Subversion Repositories ALCASAR

Rev

Rev 3018 | Rev 3021 | Go to most recent revision | Only display areas with differences | Ignore whitespace | Details | Blame | Last modification | View Log

Rev 3018 Rev 3020
1
#!/bin/bash
1
#!/bin/bash
2
 
2
 
3
###########################################################################################
3
###########################################################################################
4
##				    ALCASAR MAIL SERVICE CONFIGURATION
4
##				    ALCASAR MAIL SERVICE CONFIGURATION
5
##
5
##
6
##	Script by K@M3L & T3RRY (LaPlateform), joss_p & Rexy
6
##	Script by K@M3L & T3RRY (LaPlateform), joss_p & Rexy
7
##  This script configure PostFix
7
##  This script configure PostFix
8
##		0 : no email autoregistration
8
##		0 : no email autoregistration
9
##		1 : PostFix is the SMTP server
9
##		1 : PostFix is the SMTP server
10
##		2 : PostFix relay to an other SMTP server
10
##		2 : PostFix relay to an other SMTP server
11
##		2 : PostFix use an external email address (with SASL)
11
##		2 : PostFix use an external email address (with SASL)
12
###########################################################################################
12
###########################################################################################
13
 
13
 
14
# ****** Paths *******
14
# ****** Paths *******
15
SED="/bin/sed -i"
15
SED="/bin/sed -i"
16
CONF_FILE="/usr/local/etc/alcasar.conf"
16
CONF_FILE="/usr/local/etc/alcasar.conf"
17
POSTFIX_CONF_FILE="/etc/postfix/main.cf"
17
POSTFIX_CONF_FILE="/etc/postfix/main.cf"
18
LOCAL_IPTABLE_FILE="/usr/local/etc/alcasar-iptables-local.sh"
18
LOCAL_IPTABLE_FILE="/usr/local/etc/alcasar-iptables-local.sh"
19
SASLPATH="/etc/postfix/sasl"
19
SASLPATH="/etc/postfix/sasl"
20
smtpIP="0.0.0.0/0"
20
smtpIP="0.0.0.0/0"
21
usage="Usage: alcasar-mail_install.sh -h|-0|-1|-2|-3"
21
usage="Usage: alcasar-mail_install.sh -h|-0|-1|-2|-3"
22
 
22
 
23
nb_args=$#
23
nb_args=$#
24
if [ $nb_args -eq 0 ] # apply alcasar.conf
24
if [ $nb_args -eq 0 ] # apply alcasar.conf
25
then
25
then
26
	mail=`grep ^MAIL= $CONF_FILE|cut -d"=" -f2`
26
	mail=`grep ^MAIL= $CONF_FILE|cut -d"=" -f2`
27
	if [ "$mail" = "off" ]; then
27
	if [ "$mail" = "off" ]; then
28
		TYPE_MAIL=0
28
		TYPE_MAIL=0
29
	else
29
	else
30
		TYPE_MAIL=`grep ^MAIL_TYPE= $CONF_FILE|cut -d"=" -f2`
30
		TYPE_MAIL=`grep ^MAIL_TYPE= $CONF_FILE|cut -d"=" -f2`
31
		smtp=`grep ^MAIL_SMTP= $CONF_FILE|cut -d"=" -f2`
-
 
32
		port=`grep ^MAIL_PORT= $CONF_FILE|cut -d"=" -f2`
31
		port=`grep ^MAIL_PORT= $CONF_FILE|cut -d"=" -f2`
33
		smtpIP=`grep ^MAIL_SMTP_IP= $CONF_FILE|cut -d"=" -f2`
32
		smtpIP=`grep ^MAIL_SMTP_IP= $CONF_FILE|cut -d"=" -f2`
34
		mailAddr=`grep ^MAIL_ADDR= $CONF_FILE|cut -d"=" -f2`
33
		mailAddr=`grep ^MAIL_ADDR= $CONF_FILE|cut -d"=" -f2`
35
		mailMdp=`grep ^MAIL_PASSWORD= $CONF_FILE|cut -d"=" -f2`
34
		mailMdp=`grep ^MAIL_PASSWORD= $CONF_FILE|cut -d"=" -f2`
36
		adminMail=`grep ^MAIL_ADMIN= $CONF_FILE|cut -d"=" -f2`
35
		adminMail=`grep ^MAIL_ADMIN= $CONF_FILE|cut -d"=" -f2`
37
		whiteDomain=`grep ^MAIL_WHTEDOMAIN= $CONF_FILE|cut -d"=" -f2`
36
		whiteDomain=`grep ^MAIL_WHTEDOMAIN= $CONF_FILE|cut -d"=" -f2`
38
	fi
37
	fi
39
else # apply args
38
else # apply args
40
	if [ "$1" = "-h" ] || [ "$1" = "--h" ]; then
39
	if [ "$1" = "-h" ] || [ "$1" = "--h" ]; then
41
		echo $usage
40
		echo $usage
42
		exit 0
41
		exit 0
43
	fi
42
	fi
44
	while getopts ":h:s:p:r:m:o:a:w:0123" option
43
	while getopts ":h:s:p:m:o:a:w:0123" option
45
	do
44
	do
46
		case $option in
45
		case $option in
47
			0)
46
			0)
48
				TYPE_MAIL=0
47
				TYPE_MAIL=0
49
			;;
48
			;;
50
			1)
49
			1)
51
				TYPE_MAIL=1
50
				TYPE_MAIL=1
52
			;;
51
			;;
53
			2)
52
			2)
54
				TYPE_MAIL=2
53
				TYPE_MAIL=2
55
			;;
54
			;;
56
			3)
55
			3)
57
				TYPE_MAIL=3
56
				TYPE_MAIL=3
58
			;;
57
			;;
59
			s)
-
 
