I am stuck! I need some comprehensive "start to finish" help!

[m***@gmail.com]

I've followed several guides....
I've tried several variations ....
I've had no success setting up a basic (home) email server.

I need help from someone who can help me logically process some basic "start to finish" setup instructions.

I can provide particulars for my setup, cut & paste any config files. Whatever is needed to get my server to send and receive email! I feel like I have tried nearly everything and get about 90% done... but my server won't send or receive.

I know lots of times, and on some message boards questions fly back and forth and the main question sometimes gets lost in the process. So I thought I'd provide whatever info is requested by member of this list to get a basic email server up & running.

OR if there is a better forum to get help I'd be grateful to be pointed in that direction as well.

-------------
-------------

My hardware: RaspberryPi 3.
My distro: Raspbian-Lite (debian-stretch)

Relevant Software installed: LAMP server + Postfix & Dovecot

My ServerName: bluewaters.group
My Domain name: www.bluewaters.group
My IP Address: 172.111.198.90 (Dedicated IP)
SSL is enabled.

-------------
-------------

/etc/postfix/main.conf


meta_directory = /etc/postfix
setgid_group = postdrop
command_directory = /usr/sbin
sample_directory = /etc/postfix
newaliases_path = /usr/bin/newaliases
mailq_path = /usr/bin/mailq
sendmail_path = /usr/sbin/sendmail
daemon_directory = /usr/lib/postfix/sbin
manpage_directory = /usr/share/man
html_directory = /usr/share/doc/postfix/html
data_directory = /var/lib/postfix
shlib_directory = /usr/lib/postfix
smtp_rcpt_timeout = 120s
smtp_helo_timeout = 120s
smtp_mail_timeout = 120s
smtp_data_xfer_timeout = 120s
home_mailbox = Maildir/
mailbox_command =

myhostname = bluewaters.group
myorigin = bluewaters.group
mydomain = bluewaters.group
mydestination = bluewaters.group
#relayhost = [mail.bluewaters.group]:587
#relayhost = bluewaters.group

biff = no
append_dot_mydomain = yes
readme_directory = no
compatibility_level = 2
unknown_local_recipient_reject_code = 550
mailbox_size_limit = 0
recipient_delimiter = +
alias_maps = hash:/etc/aliases
alias_database = hash:/etc/aliases
#relay_domains = $mydestination
inet_protocols = ipv4

smtpd_use_tls=yes
smtpd_tls_cert_file = /etc/postfix/ssl/bwg.crt
smtpd_tls_key_file = /etc/postfix/ssl/bwg.key
smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache
smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache

smtpd_sasl_type = dovecot
smtpd_sasl_path = private/auth
smtpd_sasl_auth_enable = yes
smtpd_sasl_local_domain = bluewaters.group

smtpd_banner = $myhostname ESMTP $mail_name (Raspbian)
smtpd_relay_restrictions = permit_mynetworks permit_sasl_authenticated defer_unauth_destinat$
smtpd_recipient_restrictions = permit_mynetworks permit_auth_destination permit_sasl_authent$

mynetworks_style = subnet
smtpd_tls_security_level = encrypt

-----------------
-------------------

/etc/postfix/master.cf


# To open and secure port 587
submission inet n - n - - smtpd
-o syslog_name=postfix/submission
-o smtpd_tls_security_level=encrypt
-o smtpd_tls_security_level=may
-o smtpd_sasl_auth_enable=yes
-o smtpd_reject_unlisted_recipient=no
# -o smtpd_client_restrictions=$mua_client_restrictions
# -o smtpd_helo_restrictions=$mua_helo_restrictions
# -o smtpd_sender_restrictions=$mua_sender_restrictions
-o smtpd_recipient_restrictions=
-o smtpd_relay_restrictions=permit_sasl_authenticated,reject
-o milter_macro_daemon_name=ORIGINATING

# To open and secure port 465:
smtps inet n - n - - smtpd
-o syslog_name=postfix/smtps
-o smtpd_tls_wrappermode=yes
-o smtpd_sasl_auth_enable=yes
-o smtpd_reject_unlisted_recipient=no
# -o smtpd_client_restrictions=$mua_client_restrictions
# -o smtpd_helo_restrictions=$mua_helo_restrictions
# -o smtpd_sender_restrictions=$mua_sender_restrictions
-o smtpd_recipient_restrictions=
-o smtpd_relay_restrictions=permit_sasl_authenticated,reject
-o milter_macro_daemon_name=ORIGINATING


smtp inet n - y - - smtpd
#smtp inet n - y - 1 postscreen
#smtpd pass - - y - - smtpd
#dnsblog unix - - y - 0 dnsblog
#tlsproxy unix - - y - 0 tlsproxy
#628 inet n - y - - qmqpd


pickup unix n - y 60 1 pickup
cleanup unix n - y - 0 cleanup
qmgr unix n - n 300 1 qmgr
#qmgr unix n - n 300 1 oqmgr
tlsmgr unix - - y 1000? 1 tlsmgr
rewrite unix - - y - - trivial-rewrite
bounce unix - - y - 0 bounce
defer unix - - y - 0 bounce
trace unix - - y - 0 bounce
verify unix - - y - 1 verify
flush unix n - y 1000? 0 flush
proxymap unix - - n - - proxymap
proxywrite unix - - n - 1 proxymap
smtp unix - - y - - smtp
relay unix - - y - - smtp
showq unix n - y - - showq
error unix - - y - - error
retry unix - - y - - error
discard unix - - y - - discard
local unix - n n - - local
virtual unix - n n - - virtual
lmtp unix - - y - - lmtp
anvil unix - - y - 1 anvil
scache unix - - y - 1 scache
# -o smtp_helo_timeout=5 -o smtp_connect_timeout=5

