苹果邮件服务器的配置与管理中文.pdf(120422)

Mac OS X Server Mail Service Administration Version 10.6 Snow Leopard Mac OS X 服务器 邮件服务管理 雪豹10.6版本 Apple Inc. © 2010 Apple Inc. All rights reserved. 苹果公司 ©2010苹果公司，版权所有。 Under the copyright laws, this manual may not be copied, in whole or in part, without the written consent of Apple. 根据版权法，没有苹果公司的书面授权，不能完全或部分复制本手册 The Apple logo is a trademark of Apple Inc., registered in the U.S. and other countries. Use of the “keyboard” Apple logo (Option-Shift-K) for commercial purposes without the prior written consent of Apple may constitute trademark infringement and unfair competition in violation of federal and state laws. 苹果标志是苹果公司的商标，已经在美国和基他国家注册。使用键盘Apple标志（选项shift-k）为商业目的，无Apple公司的事先书面同意，可能构成商标侵权，按联邦政府州立法律，属不公平竞争 Every effort has been made to ensure that the information in this manual is accurate. Apple Inc. is not responsible for printing or clerical errors. 尽力确保本手册中的信息正确无误。苹果公司不负责印刷和书写错误 Apple 1 Infinite Loop Cupertino, CA 95014-2084 408–996–1010 www.apple.com 苹果公司 无限循环 Cupertino CA95014-2084 408–996–1010 www.apple.com Apple, the Apple logo, AppleScript, FireWire, Keychain, Leopard, Mac, Mac OS, Quartz, Safari, Snow Leopard, Xcode, Xgrid, Xsan, and Xserve are trademarks of Apple Inc., registered in the U.S. and other countries. 苹果，苹果标志，AppleScript, FireWire, Keychain, Leopard, Mac, Mac OS, Quartz, Safari,雪豹，Xcode，Xgrid，Xsan和Xserve是苹果公司的商标，已在美国和其他国家注册。 Apple Remote Desktop and Finder are trademarks of Apple Inc. AIX is a trademark of IBM Corp., registered in the U.S. and other countries, and is being used under license. 苹果远程桌面和查找器是苹果公司的商标。 AIX是IBM公司的商标，已在美国和其他国家注册，根据许可证进行使用。 The Bluetooth® word mark and logos are registered trademarks owned by Bluetooth SIG, Inc. and any use of such marks by Apple is under license. This product includes software developed by the University of California, Berkeley, FreeBSD, Inc.,The NetBSD Foundation, Inc., and their respective contributors. Bluetooth ®（蓝牙）字样和徽标是Bluetooth SIG公司所拥有注册商标，任何使用此类商标均需由苹果公司许可。 本产品包含由加利福尼亚大学伯克利分校，FreeBSD公司, NetBSD基金公司和他们的合作者开发的软件 The owner or authorized user of a valid copy of Mac OS X Server software may reproduce this publication for the purpose of learning to use such software. No part of this publication may be reproduced or transmitted for commercial purposes, such as selling copies of this publication or for providing paid-for support services. Java™ and all Java-based trademarks and logos are trademarks or registered trademarks of Sun Microsystems, Inc. in the U.S. and other countries. PowerPC™ and the PowerPC logo™ are trademarks of International Business Machines Corporation, used under license therefrom. Java™和所有基于Java的商标和徽标是Sun Microsystems在美国和其他国家的商标和注册商标。 PowerPC™和PowerPC标志™国际商业公司的商标，根据许可证进行使用。 UNIX® is a registered trademark of The Open Group. Other company and product names mentioned herein are trademarks of their respective companies. Mention of third-party products is for informational purposes only and constitutes neither an endorsement nor a recommendation. Apple assumes no responsibility with regard to the performance or use of these products. Simultaneously published in the United States and Canada. 019-1909/2010-08 UNIX是公开群组的注册商标。 这里提到的其他公司及其产品名字是他们各自公司的商标。提到的第三方产品，仅供参考，既不背书，也不推荐。苹果公司不对这些产品的性能承担任何责任。 