vault backup: 2026-01-05 13:03:55

2026-01-05 13:03:55 +08:00
parent 21460fc35d
commit be7c6cdcc9
589 changed files with 396508 additions and 27 deletions
@@ -0,0 +1,93 @@
+```
+
+ sudo doveadm pw -s BLF-CRYPT
+ ```
+
+```
+{BLF-CRYPT}$2y$05$ituMVYZPOiAnTOApslK18OB7iPpAamHv6wZSd7ed2ZozzAaKXPGZi
+```
+
+```
+windyboy@2006
+```
+
+
+```
+sudo mysql -p -u mailuser mailserver <<'SQL'
+INSERT INTO domains(name) VALUES ('windy.me');
+
+INSERT INTO users(email, domain, password, quota_mb)
+VALUES ('zhiqiang@windy.me','windy.me','{BLF-CRYPT}$2y$05$cbKWGCrttpBPHpN8R4DFFeGSUF82Upf4EsREifW0jm96A.59IfYfO', 2048);
+
+-- optional alias
+INSERT INTO aliases(source, destination) VALUES ('vnet@windy.me','zhiqiang@windy.me');
+SQL
+```
+
+
+```
+doveadm auth test zhiqiang@windy.me 'windyboy2006'
+
+```
+
+```
+# ---- Dovecot 2.4 SQL authentication ----
+sql_driver = mysql
+
+# Debian/MariaDB socket (or use 'mysql localhost { ... }' for TCP)
+mysql /run/mysqld/mysqld.sock {
+  user = vmail
+  password = CHANGE_ME_STRONG
+  dbname = mailserver
+}
+
+# PASSDB: verify credentials (hash in DB, e.g. {BLF-CRYPT}...)
+passdb sql {
+  passdb_default_password_scheme = BLF-CRYPT
+  query = SELECT email AS username, password AS password \
+          FROM users \
+          WHERE email = '%{user}' AND active = 1
+}
+
+# USERDB: return uid/gid/home/mail
+# Change 5000:5000 if your vmail UID/GID differ: check with "id vmail"
+userdb sql {
+  query = SELECT 5000 AS uid, 5000 AS gid, \
+                 CONCAT('/var/mail/vhosts/', SUBSTRING_INDEX(email,'@',-1), '/', SUBSTRING_INDEX(email,'@',1)) AS home, \
+                 CONCAT('maildir:/var/mail/vhosts/', SUBSTRING_INDEX(email,'@',-1), '/', SUBSTRING_INDEX(email,'@',1), '/Maildir') AS mail \
+          FROM users \
+          WHERE email = '%{user}' AND active = 1
+  iterate_query = SELECT email AS username FROM users WHERE active = 1
+}
+
+
+```
+
+
+```
+swaks --server your.mx.name --port 587 --tls --auth LOGIN -au 'zhiqiang@windy.me' -ap 'windyboy@2006' --h-Subject "SASL test"
+
+```
+
+```
+sudo postconf -n | grep -E '^(smtpd_.*restrictions|smtpd_milters|milter_.*|policyd|policy|check_policy_service)'
+sudo grep -nE '^(submission|smtps)\b' -n /etc/postfix/master.cf -n
+
+```
+```
+sudo postconf -P submission/inet/smtpd_recipient_restrictions
+sudo postconf -P submission/inet/smtpd_client_restrictions
+sudo postconf -P submission/inet/smtpd_helo_restrictions
+sudo postconf -P smtps/inet/smtpd_recipient_restrictions
+
+```
+
+google windyboy app passwors (postfix) :
+```
+zfgl bdep itya kdym
+```
+
+/etc/postfix/sasl_passwd
+```
+[smtp.gmail.com]:587 windyboy@gmail.com:zfglbdepityakdym
+```
@@ -0,0 +1,62 @@
+
+ip :
+
+```
+38.134.41.134
+```
+
+
+
+```
+imapsync --host1 mx2.windy.me --user1 zhiqiang@windy.me --password1 'windyboy@2006' \
+         --host2 mx.windy.me --user2 zhiqiang@windy.me --password2 'Nmq2nW!3Y223k@Ri' \
+         --ssl1 --ssl2 --justlogin
+
+```
+
+
+test smtp login
+
+prepare
+```
+echo -n 'zhiqiang@windy.me' | base64
+```
+
+```
+emhpcWlhbmdAd2luZHkubWU=
+```
+
+```
+echo -n 'Nmq2nW!3Y223k@Ri' | base64
+```
+
+```
+Tm1xMm5XITNZMjIza0BSaQ==
+```
+
+
+```
+openssl s_client -starttls smtp -crlf -connect smtp.windy.me:587
+```
+
+```
+EHLO windy.me
+```
+
+```
+AUTH LOGIN
+```
+
+
+
+```
+openssl x509 -in /opt/mail/data/assets/ssl/mx2.windy.me/cert.pem -noout -pubkey \
+  | openssl pkey -pubin -outform DER \
+  | openssl sha256
+
+SHA2-256(stdin)= 83277f3daa67bd613c6ac7556e5f368d9e1245b2fb3209d89de43738a3f083f7
+```
+
+```
+83277f3daa67bd613c6ac7556e5f368d9e1245b2fb3209d89de43738a3f083f7
+```