• What's a POP toaster?:

  I use Dan Bernstein's definition described at http://cr.yp.to/qmail/toaster.html

  top

• What this toaster does and does not do:

  This "howto" will walk you through building a Linux Qmail "Toaster". While these instructions are intended to work with popular Linux distributions, they will probably work on other flavors of Unix without too much modification.

  Here's a list of features you'll get:

  Qmail SMTP Mail Server with SMTP-AUTH (Plain, Login, CRAM-MD5), TLS (SSL) support, and optional Virus/Spam Scanner.
  POP3 Server with CRAM-MD5, APOP, and SSL support
  IMAP Server with TLS (SSL) support
  WebMail Server
  Quota Support (usage viewable by webmail)
  Autoresponder
  Mailing Lists
  Web-Based Email Administration

  What this toaster does NOT do is act as a thorough guide to qmail or any of the other packages it installs. Such information is already available in the documentation, Life With Qmail, or other howtos/toasters. I only put this together to document all the commands/urls/procedures that I find myself repeating often. It's intended to have a bit of a "copy and paste" feel to it aimed at the impatient (me). If it's not sufficient for you, take the time to read the documentation of each package that's to be installed. There's no substitute for that.

  top

• Assumptions/Support

  This document assumes that you are familiar with Unix system administration, mail/web protocols, etc. You don't have to be a guru to make this work, but you will be patching and compiling source code, as well as editing configuration files. If you want a "point and click" install experience, this is not for you.

  These instructions come with no warranty or guarantee. If you blow up your server, and lose business in the process, that's your problem.

  Support is not provided. There are mailing lists for all these packages, as well as one specific to this toaster. See links in the appendix for more information.

  Commercial support is available. See http://merchbox.com/qmail.php for more information. There are also other sources of commercial support for the individual packages. See the respective documentation for each package for further information.

  top

• Prerequisites

  If you have installed a recent version of your Linux distribution, you shouldn't have any problems, especially if you did a "server" type of install rather than "Desktop". However, this install DOES require that you have the apache web server and PHP installed. Most distributions come with these now. PHP is only required for SquirrelMail. The main issues you might see are missing development libraries, or gdbm, stunnel, kerberos dev files, or openssl. If you are using an rpm based distro, an easy way to check for these is to issue these commands:

  rpm -q gdbm gdbm-devel openssl openssl-devel stunnel krb5-devel
  

  If any of the above are not installed, either get the rpm for your architecture (probably on your cd if you have one) or install them manually.

  SELinux: Some setuid programs, like QmailAdmin, will not work with SELinux. You should disable SELinux during installation of the OS. If you have already installed the OS, you should disable it.

  This version of this document was originally written using RedHat Linux 9.0.

  top

• Toaster License

  This document is covered by the same license as Life With Qmail, and the license is detailed here:
  http://www.opencontent.org/opl.shtml

• DNS

  Before we begin, make sure DNS (mx record) is properly setup. If you were using "merchbox.com" as your virtual domain, here's how your host lookups would look after setting up dns:
  
  

  [shupp@ns1 toaster]$ host -t mx merchbox.com
  merchbox.com. mail is handled by 0 mail.merchbox.com.
  [shupp@ns1 toaster]$ host -t a mail.merchbox.com
  mail.merchbox.com. has address 216.234.249.114
  

• Remove existing smtp/pop/imap servers

  Now we must remove any existing installations of sendmail/postfix and disable pop/imap servers. To remove sendmail and postfix from an rpm based distribution, try this:

  rpm -e --nodeps sendmail postfix
  

  Unless you have other services that absolutely have to run on this machine, I recommend shutting down inetd or xinetd altogether and removing it from your startup scripts. The only thing you'll need (outside of what we're about to isntall) is ssh, which is probably installed already. This will likely shut off any pop3 or imap servers, as well as other unneccessary ports. Otherwise, disable them manually.

