{"id":33590,"date":"2019-10-31T21:53:36","date_gmt":"2019-10-31T18:53:36","guid":{"rendered":"https:\/\/prohoster.info\/blog\/pochta-na-malinke\/"},"modified":"2019-10-31T21:53:36","modified_gmt":"2019-10-31T18:53:36","slug":"pochta-na-malinke","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/pochta-na-malinke","title":{"rendered":"Postkott \"mallin\"","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Projekteerimine<\/h3>\n

\nPost, post... \u201ePraegu v\u00f5ib iga algaja kasutaja avada tasuta e-posti konto, piisab, kui registreeruda m\u00f5nel internetiportaalil,\u201c v\u00e4idab Vikipeedia. Seega on oma postiserveri k\u00e4ivitamine veidi kummaline. Sellegipoolest ei kahetse ma sellel kuul kulutatud aega, alates operatsioonis\u00fcsteemi paigaldamisest kuni esimese kirja saatmiseni internetis.
\n<\/a><\/noindex>
\n\u00dcldiselt saab \u201emalinate\u201c k\u00f5rvale seada ka iptv-vastuv\u00f5tjad ja \u201e\u00fcksikplaadi arvuti Baikal-T1 protsessoril\u201c, aga ka Cubieboard, Banana Pi ja muud seadmed, mis on varustatud ARM-protsessoritega. \u201eMalina\u201c valiti aga sealjuures k\u00f5ige agressiivsemalt reklaamitavaks variandiks. Selle \u201e\u00fcksikplaadi arvuti\u201c jaoks kasuliku rakenduse leidmiseks kulus mitte \u00fcks kuu. L\u00f5puks otsustasin sellel k\u00e4ivitada postiserveri, olles just lugenud \u00fcht ulmeraamatut virtuaalsest reaalsusest.<\/p>\n

\u201eSee on tuleviku veebiv\u00f5rgu suurep\u00e4rane visioon,\u201c teatab Vikipeedia. Esimese avaldamise hetkest on m\u00f6\u00f6dunud 20 aastat. Tulevik on k\u00e4es. Siiski ei tundu see mulle suurep\u00e4rane ilma seitsme tuhande tellijata, k\u00fcmne tuhande rubla \u201eminu saidi kuusissetuleku\u201c jne. Mis t\u00f5ukas mind ilmselt \u201edetsentraliseeritud sotsiaalsete v\u00f5rgustike\u201c poole, millel on \u201ekahvatu arv meeldimisi nende (uus kasutaja - N.M.) postitustel\u201c, domeeni registreerimise ja oma serveri k\u00e4ivitamise suunas.<\/p>\n

Ma ei ole seadustest v\u00e4ga kursis. Ainult see, et sain mobiiltelefonile teate isikuandmete kinnitamise vajadusest seoses f\u00f6deraalse seaduse muudatuste j\u00f5ustumisega, sellise seaduse ma tean.<\/p>\n

Ja selgus, et selliseid seadusi on nagu seeni p\u00e4rast vihma. Kui ma oleksin j\u00e4tkanud tasuta postiteenuse kasutamist, ei oleks ma ilmselt midagi teada saanud.<\/p>\n

\u201eJa kes me n\u00fc\u00fcd oleme?\u201c<\/b><\/p>\n

Esiteks ei ole seaduses e-posti teenuse korraldajat \u00fcldse olemas. On olemas \u201ekohandatud s\u00f5numite vahetamise teenuse korraldaja\u201c, aga see on pisut midagi muud. T\u00f5endamine \u201eisiklike, pereliikmete ja koduste vajaduste jaoks\u201c vabastab selle korraldaja k\u00f5ikidest seaduses etten\u00e4htud kohustustest, kuid siiski ei puutu see sellesse korraldajasse, kellelt peaks.<\/p>\n

Omades on olemas koos seadusliku juhendiga Ubuntu Server, arvan, et lisaks nende koheste s\u00f5numite vestlustele on ka e-posti teenused (mis on ilmselge) ja failiserverid (mis ei ole nii ilmsed) m\u00f5eldud \"kasutajate Interneti-\u00fchenduste elektrooniliste s\u00f5numite vastuv\u00f5tmiseks, edastamiseks, kohaletoimetamiseks ja (v\u00f5i) t\u00f6\u00f6tlemiseks\".<\/p>\n