同时在美国和加拿大发布 019-1909/2010-8 Preface：About This Guide This guide provides a starting point for administering Mail Service using its advanced administration tools. It contains information about configuring Mail Service using Server Admin. Mail Service Administration might not be the only guide you need when administering Mail Service, but it gives you the basics beyond initial Mac OS X Server configuration. 前言：有关本指南 本指南提供了一个用于管理邮件服务使用其先进的管理工具的起点。它包含有关使用服务器管理配置邮件的信息。 “邮件服务管理”不但能在管理邮件服务时指导您的需要，它还为您提供了超越Mac OS X服务器的初始配置基础知识 What’s in This Guide This guide includes the following sections: · Chapter 1, “Understanding Mail Service,” gives an overview of the components of the Mac OS X Server Mail service. · Chapter 2, “Mail Service Setup,” includes everything you need to set up and configure Mail service and to support and configure mail users. 本指南内容 本指南包括以下章节： ·第一章，“了解邮件服务”，Mac OS X服务器邮件服务组件的概述。 ·第二章，“邮件服务安装”，包括您需要设置的每样东西并配置邮件服务和支持和配置邮件用户。 · Chapter 3, “Mail Service Advanced Configuration,” builds on the basic setup instructions to help you fine tune your mail server, especially concerning security settings and data storage. · Chapter 4, “Monitoring and Maintaining Mail Service,” includes information for ongoing mail server maintenance and administration. ·第三章，“邮件服务高级配置”，建立在基本安装的说明，以帮助您对邮件服务器进行微调。 ·第四章，“监视和维护邮件服务”，包括正在进行的邮件服务器的维护和管理的信息。 · Chapter 5, “Troubleshooting Mail Service,” helps you to resolve some of the most common issues that may arise with Mail service. · Appendix A, “Command-Line Parameters for the serveradmin Tool and Default Mail Service Settings,” shows the default state of the settings you can configure from the command line. ·第五章，“邮件服务故障排除”可帮助您解决的邮件服务可能出现的一些最常见的问题。 ·附录A，“服务器管理工具的命令行参数和默认邮件服务器设置”，显示您可以从命令行配置的默认状态设置 · Appendix B, “Sample Sieve Scripts,” provides examples of sieve scripts. Note: Because Apple periodically releases new versions and updates to its software, images shown in this book may be different from what you see on your screen. ·附录B，“样品筛脚本”，提供筛脚本的示例 注意：因为苹果公司会定期发布新的版本和更新其软件，屏幕显示的图像与您在本手册中看到可能会有所不同。 Using Onscreen Help You can get task instructions onscreen in Help Viewer while you’re managing Mac OS X Server. You can view help on a server, or on an administrator computer. (An administrator computer is a Mac OS X computer with Mac OS X Server administrator software installed on it.) 使用屏幕帮助 您管理Mac OS X服务器的同时，可以在帮助浏览器得到屏幕任务介绍。您可以在服务器上或管理员计算机上浏览帮助（管理员计算机是安装Mac OS X服务器管理员软件和Mac OS X计算机）。 To get the most recent onscreen help for Mac OS X Server: ■Open Server Admin or Workgroup Manager and then: · Use the Help menu to search for a task you want to perform. · Choose Help > Server Admin Help or Help > Workgroup Manager Help to browse and search the help topics. The onscreen help contains instructions taken from Advanced Server Administration and other administration guides. 要获取Mac OS X雪豹服务器更多的最新屏幕帮助： ■打开服务器管理或工作组管理器，然后 ·使用帮助菜单搜索您要执行的任务。 ·选择Help > Server Admin Help或Help Workgroup Manager Help，浏览和搜索帮助标题。 屏幕帮助包括来自于“高级服务管理”和其他管理指南的说明。 To see the most recent server help topics: ■Make sure the server or administrator computer is connected to the Internet while you’re getting help. Help Viewer automatically retrieves and caches the most recent server help topics from the Internet. When not connected to the Internet, Help Viewer displays cached help topics. 要查看最新的服务器帮助主题 ■当您取得帮助时，请确保服务器或管理员计算机连接到互联网。 