1 a2ensite autoconfig_ssl.conf
   2 systemctl restart apache2.service

   1 apt install postal

   1 WDIR="$HOME/postal"
   2 mkdir "$WDIR" && cd "$WDIR"

   1 blackhole@rockstable.it

   1 postal@rockstable.it

   1 

   1 chmod a+x /usr/local/share/postal_wrap.sh

   1 

   1 apt install gnuplot gnuplot-doc

   1 #https://raymii.org/s/tutorials/GNUplot_tips_for_nice_looking_charts_from_a_CSV_file.html
   2 
   3 set title TITLE
   4 
   5 set datafile separator ','
   6 #set datafile commentschars "#"
   7 set xdata time
   8 set timefmt "%H:%M"
   9 
  10 set key autotitle columnhead
  11 set xlabel 'Time'
  12 set ylabel 'Messages'
  13 
  14 
  15 set y2tics # enable second axis
  16 set ytics nomirror # dont show the tics on that side
  17 set y2label "Data in KiB" # label for second axis
  18 
  19 set style line 100 lt 1 lc rgb "grey" lw 0.5
  20 set grid ls 100
  21 
  22 set ytics 10
  23 set xtics 60 rotate
  24 #set key right center # legend placement
  25 set key outside right bottom
  26 
  27 set style line 102 lw 3 lt rgb "#f62aa0" # style (pink)
  28 set style line 103 lw 3 lt rgb "#26dfd0" # style (light blue)
  29 set style line 104 lw 4 lt rgb "#b8ee30" # style (limegreen)
  30 
  31 set term svg size 800,600 dynamic enhanced
  32 set output OUT
  33 
  34 plot \
  35  CSV using 1:2 with lines ls 102, \
  36  '' using 1:3 with lines axis x1y2 ls 103, \
  37  '' using 1:4 with lines ls 104

   1 #!/bin/bash
   2 SCRIPT="$1"
   3 CSV="$2"
   4 OUT="$3"
   5 #PLOTTITLE="$(grep -i -e header -e footer "$(echo "$CSV")" \
   6 #       |sed s/\"\//g \
   7 #       |sed s/\#//g);"
   8 
   9 DATE="$(grep -Eo '[0-9]{4}-[0-9]{2}-[0-9]{2}' <<< "$CSV")"
  10 TIME="$(grep -Eo '[0-9]{2}:[0-9]{2}:[0-9]{2}' <<< "$CSV")"
  11 SIZE="$(sed -r 's/.+[0-9]{2}:[0-9]{2}:[0-9]{2}-([0-9]+).csv/\1/' <<< "$CSV")"
  12 
  13 PLOTTITLE_RAW="Postal Benchmark - $DATE $TIME ${SIZE}KiB"
  14 PLOTTITLE="$(sed -r 's/_/\\_/g' <<< "$PLOTTITLE_RAW")"
  15 
  16 gnuplot -p -e "TITLE='${PLOTTITLE}'; CSV='${CSV}'; OUT='${OUT}'" "$SCRIPT"

   1 for FILE in postal/*.csv; do
   2         echo "$FILE"
   3         ./plot.sh postal.gnuplot \
   4                 "$FILE" \
   5                 "${FILE%.csv}.svg"
   6 done