60
				smtp=$OPTARG
-
 
61
			;;
-
 
62
			p)
58
			p)
63
				port=$OPTARG
59
				port=$OPTARG
64
			;;
60
			;;
65
			r)
61
			s)
66
				smtpIP=$OPTARG
62
				smtpIP=$OPTARG
67
			;;
63
			;;
68
			m)
64
			m)
69
				mailAddr=$OPTARG
65
				mailAddr=$OPTARG
70
			;;
66
			;;
71
			o)
67
			o)
72
				mailMdp=$OPTARG
68
				mailMdp=$OPTARG
73
			;;
69
			;;
74
			a)
70
			a)
75
				adminMail=$OPTARG
71
				adminMail=$OPTARG
76
			;;
72
			;;
77
			w)
73
			w)
78
				whiteDomain=$OPTARG
74
				whiteDomain=$OPTARG
79
			;;
75
			;;
80
			:)
76
			:)
81
				echo "L'option $OPTARG requiert un argument"
77
				echo "L'option $OPTARG requiert un argument"
82
				exit 1
78
				exit 1
83
			;;
79
			;;
84
			\?)
80
			\?)
85
				echo "$OPTARG : option invalide"
81
				echo "$OPTARG : option invalide"
86
				exit 1
82
				exit 1
87
			;;
83
			;;
88
		esac
84
		esac
89
	done
85
	done
90
fi
86
fi
91
echo "Type=$TYPE_MAIL - smtp=$smtp - port=$port - smtpIP=$smtpIP - mailAddr=$mailAddr - mailMdp=$mailMdp - adminMail=$adminMail - whitedomain=$whiteDomain"
87
echo "Type=$TYPE_MAIL - port=$port - smtpIP=$smtpIP - mailAddr=$mailAddr - mailMdp=$mailMdp - adminMail=$adminMail - whitedomain=$whiteDomain"
92
if  [[ $TYPE_MAIL -eq 0 ]]; then # disable mail service
88
if  [[ $TYPE_MAIL -eq 0 ]]; then # disable mail service
93
	$SED "s/^MAIL=.*/MAIL=off/" $CONF_FILE
89
	$SED "s/^MAIL=.*/MAIL=off/" $CONF_FILE
94
	$SED "s/^MAIL_TYPE=.*/MAIL_TYPE=/" $CONF_FILE
90
	$SED "s/^MAIL_TYPE=.*/MAIL_TYPE=/" $CONF_FILE
95
	$SED "s/^MAIL_SMTP=.*/MAIL_SMTP=/" $CONF_FILE
-
 