Help Viewer自动检索和缓存互联网最新服务器帮助主题。当没有连接到互联网时，Help Viewer显示缓存的帮助主题。 Documentation Map Mac OS X Server has a suite of guides that cover management of individual services. Each service may depend on other services for maximum utility. The documentation map below shows some related guides that you may need in order to fully configure Xgrid service to your specifications. You can get these guides in PDF format from the Mac OS X Server Resources website at www.apple.com/server/macosx/resources/. 文档结构图 Mac OS X 服务器有一套指南可以涵盖各个服务的管理。 每个服务可能取决于其他服务的最大效用。下面的文档结构图显示一些相关的文档，您可能需要完全配置您所需的服务规格。您可以从Mac OS X 服务器获取PDF格式的指南： www.apple.com/server/macosx/resources/ （P9图） Viewing PDF Guides Onscreen While reading the PDF version of a guide onscreen: · Show bookmarks to see the guide’s outline, and click a bookmark to jump to the corresponding section. · Search for a word or phrase to see a list of places where it appears in the guide. Click a listed place to see the page where it occurs. · Click a cross-reference to jump to the referenced section. Click a web link to visit the website in your browser. 在屏幕上查看PDF指南 当您在屏幕上查看PDF指南时： ·显示书签查看指南的大纲，然后点击书签跳转到相应的部分 ·搜索的单词或短语，以查看列在文档中显示位置的地方。单击列表的位置看到页面出现。 ·单击交叉引用跳转到要引用的部分。单击网页链接，在您的浏览器访问该网站。 Printing PDF Guides If you want to print a guide, you can take these steps to save paper and ink: · Save ink or toner by not printing the cover page. · Save color ink on a color printer by looking in the panes of the Print dialog for an option to print in grays or black and white. 打印PDF指南 如果您想打印一份指南，根据下面的步骤，可节省纸张和墨水： ·不打印封面，节省墨水或墨粉 ·通过查看在窗格中打印对话框的选项，用灰度或黑白打印，节省彩色打印机上的彩色墨水。 · Reduce the bulk of the printed document and save paper by printing more than one page per sheet of paper. In the Print dialog, change Scale to 115% (155% for Getting Started). Then choose Layout from the untitled pop-up menu. If your printer supports two-sided (duplex) printing, select one of the Two-Sided options. ·减少批量打印文档，用一页纸打印多页版面，以节省纸张。在打印对话框中，将比例更改至 115%(初始设置155%)。然后选择无弹出式菜单布局。如果您的打印机支持双面打印，选择双面选项之一。 Otherwise, choose 2 from the Pages per Sheet pop-up menu, and optionally choose Single Hairline from the Border menu. (If you’re using Mac OS X v10.4 or earlier, the Scale setting is in the Page Setup dialog and the Layout settings are in the Print dialog.) You may want to enlarge the printed pages even if you don’t print double sided, because the PDF page size is smaller than standard printer paper. In the Print dialog or Page Setup dialog, try changing Scale to 115% (155% for Getting Started, which has CD-size pages). 否则，从每张弹出菜单的页面中选择2。在菜单中，边框选择单细线。（如果您使用 Mac OS X v10.4 或更早版本，比例设置是在页面设置对话框，布局的设置是在打印对话框中）。 即使您不打印双面，您可能也需要放大打印的页面，因为PDF页面大小小于打印机纸张。在打印对话框的或页面设置对话框的中，请尝试更改至115%的比例（初始设置为155%，像CD页面大小）。 Getting Documentation Updates Periodically, Apple posts revised help pages and new editions of guides. Some revised help pages update the latest editions of the guides. · To view new onscreen help topics for a server application, make sure your server or administrator computer is connected to the Internet and click “Latest help topics” or “Staying current” in the main help page for the application. 