   1 aptitude install mailutils postfix postfix-pcre exim4-daemon-light-

   1 aptitude install db-util

   1 root@mail /etc/postfix # find /etc/postfix -type f -exec chmod o-rx {} \;
   2 root@mail /etc/postfix # find /etc/postfix/ -type d -exec chmod -v 750 {} \;
   3 der Modus von „/etc/postfix/“ wurde von 0755 (rwxr-xr-x) in 0750 (rwxr-x---) geändert
   4 der Modus von „/etc/postfix/sasl“ wurde von 0755 (rwxr-xr-x) in 0750 (rwxr-x---) geändert
   5 Modus von „/etc/postfix/ldap“ als 0750 (rwxr-x---) erhalten
   6 root@mail /etc/postfix # find /etc/postfix/ -type d -exec chgrp -v postfix {} \;
   7 die Gruppe von „/etc/postfix/“ wurde von root in postfix geändert
   8 die Gruppe von „/etc/postfix/sasl“ wurde von root in postfix geändert
   9 die Gruppe von „/etc/postfix/ldap“ wurde von root in postfix geändert
  10 root@mail /etc/postfix # find /etc/postfix/ -exec chgrp -v postfix {} \;
  11 die Gruppe von „/etc/postfix/“ wurde als postfix erhalten
  12 die Gruppe von „/etc/postfix/sasl“ wurde als postfix erhalten
  13 die Gruppe von „/etc/postfix/sasl/smtpd.conf“ wurde von root in postfix geändert
  14 die Gruppe von „/etc/postfix/postfix-files“ wurde von root in postfix geändert
  15 die Gruppe von „/etc/postfix/postfix-script“ wurde von root in postfix geändert
  16 die Gruppe von „/etc/postfix/post-install“ wurde von root in postfix geändert
  17 die Gruppe von „/etc/postfix/dynamicmaps.cf“ wurde von root in postfix geändert
  18 die Gruppe von „/etc/postfix/master.cf“ wurde von root in postfix geändert
  19 die Gruppe von „/etc/postfix/ldap“ wurde als postfix erhalten
  20 die Gruppe von „/etc/postfix/ldap/mailenabled_distgroups.cf“ wurde von root in postfix geändert
  21 die Gruppe von „/etc/postfix/ldap/virtual_alias_maps_mailforwarding.cf“ wurde von root in postfix geändert
  22 die Gruppe von „/etc/postfix/ldap/transport_maps.cf“ wurde von root in postfix geändert
  23 die Gruppe von „/etc/postfix/ldap/virtual_alias_maps_sharedfolders.cf“ wurde von root in postfix geändert
  24 die Gruppe von „/etc/postfix/ldap/mailenabled_dynamic_distgroups.cf“ wurde von root in postfix geändert
  25 die Gruppe von „/etc/postfix/ldap/local_recipient_maps.cf“ wurde von root in postfix geändert
  26 die Gruppe von „/etc/postfix/ldap/virtual_alias_maps.cf“ wurde von root in postfix geändert
  27 die Gruppe von „/etc/postfix/ldap/mydestination.cf“ wurde von root in postfix geändert
  28 die Gruppe von „/etc/postfix/transport.db“ wurde von root in postfix geändert
  29 die Gruppe von „/etc/postfix/header_checks.inbound“ wurde von root in postfix geändert
  30 die Gruppe von „/etc/postfix/header_checks.inbound.db“ wurde von root in postfix geändert
  31 die Gruppe von „/etc/postfix/header_checks.internal“ wurde von root in postfix geändert
  32 die Gruppe von „/etc/postfix/header_checks.internal.db“ wurde von root in postfix geändert
  33 die Gruppe von „/etc/postfix/header_checks.submission“ wurde von root in postfix geändert
  34 die Gruppe von „/etc/postfix/header_checks.submission.db“ wurde von root in postfix geändert
  35 die Gruppe von „/etc/postfix/transport“ wurde von root in postfix geändert
  36 die Gruppe von „/etc/postfix/main.cf“ wurde von root in postfix geändert

   1 adduser postfix ssl-cert

   1 mydomain = rockstable.it
   2 #myhostname = mx1.rockstable.it
   3 #myorigin = $myhostname
   4 mydestination = $myhostname, localhost.$mydomain, localhost

