SoftXS Email Server Setup and Configuration

Email Domains Controlled by SoftXS

The email server currently processes email for the following domains:

SoftXS additionally owns/controls the following domains:

to do - list the companies and DNS configuration details for each domain name

The idun.softxs.ch email server is the ONLY server we have that can receive email
We have no backup email servers!

Postfix based mail processing
Must have ability configure automatic forwarding of emails to V2 project systems
Email server in an Ubuntu-based VM, initially deployed on server in Cham data center
At least one backup email server setup, not in the Cham data center
1. [need to decide if backup server buffers or forwards to the primary server]
All setup and configuration scripted using Puppet
1. Including setup of forwarding to V2 specific systems
2. Ideally only a single configuration entry will be need for forwarding V2 project email. E.g.:
  1. All mail to {name}@{project}.works-organiser.ch is sent to V2 system {name}
  2. Each V2 system must have catch-all folder for filing emails with an unknown {name}
Use virtual users for all local mail recipients (alan, tibor, sandra, geraud, etc)
IMAPS access for email recipients

Setup Ubuntu-based VM with Postfix and other required packages
1. Initially setup works-organiser.com
2. Setup port forwarding via the firewall
  1. This will require a major change to the current host system setup, which uses rinetd, etc.
Setup MX records for work-organiser.com
Configure Postfix to receive email for domain work-organiser.ch
1. Setup TLS
2. Setup spam filtering
3. Setup IMAPS
Configure Postfix to receive email for the domain works-organiser.ch
1. Setup a test virtual user to receive all mail for the domain
2. Test sending email
Configure Post fix to receive email for sub-domains for works-organiser.ch
1. Setup project based forwarding for sub-domain mail
  1. Call a simple script
  2. Call a V2 script - Verify that email

The main SMTP server for softxs.ch is on idun (FreeBSD 9.1) with sendmail. Configuration manually.
The deployment to the VM smtp1 on zg-3 is done (Ubuntu 12.04.5 LTS) with postfix. Configuration is handled by puppet. All VMs on zg-3 are using this mail server as relay host.
The zg-1 server still an old FreeBSD 8.0 with sendmail and simple manual configuration. It is set with SMART_HOST mbox.softxs.ch (=smtp.softxs.ch)

Postfix on VM smtp1 can not decide if an SMTP call is received from our servers or from outside, because all external (not from VMs on zg-3) SMTP calls are forwarded through rinetd on zg-3, causing all source addresses be the IP address of zg-3. Therefore relaying can not enabled generally.
There are some email domains, which can not be reached from idun, because the IP address is blacklisted by their providers via the BaraccudeCentral spam vlacklist. This was corrected on 2017.03.14, and the configuration for the work-around shown below was disabled on 2017.03.20.
To workaround this problems, currently the critical domains added manually to the configuration on postfix on smtp1 as:
```
relay_domains = opb.de obermeyer-ae.com
```
And on zg-1 in /etc/mail/zg-1.softxs.ch.mc as:
```
FEATURE(`mailertable')
```
and in /etc/mail/mailertable as:
```
opb.de smtp:smtp1.softxs.ch
obermeyer-ae.com smtp:smtp1.softxs.ch
```
Note that after configuration changes run "service postfix restart" on smtp1 and "make all; make install; make restart" on zg-1.

New SMTP server as a VM on zg-2, namely smtp2. This server is responsible for all outgoing emails and later for incoming emails for our domains.
- Configured using the puppet module postfix_server_primary.
  Note: mydestination in main.cf has to contain all of our domains the mailboxes to be handled on smtp2 for.
New SMTP server on the zg-2 base machine. This server is a relay server for all VMs on zg-1, zg-2 and zg-3 and later for the outside world, but only for our domains.
- Configured using the puppet module postfix_satellite with relaying options set.
  Notes:
  - No rinetd is running on zg-2, so all SMTP connection request to smtp2.softxs.ch is handled by zg-2
  - Relayhost is given with the internal IP address 172.16.1.5 because smtp2.softxs.ch would point to zg-2.softxs.ch causing self reference

Mail from zg2t1.softxs.ch to nagyt@hu.inter.net
- zg2t1.softxs.ch (relayhost = smtp2.softxs.ch) --> zg-2.softxs.ch (relayhost = 172.16.1.5) --> smtp2.softxs.ch (relaying to hu.inter.net)
Mail from zg2t1.softxs.ch to tibor@softxs.ch
- zg2t1.softxs.ch (relayhost = smtp2.softxs.ch) --> zg-2.softxs.ch (relayhost = 172.16.1.5) --> smtp2.softxs.ch (will be saved later in mailbox)

Goal is to try another local ISP to reduce our dependency on datawire.ch

hosteurope.ch, located in D4 Technopark (near Luzern)
1. Dedicated VM-based servers: 15-20 CHF/month
2. Larger serves (48-128 GB): 60-170 CHF/month
[list to be extended]