  To be sure that these services are disabled, try telnetting to ports 25, 110, and 143 and make sure your connections are refused.

  top

• Download packages

  I keep my software source in /var/src. This is what I'll refer to for the rest of this document.

  Some of this is version dependent, so please stick to the URLs below!

  mkdir -p /var/src/tar
  cd /var/src/tar

  wget http://cr.yp.to/daemontools/daemontools-0.76.tar.gz
  wget http://cr.yp.to/ucspi-tcp/ucspi-tcp-0.88.tar.gz
  wget http://shupp.org/software/netqmail-1.05.tar.gz
  wget http://shupp.org/patches/qmail-toaster-0.7.2.patch.bz2
  wget http://shupp.org/software/vpopmail-5.4.10.tar.gz
  wget http://shupp.org/software/autorespond-2.0.4.tar.gz
  wget http://shupp.org/patches/autorespond-2.0.4-2.0.5.patch
  wget http://shupp.org/software/qmailadmin-1.2.3.tar.gz
  wget http://shupp.org/software/qmailadmin-help-1.0.8.tar.gz
  wget http://cr.yp.to/software/ezmlm-0.53.tar.gz
  wget http://shupp.org/software/ezmlm-idx-0.40.tar.gz
  wget http://shupp.org/software/courier-imap-3.0.8.tar.bz2
  wget http://shupp.org/software/squirrelmail-1.4.3a.tar.bz2
  wget http://shupp.org/software/quota_usage-1.3-1.2.7.tar.gz
  wget http://shupp.org/software/toaster-scripts-0.7.tar.gz
  wget http://shupp.org/patches/ezmlm-idx-0.53.400.unified_41.patch

  cd ../
  tar -xzf tar/netqmail-1.05.tar.gz
  cd netqmail-1.05
  ./collate.sh

  top

The below steps assume that your "rc" directories are in /etc/ and your "init.d" path is "/etc/init.d". If yours are different, please substitue paths accordingly.

• daemontools

  daemontools is a collection of tools for managing UNIX services. It will monitor qmail-send, and qmail-smtpd, and qmail-pop3d services.

  Info: http://cr.yp.to/daemontools.html

  Install:

  mkdir -p /package
  chmod 1755 /package
  cd /package
  tar -xpzf /var/src/tar/daemontools-0.76.tar.gz
  cd admin/daemontools-0.76
  patch -p1 < /var/src/netqmail-1.05/other-patches/daemontools-0.76.errno.patch
  package/install

  To verify that daemontools is running, make sure that `ps ax` reports '/bin/sh /command/svscanboot' and 'svscan /service' as running.

  top

  ---

• ucspi-tcp

  ucspi-tcp contains tcpserver and tcpclient, command line tools for building client-server applications.

  Info: http://cr.yp.to/ucspi-tcp.html

  Install:

  cd /var/src/
  tar -xzf tar/ucspi-tcp-0.88.tar.gz
  cd ucspi-tcp-0.88
  patch -p1 < /var/src/netqmail-1.05/other-patches/ucspi-tcp-0.88.errno.patch
  make
  make setup check
  

  top

  ---

• qmail

  qmail rocks. It's a modern smtp server that makes sendmail obsolete.

  Info: http://www.qmail.org/

  The patch you will apply below is a composite of existing patches.
  

  • smtp auth
  • spf
  • qmail-queue (to allow for virus scanners)
  • maildir++ patch
  • support oversize dns packets (not necessary if you use dnscache)
  • chkuser (check for local users, envelope syntax)
  • spam throttle
  • qregex (regular expression matching in badmailfrom and badmailto)
  • big concurrency (set the spawn limit above 255)

  Install:

  mkdir /var/qmail
  groupadd nofiles
  useradd -g nofiles -d /var/qmail/alias alias
  useradd -g nofiles -d /var/qmail qmaild
  useradd -g nofiles -d /var/qmail qmaill
  useradd -g nofiles -d /var/qmail qmailp
  groupadd qmail
  useradd -g qmail -d /var/qmail qmailq
  useradd -g qmail -d /var/qmail qmailr
  useradd -g qmail -d /var/qmail qmails

  cd /var/src
  tar -xzf tar/toaster-scripts-0.7.tar.gz
  cd netqmail-1.05/netqmail-1.05/
  

  # NOTE: RedHat/Fedora users may need to link certain include files for the TLS patch.
  # Issue the command below only if make fails:
  ln -s /usr/kerberos/include/com_err.h /usr/kerberos/include/krb5.h /usr/kerberos/include/profile.h /usr/include/
  # as well as remove the sendmail link if it still exists:
  rm /usr/sbin/sendmail

  make
  make setup check
  # NOTE: qmail will be patched AFTER vpopmail is installed

  # turn on SPF checking
  echo 3 > /var/qmail/control/spfbehavior

  # Setup the primary administrator's email address.
  # This address will receive mail for root, postmaster, and mailer-daemon.
  # Replace "admin@example.com" with your email address
  (cd ~alias; echo "admin@example.com" > .qmail-postmaster ;\
  echo "admin@example.com" > .qmail-mailer-daemon ;\
  echo "admin@example.com" > .qmail-root )
  chmod 644 ~alias/.qmail*

  # on the next line replace "full.hostname" with the hostname of your mail server
  ./config-fast full.hostname

  Configure:

  # add qmail man pages to MANPATH

  • Edit /etc/man.config
  • Add "MANPATH/var/qmail/man"

  cd /var/src
  cp toaster-scripts-0.7/rc /var/qmail/rc
  chmod 755 /var/qmail/rc
  mkdir /var/log/qmail
  echo ./Maildir/ >/var/qmail/control/defaultdelivery
  cp toaster-scripts-0.7/qmailctl /var/qmail/bin/
  chmod 755 /var/qmail/bin/qmailctl
  ln -s /var/qmail/bin/qmailctl /usr/bin
  ln -s /var/qmail/bin/sendmail /usr/sbin/sendmail
  ln -s /var/qmail/bin/sendmail /usr/lib/sendmail

  #Now create the supervise directories/scripts for the qmail services:
  mkdir -p /var/qmail/supervise/qmail-send/log
  mkdir -p /var/qmail/supervise/qmail-smtpd/log
  mkdir -p /var/qmail/supervise/qmail-pop3d/log
  mkdir -p /var/qmail/supervise/qmail-pop3ds/log
  cp /var/src/toaster-scripts-0.7/send.run /var/qmail/supervise/qmail-send/run
  cp /var/src/toaster-scripts-0.7/send.log.run /var/qmail/supervise/qmail-send/log/run
  cp /var/src/toaster-scripts-0.7/smtpd.run /var/qmail/supervise/qmail-smtpd/run
  cp /var/src/toaster-scripts-0.7/smtpd.log.run /var/qmail/supervise/qmail-smtpd/log/run
  cp /var/src/toaster-scripts-0.7/pop3d.run /var/qmail/supervise/qmail-pop3d/run
  cp /var/src/toaster-scripts-0.7/pop3d.log.run /var/qmail/supervise/qmail-pop3d/log/run
  cp /var/src/toaster-scripts-0.7/pop3ds.run /var/qmail/supervise/qmail-pop3ds/run
  cp /var/src/toaster-scripts-0.7/pop3ds.log.run /var/qmail/supervise/qmail-pop3ds/log/run
  echo 20 > /var/qmail/control/concurrencyincoming
  chmod 644 /var/qmail/control/concurrencyincoming
  chmod 755 /var/qmail/supervise/qmail-send/run
  chmod 755 /var/qmail/supervise/qmail-send/log/run
  chmod 755 /var/qmail/supervise/qmail-smtpd/run
  chmod 755 /var/qmail/supervise/qmail-smtpd/log/run
  chmod 755 /var/qmail/supervise/qmail-pop3d/run
  chmod 755 /var/qmail/supervise/qmail-pop3d/log/run
  chmod 755 /var/qmail/supervise/qmail-pop3ds/run
  chmod 755 /var/qmail/supervise/qmail-pop3ds/log/run
  mkdir -p /var/log/qmail/smtpd
  mkdir -p /var/log/qmail/pop3d
  mkdir -p /var/log/qmail/pop3ds
  chown -R qmaill /var/log/qmail
  