   1 postconf -x myhostname mydomain myorigin mydestination

   1 declare -a FILES_DB
   2 FILES_DB=(
   3         /etc/postfix/access_client \
   4         /etc/postfix/access_helo \
   5         /etc/postfix/access_recipient \
   6         /etc/postfix/access_sender \
   7         /etc/postfix/body_checks \
   8         /etc/postfix/esmtp_access \
   9         /etc/postfix/header_checks \
  10         /etc/postfix/relay_domains \
  11         /etc/postfix/transport \
  12         /etc/postfix/virtual \
  13         /etc/postfix/virtual_alias_domains \
  14         /etc/postfix/virtual_mailbox_domains \
  15         )
  16 
  17 mkdir /etc/postfix/ldap
  18 for FILE in "${FILES_DB[@]}"; do
  19         install -o root -g root -m 0640 /dev/null "$FILE"  
  20 done

   1 # ==========================================================================
   2 # service type  private unpriv  chroot  wakeup  maxproc command + args
   3 #               (yes)   (yes)   (no)    (never) (100)
   4 # ==========================================================================
   5 smtp      inet  n       -       y       -       -       smtpd -v

   1 systemctl restart postfix.service

   1 postfix reload

   1 postfix reload

   1 postconf -d     #DEFAULTS
   2 postconf -n     #CHANGED
   3 postconf -x     #EXPAND VALUES RECURSIVELY
   4 postmap -q      #QUERY DATABASE FOR KEY
   5 mailq           #SHOW QUEUE
   6 postqueue -p    #SHOW QUEUE, SAME AS mailq
   7 postqueue -f    #FLUSH/SEND ANY MAIL IN QUEUE
   8 postqueue -i ID #IMMEDIATLY REQUEUE MAIL WITH ID
   9 postsuper -d ID #DELETE QUEUED EMAIL
  10 db_dump         #SHOW CONTENT OF BERKELEY DBS
  11 

   1 syntax keyword pfmainConf ciphers_insecure
   2 syntax keyword pfmainConf cipher_suite_minimum
   3 syntax keyword pfmainConf protocols_insecure
   4 syntax keyword pfmainConf tls_security_level
   5 
   6 syntax match pfmainRef "$\<ciphers_insecure\>"
   7 syntax match pfmainRef "$\<cipher_suite_minimum\>"
   8 syntax match pfmainRef "$\<protocols_insecure\>"
   9 syntax match pfmainRef "$\<tls_security_level\>"

   1 make postmap

   1 ### WITH INTERMEDIATE JSON
   2 postqueue -j \
   3         |jq -s '.[]|select(.recipients[]|.address=="DST_EMAIL@ADDRESS.TLD")|.queue_id' \
   4         |xargs -L1 postsuper -d
   5 
   6 ### OLD SCHOOL
   7 postqueue -p \
   8         |grep -B2 "DST_EMAIL@ADDRESS.TLD" \
   9         |cut -d\  -f1 \
  10         |grep -Eo '^[0-9A-F]+' \
  11         |xargs -L1 postsuper -d 

   1 #!/bin/bash
   2 
   3 DST="$1"
   4 declare -a IDS
   5 
   6 if [ -n "$DST" ]; then
   7         IDS=( $(postqueue -p \
   8                 |grep -B2 "$DST" \
   9                 |cut -d\  -f1 \
  10                 |grep -Eo '^[0-9A-F]+')
  11         )
  12         [ "${#IDS[@]}" -gt 0 ] && \
  13                 xargs -n1 postsuper -d <<< "${IDS[@]}"
  14 else
  15         cat <<-EOL
  16         Please specify destination email address
  17         as first positional parameter.
  18         EOL
  19 fi

