computers:truenas:mail [Steves Space]

This page is read only. You can view the source, but not change it. Ask your administrator if you think this is wrong.
====== Mail Server ======

I need a simple, lightweight mail server to gather together system reports and alerts. This will not be exposed to the Internet. It will neither be able to send or receive messages from the outside world.

====== Preparing the Mail Server Jail ======

1. Log in to your TrueNAS server as root using SSH or the Shell option of the TrueNAS Web Portal. 

2. Make some decisions and define some variables. 
<code>
# Tailor each of these examples for your own situation
JAIL_NAME="net" # name of the jail that will contain the mail server

</code>

====== Set up the Mailbox ======

We need to define the default mailbox where all system messages are sent.

Note: You can't log in as root to pick up your mail - that would be dangerous, because the mail system would have to run as root to access the files containing the mail. If there's any bugs in the mail server or its helper files, that could result in serious problems! So we need to direct all mail for root into another mailbox that we can access as an unprivileged user. 

The domain name (the bit after the @ sign in the email address) can be localhost, or the domain name you set up when you created this jail. If it is omitted, it will default to localhost. This is ok for emails between users of the same jail.

The user name will be the same as the mailbox name (the bit before the @ sign). You will need to create a new user login, and assign a password, in the usual way. 

In this example I will be creating a mailbox called "administrator".

Execute this...
<code>
jexec "ioc-${JAIL_NAME:?}" adduser

</code>

Provide this information when asked...
<code>
Username: administrator
Full name: System Administrator
Uid (Leave empty for default): 
Login group [administrator]: staff
Login group is staff. Invite administrator into other groups? []: 
Login class [default]: 
Shell (sh csh tcsh bash rbash git-shell netcli.sh ksh93 mksh zsh rzsh scponly nologin) [sh]: nologin
Home directory [/home/administrator]: 
Home directory permissions (Leave empty for default): 
Use password-based authentication? [yes]: 
Use an empty password? (yes/no) [no]: 
Use a random password? (yes/no) [no]: 
Enter password: *****
Enter password again: *****
Lock out the account after creation? [no]: 
Username   : administrator
Password   : *****
Full Name  : System Administrator
Uid        : 1001
Class      : 
Groups     : staff 
Home       : /home/administrator
Home Mode  : 
Shell      : /usr/sbin/nologin
Locked     : no
OK? (yes/no): yes
adduser: INFO: Successfully added (administrator) to the user database.
Add another user? (yes/no): no
Goodbye!
</code>

====== Set up the SMTP Mail Delivery Agent ======

I will be using the simple //sendmail// service that comes as standard with BSD installations. It just needs to be configured and started. I don't need any clever security, as it can only be accessed from the LAN, and I'm not going to tell it how to pass messages on to the outside world.

1. Build the initial configuration.
<code>
jexec "ioc-${JAIL_NAME:?}" /bin/sh -c "cd /etc/mail && make"

</code>

2. Tell sendmail where to deliver root's mail to.

<code>
jexec "ioc-${JAIL_NAME:?}" vi /etc/mail/aliases

</code>

On the first page, find the lines like this...
<code>
# Pretty much everything else in this file points to "root", so
# you would do well in either reading root's mailbox or forwarding
# root's email from here.

# root: me@my.domain
</code>

After that, insert a new line like this...
<code>
root: administrator
</code>

3. Generate the aliases.db file and anything else that's required.
<code>
jexec "ioc-${JAIL_NAME:?}" /bin/sh -c "cd /etc/mail && make"

</code>

4. Enable sendmail features.

<code>
jexec "ioc-${JAIL_NAME:?}" sysrc sendmail_enable="YES"
jexec "ioc-${JAIL_NAME:?}" sysrc sendmail_outbound_enable="NO"
jexec "ioc-${JAIL_NAME:?}" sysrc sendmail_submit_enable="YES"
jexec "ioc-${JAIL_NAME:?}" sysrc sendmail_msp_queue_enable="YES"

</code>

5. Start the sendmail MTA service.

<code>
jexec "ioc-${JAIL_NAME:?}" service sendmail restart

</code>

====== Set up the POP Mailbox Service ======

I need to be able to view messages on my workstation using a normal mail reader. The messages I receive will be actioned and then deleted. I don't need the clever folders that IMAP provides, so I'll just use the POP protocol to access the mailbox. 

I will be using the //qpopper// service to provide simple POP mailbox access.

1. Install the software
<code>
jexec "ioc-${JAIL_NAME:?}" pkg install qpopper

</code>

2. Configure the service.
<code>
jexec "ioc-${JAIL_NAME:?}" vi /etc/inetd.conf
</code>

Search for this section in the inetd.conf file, and add the last line shown...
<code>
#
# example entry for the optional pop3 server
#
#pop3   stream  tcp     nowait  root    /usr/local/libexec/popper       popper
pop3    stream  tcp     nowait  root    /usr/local/libexec/qpopper      qpopper -s
</code>

3. Activate the service.
<code>
jexec "ioc-${JAIL_NAME:?}" sysrc inetd_enable="YES"
jexec "ioc-${JAIL_NAME:?}" service inetd restart

</code>


====== Set up Thunderbird to access the Mailbox ======

Select "Edit" then "Account Settings" from the menu.

Select "Add Mail Account" from the "Account Actions" menu.

<code>
Your full name: System Administrator
Email address: administrator@net.joynt.org.uk
Password: *****
Remember passowrd: checked
</code>
Configure manually...

Incomming Server...
<code>
Protocol: pop3
Hostname: net.joynt.org.uk
Port: 110
Connection security: none
Authentication method: Normal password
Username: administrator
</code>

Outgoing Server...
<code>
Hostname: net.joynt.org.uk
Port: 25
Connection security: none
Authentication method: No authentication
</code>

Warning... I understand the risks

====== Credits ======

This page has been cobbled together from various bits of information I've found on the Internet.

  * [[https://forums.freebsd.org/threads/configure-host-to-use-mail-server-in-jail-sendmail.69174/]]
  * [[https://www.freebsd.org/cgi/man.cgi?query=rc.sendmail&sektion=8&n=1]]
  * [[https://lists.freebsd.org/pipermail/freebsd-questions/2006-April/120156.html]]
  * [[https://blog.andreev.it/?p=199]]
  * [[http://freshmeat.sourceforge.net/projects/qpopper/]]