Arendus<\/h3>\n

\nV\u00f5rreldes teiste kohalike artikkelidega hashtagiga postfix, on minu looming kindlasti \u00fcsna primitiivne. Ei kasutajate autentimist, ei andmebaasi, ei kasutajaid, mis ei ole seotud kohalike kontodega (esimene ja kolmas on \"minimaalsetel postiserveritel\"; andmebaas on peaaegu igal pool, samamoodi nagu dovecot).<\/p>\n

\"Postis\u00fcsteemi seadistamine on minu arvates s\u00fcsteemiadministreerimise k\u00f5ige keerulisem \u00fclesanne,\" on \u00fcks Habra kasutaja v\u00e4ga h\u00e4sti kirjutanud. J\u00e4rgnedes PostfixBasicSetupHowto<\/a><\/noindex> (koopia help.ubuntu.com<\/a><\/noindex>), j\u00e4tsin siiski k\u00f5rvale osad aliasi andmebaasist, .forward failidest ja virtuaalsetest aliasidest.<\/p>\n

Kuid ssl\/tls jaoks v\u00f5tsin 12 konfiguratsioonireeglit pluss 9 bash k\u00e4sklust sertifikaatide loomiseks Postfixile artikleid<\/a><\/noindex> CommunityHelpWiki (samas domeenis help.ubuntu.com<\/a><\/noindex>) (ainult kas see ssl\/tls t\u00f6\u00f6tab \u2014 see on k\u00fcsimus). Lisaks kasutasin oma teenusepakkuja isiklikus kabinetis tulem\u00fc\u00fcr, nat ruuteris (Mikrotiku seadistamist l\u00fckkasin edasi nii kaua kui v\u00f5imalik; saatsin kirju, \u00fchendades postiserver otse internetiteenuse pakkuja kabli k\u00fclge, mis viidi koju), mail, mailq, postsuper -d identifikaator, fail \/var\/log\/mail.log, parameeter always_add_missing_headers, ptr-kirje teave ja l\u00f5puks ka mail-tester.com veebileht (oli ofigeerilise disainiga), millest ei r\u00e4\u00e4gita \u201eposti\u201d artiklites Habrast, nagu see oleks iseendast m\u00f5istetav.<\/p>\n

\"Postkott
\nEnne myhostname parameetri v\u00e4\u00e4rtuse parandamist failis \/etc\/postfix\/main.cf<\/i><\/p>\n

\"Postkott
\nP\u00e4rast myhostname parameetri v\u00e4\u00e4rtuse parandamist failis \/etc\/postfix\/main.cf<\/i><\/p>\n

Esimene kiri internetiteenuse pakkuja tugiteenustelt \u00f5petas mind, et ei peaks avama kirju konsooli programmi mail abil, et hiljem neid saaks avada ja lugeda tuttava meiliclientiga. Tundub, et see ei ole ka \u201ealgajate administraatorite\u201d probleem.<\/p>\n