96
	$SED "s/^MAIL_SMTP_IP=.*/MAIL_SMTP_IP=/" $CONF_FILE
91
	$SED "s/^MAIL_SMTP_IP=.*/MAIL_SMTP_IP=/" $CONF_FILE
97
	$SED "s/^MAIL_PORT=.*/MAIL_PORT=/" $CONF_FILE
92
	$SED "s/^MAIL_PORT=.*/MAIL_PORT=/" $CONF_FILE
98
	$SED "s/^MAIL_ADDR=.*/MAIL_ADDR=/" $CONF_FILE
93
	$SED "s/^MAIL_ADDR=.*/MAIL_ADDR=/" $CONF_FILE
99
	$SED "s/^MAIL_PASSWORD=.*/MAIL_PASSWORD=/" $CONF_FILE
94
	$SED "s/^MAIL_PASSWORD=.*/MAIL_PASSWORD=/" $CONF_FILE
100
	$SED "s/^MAIL_WHITEDOMAIN=.*/MAIL_WHITEDOMAIN=/" $CONF_FILE
95
	$SED "s/^MAIL_WHITEDOMAIN=.*/MAIL_WHITEDOMAIN=/" $CONF_FILE
101
	$SED "s/^MAIL_ADMIN=.*/MAIL_ADMIN=/" $CONF_FILE
96
	$SED "s/^MAIL_ADMIN=.*/MAIL_ADMIN=/" $CONF_FILE
102
	$SED "/^SMTP_IP=/ s/^/#/" $LOCAL_IPTABLE_FILE
97
	$SED "/^SMTP_IP=/ s/^/#/" $LOCAL_IPTABLE_FILE
103
	$SED "/^SMTP_PORT=/ s/^/#/" $LOCAL_IPTABLE_FILE
98
	$SED "/^SMTP_PORT=/ s/^/#/" $LOCAL_IPTABLE_FILE
104
	$SED "s/^\$IPTABLES -A OUTPUT -p tcp --dport \$SMTP_PORT.*/#\$IPTABLES -A OUTPUT -p tcp --dport \$SMTP_PORT -d \$SMTP_IP -m conntrack --ctstate NEW,ESTABLISHED -j ACCEPT/" $LOCAL_IPTABLE_FILE
99
	$SED "s/^\$IPTABLES -A OUTPUT -p tcp --dport \$SMTP_PORT.*/#\$IPTABLES -A OUTPUT -p tcp --dport \$SMTP_PORT -d \$SMTP_IP -m conntrack --ctstate NEW,ESTABLISHED -j ACCEPT/" $LOCAL_IPTABLE_FILE
105
	$SED "s/^\$IPTABLES -A INPUT  -p tcp --sport \$SMTP_PORT.*/#\$IPTABLES -A INPUT  -p tcp --sport \$SMTP_PORT -s \$SMTP_IP -m conntrack --ctstate ESTABLISHED     -j ACCEPT/" $LOCAL_IPTABLE_FILE
100
	$SED "s/^\$IPTABLES -A INPUT  -p tcp --sport \$SMTP_PORT.*/#\$IPTABLES -A INPUT  -p tcp --sport \$SMTP_PORT -s \$SMTP_IP -m conntrack --ctstate ESTABLISHED     -j ACCEPT/" $LOCAL_IPTABLE_FILE
106
	$SED "s/^relayhost =.*/relayhost =/" $POSTFIX_CONF_FILE
101
	$SED "s/^relayhost =.*/relayhost =/" $POSTFIX_CONF_FILE
107
	[ -e ${SASLPATH}/sasl_passwd ] && rm -f ${SASLPATH}/sasl_passwd
102
	[ -e ${SASLPATH}/sasl_passwd ] && rm -f ${SASLPATH}/sasl_passwd
108
elif [[ $TYPE_MAIL -eq 2 ]]; then # Enable mail service (relaying to an extern mail server)
103
elif [[ $TYPE_MAIL -eq 2 ]]; then # Enable mail service (relaying to an extern mail server)
109
	$SED "s/^MAIL=.*/MAIL=on/" $CONF_FILE
104
	$SED "s/^MAIL=.*/MAIL=on/" $CONF_FILE
110
	$SED "s/^MAIL_TYPE=.*/MAIL_TYPE=2/" $CONF_FILE
105
	$SED "s/^MAIL_TYPE=.*/MAIL_TYPE=2/" $CONF_FILE
111
	$SED "s/^MAIL_SMTP=.*/MAIL_SMTP=/" $CONF_FILE
-
 