   1 #!/bin/bash -e
   2 
   3 declare -a IDS
   4 
   5 SELF="$(basename $0)"
   6 
   7 usage () {
   8         cat <<-EOF
   9         $SELF
  10 
  11                 -h|--help)              Display this page
  12                 -n|--new-dest)          New target email-address
  13                 -o|--old-dest)          Old target email-address
  14                 -s|--skip-header)       Skip the old header
  15         EOF
  16 }
  17 
  18 # Note that we use `"$@"' to let each command-line parameter expand to a
  19 # separate word. The quotes around `$@' are essential!
  20 # We need TEMP as the `eval set --' would nuke the return value of getopt.
  21 TEMP=`getopt -o hn:o:s --long help,new-dest:,old-dest:,skip-header \
  22      -n "$SELF" -- "$@"`
  23 
  24 if [ $? != 0 ] ; then echo "Terminating..." >&2 ; exit 1 ; fi
  25 
  26 # Note the quotes around `$TEMP': they are essential!
  27 eval set -- "$TEMP"
  28 
  29 while true ; do
  30         case "$1" in
  31                 -h|--help) usage; exit ; shift ;;
  32                 -n|--new-dest) DST_NEW="$2" ; shift 2 ;;
  33                 -o|--old-dest) DST_OLD="$2" ; shift 2 ;;
  34                 -s|--skip-header) SKIP_HEADER=true ; shift ;;
  35                 #-c|--c-long)
  36                 #       # c has an optional argument. As we are in quoted mode,
  37                 #       # an empty parameter will be generated if its optional
  38                 #       # argument is not found.
  39                 #       case "$2" in
  40                 #               "") echo "Option c, no argument"; shift 2 ;;
  41                 #               *)  echo "Option c, argument \`$2'" ; shift 2 ;;
  42                 #       esac ;;
  43                 --) shift ; break ;;
  44                 *) echo "Internal error!" ; exit 1 ;;
  45         esac
  46 done
  47 #echo "Remaining arguments:"
  48 #for arg do echo '--> '"\`$arg'" ; done
  49 
  50 ### SANITIZE USER INPUT
  51 if [ -z "$DST_NEW" ]; then
  52         echo "Please specify a new destination."
  53         exit 1
  54 elif [ -z "$DST_OLD" ];then
  55         echo "Please specify a old destination."
  56         exit 1
  57 fi
  58 
  59 ### GET MAIL FOR DST
  60 #IDS="$(postqueue -j \
  61 #       |jq -s '.[]|select(.recipients[]|.address=="'"$DST_OLD"'")|.queue_id' )"
  62 
  63 IDS=( $(postqueue -p \
  64         |grep -B2 "$DST_OLD" \
  65         |cut -d\  -f1 \
  66         |grep -Eo '^[0-9A-F]+')
  67 )
  68 
  69 if [ "${#IDS[@]}" -gt 0 ]; then
  70         DIR_TMP=$(mktemp -d)
  71 
  72         echo -e "Mail-IDs to be redirected:\n${IDS[@]}"
  73         ### PUT EMAILS ON HOLD
  74         xargs -L1 postsuper -h <<< ${IDS[@]}
  75 
  76         for ID in "${IDS[@]}"; do
  77                 if [ $SKIP_HEADER ]; then
  78                         postcat -qb "$ID" > "$DIR_TMP/$ID"
  79                 else
  80                         postcat -qbh "$ID" > "$DIR_TMP/$ID"
  81                 fi
  82 
  83                 FROM="$(postcat -qh "$ID" \
  84                         |grep '^From: ' \
  85                         |sed -r 's/^From: //')"
  86 
  87                 sendmail -f "$FROM" "$DST_NEW" < "$DIR_TMP/$ID"
  88                 [ "$?" == 0 ] && postsuper -d "$ID"
  89                 rm "$DIR_TMP/$ID"
  90         done
  91         rmdir "$DIR_TMP"
  92 else
  93         echo "No mail in queue for '$DST_OLD'. Exiting …"
  94 fi

   1 while read LINE; do
   2         MX_RECORD="$(dig -t MX "$LINE" +short)";
   3         echo -e "$LINE:"'\t'"$MX_RECORD";
   4 done <<< "$(awk '{print $1}' /etc/postfix/virtual_mailbox_domains)" \
   5 | column -t

