OPS345 Lab 6

THIS PAGE IS A DRAFT, NOT READY FOR USE YET

In this lab we'll start working with email. It's an ancient concept, but it's still relied on for most business communication. New and exciting messaging platforms come and go, but email has been around for decades and isn't going anywhere soon.

Email services components

Originally there was only one "email" protocol: SMTP. It was designed to address, route, and receive messages for a destination user on a destination server. Later an extra couple of protocols (POP3 and IMAP) were developed so that people wouldn't have to read their email on the command-line on the SMTP server. Now there are many components, making a powerful, reliable, but complex system. Here's a simplified diagram of what typically happens when you send an email to someone else:

By the end of this course you should be familiar enough with all these components to be able to speak about them comfortably.

We'll set up an SMTP server in this lab and an IMAP server in the next lab.

email VM

• Create a new VM, similar to the www VM you created earlier. Make sure that it:
  • Is in vpc-ops345 (where no public IP address should be assigned by default).
  • Has the IP address 10.3.45.12
  • Gets an extra 4GB EBS volume, not to be deleted automatically if the VM is deleted.
  • Is in a new security group named ops345emailsg, which will allow SSH acccess from the router only and SMTP access from anywhere.
  • Name the new instance: email
• After it starts: do some configuration you should be very comfortable with by now:
  • Set up port forwarding on the router so you can SSH to email via port 2212 on the router. The email server is going to have its own public IP, but remember we're pretending that we're monitoring all SSH traffic using special software on the router machine.
  • Create a new user and delete ec2-user.
  • Set the hostname to email.yoursenecaid.ops345.ca
  • Allocate a new, permanent static IP named email_public_ip and associate it with your email server

• add A record for email now since it will take some time to propagate
• add MX email.asmith15.ops345.ca.[1]
• test on router first, records are cached for 60 minutes. test on www second, email third, finally make sure it works on the workstation
• same instructions as for vg_www-lv_www but vg_email-lv_email, mounted on /home
• but also mount it on /tmp/home, and move everything from /home to /tmp/home before rebooting
  • can lose access to ssh key if don't do it right - see what happens if mount on /home without

[root@email ~]# vi /etc/fstab 
[root@email ~]# mount /home/
[root@email ~]# ls /home/
lost+found
# try to ssh now, it won't work
[root@email ~]# umount /home/
[root@email ~]# mkdir /tmp/home
[root@email ~]# mount /dev/mapper/vg_email-lv_email /tmp/home/
[root@email ~]# cd /home/
[root@email home]# ls -a
.  ..  andrew
[root@email home]# mv andrew/ /tmp/home/
[root@email home]# cd /
[root@email /]# ls /home/
[root@email /]# ls /tmp/home/
andrew  lost+found
[root@email /]# umount /tmp/home/
[root@email /]# ls /tmp/home/
[root@email /]# ls /home/
[root@email /]# mount /home/
[root@email /]# ls -a /home/andrew/
.  ..  .bash_history  .bash_logout  .bash_profile  .bashrc  .ssh
[root@email /]# reboot

• Confirm confirm can still log in. if not: have to rebuild email vm
• The LV on a separate storage device is as valuable as the www LV. If the Vm is lost or damaged: EBS device is still there, and it's also easier to back up.
• connect to myseneca email using thunderbird on linux mint
• postfix is installed by default, but only used for localhost
• instal dovecot to get dovecot-lda
• /etc/postfix/main.cf:
  • mydomain = asmith15.ops345.ca
  • myorigin = $mydomain
  • inet_interfaces = all
  • mydestination include mydomain
• restart postfix
• ss -atnp
• add access to port 25 from anywhere in ops345sgemail
• test using telnet from workstation
• send email from myseneca to asmith15@asmith15.ops345.ca
• check /var/log/maillog
• check ~/
• check /var/mail
• /etc/postfix/main.cf: mailbox_command = /usr/libexec/dovecot/dovecot-lda -f "$SENDER" -a "$RECIPIENT"
• /etc/dovecot/conf.d/10-mail.conf: mail_location = maildir:~/Maildir
• check /var/mail
• check ~/
• server can now receive email. cannot send reliably yet, and need to set up dovecot for imap (next lab)
• create an alias for root: andrew, run newaliases