  #allow daemontools to start qmail
  ln -s /var/qmail/supervise/qmail-send /var/qmail/supervise/qmail-smtpd /service

  #verify that it's running with qmailctl
  sleep 5
  qmailctl stat

  top

  ---

• Vpopmail

  Vpopmail is a virtual domain package add-on for qmail. It can handle multiple domains
  on a single IP address, and none of the user accounts are /etc/passwd or "system" accounts.

  Info: http://vpopmail.sf.net/

  Install:

  groupadd -g 89 vchkpw
  useradd -u 89 -g vchkpw vpopmail

  cd /var/src
  tar -xzf tar/vpopmail-5.4.10.tar.gz
  cd vpopmail-5.4.10

  ./configure --enable-logging=v
  make
  make install-strip
  echo '127.:allow,RELAYCLIENT=""' > ~vpopmail/etc/tcp.smtp
  (cd ~vpopmail/etc ; tcprules tcp.smtp.cdb tcp.smtp.tmp < tcp.smtp)

  # install the vpopmail start script
  cp ../toaster-scripts-0.7/vpopmailctl /var/qmail/bin/vpopmailctl
  

  chmod 755 /var/qmail/bin/vpopmailctl
  ln -s /var/qmail/bin/vpopmailctl /usr/bin
  

  # add qmail toaster patch now that vpopmail is installed
  cd /var/src/netqmail-1.05/netqmail-1.05
  bunzip2 -c ../../tar/qmail-toaster-0.7.2.patch.bz2 | patch -p0
  make clean
  make
  qmailctl stop
  make setup check

  # NOTE: the following command needs to be run after any future
  # re-installs of qmail as it will chown this directory back to qmail

  chown -R vpopmail:vchkpw /var/qmail/spam

  make cert
  # enter your company's information
  make tmprsadh
  # NOTE: This may take a LONG time

  # now add the followowing line to your crontab via `crontab -e` to update these temp keys each night
  01 01 * * * /var/qmail/bin/update_tmprsadh > /dev/null 2>&1

  # start qmail back up
  qmailctl start

  #allow daemontools to start vpopmail
  ln -s /var/qmail/supervise/qmail-pop3d /var/qmail/supervise/qmail-pop3ds /service

  #verify that it's running with vpopmailctl
  sleep 5
  vpopmailctl stat

  top

  ---

• Courier-IMAP

  Courier-IMAP will supply IMAP/SIMAP access.

  Info: http://www.inter7.com/courierimap

  Install:

  cd /var/src
  tar -xjf tar/courier-imap-3.0.8.tar.bz2
  cd courier-imap-3.0.8
  # build as vpopmail
  chown -R vpopmail:vchkpw ../courier-imap-3.0.8
  su vpopmail
  # configure may take some time...
  ./configure
  # NOTE: RedHat/Fedora users need to add "--with-redhat"

  make
  exit
  make install-strip
  make install-configure

  cp courier-imap.sysvinit /etc/init.d/courier-imap
  chmod 755 /etc/init.d/courier-imap
  ln -s ../init.d/courier-imap /etc/rc0.d/K30courier-imap
  ln -s ../init.d/courier-imap /etc/rc1.d/K30courier-imap
  ln -s ../init.d/courier-imap /etc/rc2.d/S80courier-imap
  ln -s ../init.d/courier-imap /etc/rc3.d/S80courier-imap
  ln -s ../init.d/courier-imap /etc/rc4.d/S80courier-imap
  ln -s ../init.d/courier-imap /etc/rc5.d/S80courier-imap
  ln -s ../init.d/courier-imap /etc/rc6.d/K30courier-imap
  

