Linux-Postfix+Dovecot+Postfixadmin+Roundcubemail 搭建邮件服务器管理系统（四）

实现 SMTP 发信认证

1、 启动 saslauthd 认证服务

[root@mail ~]# yum  -y  install  cyrus-sasl        //此包默认通常已安装
[root@mail ~]# systemctl restart saslauthd 
[root@mail ~]# systemctl enable saslauthd
[root@mail ~]# testsaslauthd  -u user01  -p test1234  -s  smtp
0: OK "Success."                                    //检查saslauthd服务

2、编辑 postfix 配置，启用SMTP认证

[root@mail ~]# vim  /etc/postfix/main.cf
# 设置本地网络
mynetworks = 127.0.0.1
# 启用SASL认证
smtpd_sasl_auth_enable = yes
# 阻止匿名发信
smtpd_sasl_security_options = noanonymous
# 拒绝向未授权的目标域发信
smtpd_recipient_restrictions = permit_mynetworks,  permit_sasl_authenticated, reject_unauth_destination                       
[root@mail ~]# systemctl restart saslauthd 

3、以用户user01为例，未经过认证登录时，向外域发邮件会被拒绝

[root@mail ~]# telnet mail.auto.com 25
Trying 127.0.0.1...
Connected to mail.auto.com (127.0.0.1).
Escape character is '^]'.
220 mail.xxx.com ESMTP Postfix
HEL