   1 #!/bin/bash
   2 
   3 ### DOMAINS SHOULD BE A PATH TO A FILE
   4 FILE_DOMAINS="$1"
   5 
   6 if [ -f "$FILE_DOMAINS" ]; then
   7         DOMAINS="$(awk '{print $1}' "$FILE_DOMAINS" \
   8                 |grep -v '^\s*#')"
   9 
  10 else
  11         echo "File '$FILE_DOMAINS' does not exist."
  12         exit 1
  13 fi
  14 
  15 for DOMAIN in $DOMAINS; do
  16         echo
  17         declare -A MX_A_RECORDS MX_RECORDS
  18         MX_RECORDS_RAW="$(dig -t MX "$DOMAIN" +short)";
  19         ### FQDN OF MX IS KEY, PRIORITY IS VALUE
  20         eval MX_RECORDS=( "$(sed -r \
  21                 's/^([0-9]+)\s+([[:alnum:].-]+)/[\2]=\1/' \
  22                 <<< "$MX_RECORDS_RAW")" )
  23         if [ ${#MX_RECORDS[@]} -gt 0 ]; then
  24                 for MX in "${!MX_RECORDS[@]}"; do
  25                         MX_A_RECORDS+=( [$MX]="$(dig -t A "$MX" +short)" );
  26                 done
  27         fi
  28 
  29         declare -a A_RECORDS
  30         A_RECORDS=( $(dig -t A "$DOMAIN" +short) );
  31 
  32         TXT_RECORDS_RAW="$(dig -t TXT "$DOMAIN" +short)";
  33         TXT_RECORDS="$(grep -i -e spf <<< "$TXT_RECORDS_RAW")";
  34 
  35         DMARC_RECORD="$(dig -t TXT "_dmarc.$DOMAIN" +short)";
  36 
  37         cat <<-EOL
  38                 ### Domain: '$DOMAIN'
  39                 Number of MX-Records: ${#MX_RECORDS[@]}
  40         EOL
  41 
  42         if [ ${#MX_RECORDS[@]} -gt 0 ]; then
  43         cat <<-EOL
  44                 $(for MX in "${!MX_RECORDS[@]}"; do
  45                         echo -e "@ MX ${MX_RECORDS[$MX]} $MX"
  46                 done \
  47                 |column -t)
  48                 $(for MX in "${!MX_A_RECORDS[@]}"; do
  49                         echo -e "$MX A ${MX_A_RECORDS[$MX]}"
  50                 done \
  51                 |column -t)
  52         EOL
  53         fi
  54 
  55         cat <<-EOL
  56                 Number of A-Records: ${#A_RECORDS[@]}
  57         EOL
  58 
  59         if [ ${#A_RECORDS[@]} -gt 0 ]; then
  60         cat <<-EOL
  61                 $(for A_RECORD in "${A_RECORDS[@]}"; do
  62                         echo "@ A $A_RECORD"
  63                 done \
  64                 |column -t)
  65         EOL
  66         fi
  67 
  68         if [ -n "$TXT_RECORDS" ]; then
  69         cat <<-EOL
  70                 $(while read -r TXT; do
  71                         echo -e "@  TXT  $TXT"
  72                 done <<< "$TXT_RECORDS")
  73         EOL
  74         else
  75                 echo -e 'NO SPF;\t\tTXT record not found.'
  76         fi
  77 
  78         if [ "$DMARC_RECORD" ]; then
  79                 echo -e "@  TXT  $DMARC_RECORD"
  80         else
  81                 echo -e 'NO DMARC;\t_dmarc TXT record not found.'
  82         fi
  83 
  84 
  85         unset A_RECORDS MX_RECORDS MX_A_RECORDS TXT_RECORDS DMARC_RECORD
  86 done

   1 install -o root -g root -m 755 query_mx.sh /usr/local/bin

   1 query_mx.sh /etc/postfix/domains.txt \
   2         > "domains_$(date +%F_%T).txt"
   3 ### OR WITH YOUR POSTFIX DATABASES
   4 query_mx.sh /etc/postfix/virtual_alias_domains \
   5         > "domains_$(date +%F_%T).txt"