maildrop unix - n n - - pipe
flags=DRhu user=vmail argv=/usr/bin/maildrop -d ${recipient}

uucp unix - n n - - pipe
flags=Fqhu user=uucp argv=uux -r -n -z -a$sender - $nexthop!rmail ($recipient)

ifmail unix - n n - - pipe
flags=F user=ftn argv=/usr/lib/ifmail/ifmail -r $nexthop ($recipient)
bsmtp unix - n n - - pipe
flags=Fq. user=bsmtp argv=/usr/lib/bsmtp/bsmtp -t$nexthop -f$sender $recipient
scalemail-backend unix - n n - 2 pipe
flags=R user=scalemail argv=/usr/lib/scalemail/bin/scalemail-store ${nexthop} ${user} ${ex$
mailman unix - n n - - pipe
flags=FR user=list argv=/usr/lib/mailman/bin/postfix-to-mailman.py
${nexthop} ${user}

[Burkhard Ott]

Hi,

Post by m***@gmail.com
I've followed several guides....
I've tried several variations ....
I've had no success setting up a basic (home) email server.

You enforce STARTTLS on port 25, not a good idea, since it is the choice
of the sender to use tls or not. Offering this as an option is fine, but
you can't enforce it.

Post by m***@gmail.com
I need help from someone who can help me logically process some basic
"start to finish" setup instructions.

Setups depend on the circumstances, you may want to consider to ask a
professional for help. (yes of course, he/she would chanrge you for that).

Post by m***@gmail.com
I can provide particulars for my setup, cut & paste any config files.
Whatever is needed to get my server to send and receive email! I feel
like I have tried nearly everything and get about 90% done... but my
server won't send or receive.

I checked your DNS pts which look ok, however I would recommend that you
configure iptables on your raspi, otherwise you find yourself in the
situation that you send more email that you want and everyone will block
your IP as you arfe then a known spammer.

Do you have paper in your printer and did you configure cups :).

PORT STATE SERVICE VERSION
21/tcp filtered ftp
22/tcp open ssh (protocol 2.0)
25/tcp open smtp Postfix smtpd
80/tcp open http Apache httpd 2.4.25
139/tcp open netbios-ssn Samba smbd 3.X - 4.X (workgroup: WORKGROUP)
143/tcp open tcpwrapped
443/tcp open ssl/ssl Apache httpd (SSL-only mode)
445/tcp open netbios-ssn Samba smbd 3.X - 4.X (workgroup: WORKGROUP)
465/tcp open ssl/smtps?
587/tcp open tcpwrapped
631/tcp open ipp CUPS 2.2
993/tcp open tcpwrapped
1000/tcp filtered cadlock
10000/tcp open http MiniServ 1.881 (Webmin httpd)




cheers

[m***@gmail.com]

Post by m***@gmail.com
I can provide particulars for my setup, cut & paste any config files. Whatever is needed to get my server to send and receive email! I feel like I have tried nearly everything and get about 90% done... but my server won't send or receive.

Thanks for the help and info...!
Yes, I've looked at my settings and it all seems rather basic, but regardless of what I tweek my server will not send or receive email. I looked into the DNS specs too and thought everything looks pretty generic.

I just know it's something really basic. Probably some setting In another program or file that is actually not communicating correctly with postfix. I just don't know what that might be.

I'd very likely be willing to pay for some professional help. I just want to see it working. It's really just a personal project, but I'd like to get it working.

Maybe there ARE a couple of options that might help me if someone were willing to post/paste their WORKING postfix config files (main & master) that would be very helpful. (I'm trying to use IMAP with SSL)...

I'd relly like to see a solidly working config just so I could compare mine to it. The other option, since it's a raspberry pi, I might put a mail server distro (iRedMail) on a new sd card and let the system pre-configure that, then compare it's config files to mine.

[Burkhard Ott]

Post by m***@gmail.com
I just know it's something really basic. Probably some setting In
another program or file that is actually not communicating correctly
with postfix. I just don't know what that might be.

It is pretty hard to tell you from outside what's going wriong inside.
One thing is that you enforce startls, so 50% if not more MTA's will
simply not 'speak' with your postfix, so that's the first
misconfiguration.

Post by m***@gmail.com
I'd very likely be willing to pay for some professional help. I just
want to see it working. It's really just a personal project, but I'd
like to get it working.

Make me an account and send me the credentials, I can have a look.

Post by m***@gmail.com
I'd relly like to see a solidly working config just so I could compare
mine to it. The other option, since it's a raspberry pi, I might put a
mail server distro (iRedMail) on a new sd card and let the system
pre-configure that, then compare it's config files to mine.

I has nothing to do with the distro. I have postfix running with cyrus as
the backend on my server for many years as well as I built many systems
like that.
But either shutdown programs you don't need (webmin for instance),
configure iptables and keep it patched, otherwise you will become a
spsammer in short period of time.

cheers

[m***@gmail.com]

Thanks, Burkhead Ott, I'll look at the iptables & cleanup starttls. If I still can't get it going I'll get in touch with you.