Maitiro ekutarisa mail server

Diagnostics yemasevha eemail inotora chikamu chakakosha mukuona iyo chaiyo email kushanda. Inobvumira kuziva uye kugadzirisa matambudziko ane chekuita nekutumira, kugamuchira, uye kugadzirisa mameseji eemail. Chimwe chezvinhu zvakakosha zvekuongororwa ndiko kushandiswa kwemafirita pamaseva e-mail, ayo anopa kudzivirirwa kubva kune spam, mavhairasi uye zvimwe zvityisidziro zvekuchengetedza.

Chinyorwa chino chichatarisa masevhisi ekunze anobatsira kutarisa mashandiro eseva yetsamba kubva padivi, pamwe chete nezvishandiso zvemukati zvinobvumira kumhanyisa diagnostics zvakananga paseva. Mabasa ese, semuenzaniso, achaitwa paseva yakavanzika inofambiswa neUbuntu 20.04.6 OS ine mhinduro yakagadzirirwa muchimiro chePostfix neDovecot, zvisinei, nzira dzataurwa dzinoshanda kune chero system yekushandisa uye ma mail clients.

Masevhisi epamhepo ekutarisa mail server

Yekutanga uye yakakosha nhanho ndeyekusimbisa uchishandisa ekunze online masevhisi. Nenzira iyi, unogona kutarisa sevha yetsamba yekufumurwa, SPF, DKIM uye DMARC marongero, uye zvakare tarisa mukurumbira wemakero eIP kubva kune iyo email inotumirwa. Muzviitiko zvakawanda, kushandisa maturusi aya chete kunogona kuunza mhedzisiro inodiwa.

Ngatitarisei zvakadzama masevhisi makuru ekusimbisa uye kushanda kwawo:

MxToolBox inotibvumira kutarisa zvinenge zvese zviripo zvema mail servers. Sevhisi iyi inopa maturusi ekutarisa zvinyorwa zvese zvema domain, kuwanikwa kwe general domain, kutarisa SSL certificates, IP address status nezvimwe zvakawanda. Kuti uongorore, unofanirwa kuenda kupeji rebasa , kuisa IP address kana domain, kusarudza chishandiso chinodiwa uye kumhanyisa cheki.

Rondedzero yakadzama yezvishandiso zvese zviripo inoratidzwa mune iyo skrini:

Sezvaonekwa pamusoro, webhusaiti inotarisawo kuvepo kweIP/domain mune blacklists. Ese makuru masosi anotariswa: Spamhaus, Barracuda, SURBL nevamwe vazhinji. Kana iyo kero iri mune chero dhatabhesi, iyo sevhisi ichapa ruzivo nezve zvikonzero zvekuvharirwa. Nenzira iyi, iwe unozokwanisa kutora matanho ekugadzirisa dambudziko.

MailTester ndiyo chishandiso chechipiri chinozivikanwa chekutarisa server yetsamba. Sevhisi iyi inobvumira vashandisi kutumira email yekuyedza kune imwe kero, vozogamuchira mushumo wakadzama pamusoro pehunhu hwemeseji yakatumirwa. Kusiyana neMxToolBox, chishandiso ichi chinonyanya kutarisa kwete pakuongorora server yetsamba, asi pakuvandudza email. Zvisinei, izvi hazvirevi kuti sevhisi haikwanise kuita ongororo yakazara yeserver yemutumi. Inoedza kutumira tsamba, inoita tsvakiridzo uye inopa mazano ekuvandudza sevhisi yetsamba yese.

Kuti upedze cheki, ingoenda kuwebhusaiti yenzvimbo yacho wowana email address yaunoda kutumira email. Mushure mekutumira, unofanira kusarudza "check assessment" womirira kuti peji ritangezve. Mhedzisiro yakanaka inoita seizvi:

Kana paine matambudziko kana kurudziro, sevhisi inoshuma izvi muchikamu chakakodzera chemushumo.

Iwo masevhisi ataurwa pamusoro anokwana cheki yakazara yeesevha yetsamba kubva padivi. Ivo vanokutendera kuti uone zvingangoitika matambudziko nekutumira email, tarisa yako kuchengetedza marongero, uye zvakare kugamuchira kurudziro yekugadzirisa zvikanganiso zvinogona kuitika. Tevere, isu tichaita bvunzo padivi reseva.