   1 #!/bin/bash
   2 # Copyright Rockstable IT 2020
   3 # License: GPLv2+
   4 # Delivered as is, no warranty, no liability,…
   5 
   6 set -o pipefail
   7 
   8 ### INITIALIZE
   9 CONFIG_DIR="/etc/postfix"
  10 SELF="$(basename "$0")"
  11 
  12 usage () {
  13         cat <<-EOL
  14 
  15         $SELF - Compare postfix configuration to defaults.
  16 
  17         Synopsis:
  18             $PROGAM [-h|--help] [-c|--config_dir "/absolute/path/to/directory"]
  19 
  20         []: Optional
  21         EOL
  22 }
  23 
  24 
  25 # Note that we use `"$@"' to let each command-line parameter expand to a
  26 # separate word. The quotes around `$@' are essential!
  27 # We need TEMP as the `eval set --' would nuke the return value of getopt.
  28 TEMP=`getopt -o c:h --long config_dir:,help \
  29      -n "$SELF" -- "$@"`
  30 
  31 if [ $? != 0 ] ; then echo "Terminating..." >&2 ; exit 1 ; fi
  32 
  33 # Note the quotes around `$TEMP': they are essential!
  34 eval set -- "$TEMP"
  35 
  36 while true ; do
  37         case "$1" in
  38                 -h|--help) usage; exit 0; shift ;;
  39                 -c|--config-dir) CONFIG_DIR="$2" ; shift 2 ;;
  40                 #-c|--c-long)
  41                 #       # c has an optional argument. As we are in quoted mode,
  42                 #       # an empty parameter will be generated if its optional
  43                 #       # argument is not found.
  44                 #       case "$2" in
  45                 #               "") echo "Option c, no argument"; shift 2 ;;
  46                 #               *)  echo "Option c, argument \`$2'" ; shift 2 ;;
  47                 #       esac ;;
  48                 --) shift ; break ;;
  49                 *) echo "Internal error!" ; exit 1 ;;
  50         esac
  51 done
  52 
  53 
  54 if [ "$CONFIG_DIR" == "/etc/postfix" ]; then
  55         echo "Comparing to default config_dir '/etc/postfix'";
  56         CONF_CURRENT="$(postconf -n)"
  57 elif [ -n "$CONFIG_DIR" ] && [ -d "$CONFIG_DIR" ]; then
  58         echo "Comparing to specifed config_dir '$CONFIG_DIR'";
  59         CONF_CURRENT="$(postconf -n -c "$CONFIG_DIR")"
  60 else
  61         cat <<-EOL
  62 
  63                 Error: Invalid argument to option '-c|--config_dir': '$CONFIG_DIR'.
  64                 Maybe:
  65                  * undefined
  66                  * not a directory
  67         EOL
  68         usage
  69         exit 1
  70 fi
  71 
  72 while read LINE; do
  73         KEY="$(sed -r 's/^([[:alnum:]_$-]+)\s*=.*$/\1/' <<< "$LINE")"
  74         echo -e "\n= Key: '$KEY' ="
  75         VALUE="$(sed -r 's/.*=\s*([^=]+)$/\1/' <<< "$LINE")"
  76         VALUE="$(fold -s <<< "$VALUE")"
  77         if [ -z "$VALUE" ] || grep -E '=$' <<< "$VALUE"; then
  78                 VALUE="NULL"
  79         fi
  80         echo -e "Current: '$VALUE'"
  81         DEFAULT="$(postconf -d "$KEY" 2>&1 \
  82                 |sed -r 's/.*=\s*([^=]+)$/\1/')"
  83         if grep -E 'unknown parameter' <<< "$DEFAULT"; then
  84                 echo "postconf -d '$KEY' -> warned unknown parameter - custom/typo?"
  85                 DEFAULT="NO DEFAULT"
  86         elif [ -z "$DEFAULT" ] || grep -Eq '=$' <<< "$DEFAULT"; then
  87                 DEFAULT="NULL"
  88         fi
  89         DEFAULT="$(fold -s <<< "$DEFAULT")"
  90         echo -e "Default: '$DEFAULT'"
  91 
  92 done <<< "${CONF_CURRENT}"