pbies's questions

I have docker-mailserver and Roundcube in containers, beside there is MySQL database for mail data and user passwords. Dovecot inside is configured to verify logging in users passwords with database. Yesterday I've configured IMAP and it is working properly. Also Roundcube is working with no problem. Now I am facing problem configuring secure connection for SMTP. Even if there is setting "require" and similar to "always use STARTTLS" I am not getting possibility to send emails with secure connection. Plain (insecure) connections works ok.

My postfix-main.cf file:

smtpd_use_tls = yes
smtpd_tls_cert_file = /etc/dovecot/fullchain.pem
smtpd_tls_key_file = /etc/dovecot/privkey.pem

smtpd_tls_eecdh_grade = strong
smtpd_tls_protocols= !SSLv2, !SSLv3, !TLSv1, !TLSv1.1
smtpd_tls_mandatory_protocols= !SSLv2, !SSLv3, !TLSv1, !TLSv1.1
smtpd_tls_mandatory_ciphers = high
smtpd_tls_security_level=may
smtpd_tls_ciphers = high
tls_preempt_cipherlist = yes
smtpd_tls_mandatory_exclude_ciphers = aNULL, MD5 , DES, ADH, RC4, PSD, SRP, 3DES, eNULL
smtpd_tls_exclude_ciphers = aNULL, MD5 , DES, ADH, RC4, PSD, SRP, 3DES, eNULL
smtp_tls_mandatory_protocols = !SSLv2, !SSLv3, !TLSv1, !TLSv1.1
smtp_tls_protocols = !SSLv2, !SSLv3, !TLSv1, !TLSv1.1

# smtpd_tls_auth_only = yes

# smtp_use_tls = yes

# smtp_enforce_tls = yes
# smtpd_enforce_tls = yes

If I uncomment last 4 lines I am getting problems sending emails via Roundcube (SMTP server expects secure connection but on server it is not configured on Roundcube side). And also there is no possibility to secure SMTP communication from my home Thunderbird. TB with insecure connection works ok.

I've seen the documentation here:

http://www.postfix.org/SASL_README.html

but it does not help much.

What is the proper configuration needed to make postfix/dovecot work with STARTTLS?

EDIT:

Configuration: https://pastie.io/hxcfkw.ini

What I am getting at connection is:

# telnet localhost 587
Trying 127.0.0.1...
Connected to localhost.localdomain.
Escape character is '^]'.
220 mail.correct_domain.com ESMTP
EHLO test.com
250-mail.correct_domain.com
250-PIPELINING
250-SIZE 10240000
250-ETRN
250-AUTH PLAIN LOGIN
250-AUTH=PLAIN LOGIN
250-ENHANCEDSTATUSCODES
250-8BITMIME
250-DSN
250 CHUNKING
^]
telnet> quit
Connection closed.

So seems like the server is not offering any security.

EDIT2:

I've seen this link:

Forcing encryption for outgoing SMTP with Postfix

But nothing from there helps me. TB is constantly disconnecting from STARTTLS on the mail server.

I have specific Linux installed on SSD drive. What I want to do is to copy all ext4 partition files to other drive (also ext4) and make it bootable. Copy should be as similar as possible differentiating only in partition size and physical location of the files.

I understand that I need to make /boot/ folder the same, but what about GRUB? How can I make the target drive bootable?

Copy of whole partition/disk is not applicable here - I need instruction how to make bootable a copy of ext4 filesystem.

I have GMail payed account for own company-like mail. The DNS server for record MX is set to Google servers. I have the same domain set for port 80 (HTTP, A record in DNS) for my home server (I have public IP and redirected port). It is Armbian on a Banana Pi. Everything is fine: I can send email from BPi via sendmail to any address and it appears as coming from root with my only public email at this domain (so rather from BPi than Google server). But the problem is that emails sent by PHP scripts on this home server are not arriving, as they arrive locally. What I am trying to do is to receive email from PHP script (any address, account) to my GMail email account in the same domain, but not on home server (BPi), I need it on my GMail server (to check it on smartphone). I can share logs and configuration data. The instruction I used is at this address.

I have two domains and one IP. Both domains listen on port 80. Also on port 443 listen one of the domains (from these two). But there is also possibility to access one of the domains only by IP. I blocked the IP on port 80 and this is fine. Problem now is, that using https (port 443) and IP anyone can access page from one of the domains. How can I separate two domains from IP access?

domain1 listens on 80 only - this is ok
domain2 listens on 80 and 443 - this is ok
IP listens on 80 and 443 but must be blocked - don't know how to set it

There is set one VirtualHost for 443, but trying the second is not accepted by apache. Everything is set on apache2 working on Raspberry Pi (Raspbian).

EDIT

What I have is:

ports.conf file:

ServerName localhost
NameVirtualHost *:80
Listen 80
<IfModule mod_ssl.c>
    NameVirtualHost *:443
    ServerName 1st_domain.pl
    Listen 443
</IfModule>

ip.addr.file:

<VirtualHost *:80>
    ServerName my.ip.address.here
    ServerAlias my.ip.address.here
    <Directory /*>
        Deny from all
    </Directory>
</VirtualHost>

1st_domain file:

<VirtualHost *:80>
    ServerName 1st_domain.pl
    ServerAlias www.1st_domain.pl
    ...
</VirtualHost>
<VirtualHost *:443>
    ServerName 1st_domain.pl
    ServerAlias www.1st_domain.pl
    ...
    SSLEngine on
    SSLCertificateFile ...crt
    SSLCertificateKeyFile ...key
</VirtualHost>

2nd_domain file:

<VirtualHost *:80>
    ServerName 2nd_domain.pl
    ServerAlias www.2nd_domain.pl
    ...
</VirtualHost>

What I have is:

1. Windows server generating emails with own app and sending them to relay server (2) - this works fine

2. Relay server that sends emails received from (1) - CentOS - working fine

What I need is to additionally configure CentOS postfix to send bounce messages to Windows server (to work on them using own app on specified port). I tried to add in /etc/postfix/transport line:

test.pl        bounced:[12.34.56.78]:29990

and run

postmap /etc/postfix/transport

but I have no idea what I should do more to make it work.

In maillog I have:

Mar  6 12:00:22 ubuntu postfix/qmgr[1633]: 9CBB260899: from=<root@ubuntu>, size=197, nrcpt=1 (queue active)
Mar  6 12:00:22 ubuntu postfix/qmgr[1633]: warning: connect to transport private/bounced: No such file or directory
Mar  6 12:00:22 ubuntu postfix/error[1744]: 9CBB260899: to=<[email protected]>, relay=none, delay=1890, delays=1890/0/0/0.01, dsn=4.3.0, status=deferred (mail transport unavailable)