Install Postfix + Dovecot e-mail server

Install Postfix + Dovecot e-mail server KCTang Thu, 25/12/2014 - 18:09
Table of contents


Postfix is a mail transfer agent (MTA) responsible for sending out and receiving emails between servers.

Dovecot is a mail delivery agent (MDA) responsible for sending out and receiving emails between a server and its users.

Mail-stack-delivery is a combined package containing both Postfix and Dovecot. It would be easier than to install Postfix and Dovecot separately.

Re-direct to server ports​

Set the internet router to re-direct the following connections to server ports:

  • SMTP = port 25 (for receiving or sending emails)
  • secure SMTP = port 465 (for receiving or sending emails securely)
  • IMAP = port 143 (for retrieiving emails)
  • secure IMAP = port 993 (for retrieving emails securely)
  • POP3 = port 110 (for retrieving emails)

Install both Postfix and Dovecot​

Install the combined package:

$ sudo apt-get install mail-stack-delivery

Reconfigure Postfix


$ sudo dpkg-reconfigure postfix

Use Tab key to change selection.

Select "Internet Site".

Enter the following information:

System mail name: <fully qualified domain name, such as "">
Root and postmaster mail recipient: <such as "kctang">
Other destinations to accept mail: <fully qualified domain name, such as "">, <server name such as "server1">, localhost.localdomain, localhost
Force synchronous updates on mail queue: No
Local networks: [::ffff:]/104 [::1]/128
Use procmail for local delivery: No
Mailbox size limit (bytes): 0
Local address extension character: +
Internet protocols to use: all

Activate the changes:

$ sudo systemctl reload postfix
$ sudo service postfix reload

Edit "" settings:

$ gksudo gedit /etc/postfix/


myhostname =
# last line changed from server name to fully qualified domain name,
# otherwise some servers would not accept e-mails sent without fully qualified domain name
message_size_limit = 102400000
# last line added to increase the default 10 times
maximal_queue_lifetime = 0
# last line added to report unsuccessful delivery immediately instead of after the default of 5 days

Edit "" settings:

$ gksudo gedit /etc/postfix/


smtp      inet  n       -       y       -       -       smtpd
smtps     inet  n       -       y       -       -       smtpd
# last line uncommented
   -o smtpd_sasl_auth_enable=yes
# last line added to enable STARTTLS authentication
   -o smtpd_client_restrictions=permit_sasl_authenticated,reject
# last line added to reject if not authenticated, no space after ","
   -o smtpd_tls_wrappermode=yes
# last line added to force use of TLS
   -o milter_macro_daemon_name=ORIGINATING
# last line added

Change Dovecot settings

Edit config file:

$ gksudo gedit /etc/dovecot/conf.d/99-mail-stack-delivery.conf


mail_location = maildir:~/Maildir:LAYOUT=fs
# LAYOUT=fs added to last line, to use "/" instead of "." to denote sub-folders
# IMAP configuration
protocol imap {
    mail_max_userip_connections = 1000
    # 10 in last line increased to 1000
    imap_client_workarounds = delay-newmail
# POP3 configuration
protocol pop3 {
    mail_max_userip_connections = 50
    # 10 in last line increased to 50
    pop3_client_workarounds = outlook-no-nuls oe-ns-eoh

Activate the changes:

$ sudo systmctl reload postfix
$ sudo service postfix reload
$ sudo systemctl restart dovecot
$ sudo service dovecot reload

Verify success

See whether the postfix server is running:

$ telnet localhost 25

should display:

220 ESMTP Postfix (Ubuntu)

ehlo localhost

should display the following:


250-SIZE 102400000






250 DSN


to exit to "telnet >" prompt.


to exit telnet.

Try also:

$ telnet localhost 995


$ telnet localhost 465

should display either one:

Connected to localhost

Connected to


 to exit to "telnet >" prompt.


to exit telnet.

Specify mail forwarding

Edit "aliases" file:

$ sudo gedit /etc/aliases


postmaster: kctang
kctcl: kctcl, kctclpop


  • forwarding e-mails sent to postmaster to kctang, no email will be left at postmaster
  • forwarding e-mails sent to kctcl to kctcl (itself) and to kctclpop, i.e. making a copy

Activate setting:

$ sudo newaliases