获取文档更新 Apple公司会定期修改帮助页面和新版本指南 ·若要查看新服务器应用程序中屏幕上的帮助主题，请确保您的服务器或管理员计算机已连接到互联网，并在应用程序的主帮助页面单击的“Latest help topics”(帮助主题)或“Staying current”（保持当前） · To download the latest guides in PDF format, go to the Mac OS X Server Resources website at www.apple.com/server/macosx/resources/. · An RSS feed listing the latest updates to Mac OS X Server documentation and onscreen help is available. To view the feed, use an RSS reader application such as Safari or Mail and go to: feed://helposx.apple.com/rss/snowleopard/serverdocupdates.xml ·在Mac OS X Server文档网站下载PDF格式的最新指南：www.apple.com/server/resources/ ·RSS伺服器列出最新的Mac OS X服务器文档更新和可用的屏幕帮助，使用RSS阅读器应用程序，要查看伺服器，如Safari或Mail，在feed://helposx.apple.com/rss/snowleopard/serverdocupdates.xml Getting Additional Information For more information, consult these resources: · Read Me documents—get important updates and special information. Look for them on the server discs. · Mac OS X Server website (www.apple.com/server/macosx/)—enter the gateway to extensive product and technology information. 获取更多信息 更多的信息，请参考以下来源： ·自述文件—获取重要的更新和特别的信息，可在服务器光盘查找 ·Mac OS X服务器网站(www.apple.com/server/macosx/)—进入广泛的产品和技术信息的门户网站。 · Mac OS X Server Support website (www.apple.com/support/macosxserver/)—access hundreds of articles from Apple’s support organization. · Apple Discussions website (discussions.apple.com/)—share questions, knowledge, and advice with other administrators. ·Apple Mailing Lists website (www.lists.apple.com)—subscribe to mailing lists so you can communicate with other administrators using email. ·Mac OS X服务器支持网站(www.apple.com/support/macosxserver/)—access—可访问由苹果公司提供支持的数百篇文章。 ·苹果讨论网站(discussions.apple.com/)—共享问题、知识和其他管理员的建议。 ·苹果邮件列表网站（www.lists.apple.com）—订阅邮件列表，以便您可以其他管理员使用电子邮件通信。 1 Understanding Mail Service Mail service in Mac OS X Server is comprised of many different components that work together to provide incoming and outgoing Mail service, mail filtering, and mailing lists. This chapter begins with a look at the standard protocols used for sending and receiving mail. Then it explains how Mail service works, discusses mailing lists, and concludes with information on how Mail service integrates with other network services. 第一章 了解邮件服务 Mac OS X服务器的邮件服务由许多不同的组件协同工作以提供传入和传出邮件服务，邮件过滤和邮件列表 本章首先查看用于发送和接收邮件的标准。然后解释邮件服务器如何工作，讨论邮件列表，然后推断出邮件服务如何与其他网络服务结合起来的信息。 Mail Service Architecture Mail service in Mac OS X Server allows network users to send and receive mail over your network or across the Internet. Mail service sends and receives mail using the following standard Internet mail protocols: · Simple Mail Transfer Protocol (SMTP) · Internet Message Access Protocol (IMAP) · Post Office Protocol (POP) 邮件服务体系结构 Mac OS X服务器的邮件服务允许网络用户允许网络用户通过互联网或您的网络发送和接收邮件。 邮件服务使用以下标准互联网邮件协议，发送和接收邮件。 ·简单邮件传输协议（SMTP） ·互联网消息访问协议（IMAP） ·邮局协议（POP） A standard mail client setup uses SMTP to send outgoing mail and POP and IMAP to receive incoming mail. Mac OS X Server includes an SMTP service and a combined POP and IMAP service. Mail service also uses a Domain Name System (DNS) service to determine the destination IP address of outgoing mail. 标准的邮件客户端设置使用SMTP发送传出邮件和POP和IMAP接收传入的邮件。Mac OS X服务器包括SMTP服务和组合的POP以及IMAP服务。 邮件服务还使用域名系统（DNS）服务定义传出邮件的目标IP地址。 The following image gives an overview of how the components of Mac OS X Server Mail service interact 下图概述的Mac OS X服务器邮件服务的组件交互的方式 P13页图 Mail Transfer Agent Simple Mail Transfer Protocol (SMTP) is a protocol used to send and transfer mail. SMTP queues outgoing mail messages from the user. These messages are transferred over the Internet to their destinations, to be picked up by incoming mail protocols. 