Cheki zvigadziriso sevha yetsamba

Kutarisa DNS zvinyorwa

Chimwe chezvinetso zvinowanzoitika paserver yetsamba ndechekugadzirisa maDNS records zvisirizvo. Unogona kutarisa kuti akarurama here uchishandisa masevhisi echitatu ataurwa. Zvisinei, mune dzimwe nguva, email inogona kusatumirwa kubhokisi retsamba rechitatu. Muchiitiko ichi, unofanirwa kutarisa zvese zvawakanyora nemaoko. Kuti uite izvi, enda kuDNS editor wotanga kutarisa. Semuenzaniso, ngatitore zvinotevera sedata rekwakabva: domain profit.com, IP address 11.22.33.44, apo @ inogona kushandiswa sezita redomain, kana registrar isingabvumidze kuzadza fomu iri. Usakanganwa kushandura mavalues ​​kuita ako. Usakanganwa kushandura mavalues ​​kuita ako.

Zvinyorwa zvinotsanangura ma IP address e mail servers. Zvichitaurwa zviri nyore, zvinotungamira domain ku mail server address. Zvinofanira kutaridzika seizvi:

Marekodhi eMX ndiwo anonyanya kukosha kune sevha yetsamba, ndiwo ane basa rekutumira tsamba. Nemamwe mashoko, anoendesa tsamba kubhokisi retsamba.

Zvinyorwa zveSPF zvinonongedzera kumaseva anokwanisa kutumira maemail kubva kune rimwe domain . Ndapota cherechedzai: anoburitswa seTXT. Imwe chete yemitengo inogoneka ndiyo inoratidzwa.

Rekodhi yeDKIM inoshandiswa kusimbisa kuti email ndeyechokwadi here. Inofanira kunge iine kiyi yeruzhinji yakagadzirwa . Saizvozvowo, imwe chete yesarudzo dzevalue ndiyo inoratidzwa.

Kurekodha DMARC ndiyo danho rinotevera uye rekupedzisira rekudzivirira. Izvi zvinoshanda kumaemail asina kupasa SPF neDKIM checks.

Zvakare, chimwe chezvinyorwa zvakakosha zve mail server iPTR record . Zvinogona kutaurwa kuti inoshanda zvinopesana neA record , kureva kuti, inobatanidza IP address ne domain. Rudzi urwu rwerecord runogona kuwedzerwa chete kuburikidza nechikumbiro kune technical support ye hosting provider, uye inogona kuongororwa nemurairo unoti: nslookup IP , apo IP iri server address yako. Mhinduro yacho inofanira kuratidza linked domain.

Port checking

Matambudziko nemaports akavharwa anogonawo kukonzera kusashanda zvakanaka kweserver yetsamba. Chekutanga, zvakakosha kujekesa nemupi wepaipi kana paine zvirambidzo pamaports anodiwa padivi rayo. Hatigumiri vatengi pahuwandu hwemaports akavhurika pane chero maseva akatsaurirwa kana kuti ari echokwadi . Zvisinei, vazhinji vanopa masevhisi ekugamuchira vanoita zvakasiyana.

Unogona kutarisa ma open ports uchishandisa pre-installed netstat utility. Zvakwana kuisa murairo:

netstat – nat

Iine SMTP/IMAP/POP3 server yakaiswa uye yakagadziridzwa, isu tichaona inoenderana yakavhurika ports:

Sezvatinogona kuona pamufananidzo, mapoteshi makuru evatengi vetsamba akavhurika, anoti: SMTP (25) / IMAPS (143, 993) / POP3S (110, 995). Unogona zvakare kutarisa sevhisi yetsamba papoteshi rega rega. Chishandiso cheTelnet chichakubatsira neizvi. Ngatitarisei muenzaniso wePOP3, kureva, poteshi 110:

telnet mail.yourdomain.com 110

Tinobuda muchishandiso nemurairo wekubuda totarisa maports asara anodiwa zvichienderana nepfungwa imwecheteyo. Ziva kuti chishandiso ichi chinopawo mukana wekuyedza kutumira maemail pasina kushandisa imwe interface. Izvi zvinogona kubatsira kana mushandisi achingoda kugadzirisa sevha uye achironga kutumira maemail munharaunda.

Kana paine matambudziko pakuvhura maports, unofanira kungwarira Firewall yakaiswa. Mazhinji emidziyo iyi anouya neIptables/Firewalld yakaiswa kare.

