# 邮件 / 代理

邮件服务器：安装 Postfix

安装 Postfix 以配置 SMTP 服务器。

<table class="base" id="bkmrk-%5B1%5D-%E5%AE%89%E8%A3%85%E5%90%8E%E7%BC%80%E3%80%82" summary="1"><tbody><tr><td class="num"><span>\[1\]</span></td><td><span>安装后缀。</span></td></tr></tbody></table>

```
[root@mail ~]# dnf -y install postfix
```

<table class="base" id="bkmrk-%5B2%5D-%E6%AD%A4%E7%A4%BA%E4%BE%8B%E6%98%BE%E7%A4%BA%E9%85%8D%E7%BD%AEsmtp-auth" summary="2"><tbody><tr><td class="num"><span>\[2\]</span></td><td><span>此示例显示配置</span>[<span>SMTP-Auth 以使用 Dovecot 的 SASL 功能</span>](https://www.server-world.info/en/note?os=Fedora_35&p=mail&f=2)<span>。</span></td></tr></tbody></table>

```
[root@mail ~]# vi /etc/postfix/main.cf
# line 95 : uncomment and specify hostname
myhostname = mail.srv.world
# line 102 : uncomment and specify domain name定
mydomain = srv.world
# line 118 : uncomment
myorigin = $mydomain
# line 135 : change
inet_interfaces = all
# line 138 : change it if use only IPv4
inet_protocols = ipv4
# line 183 : add
mydestination = $myhostname, localhost.$mydomain, localhost, $mydomain
# line 283 : uncomment and specify your local network
mynetworks = 127.0.0.0/8, 10.0.0.0/24
# line 438 : uncomment (use Maildir)
home_mailbox = Maildir/
# line 593 : add
smtpd_banner = $myhostname ESMTP
# add to the end
# for example, limit an email size for 10M
message_size_limit = 10485760

# SMTP-Auth settings
smtpd_sasl_type = dovecot
smtpd_sasl_path = private/auth
smtpd_sasl_auth_enable = yes
smtpd_sasl_security_options = noanonymous
smtpd_sasl_local_domain = $myhostname
smtpd_recipient_restrictions = permit_mynetworks, permit_auth_destination, permit_sasl_authenticated, reject

[root@mail ~]# systemctl enable --now postfix
```

<table class="base" id="bkmrk-%5B3%5D-%E5%A6%82%E6%9E%9C-firewalld-%E6%AD%A3%E5%9C%A8%E8%BF%90" summary="3"><tbody><tr><td class="num"><span>\[3\]</span></td><td><span>如果 Firewalld 正在运行，则允许 SMTP 服务。SMTP 使用 \[25/TCP\]。</span></td></tr></tbody></table>

```
[root@mail ~]# firewall-cmd --add-service=smtp
success
[root@mail ~]# firewall-cmd --runtime-to-permanent
success
```