邮件传输代理 简单邮件传输协议（SMTP）是一个用于发送和传输邮件的协议。SMTP队列发出用户的邮件。这些消息通过互联网传输到目的地，通过传入邮件协议精选。 Mac OS X Server uses Postfix as its mail transfer agent (MTA). Postfix fully supports SMTP. Your mail users will set their mail application’s outgoing mail server to your Mac OS X Server running Postfix. Mac OS X服务器使用后缀作为其邮件传输代理 (MTA)。后缀完全支持SMTP。您的邮件用户将设置其邮件应用程序的发送邮件服务器到您的Mac OS X服务器运行后缀。 Postfix is easy to administer. Its basic configuration can be managed through Server Admin and therefore it does not rely on editing the configuration file. Postfix uses multiple layers of defense to protect the server computer from intruders: 后缀是易于管理。其基本的配置可通过服务器管理员管理，因此它并不依赖编辑配置文件。 后缀使用多层防御保护服务器计算机免受入侵者： · There is no direct path from the network to the security-sensitive local delivery tools. · Postfix does not trust the contents of its queue files or the contents of its IPC messages. · Postfix filters sender-provided information before exporting it via environment variables. · Nearly every Postfix application can run with fixed low privileges and no ability to change ID, run with root privileges, or run as any other user. ·这不是从网络到安全敏感本地传送工具的直接路径 ·后缀不信任其队列文件的内容或其IPC邮件的内容 ·通过环境变量将其导入之前，后缀的筛选器提供发件人的信息。 ·几乎每个后缀应用程序可以使用固定低权限运行，不能更改ID，用超级用户权限运行，或作为其他任何用户运行。 Postfix uses the configuration files main.cf and master.cf in /etc/postfix/. When Server Admin modifies Postfix settings, it overwrites the main.cf file. If you make a manual change to the configuration file of Postfix, Server Admin overwrites your changes the next time you use it to modify the Mail service configuration. 在/etc/postfix/使用后缀为main.cf和master.cf的配置文件。当服务器管理员修改后缀设置时，它覆盖main.cf文件 如果您对配置文件的后缀，进行手动更改，下次您使用它修改邮件服务配置时，服务器管理覆盖您的修改。 The spool files for Postfix are located in /var/spool/postfix/ and the log file is /var/log/ mail.log. For more information about Postfix, see www.postfix.org. If you use another MTA (such as Sendmail), you can’t configure Mail service with Mac OS X Server administration tools. To use Sendmail instead of Postfix, disable the current SMTP service through Postfix, then install and configure Sendmail. For more information about Sendmail, see www.sendmail.org. 假脱机文件的后缀位于/var/spool/postfix/，日志文件是/var/log/ mail.log。有关后缀的更多信息，参阅www.postfix.org 如果您使用另一个MTA（如Sendmail），您不能用Mac OS X服务器管理工具配置邮件服务。 要使用Sendmail而不是Postfix，通过后缀禁用当前的SMTP服务，然后安装和配置Sendmail。有关Sendmail的详细信息，参阅www.sendmail.org Mail Screening After a mail delivery connection is made and the message is accepted for local delivery (relayed mail is not screened), the mail server can screen it before delivery. Mac OS X Server uses SpamAssassin (from spamassassin.apache.org) to analyze the text of a message, and gives it a probability rating for being junk mail. 邮件筛选 邮件传递连接之后，提出和接受本地传递的邮件（转达没有筛选的邮件），递送之前，邮件服务器可以筛选它。 Mac OS X服务器使用SpamAssassin（来自于spamassassin.apache.org）解析文本消息，把它当垃圾邮件的可能性进行评级。 No junk mail filter is 100% accurate in identifying unwanted mail. For this reason the junk mail filter in Mac OS X Server doesn’t delete or remove junk mail from being delivered. Instead, it marks the mail as potential junk mail. The user can then decide if it’s really unsolicited commercial mail and deal with it accordingly. Many mail clients use the ratings that SpamAssassin adds as a guide in classifying mail for the user. 