  Configure:

  Edit /usr/lib/courier-imap/etc/authdaemonrc

  • Change authmodulelist="..." to authmodulelist="authvchkpw"

  Edit /usr/lib/courier-imap/etc/imapd

  • Change 'IMAPDSTART=NO' to 'IMAPDSTART=YES'

  Edit /usr/lib/courier-imap/etc/imapd-ssl

  • Change 'IMAPDSSLSTART=NO' to 'IMAPDSSLSTART=YES'

  # optional: The first time courier-imap is started, the SSL certificate
  # is first created using "localhost" as the "common name".
  # If you want to change this to match your hostname, you can customize
  # the CN line in /usr/lib/courier-imap/etc/imapd.cnf (and pop3d.cnf of
  # you choose to use courier's pop3d) so that the common name matches
  # your server name BEFORE you start the server for the first time

  Start IMAP server

  /etc/init.d/courier-imap start

  top

  ---

  SquirrelMail

  SquirrelMail is a web based IMAP client

  Info: http://www.squirrelmail.org/

  NOTE: This section assumes that your apache ServerRoot is /var/www and that your DocumentRoot is /var/www/html, and also that your web server runs as apache:apache

  Install:

  cd /var/src
  tar -xjf tar/squirrelmail-1.4.3a.tar.bz2
  cd squirrelmail-1.4.3a
  cd plugins
  tar -xzf ../../tar/quota_usage-1.3-1.2.7.tar.gz
  cp quota_usage/config.php.sample quota_usage/config.php
  cd ../
  ./configure
  # here you will have to set a few options:
  

  • go to Server Settings (2) and change the Server Software from "cyrus" to "courier" (a)
  • From the main menu, go to General Options (4) and change Data Direcotry (2) to "/var/www/data/"
  • From the main menu, go to Plugins and enable the quota_usage plugin, along with any others you prefer
  • Save settings
  • quit

  # move the data directory into place and change permissions to the user:group that the web server runs as:
  mv data /var/www/
  chown -R apache:apache /var/www/data

  # install squirrelmail
  cd ../
  mv squirrelmail-1.4.3a /var/www/html/

  top

  ---

  autorespond

  Autorespond is compatible autoresponder/vacation type tool that works well with vdelivermail and qmailadmin.

  Info: http://qmailadmin.sf.net/

  Install:

  cd /var/src
  tar -xzf tar/autorespond-2.0.4.tar.gz
  cd autorespond-2.0.4
  patch -p1 < ../tar/autorespond-2.0.4-2.0.5.patch
  make
  make install

  top

  ---

  ezmlm-idx

  Fast, full featured Mailing List Manager configureable from qmailadmin.

  Info: http://www.ezmlm.org/

  Install:

  cd /var/src
  tar -xzf tar/ezmlm-0.53.tar.gz
  tar -xzf tar/ezmlm-idx-0.40.tar.gz
  mv ezmlm-idx-0.40/* ezmlm-0.53/
  cd ezmlm-0.53
  patch -p0 < idx.patch
  patch < ../tar/ezmlm-idx-0.53.400.unified_41.patch
  make
  make setup

  top

  ---

  qmailadmin

  Qmailadmin can handle nearly all virtual email administration tasks for you from a web browser, except for adding and removing virtual domains.

  Info: http://sourceforge.net/projects/qmailadmin

  Install:

  cd /var/src
  tar -xzf tar/qmailadmin-1.2.3.tar.gz
  cd qmailadmin-1.2.3
  ./configure --enable-help
  make
  make install-strip

  cd ../
  tar -xzf tar/qmailadmin-help-1.0.8.tar.gz
  cd qmailadmin-help-1.0.8
  mkdir /var/www/html/images/qmailadmin/help
  cp -rp * /var/www/html/images/qmailadmin/help

  Your toaster installation is done! Now we're ready to take it for a test drive.

  top

  ---