112
	$SED "s/^MAIL_SMTP_IP=.*/MAIL_SMTP_IP=$smtpIP/" $CONF_FILE
106
	$SED "s/^MAIL_SMTP_IP=.*/MAIL_SMTP_IP=$smtpIP/" $CONF_FILE
113
	$SED "s/^MAIL_PORT=.*/MAIL_PORT=$port/" $CONF_FILE
107
	$SED "s/^MAIL_PORT=.*/MAIL_PORT=$port/" $CONF_FILE
114
	$SED "s/^MAIL_ADDR=.*/MAIL_ADDR=/" $CONF_FILE
108
	$SED "s/^MAIL_ADDR=.*/MAIL_ADDR=/" $CONF_FILE
115
	$SED "s/^MAIL_PASSWORD=.*/MAIL_PASSWORD=/" $CONF_FILE
109
	$SED "s/^MAIL_PASSWORD=.*/MAIL_PASSWORD=/" $CONF_FILE
116
	$SED "s/^MAIL_WHITEDOMAIN=.*/MAIL_WHITEDOMAIN=$whiteDomain/" $CONF_FILE
110
	$SED "s/^MAIL_WHITEDOMAIN=.*/MAIL_WHITEDOMAIN=$whiteDomain/" $CONF_FILE
117
	$SED "s/^MAIL_ADMIN=.*/MAIL_ADMIN=$adminMail/" $CONF_FILE
111
	$SED "s/^MAIL_ADMIN=.*/MAIL_ADMIN=$adminMail/" $CONF_FILE
118
	$SED "s/^#SMTP_IP=.*/SMTP_IP=$smtpIP/" $LOCAL_IPTABLE_FILE
112
	$SED "s/^#SMTP_IP=.*/SMTP_IP=$smtpIP/" $LOCAL_IPTABLE_FILE
119
	$SED "s/^#SMTP_PORT=.*/SMTP_PORT=$port/" $LOCAL_IPTABLE_FILE
113
	$SED "s/^#SMTP_PORT=.*/SMTP_PORT=$port/" $LOCAL_IPTABLE_FILE
120
	$SED "s/^#\$IPTABLES -A OUTPUT -p tcp --dport \$SMTP_PORT.*/\$IPTABLES -A OUTPUT -p tcp --dport \$SMTP_PORT -d \$SMTP_IP -m conntrack --ctstate NEW,ESTABLISHED -j ACCEPT/" $LOCAL_IPTABLE_FILE
114
	$SED "s/^#\$IPTABLES -A OUTPUT -p tcp --dport \$SMTP_PORT.*/\$IPTABLES -A OUTPUT -p tcp --dport \$SMTP_PORT -d \$SMTP_IP -m conntrack --ctstate NEW,ESTABLISHED -j ACCEPT/" $LOCAL_IPTABLE_FILE
121
	$SED "s/^#\$IPTABLES -A INPUT  -p tcp --sport \$SMTP_PORT.*/\$IPTABLES -A INPUT  -p tcp --sport \$SMTP_PORT -s \$SMTP_IP -m conntrack --ctstate ESTABLISHED     -j ACCEPT/" $LOCAL_IPTABLE_FILE
115
	$SED "s/^#\$IPTABLES -A INPUT  -p tcp --sport \$SMTP_PORT.*/\$IPTABLES -A INPUT  -p tcp --sport \$SMTP_PORT -s \$SMTP_IP -m conntrack --ctstate ESTABLISHED     -j ACCEPT/" $LOCAL_IPTABLE_FILE
122
	$SED "s/^relayhost =.*/relayhost = $smtp:$port/g" $POSTFIX_CONF_FILE
116
	$SED "s/^relayhost =.*/relayhost = $smtpIP:$port/g" $POSTFIX_CONF_FILE
123
	[ -e ${SASLPATH}/sasl_passwd ] && rm -f ${SASLPATH}/sasl_passwd
117
	[ -e ${SASLPATH}/sasl_passwd ] && rm -f ${SASLPATH}/sasl_passwd
124
elif [[ $TYPE_MAIL -eq 3 ]]; then # Enable mail service (using an email address)
118
elif [[ $TYPE_MAIL -eq 3 ]]; then # Enable mail service (using an email address)
125
	$SED "s/^MAIL=.*/MAIL=on/" $CONF_FILE
119
	$SED "s/^MAIL=.*/MAIL=on/" $CONF_FILE
126
	$SED "s/^MAIL_TYPE=.*/MAIL_TYPE=3/" $CONF_FILE
120
	$SED "s/^MAIL_TYPE=.*/MAIL_TYPE=3/" $CONF_FILE
127
	$SED "s/^MAIL_SMTP=.*/MAIL_SMTP=/" $CONF_FILE
-
 