没有垃圾邮件筛选器是100%准确找出不需要的邮件。 为此在Mac OS X服务器的垃圾邮件筛选器并不会在递送时，删除或移除垃圾邮件。相反，它将邮件标记为潜在的垃圾邮件。 然后用户可以决定是否它是真正未经请求的商业邮件，并进行相应地处理。许多邮件客户端使用评级，SpamAssassin添加作为分类邮件的用户指南。 Mac OS X Server uses ClamAV (from www.clamav.net) to scan mail messages for viruses. If a suspected virus is found, you can deal with it in several ways, as described below. The virus definitions are kept up to date (if enabled) via the Internet using a process called freshclam. Mac OS X服务器使用ClamAV（来自于www.clamav.net）扫描病毒邮件。如果发现可疑病毒，您可以按下述的几种方法进行处理。病毒定义通过互联网使用一个称为freshclam的过程保持最新（如果启用）。 Where Mail Is Stored Mail is stored in an outgoing queue awaiting transfer to a remote server or in a local mail store accessible by local mail users. 邮件存储位置 邮件存储在传出队列等待传输到远程服务器或由本地邮件用户可以访问本地邮件存储中。 Outgoing Mail Location By default, outgoing mail messages are stored in the following spool directory on the startup disk in /var/spool/postfix/. This location is temporary, and the mail is stored until it’s transferred to the Internet. These locations can be moved to any accessible volume if you create a symlink link to the new location. 传出邮件位置 默认情况下，传出邮件存储在以下的假脱机目录的启动磁盘的/var/spool/postfix/中。此位置是临时的，邮件存储直到传输到互联网。 如果您创建符号链接链接到新的位置，这些位置可以被移动到任意可访问的卷。 Incoming Mail Location Mail service stores each message as a separate file in a mail folder for each user. Incoming mail is stored on the startup disk in /var/spool/imap/dovecot/mail/GUID. You can change the location of mail folders and indexes to another folder, disk, or disk partition. You can even specify a shared volume on another server as the location of the mail folder, although using a shared volume negatively affects performance. 传入邮件位置 邮件服务将作为一个单独的文件，在邮件文件夹中为每个用户存储每个消息。 传入邮件存储在启动磁盘的/var/spool/imap/dovecot/mail/GUID。 您可以更改邮件文件夹位置和另一文件夹、磁盘和磁盘分区的索引。您甚至可以在另一台服务器上指定一个共享的卷作为邮件文件夹的位置，虽然使用一个共享的卷会对性能产生负面影响。 For remotely mounted file systems, NFS isn’t recommended. The incoming mail remains on the server until deleted by a Mail User Agent (MUA). Mail storage can also be split across multiple partitions or stored on an Xsan cluster. This can be done to scale Mail service or to facilitate data backup. For more information see “Setting Up Mail Server Clustering with Xsan” on page 82. You can change where mail is stored. For more information, see “Working with Mail Service Data Storage” on page 79. 对于远程安装文件系统，NFS不建议使用。传入的文件保留在服务器上，直到被邮件用户代理（MUA）删除。 邮件存储也可以拆分为多个分区或存储在Xsan群集。这可以扩展邮件服务或促进数据的备份。有关详细信息，参阅第82页“用Xsan设置邮件服务器群集” 您可以更改邮件存储的地方。有关详细信息，参阅第79页“使用邮件服务数据存储” Local Delivery Agent Mail is transferred from incoming mail storage to the mail recipient’s inbox by a local delivery agent (LDA). The LDA handles local delivery, making mail accessible by the user’s mail application. Two protocols are available from the Mac OS X Server LDA: POP and IMAP. 本地投递代理 邮件是从传入邮件存储，通过本地投递代理（LDA）传输到邮件接收者的收件箱。该LDAP处理本地投递，使邮件用户的邮件应用程序可以访问。Mac OS X服务器LDA的两个协议是可用的：POP和IMAP Mac OS X Server uses Dovecot to provide POP and IMAP service. Your mail users will set their mail application’s incoming mail server to your Mac OS X Server running Dovecot. More information about Dovecot can be found at: http://www.dovecot.org/. Mac OS X服务器使用Dovecot提供POP和IMAP服务。您的邮件用户将设置其邮件应用程序接收的邮件服务器为您的Mac OS X 服务器运行Dovecot。 有关Dovecot的更多信息，可以在http://www.dovecot.org/找到。 Dovecot Dovecot is an o