LinuxQuestions.org
Share your knowledge at the LQ Wiki.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Server
User Name
Password
Linux - Server This forum is for the discussion of Linux Software used in a server related context.

Notices


Reply
  Search this Thread
Old 03-25-2015, 09:05 PM   #1
metallica1973
Senior Member
 
Registered: Feb 2003
Location: Washington D.C
Posts: 2,190

Rep: Reputation: 60
Postfix Dovecot Roundcube Godaddy


Long story short, I have everything working in my SOHO which would include Postfix,Dovecot(imap),Roundcube and is read to recieve email from the outside using this tutorial:

https://workaround.org/ispmail/wheezy

I also setup my internal DNS server using:

https://wiki.debian.org/Bind9

My questions are:

1 - How do I tell godaddy dns servers (mx record) to send email to my domain imap.blah.com?

2 - Is there any thing special I need to do on my end via bind9?

essentially I just need a quick how to in getting this going. So my goal that I am trying to achieve is.

1 - Allowing my employees the ability to be able to check their email from any location via roundcube. Ex. https://blah.com/roundmail

2 - If not using webmail then being able to configure a email client (thunderbird or evolution) via imap.blah.com TCP:IMAP:143/SMTP:25 to be able to recieve and send email.

All help is most appreciated.

Last edited by metallica1973; 03-26-2015 at 05:01 PM.
 
Old 03-26-2015, 04:48 AM   #2
dijetlo
Senior Member
 
Registered: Jan 2009
Location: RHELtopia....
Distribution: Solaris 11.2/Slackware/RHEL/
Posts: 1,491
Blog Entries: 2

Rep: Reputation: Disabled
Quote:
I have everything working in my SOHO
Then congrats are in order
Quote:
1 - How do I tell godaddy dns servers (mx record) to send email to my domain imap.blah.com?
It's not actually Go-Daddy that controls that. You need to change the DNS->MX record for your domain to reflect your gateway IP.
The good news is Go-Daddy has tools on your domain page to do that.
The bad news is it doesn't happen immediately, so you're looking at a long cycle of test/modify/test/modify if your mail server isn't properly configured.
Quote:
2 - Is there any thing special I need to do on my end via bind9?
As far as I know, not for the mail server. Just make sure your gateway forwards all traffic on POP and IMAP ports to the internal ip it's sitting on. I always harden the crap out of them and put them in highly restricted DMZ. It's wise to harden your gateway as well, nothing like a new MX record for bringing the wannabe hackers to your door. They'll run bots over your gateway looking for open ports and try to exploit anything they find, in a well run environment, they're mostly just a nuisance (like every other variety of poorly raised child).

Last edited by dijetlo; 03-26-2015 at 04:50 AM.
 
1 members found this post helpful.
Old 03-26-2015, 04:59 PM   #3
metallica1973
Senior Member
 
Registered: Feb 2003
Location: Washington D.C
Posts: 2,190

Original Poster
Rep: Reputation: 60
Many thanks for your reply. Actually I forgot to mention that I want to give my users that ability to access their roundcube webmail from wherever they are. So essentially, I am hosting the companies website here as well and want to also allow access the company web-mail like:

https://www.blah.com/roundcube/login.php

Having said that, will I also have to point my domain to my web server from Godaddy so it can be accessible in that manner?
 
Old 03-26-2015, 05:46 PM   #4
dijetlo
Senior Member
 
Registered: Jan 2009
Location: RHELtopia....
Distribution: Solaris 11.2/Slackware/RHEL/
Posts: 1,491
Blog Entries: 2

Rep: Reputation: Disabled
Yup,
Which makes it doubly important you harden your gateway and get highly restrictive DMZ in place. Make sure you've patched all the packages (not just the kernel) in the stack for both servers, but in particular they like to jam up web servers. Make sure you change all default passwords, be especially cautious about PHP administrative tools for the web server and the MySQL database (if you're using one in conjunction with the server) and just a final suggestion, keep yourself mirrored to the Go Daddy site for a month or so before you fly totally solo. That way if you get penetrated, you can fall back to the previous site ( You just flip the DNS records back to the Go-Daddy site) while you work out what happened and fix it.

Last edited by dijetlo; 03-26-2015 at 05:48 PM.
 
Old 03-28-2015, 12:35 PM   #5
metallica1973
Senior Member
 
Registered: Feb 2003
Location: Washington D.C
Posts: 2,190

Original Poster
Rep: Reputation: 60
should I also have my dns server forwarding any unknown request "{forward ....} area of my named.conf.options file ) to godaddy dns servers and also on Godaddy DNS area under my account so they can talk to each other (zone transfer) or is that over kill?

Last edited by metallica1973; 03-28-2015 at 12:44 PM.
 
Old 03-28-2015, 01:12 PM   #6
dijetlo
Senior Member
 
Registered: Jan 2009
Location: RHELtopia....
Distribution: Solaris 11.2/Slackware/RHEL/
Posts: 1,491
Blog Entries: 2

Rep: Reputation: Disabled
Dude, if you think it's going to help, do it. I'd put fifty cal emplacement on port 80 and 8080 if I could figure out how to virtualize it. When it comes to vermin, no such thing as overkill.

Last edited by dijetlo; 03-28-2015 at 01:13 PM.
 
Old 03-28-2015, 05:06 PM   #7
descendant_command
Senior Member
 
Registered: Mar 2012
Posts: 1,876

Rep: Reputation: 643Reputation: 643Reputation: 643Reputation: 643Reputation: 643Reputation: 643
Your DNS server is irrelevant to the rest of the world.
It only provides lookups for clients on your internal LAN.
 
Old 03-28-2015, 05:30 PM   #8
dijetlo
Senior Member
 
Registered: Jan 2009
Location: RHELtopia....
Distribution: Solaris 11.2/Slackware/RHEL/
Posts: 1,491
Blog Entries: 2

Rep: Reputation: Disabled
It points to your internal service records, which isn't trivial if someone is trying to exploit you.
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
[SOLVED] Roundcube, Postfix, Dovecot, Exim FortressMvelez Linux - Newbie 2 07-17-2013 03:20 AM
Dovecot/Postfix/RoundCube milomird Linux - Server 2 06-15-2013 11:32 PM
Exim4 + Dovecot + Roundcube/Squirrelmail morphix Linux - Server 4 08-18-2010 01:50 AM
LXer: iRedMail: Mail Server With LDAP, Postfix, RoundCube/SquirrelMail, Dovecot On De LXer Syndicated Linux News 0 06-05-2009 12:30 PM
Postfix setup help - smoothwall fedora postfix godaddy crecker Linux - Newbie 2 01-10-2009 12:06 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Server

All times are GMT -5. The time now is 02:40 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration