_PORT -m conntrack --ctstate ESTABLISHED -j ACCEPT/" $LOCAL_IPTABLE_FILE
|
180 |
$SED "s/^#\$IPTABLES -A INPUT -p tcp --sport \$SMTP_PORT.*/\$IPTABLES -A INPUT -p tcp --sport \$SMTP_PORT -m conntrack --ctstate ESTABLISHED -j ACCEPT/" $LOCAL_IPTABLE_FILE
|
| 171 |
$SED "s/^relayhost =.*/relayhost = [$smtpIP]:$smtpPort/g" $POSTFIX_CONF_FILE
|
181 |
$SED "s/^relayhost =.*/relayhost = [$smtpIP]:$smtpPort/g" $POSTFIX_CONF_FILE
|
| 172 |
$SED "s/^smtp_tls_security_level =.*/smtp_tls_security_level = encrypt/g" $POSTFIX_CONF_FILE
|
182 |
$SED "s/^smtp_tls_security_level =.*/smtp_tls_security_level = encrypt/g" $POSTFIX_CONF_FILE
|
| 173 |
if [ "$smtpPort" = "465" ]; then # wrappermode is madatory only if port = 465
|
183 |
if [ "$smtpPort" = "465" ]; then # wrappermode is madatory only if port = 465
|
| 174 |
$SED "s/^smtp_tls_wrappermode =.*/smtp_tls_wrappermode = yes/g" $POSTFIX_CONF_FILE
|
184 |
$SED "s/^smtp_tls_wrappermode =.*/smtp_tls_wrappermode = yes/g" $POSTFIX_CONF_FILE
|
| 175 |
else
|
185 |
else
|
| 176 |
$SED "s/^smtp_tls_wrappermode =.*/smtp_tls_wrappermode = no/g" $POSTFIX_CONF_FILE
|
186 |
$SED "s/^smtp_tls_wrappermode =.*/smtp_tls_wrappermode = no/g" $POSTFIX_CONF_FILE
|
| 177 |
fi
|
187 |
fi
|
| 178 |
if [ "$domainName" = "localdomain" ]; then # use the domain name of $mail_Addr to avoid extern smtp servers reject
|
188 |
if [ "$domainName" = "localdomain" ]; then # use the domain name of $mail_Addr to avoid extern smtp servers reject
|
| 179 |
domain_of_smtpIP=`echo $smtp_IP|rev|cut -d '.' -f1-2|rev`
|
189 |
domain_of_smtpIP=`echo $smtp_IP|rev|cut -d '.' -f1-2|rev`
|
| 180 |
$SED "s/^myhostname =.*/myhostname = $domain_of_smtpIP/g" $POSTFIX_CONF_FILE
|
190 |
$SED "s/^myhostname =.*/myhostname = $domain_of_smtpIP/g" $POSTFIX_CONF_FILE
|
| 181 |
else
|
191 |
else
|
| 182 |
$SED "s/^myhostname =.*/myhostname = $hostName.$domainName/g" $POSTFIX_CONF_FILE
|
192 |
$SED "s/^myhostname =.*/myhostname = $hostName.$domainName/g" $POSTFIX_CONF_FILE
|
| 183 |
fi
|
193 |
fi
|
| 184 |
[ -d ${SASLPATH} ] || mkdir ${SASLPATH}
|
194 |
[ -d ${SASLPATH} ] || mkdir ${SASLPATH}
|
| 185 |
echo "[${smtpIP}]:${smtpPort} ${mailAddr}:${mailMdp}" > ${SASLPATH}/sasl_passwd
|
195 |
echo "[${smtpIP}]:${smtpPort} ${mailAddr}:${mailMdp}" > ${SASLPATH}/sasl_passwd
|
| 186 |
postmap ${SASLPATH}/sasl_passwd
|
196 |
postmap ${SASLPATH}/sasl_passwd
|
| 187 |
chmod -R 644 ${SASLPATH}
|
197 |
chmod -R 644 ${SASLPATH}
|
| 188 |
chown root:root ${SASLPATH}/sasl_passwd*
|
198 |
chown root:root ${SASLPATH}/sasl_passwd*
|
| 189 |
chmod 0600 ${SASLPATH}/sasl_passwd*
|
199 |
chmod 0600 ${SASLPATH}/sasl_passwd*
|
| 190 |
else
|
200 |
else
|
| 191 |
echo "Erreur ! Aucun type de messagerie sélectionné !"
|
201 |
echo "Erreur ! Aucun type de messagerie sélectionné !"
|
| 192 |
exit 0
|
202 |
exit 0
|
| 193 |
fi
|
203 |
fi
|
| 194 |
/usr/local/bin/alcasar-iptables.sh
|
204 |
/usr/local/bin/alcasar-iptables.sh
|
| 195 |
systemctl restart postfix.service
|
205 |
systemctl restart postfix.service
|
| 196 |
exit 0
|
206 |
exit 0
|
| 197 |
|
207 |
|