zabbix通过mailx发邮件失败

2020-03-18

zabbix通过mailx发邮件失败

问题如下：
[root@zabbix-server ~]# cat 1.txt | mailx -v -s "邀请函" "xxxx@163.com"
Resolving host smtp.163.com . . . done.
Connecting to 220.181.12.17:25 . . .Connecting to 220.181.12.16:25 . . .Connecting to 220.181.12.15:25 . . .Connecting to 220.181.12.18:25 . . .Connecting to 220.181.12.14:25 . . .
原因：zabbix-server是云服务器，阿里云服务器默认不开放25端口，所以发邮件显示链接超时失败

解决

第一次尝试：在阿里云实例控制台----安全组规则----开放25端口，发现问题并没有解决，发邮件依然链接超时（查资料显示阿里云不允许开放25号端口）

第二次尝试：使用SSL认证下的465端口
先登录阿里云控制台开放465端口

1.请求获取数字证书

[root@zabbix-server ~]# mkdir -p /root/.certs/               #创建目录，用来存放证书
[root@zabbix-server ~]# echo -n | openssl s_client -connect smtp.163.com:465 | sed -ne '/-BEGIN CERTIFICATE-/,/-END CERTIFICATE-/p' > ~/.certs/163.crt                 #向163请求证书
[root@zabbix-server ~]# certutil -A -n "GeoTrust SSL CA" -t "C,," -d ~/.certs -i ~/.certs/163.crt            #添加一个SSL证书到证书数据库中
[root@zabbix-server ~]# certutil -A -n "GeoTrust Global CA" -t "C,," -d ~/.certs -i ~/.certs/163.crt             #添加一个Global 证书到证书数据库中
[root@zabbix-server ~]# certutil -L -d /root/.certs        #列出目录下的证书

2.配置发件人信息

[root@zabbix-server ~]# vim /etc/mail.rc
set bsdcompat

set from=xxxx@163.com          #发件人邮箱
set smtp=smtps://smtp.163.com:465         #163邮箱的smtp服务器地址+端口
set smtp-auth-user=xxxx@163.com          #发件人用户名
set smtp-auth-password=UTQTQRIVPLBBMXEK           #163的客户端授权码
set smtp-auth=login
set ssl-verify=ignore
set nss-config-dir=/root/.certs

3.设置信任证书

[root@zabbix-server ~]# cd /root/.certs/
[root@zabbix-server ~]# ll
[root@zabbix-server ~]# certutil -A -n "GeoTrust SSL CA - G3" -t "Pu,Pu,Pu" -d ./ -i 163.crt

成功标志：
Notice: Trust flag u is set automatically if the private key is present.

4.测试
[root@zabbix-server ~]# cat 1.txt | mailx -v -s "Invitation" xxxx@163.com #Invitation--主题，-v 显示发送过程 1.txt--发送的正文内容 最后是收件人邮箱
终端输出入下：
Resolving host smtp.163.com . . . done.
Connecting to 220.181.12.11:465 . . . connected.
Comparing DNS name: ".163.com"
SSL parameters: cipher=AES-256-GCM, keysize=256, secretkeysize=256,
issuer=CN=GeoTrust CN RSA CA G1,OU=www.digicert.com,O=DigiCert Inc,C=US
subject=CN=.163.com,OU=IT Dept.,O="NetEase (Hangzhou) Network Co., Ltd",L=Hangzhou,ST=Zhejiang,C=CN
220 163.com Anti-spam GT for Coremail System (163com[20141201])

EHLO zabbix-server
250-mail
250-PIPELINING
250-AUTH LOGIN PLAIN
250-AUTH=LOGIN PLAIN
250-coremail 1Uxr2xKj7kG0xkI17xGrU7I0s8FY2U3Uj8Cz28x1UUUUU7Ic2I0Y2Urgt1VCUCa0xDrUUUUj
250-STARTTLS
250 8BITMIME
AUTH LOGIN
334 dXNlcm5hbWU6
cGVyaW5fcWluQDE2My5jb20=
334 UGFzc3dvcmQ6
VVRRVFFSSVZQTEJCTVhFSw==
235 Authentication successful
MAIL FROM:perin_qin@163.com
250 Mail OK
RCPT TO:perin_qin@163.com
250 Mail OK
DATA
354 End data with <CR><LF>.<CR><LF>
.
250 Mail OK queued as smtp7,C8CowAD3__+EqnFegrFuAQ--.43S2 1584507524
QUIT
221 Bye

5.登录收件箱查看是否收到信息

image.png

发送成功，可以继续配置zabbix报警啦