\u041d\u0430\u043f\u0440\u043e\u0442\u0438\u0432, \u0432 \u043a\u043e\u043c\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u044f\u0445 (\u043a \u0434\u0440\u0443\u0433\u0438\u043c \u0441\u0442\u0430\u0442\u044c\u044f\u043c \u0441 \u0445\u0435\u0448\u0442\u044d\u0433\u043e\u043c postfix) \u043e\u0434\u0438\u043d \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0425\u0430\u0431\u0440\u0430 \u043f\u0440\u043e\u0441\u0438\u0442 \u00ab\u0443\u0441\u043b\u043e\u0436\u043d\u0438\u0442\u044c \u0432\u0435\u0434\u044c \u043d\u0435\u043c\u043d\u043e\u0433\u043e, \u043a\u0430\u043a \u043d\u0430\u0441\u0447\u0435\u0442 \u0432\u0435\u0431\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u043e\u0432 \u043a \u0440\u0430\u0437\u043d\u044b\u043c \u0447\u0430\u0441\u0442\u044f\u043c \u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0438\u0437 \u0411\u0414\u00bb, \u0434\u043b\u044f \u0434\u0440\u0443\u0433\u043e\u0433\u043e \u00ab\u0432\u0438\u0434\u0438\u043c\u043e, \u043e\u043d\u0430 \u0441\u043b\u043e\u0436\u043d\u0435\u0439\u0448\u0430\u044f \u0434\u043b\u044f \u0442\u0435\u0445, \u043a\u0442\u043e \u0441\u043b\u0430\u0449\u0435 \u0440\u0435\u0434\u044c\u043a\u0438 \u043d\u0438\u0447\u0435\u0433\u043e \u043d\u0435 \u043f\u0440\u043e\u0431\u043e\u0432\u0430\u043b: \u043f\u0430\u0434\u0435\u043d\u0438\u044f \u044f\u0434\u0440\u0430, \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c (selinux\/apparmor), \u0447\u0443\u0442\u044c-\u0447\u0443\u0442\u044c \u0440\u0430\u0441\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b…\u00bb, \u0442\u0440\u0435\u0442\u0438\u0439 \u043f\u0438\u0448\u0435\u0442 \u043f\u0440\u043e \u00ab\u0441\u043a\u0440\u0438\u043f\u0442 iRedmail\u00bb. \u0422\u0430\u043a \u0438 \u0436\u0434\u0435\u0448\u044c, \u0447\u0442\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0439 \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0438\u0442 \u043d\u0430\u043f\u0438\u0441\u0430\u0442\u044c \u043f\u0440\u043e IPv6.<\/p>\n

Kuid e-posti teenused ei ole sf\u00e4\u00e4rilised konid vaakumis, nad on osa tervikust \u2013 alates arvuti ja domeeninime valimisest kuni ruuteri seadistamiseni \u2013 mida ei suuda puudutada \u00fckski e-posti serveri seadistamise juhend (ja milles te ilmselt kunagi ei loe tehnilisi \u00fcksikasju \u2013 Postfix SMTP edastus ja juurdep\u00e4\u00e4sukontroll<\/a><\/noindex>, on ametlikul Postfixi veebisaidil).<\/p>\n

Mikrotiku kohta on see \u00fcldse eraldi laul.<\/p>\n

Noh, ja ongi k\u00f5ik. E-post on lakanud olemast lihtsalt terminali k\u00e4sud, konfiguratsioonifailid (sealhulgas DNS-i seadistus), logid, dokumentatsioon, kuusteistk\u00fcmnends\u00fcsteemi numbrid vene t\u00e4hede asemel (vastavalt koi8-r m\u00e4rke tabelile) saadetud kirjades ja on j\u00e4\u00e4nud tuttavaks e-posti kliendiks koos oma protokollidega IMAP, POP3, SMTP, kontodega, sissetulevate ja v\u00e4ljuvate teadetega.<\/p>\n

V\u00e4limuselt on see sama, mis e-post, kui kasutada suurte IT-ettev\u00f5tete tasuta e-posti teenuseid.<\/p>\n

Kuigi ilma veebiliideseta.<\/p>\n

K\u00e4itus<\/h3>\n

\nSiiski ei p\u00e4\u00e4se logide vaatamisest!<\/p>\n

Ruttan r\u00f5\u00f5mustama neid, kes loodavad siin lugeda tumedast v\u00f5rgust. Sest muidu ei oska ma nimetada muud, kui mingi salap\u00e4rase tumeda v\u00f5rgu ilmingut, mis on t\u00e4itnud uue serveri e-posti logi \u2013 nimelt paar p\u00e4eva p\u00e4rast otse \u00fchendamist, teated POP3-le erinevate nimedega paarilt IP-aadressilt (alguses arvasin ekslikult, et server p\u00fc\u00fcab aeg-ajalt saata kahte kirja j\u00e4rjekorrast, aga et mu post v\u00f5ib niipea huvitada kedagi teist internetis, ei osanud ma ette kujutadagi).<\/p>\n

Needleman, needled, never stopped even after I connected the server through the router. Today's logs are full of SMTP connections from the same unknown IP address. However, I am so confident that I will not take any action against this: I hope that even if a user name is correctly guessed for receiving emails, the attacker will not be able to guess the password. I am sure many will consider this unsafe, just as relying only on SMTP relay settings and access control in \/etc\/postfix\/main.cf for today's attacks.<\/p>\n

