Maitiro ekutarisa mail server

Diagnostics yemasevha eemail inotora chikamu chakakosha mukuona iyo chaiyo email kushanda. Inobvumira kuziva uye kugadzirisa matambudziko ane chekuita nekutumira, kugamuchira, uye kugadzirisa mameseji eemail. Chimwe chezvinhu zvakakosha zvekuongororwa ndiko kushandiswa kwemafirita pamaseva e-mail, ayo anopa kudzivirirwa kubva kune spam, mavhairasi uye zvimwe zvityisidziro zvekuchengetedza.

Ichi chinyorwa chinotarisa ese ari maviri ekunze masevhisi anobatsira kutarisa mail server mashandiro kubva padivi, pamwe nemidziyo yemukati inobvumira kuita diagnostics zvakananga pane sevha. Zviito zvese, semuenzaniso, zvichaitwa pane a zvakavanzika server inofambiswa neUbuntu 20.04.6 OS ine mhinduro yakamisikidzwa muchimiro chePostfix neDovecot, zvisinei, nzira dzakaratidzwa dzinoshanda kunenge chero sisitimu yekushandisa uye mail vatengi.

Masevhisi epamhepo ekutarisa mail server

Yekutanga uye yakakosha nhanho ndeyekusimbisa uchishandisa ekunze online masevhisi. Nenzira iyi, unogona kutarisa sevha yetsamba yekufumurwa, SPF, DKIM uye DMARC marongero, uye zvakare tarisa mukurumbira wemakero eIP kubva kune iyo email inotumirwa. Muzviitiko zvakawanda, kushandisa maturusi aya chete kunogona kuunza mhedzisiro inodiwa.

Ngatitarisei zvakadzama masevhisi makuru ekusimbisa uye kushanda kwawo:

MxToolBox inotitendera kuti titarise anenge ese aripo eemail maseva paramita. Iyo sevhisi inopa maturusi ekutarisa ese marekodhi rekodhi, general domain kuwanikwa, kutarisa SSL zvitupa, IP kero mamiriro uye zvimwe zvakawanda. Kuti uongorore, unofanirwa kuenda kuchipatara peji rebasa, isa IP kero kana domain, sarudza chishandiso chinodiwa uye mhanyisa cheki

Rondedzero yakadzama yezvishandiso zvese zviripo inoratidzwa mune iyo skrini:

Sezvaonekwa pamusoro, webhusaiti inotarisawo kuvepo kweIP/domain mune blacklists. Ese makuru masosi anotariswa: Spamhaus, Barracuda, SURBL nevamwe vazhinji. Kana iyo kero iri mune chero dhatabhesi, iyo sevhisi ichapa ruzivo nezve zvikonzero zvekuvharirwa. Nenzira iyi, iwe unozokwanisa kutora matanho ekugadzirisa dambudziko.

MailTester ndiyo yechipiri inonyanya kufarirwa chishandiso chekutarisa mail server. Iyi sevhisi inobvumira vashandisi kutumira email yekuyedza kukero yakasarudzika, uye vobva vagamuchira yakadzama mushumo pamusoro pemhando yemeseji yakatumirwa. Kusiyana neMxToolBox, sosi iyi inonyanya kutariswa kwete pakuongorora mail server, asi pamwe nekuvandudza email. Nekudaro, izvi hazvireve kuti sevhisi haigone kuita ongororo yakazara yeseva yeanotumira. Inoedza kutumira tsamba, inoitisa tsvakiridzo uye inopa kurudziro yekuvandudza iyo mail sevhisi yakazara.

Kuti upedze cheki, ingoenda ku resource webhusaiti uye tora yakasarudzika email kero yaunoda kutumira email. Mushure mekutumira, iwe unofanirwa kusarudza "cheki kuongororwa" uye kumirira kuti peji rizorodze. Mhedzisiro yakanaka inoita seizvi:

Kana paine matambudziko kana kurudziro, sevhisi inoshuma izvi muchikamu chakakodzera chemushumo.

Iwo masevhisi ataurwa pamusoro anokwana cheki yakazara yeesevha yetsamba kubva padivi. Ivo vanokutendera kuti uone zvingangoitika matambudziko nekutumira email, tarisa yako kuchengetedza marongero, uye zvakare kugamuchira kurudziro yekugadzirisa zvikanganiso zvinogona kuitika. Tevere, isu tichaita bvunzo padivi reseva.

