Qmail 3.0

A free mailserver that supports secure outgoing and incoming messages as well as a slick webmail interface.
Preinstallation Checklist

Qmail 3.0 will give you the best possible installation for a secure Mail Transfer Agent. This guide will provide the following services POP3D-SSL (Port 995) SMTP-SSL (Port 465) SMTP-TLS (Port 587) SMTP (Incoming only Port 25) Secure Webmail running on Apache 2.4 and Rainloop for Webmail There are two requirements for this guide: At 23:59 UTC, December 31, 2016, FreeBSD 9.3, 10.1 and 10.2 will reach<br />end-of-life and will no longer be supported by the FreeBSD Security Officers Team. Users of FreeBSD 9.3, 10.1 and 10.2 are strongly encouraged toupgrade to a newer release as soon as possible. The guide supports 10.3 and 11.x. 12 Current has been tested and has a lot of bugs. TLS does not work on 12.

Installing Qmail

Originally when I first started modifying the qmailrocks documentation for FreeBSD my goal was to use all the qmail ports to simplify the installation. Since then the qmail port has changed to support netqmail which causes a conflict with qmail. Starting on 2/7/17 I have modified this guide so you are no longer required to install this port. This allows a much cleaner and simplified way to install qmail directly from source.

Installing Daemontools

Daemontools is a small set of very useful utilities, from Dan Bernstein. They are mainly used for controlling processes, and maintaining logfiles. For more information, please see http://cr.yp.to/daemontools.html

Installing Vpopmail

This documentation will attempt to take you through a step-by-step installation of John Simpson's qmail-updater service with vpopmail. If you don't know what this service does please visit the qmail-updater site here. http://qmail.jms1.net/scripts/qmail-updater.shtml

Configuring Vadidrcptto

The most common questions I receive about the validrcptto.cdb patch involve how to create the validrcptto.cdb file in the first place, or how to use the same file on multiple servers. The mkvalidrcptto script can be a major part of the answer to both questions. This web page will show how I'm using mkvalidrcptto on my own server.

Installing Maildrop

Maildrop is a replacement for your local mail delivery agent. I have configured maildrop (in my previous qmail installs) to filter all Spam related emails to go directly to the users Maildir/Spam folder. This no longer works. We now just need to install maildrop for qmail-scanner support. For more information, see http://www.courier-mta.org/maildrop

Certs

Using Apache or Certbot Certs

Configuring Qmail Services

The only major difference between SSL & TLS (Secure Sockets Layer & Transport Layer Security) is that TLS is an updated and more secured version of SSL. Still these security certificates are widely recognized as SSL, just because it's a more commonly used term, but in reality whenever someone buys an SSL certificate, they are actually buying the latest TLS certificates with the option of ECC, RSA or DSA encryption. SSL (Secure Sockets Layer) & TLS (Transport Layer Security), are both protocols used for the encryption of network data. They use encryption, hash functions or message digests, and digital signatures to provide confidentiality, integrity and authentication for data in transit.

Installing Dovecot

Dovecot is an open-source IMAP, IMAP-SSL and POP3 server. It was written with security as one of its primary goals, and is flexible enough to work with just about any kind of back-end mailbox storage system, including vpopmail's folder structure. It also works with a large number of authentication back-ends, again including vpopmail. In this walkthrough we are only going to configure Dovecot 2 with IMAP-SSL and POP3-SSL and managesieve.

Installing Rainloop

Modest system requirements, decent performance, simple installation and upgrade, no database required - all these make RainLoop Webmail a perfect choice for your email solution.

Installing SpamAssassin

SpamAssassin is a mail filter which attempts to identify spam using text analysis and several internet-based realtime blacklists. The official SpamAssassin website is at http://spamassassin.apache.org

Installing ClamAV

Clam Antivirus is command line virus scanner written entirely in C and its database is kept up to date. For more information, Please see: http://www.clamav.net/

Scanners

You can choose Qmail-scanner or simscan for email scanning.

Installing Qmailadmin

QmailAdmin is a cgi program for administering Qmail with vchkpw. It provides a web interface to create users, aliases, install ezmlm lists and also configure mailing robots. For more information, Please see http://www.inter7.com

Installing vQadmin

Virtual Qmail Web Administrator (VqAdmin) is a CGI Web program to allow virtual email hosting machine administators to add, delete, and modify virtually hosted email domains and users using vpopmail. Authentication is provided by ACLs and the Apache htpasswd method. Machine Administrators can add/delete virtual email domains, and tech users can admin user email accounts such as setting passwords, disk quotas, and privileges.