And they will tear my email protection to shreds.
\n
Allikas: habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041f\u0440\u043e\u0435\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u041f\u043e\u0447\u0442\u0430, \u043f\u043e\u0447\u0442\u0430\u2026 \u00ab\u0412 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u043b\u044e\u0431\u043e\u0439 \u043d\u0430\u0447\u0438\u043d\u0430\u044e\u0449\u0438\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u043c\u043e\u0436\u0435\u0442 \u0437\u0430\u0432\u0435\u0441\u0442\u0438 \u0441\u0432\u043e\u0439 \u0431\u0435\u0441\u043f\u043b\u0430\u0442\u043d\u044b\u0439 \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u044b\u0439 \u043f\u043e\u0447\u0442\u043e\u0432\u044b\u0439 \u044f\u0449\u0438\u043a, \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0437\u0430\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u043d\u0430 \u043e\u0434\u043d\u043e\u043c \u0438\u0437 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442-\u043f\u043e\u0440\u0442\u0430\u043b\u043e\u0432\u00bb, \u2014 \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u0435\u0442 \u0412\u0438\u043a\u0438\u043f\u0435\u0434\u0438\u044f. \u0422\u0430\u043a \u0447\u0442\u043e \u0437\u0430\u043f\u0443\u0441\u043a \u0434\u043b\u044f \u044d\u0442\u043e\u0433\u043e \u0441\u0432\u043e\u0435\u0433\u043e \u043f\u043e\u0447\u0442\u043e\u0432\u043e\u0433\u043e \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u2014 \u044d\u0442\u043e \u043d\u0435\u043c\u043d\u043e\u0433\u043e \u0441\u0442\u0440\u0430\u043d\u043d\u043e. \u0422\u0435\u043c \u043d\u0435 \u043c\u0435\u043d\u0435\u0435, \u044f \u043d\u0435 \u0436\u0430\u043b\u0435\u044e \u043e \u043f\u043e\u0442\u0440\u0430\u0447\u0435\u043d\u043d\u043e\u043c \u043d\u0430 \u044d\u0442\u043e \u043c\u0435\u0441\u044f\u0446\u0435, \u0441\u0447\u0438\u0442\u0430\u044f \u0441\u043e \u0434\u043d\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u041e\u0421 \u0434\u043e \u0434\u043d\u044f […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":25283,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-33590","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Email on 'Raspberry Pi' | ProHoster","description":"Mail Design, mail\u2026 \"Nowadays, any beginner user can create their own free email inbox, just register on one of the internet portals,\" -","canonical_url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/pochta-na-malinke","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041f\u043e\u0447\u0442\u0430 \u043d\u0430 \u00ab\u043c\u0430\u043b\u0438\u043d\u043a\u0435\u00bb | ProHoster","og:description":"\u041f\u0440\u043e\u0435\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u041f\u043e\u0447\u0442\u0430, \u043f\u043e\u0447\u0442\u0430\u2026 \u00ab\u0412 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u043b\u044e\u0431\u043e\u0439 \u043d\u0430\u0447\u0438\u043d\u0430\u044e\u0449\u0438\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u043c\u043e\u0436\u0435\u0442 \u0437\u0430\u0432\u0435\u0441\u0442\u0438 \u0441\u0432\u043e\u0439 \u0431\u0435\u0441\u043f\u043b\u0430\u0442\u043d\u044b\u0439 \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u044b\u0439 \u043f\u043e\u0447\u0442\u043e\u0432\u044b\u0439 \u044f\u0449\u0438\u043a, \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0437\u0430\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u043d\u0430 \u043e\u0434\u043d\u043e\u043c \u0438\u0437 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442-\u043f\u043e\u0440\u0442\u0430\u043b\u043e\u0432\u00bb, \u2014.","og:url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/pochta-na-malinke","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:53:36+00:00","article:modified_time":"2019-10-31T18:53:36+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"33590","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 15:55:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 02:38:09","updated":"2026-01-21 15:55:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/33590","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=33590"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/33590\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/25283"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=33590"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=33590"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=33590"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}