Cheki zvigadziriso sevha yetsamba

Kutarisa DNS zvinyorwa

Imwe yezvinetso zvakajairika padivi revhavha server haina kururama DNS marekodhi kumisikidzwa. Iwe unogona kutarisa kurongeka kwavo kuburikidza neyakafanotaurwa yechitatu-bato masevhisi. Nekudaro, mune dzimwe nguva, iyo email inogona kungotadza kuendeswa kune yechitatu-bato retsamba bhokisi. Muchiitiko ichi, iwe unofanirwa kutarisa nemanyorero ese. Kuti uite izvi, enda kuDNS mupepeti uye tanga kutarisa. Semuenzaniso, ngatitorei zvinotevera senzvimbo yedata: domain profit.com, IP kero 11.22.33.44, apo @ inogona kushandiswa sezita rezita, kana munyori asingabvumire kuzadza iyi fomu. Usakanganwa kushandura maitiro kuti ave ako. Usakanganwa kushandura maitiro kuti ave ako.

A zvinyorwa tsanangura iyo IP kero yemasevha etsamba. Zvichingotaura, ivo vanotungamira iyo domain kune iyo mail server kero. Inofanira kutaridzika seizvi:

MX zvinyorwa ndiyo inonyanya kukosha kune mail server, ivo vane basa rekutumira mail nzira. Mune mamwe mazwi, vanotungamira tsamba kubhokisi retsamba.

SPF zvinyorwa nongedzera kumaseva anokwanisa kutumira maemail kubva kune imwe nzvimbo. Ndokumbira utarise: iwo anoburitswa seTXT. Imwe chete yehukoshi hunobvira inoratidzwa. 

A DKIM rekodhi inoshandiswa kuratidza huchokwadi hweemail. Inofanirwa kunge iine yakagadzirwa ruzhinji rwevanhu key. Saizvozvo, imwe chete yezvakakosha sarudzo inoratidzwa.

DMARC kurekodha ndiyo inotevera uye yekupedzisira nhanho yekudzivirira. Inoshanda kune maemail asina kupfuura SPF uye DKIM macheki.

Zvakare, imwe yeakanyanya kukosha marekodhi kune mail server ndeye PTR rekodhi. Zvinogona kutaurwa kuti inoshanda inversely kune iyo A rekodhi, ndiko kuti, inobatanidza IP kero ine domain. Rudzi urwu rwerekodhi runogona kungowedzerwa kuburikidza nekukumbira kune tsigiro yehunyanzvi yemupi wekutambira, uye inogona kutariswa nemurairo: tsvaga IP, uko IP iri server yako kero. Mhinduro inofanirwa kuratidza iyo yakabatana domain.

Port checking

Matambudziko ane akavharwa zviteshi anogona zvakare kutungamira kune yakazara mail server kusashanda. Chokutanga pane zvose, zvakakosha kujekesa nemupi kana pane zvipingamupinyi pazvikepe zvinodiwa padivi rayo. Isu hatidzikisire vatengi kune nhamba yeakavhurika ports pane chero vakazvitsaurira or virtual servers. Nekudaro, vazhinji vanopa masevhisi ekutambira vanoita zvakasiyana.

Unogona kutarisa madoko akavhurika uchishandisa pre-yakaiswa netstat utility. Zvakakwana kuisa murairo:

netstat – nat

Iine SMTP/IMAP/POP3 server yakaiswa uye yakagadziridzwa, isu tichaona inoenderana yakavhurika ports:

Sezvatingaona pascreenshot, iwo main mail client ports akazaruka, anoti: SMTP (25) / IMAPS (143, 993) / POP3S (110, 995). Iwe unogona zvakare kutarisa iyo mail sevhisi pane yega yega port wega. The telnet chishandiso chichakubatsira neizvi. Ngatitarisei muenzaniso wePOP3, kureva, port 110:

telnet mail.yourdomain.com 110

Isu tinobuda chishandiso ne mbudo raira uye tarisa zvakasara zviteshi zvinodiwa zvinoenderana neiyo musimboti. Ziva kuti chishandiso ichi chinopawo mukana wekuyedza kutumira maemail pasina kushandisa imwe interface. Izvi zvinogona kubatsira mune zviitiko apo mushandisi anongoda kuseta sevha uye anoronga kutumira mameseji munharaunda.

Muchiitiko chekunetseka pakuvhura madoko, unofanirwa kuterera kune yakaiswa Firewall. Zvizhinji zvekugovera zvinouya nazvo Iptables/Firewalld pre-yakaiswa.