Kune iptables tinoshandisa mirairo inotevera:

iptables -A INPUT -p tcp --dport 25 -j ACCEPT
iptables -A INPUT -p tcp --dport 110 -j ACCEPT
iptables -A INPUT -p tcp --dport 995 -j ACCEPT
iptables -A INPUT -p tcp --dport 143 -j ACCEPT
iptables -A INPUT -p tcp --dport 993 -j ACCEPT

Kune firewall:

firewall-cmd --permanent --add-port=25/tcp
firewall-cmd --permanent --add-port=110/tcp
firewall-cmd --permanent --add-port=995/tcp
firewall-cmd --permanent --add-port=143/tcp
firewall-cmd --permanent --add-port=993/tcp

Mune zvimwe zviitiko, sevhisi yeSMTP inodawo kuti maports 465 ne587 avhurwe kuti ashande nemazvo. Kuvhura maports aya kunoitika nenzira imwecheteyo. Tangazve sevhisi yeFirewall mushure mekuwedzera mitemo mitsva.

Kutarisa zvitupa zveSSL/TLS zvevhavha yetsamba

Zvitupa zveSSL/TLS zvinoshandiswa pavhavha yemeseji kuti ive nechokwadi chekufambisa data pakati pemutengi wetsamba nesevha, uye zvakare kusimbisa huchokwadi hwevatumire mail server pachayo, zvichibvisa mukana wekurwiswa kwemurume-pakati. Nekudaro, ivo vanogona zvakare kukonzera matambudziko nekutumira kana kugamuchira tsamba. Kuti utange diagnostics, unofanirwa kuona kuti zvitupa zvakaiswa padivi reseva. Ngatitarise kuvepo kwechitupa nemurairo unotevera:

openssl s_client -showcerts -server mail.profit.com -connect IP:port

Mumurairo uyu, unofanirwa kutsiva mavalues ​​neako: " mail.profit.com " ndiyo kero ye mail server; IP:port ndiyo data re server. Semuenzaniso, ngatitarisei port 993 , iri ye IMAP protocol. Mamwe ma protocol anotariswa nenzira imwecheteyo.

Mukupindura, sevha inofanirwa kutumira data retifiketi:

Mazhinji ema mail client anoisa zvitupa otomatiki. Zvisinei, mune dzimwe nguva, zvinodikanwa kuburitsa nemaoko uye kuzviwedzera kune mumwe mutengi. mapuratifomu akasiyana anogona kuda kuiswa uye kugadziriswa kwemunhu mumwe nemumwe, saka tinokukurudzira kuti utarise mirairo yemhinduro chaiyo. Tinokurudzira kushandisa Let's Encrypt sechitupa, uye kushandisa Certbot sechishandiso chekubatsira pakuiswa kwayo nekugadzirisa.

Logs check

Chekupedzisira, tauya kune mhinduro inobatsira mune dzakawanda kana paine zviitiko - kutarisa mail server logs. Ruzhinji rwevashandisi vanozvinyengera, vachifunga nezvekusavapo kwemhinduro yedambudziko ravo. Nekudaro, vatengi vetsamba vemazuva ano vanochengeta huwandu hukuru hweruzivo mumatanda:

1. Zuva uye nguva yekutumira uye kugamuchira tsamba.
2. Kero yeanotumira uye anotambira.
3. Kusefa mibairo ye spam nemavhairasi.
4. Mamiriro emutsetse wekutumira nekugamuchira tsamba.
5. Zviito zvevatariri nevashandisi zvine chekuita neiyo mail server (semuenzaniso, kugadzira, kudzima mabhokisi eemail, kushandura marongero).
6. Zvikanganiso uye matambudziko akamuka panguva yekugadzirisa uye kutumira maemail.

Dhairekitori yakajairika inochengeterwa magwaro emirairo yakawanda iri pa: / var/log/. Zvichienderana nemhinduro yakashandiswa, zita refaira remagwaro rinogona kusiyana. Semuenzaniso, faira remail.log riri mudhairekitori rimwe chete rePostfix. Hatikurudzire kuti uregeredze nzira iyi yekuongorora uye ushandise magwaro nekukurumidza kana zviratidzo zvekutanga zvekutadza kushanda zvakanaka kwe mail client zvaonekwa. Ndokumbirawo uverenge bhuku redu rekuti ungaverenga sei magwaro eLinux.

Kunzwisisa maitiro ekutarisa mail server

Isu takaita kuongororwa kwakadzama kweiyo mail server. Panguva yekuyedzwa, ese maturusi epamhepo ekutsvagisa zvakadzama uye mhinduro dzemuno dzekuona matambudziko angangove dzakakanganiswa. Mushure mekuita bvunzo dzese dzinodiwa, mufananidzo wakakwana wemamiriro azvino eemail server wakawanikwa, pamwe nekurudziro yekubvisa zvinogona kunetsa.