Qmail: SMTP & POP3 via SSL

provide a start-up script for all necessary services. The following sample makes extensive use of Qmail's tcpserver.

#! /bin/sh
#
# Qmail-init-script
#
# chkconfig: 2345 90 10
# description: Qmail, the low-impact mail server.

PATH="/var/qmail/bin:/usr/local/sbin:/usr/local/bin:$PATH"
export PATH
mailhost=mail.sub.domain
qmaild=`id -u qmaild`
nofiles=`id -g qmaild`
smtpconf=/etc/stunnel/smtp.conf
pop3conf=/etc/stunnel/pop3.conf
pop3=yes
pop3ssl=yes
smtpssl=yes

[ -n "$mailhost" ] || mailhost=`hostname -f`

case "$1" in
	restart)
		$0 stop
		$0 start
	;;
	start)
		if test -f /var/run/qmail.pid ; then
			echo Qmail is already running.
	    		exit 1
		fi
		echo "Starting Qmail MTA:"
		echo -n "  sender: "
		qmail-start ./Maildir/ splogger qmail >/dev/null 2>&1 &
		pid=`ps ax | grep qmail-send | grep -v grep | \
			sed -e 's/^ *//' | cut -d' ' -f1`
		if [ -n "$pid" ] ; then
			echo $pid >/var/run/qmail.pid
			echo "ok."
		else
			echo "failed!"
			exit 1
		fi

		echo -n "  receiver: "
		tcpserver -R -u$qmaild -g$nofiles $mailhost smtp qmail-smtpd \
			$mailhost /bin/cmd5checkpw /bin/true 2>&1 \
			| splogger smtp &
		if [ "$?" != "0" ] ; then
			exit "failed!"
			exit 1
		else
			echo "ok."
		fi

		if [ -n "$pop3" ] ; then
			echo -n "  POP3-server: "
			tcpserver -v -p -R $mailhost 110 qmail-popup $mailhost \
				checkpassword qmail-pop3d Maildir 2>&1 \
				| splogger pop3 &
			if [ "$?" != "0" ] ; then
				exit "failed!"
				exit 1
			else
				echo "ok."
			fi
		fi

		if [ -n "$smtpssl" ] ; then
			echo -n "  SMTP/SSL-wrapper: "
			tcpserver -R -u$qmaild -g$nofiles $mailhost 465 \
				stunnel $smtpconf 2>&1 | \
				splogger smtp &
			if [ "$?" != "0" ] ; then
				exit "failed!"
				exit 1
			else
				echo "ok."
			fi
		fi

		if [ -n "$pop3ssl" ] ; then
			echo -n "  POP3/SSL-wrapper: "
			tcpserver -v -p -R $mailhost 995 \
				stunnel $pop3conf 2>&1 | \
				splogger pop3 &
			if [ "$?" != "0" ] ; then
				exit "failed!"
				exit 1
			else
				echo "ok."
			fi
		fi
	;;
	stop)
		test -f /var/run/qmail.pid || exit 0
		echo -n "Stopping Qmail MTA: "
		killall tcpserver
		kill `cat /var/run/qmail.pid`
		if [ "$?" = "0" ] ; then
			rm -f /var/run/qmail.pid
			echo "done."
		else
			echo "failed!"
			exit 1
		fi
	;;
	*)
		echo "Usage: $0 {start|stop|restart}"
		exit 1
	;;
esac

This script uses the default ports for SMTPS and POP3S, 465 and 995, respectively.

Again, set the dummy mail.sub.domain accordingly or leave it out altogether to be determined by hostname -f. You may have to adapt qmaild and nofiles as well. They represent the UID for the local user qmaild and the GID for nofiles or nobody, respectively.

Set pop3, smtpssl and pop3ssl accordingly. Unsetting these values excludes these services from being started. Administrators of standard Qmail installations without the SMTP AUTH patch will have to remove the last two statements from the qmail-smtpd command, once more.