For iptables tinoshandisa mirairo inotevera:

iptables -A INPUT -p tcp --dport 25 -j ACCEPT
iptables -A INPUT -p tcp --dport 110 -j ACCEPT
iptables -A INPUT -p tcp --dport 995 -j ACCEPT
iptables -A INPUT -p tcp --dport 143 -j ACCEPT
iptables -A INPUT -p tcp --dport 993 -j ACCEPT

Kune firewall:

firewall-cmd --permanent --add-port=25/tcp
firewall-cmd --permanent --add-port=110/tcp
firewall-cmd --permanent --add-port=995/tcp
firewall-cmd --permanent --add-port=143/tcp
firewall-cmd --permanent --add-port=993/tcp

Mune zvimwe zviitiko, sevhisi yeSMTP inodawo madoko 465 uye 587 kuti avhurwe kuti ashande nemazvo. Kuvhura zviteshi izvi kunoitika nenzira imwechete. Tangazve iyo Firewall sevhisi mushure mekuwedzera mitemo mitsva.

Kutarisa zvitupa zveSSL/TLS zvevhavha yetsamba

Zvitupa zveSSL/TLS zvinoshandiswa pavhavha yemeseji kuti ive nechokwadi chekufambisa data pakati pemutengi wetsamba nesevha, uye zvakare kusimbisa huchokwadi hwevatumire mail server pachayo, zvichibvisa mukana wekurwiswa kwemurume-pakati. Nekudaro, ivo vanogona zvakare kukonzera matambudziko nekutumira kana kugamuchira tsamba. Kuti utange diagnostics, unofanirwa kuona kuti zvitupa zvakaiswa padivi reseva. Ngatitarise kuvepo kwechitupa nemurairo unotevera:

openssl s_client -showcerts -server mail.profit.com -connect IP:port

Mukuraira uku, iwe unofanirwa kutsiva kukosha neyako: "mail.profit.com" ndiyo kero yemeseji server; IP: port iyo data server. Semuenzaniso, ngatitarisei port 993, inova ye IMAP protocol. Mamwe maprotocol anotariswa nenzira imwecheteyo.

Mukupindura, sevha inofanirwa kutumira data retifiketi:

Vazhinji vanotumira tsamba vanoisa zvitupa otomatiki. Nekudaro, mune zvimwe zviitiko, zvinodikanwa kusunungura nemaoko uye kuvawedzera kune chaiyo mutengi. mapuratifomu akasiyana anogona kuda kuisirwa kwega uye kugadzirisa, saka isu tinokurudzira kuti utarise kune iyo mirairo yemhinduro chaiyo. Tinokurudzira kushandisa Regai Tinyora sechitupa, uye kushandisa Certbot sechishandiso chekubatsira pakuisirwa kwayo uye kumisikidzwa.

Logs check

Chekupedzisira, tauya kune mhinduro inobatsira mune dzakawanda kana paine zviitiko - kutarisa mail server logs. Ruzhinji rwevashandisi vanozvinyengera, vachifunga nezvekusavapo kwemhinduro yedambudziko ravo. Nekudaro, vatengi vetsamba vemazuva ano vanochengeta huwandu hukuru hweruzivo mumatanda:

1. Zuva uye nguva yekutumira uye kugamuchira tsamba.
2. Kero yeanotumira uye anotambira.
3. Kusefa mibairo ye spam nemavhairasi.
4. Mamiriro emutsetse wekutumira nekugamuchira tsamba.
5. Zviito zvevatariri nevashandisi zvine chekuita neiyo mail server (semuenzaniso, kugadzira, kudzima mabhokisi eemail, kushandura marongero).
6. Zvikanganiso uye matambudziko akamuka panguva yekugadzirisa uye kutumira maemail.

Iyo yakajairwa dhairekitori inochengetwa matanda emirairo mizhinji iri pa: /var/log/. Zvichienderana nemhinduro inoshandiswa, zita reiyo faira regi rinogona kusiyana. Somuenzaniso, the mail.log faira iri iri mune imwechete dhairekitori rePostfix. Isu hatikurudzire kuti uregeredze iyi nzira yekuongorora uye shandisa matanda nekukurumidza kana zviratidzo zvekutanga zvekushaya mail mutengi kuita zvakanaka. Ndapota verenga bhuku redu rekushandisa kuverenga sei Linux matanda.

Kunzwisisa maitiro ekutarisa mail server

Isu takaita kuongororwa kwakadzama kweiyo mail server. Panguva yekuyedzwa, ese maturusi epamhepo ekutsvagisa zvakadzama uye mhinduro dzemuno dzekuona matambudziko angangove dzakakanganiswa. Mushure mekuita bvunzo dzese dzinodiwa, mufananidzo wakakwana wemamiriro azvino eemail server wakawanikwa, pamwe nekurudziro yekubvisa zvinogona kunetsa.