128
	$SED "s/^MAIL_SMTP_IP=.*/MAIL_SMTP_IP=$smtpIP/" $CONF_FILE
121
	$SED "s/^MAIL_SMTP_IP=.*/MAIL_SMTP_IP=$smtpIP/" $CONF_FILE
129
	$SED "s/^MAIL_PORT=.*/MAIL_PORT=$port/" $CONF_FILE
122
	$SED "s/^MAIL_PORT=.*/MAIL_PORT=$port/" $CONF_FILE
130
	$SED "s/^MAIL_ADDR=.*/MAIL_ADDR=$mailAddr/" $CONF_FILE
123
	$SED "s/^MAIL_ADDR=.*/MAIL_ADDR=$mailAddr/" $CONF_FILE
131
	$SED "s/^MAIL_PASSWORD=.*/MAIL_PASSWORD=$mailMdp/" $CONF_FILE
124
	$SED "s/^MAIL_PASSWORD=.*/MAIL_PASSWORD=$mailMdp/" $CONF_FILE
132
	$SED "s/^MAIL_WHITEDOMAIN=.*/MAIL_WHITEDOMAIN=$whiteDomain/" $CONF_FILE
125
	$SED "s/^MAIL_WHITEDOMAIN=.*/MAIL_WHITEDOMAIN=$whiteDomain/" $CONF_FILE
133
	$SED "s/^MAIL_ADMIN=.*/MAIL_ADMIN=$adminMail/" $CONF_FILE
126
	$SED "s/^MAIL_ADMIN=.*/MAIL_ADMIN=$adminMail/" $CONF_FILE
134
	$SED "s/^#SMTP_IP=.*/SMTP_IP=$smtpIP/" $LOCAL_IPTABLE_FILE
127
	$SED "s/^#SMTP_IP=.*/SMTP_IP=$smtpIP/" $LOCAL_IPTABLE_FILE
135
	$SED "s/^#SMTP_PORT=.*/SMTP_PORT=$port/" $LOCAL_IPTABLE_FILE
128
	$SED "s/^#SMTP_PORT=.*/SMTP_PORT=$port/" $LOCAL_IPTABLE_FILE
136
	$SED "s/^#\$IPTABLES -A OUTPUT -p tcp --dport \$SMTP_PORT.*/\$IPTABLES -A OUTPUT -p tcp --dport \$SMTP_PORT -m conntrack --ctstate NEW,ESTABLISHED -j ACCEPT/" $LOCAL_IPTABLE_FILE
129
	$SED "s/^#\$IPTABLES -A OUTPUT -p tcp --dport \$SMTP_PORT.*/\$IPTABLES -A OUTPUT -p tcp --dport \$SMTP_PORT -m conntrack --ctstate NEW,ESTABLISHED -j ACCEPT/" $LOCAL_IPTABLE_FILE
137
	$SED "s/^#\$IPTABLES -A INPUT  -p tcp --sport \$SMTP_PORT.*/\$IPTABLES -A INPUT  -p tcp --sport \$SMTP_PORT -m conntrack --ctstate ESTABLISHED     -j ACCEPT/" $LOCAL_IPTABLE_FILE
130
	$SED "s/^#\$IPTABLES -A INPUT  -p tcp --sport \$SMTP_PORT.*/\$IPTABLES -A INPUT  -p tcp --sport \$SMTP_PORT -m conntrack --ctstate ESTABLISHED     -j ACCEPT/" $LOCAL_IPTABLE_FILE
138
	$SED "s/^relayhost =.*/relayhost = $smtpIP:$port/g" $POSTFIX_CONF_FILE
131
	$SED "s/^relayhost =.*/relayhost = $smtpIP:$port/g" $POSTFIX_CONF_FILE
139
	[ -d ${SASLPATH} ] || mkdir ${SASLPATH}
132
	[ -d ${SASLPATH} ] || mkdir ${SASLPATH}
140
	echo "[${smtpIP}]:${port} ${mailAddr}:${mailMdp}" > ${SASLPATH}/sasl_passwd
133
	echo "[${smtpIP}]:${port} ${mailAddr}:${mailMdp}" > ${SASLPATH}/sasl_passwd
141
	postmap ${SASLPATH}/sasl_passwd
134
	postmap ${SASLPATH}/sasl_passwd
142
	chmod -R 644 ${SASLPATH}
135
	chmod -R 644 ${SASLPATH}
143
	chown root:root ${SASLPATH}/sasl_passwd*
136
	chown root:root ${SASLPATH}/sasl_passwd*
144
	chmod 0600 ${SASLPATH}/sasl_passwd*
137
	chmod 0600 ${SASLPATH}/sasl_passwd*
145
else
138
else
146
	echo "Erreur ! Aucun type de messagerie sélectionné !"
139
	echo "Erreur ! Aucun type de messagerie sélectionné !"
147
	exit 0
140
	exit 0
148
fi
141
fi
149
/usr/local/bin/alcasar-iptables.sh
142
/usr/local/bin/alcasar-iptables.sh
150
systemctl restart postfix.service
143
systemctl restart postfix.service
151
exit 0
144
exit 0
152
 
145