idaho

postfix config

Mar 19th, 2015
84
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 7.19 KB | None | 0 0
  1. postfinger - postfix configuration on Thu Mar 19 09:57:01 CET 2015
  2. version: 1.30
  3.  
  4. --System Parameters--
  5. mail_version = 2.11.4
  6. hostname = mail.freebsd.systems
  7. uname = FreeBSD mail.freebsd.systems 10.1-RELEASE-p6 FreeBSD 10.1-RELEASE-p6 #0 r279867: Tue Mar 10 23:26:11 UTC 2015 [email protected]:/usr/obj/usr/src/sys/vesper amd64
  8.  
  9. --Packaging information--
  10.  
  11. --main.cf non-default parameters--
  12. alias_database = hash:/etc/mail/aliases
  13. alias_maps = hash:/etc/mail/aliases
  14. content_filter = smtp-amavis:[scan.freebsd.systems]:10026
  15. debugger_command = PATH=/bin:/usr/bin:/usr/local/bin:/usr/X11R6/bin ddd $daemon_directory/$process_name $process_id & sleep 5
  16. dovecot_destination_recipient_limit = 1
  17. mailbox_size_limit = 0
  18. message_size_limit = 51200000
  19. mydestination = pcre:/usr/local/etc/postfix/mydestination
  20. mynetworks = 127.0.0.0/8 94.23.17.118 5.196.167.0/28 [::1]/128 [2001:41d0:2:1276::]/64
  21. mynetworks_style = host
  22. myorigin = $mydomain
  23. non_smtpd_milters = $smtpd_milters
  24. postscreen_access_list = permit_mynetworks, cidr:/usr/local/etc/postfix/postscreen_access.cidr, cidr:/usr/local/etc/postfix/postscreen_access_jinx.cidr
  25. postscreen_dnsbl_action = enforce
  26. postscreen_dnsbl_sites = zen.spamhaus.org*2, bl.spamcop.net, b.barracudacentral.org, cbl.abuseat.org, list.dnswl.org=127.0.[0..255].[1..3]*-1
  27. postscreen_dnsbl_threshold = 2
  28. postscreen_greet_action = enforce
  29. recipient_delimiter = +
  30. smtp-amavis_destination_concurrency_limit = 2
  31. smtp_tls_CApath = /etc/ssl/certs
  32. smtp_tls_loglevel = 1
  33. smtp_tls_note_starttls_offer = yes
  34. smtp_tls_security_level = may
  35. smtpd_banner = $myhostname ESMTP
  36. smtpd_data_restrictions = reject_unauth_pipelining
  37. smtpd_helo_required = yes
  38. smtpd_helo_restrictions = reject_invalid_hostname, permit_mynetworks, permit_sasl_authenticated, check_helo_access hash:/usr/local/etc/postfix/helo_checks
  39. smtpd_milters = inet:mail.freebsd.systems:8891
  40. smtpd_recipient_restrictions = reject_non_fqdn_recipient, reject_unknown_recipient_domain, permit_mynetworks, permit_sasl_authenticated, check_recipient_access pcre:/usr/local/etc/postfix/recipient_checks.pcre, check_client_access cidr:/usr/local/etc/postfix/whitelist.cidr, check_client_access cidr:/usr/local/etc/postfix/blacklist.cidr, check_sender_access mysql:/usr/local/etc/postfix/mysql_sender_checks_local.cf, reject_invalid_hostname, reject_non_fqdn_hostname, check_client_access regexp:/usr/local/etc/postfix/filter-notoriginating.regexp
  41. smtpd_relay_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_unauth_destination
  42. smtpd_sasl_auth_enable = yes
  43. smtpd_sasl_path = private/auth
  44. smtpd_sender_login_maps = mysql:/usr/local/etc/postfix/mysql_login_mismatch.cf
  45. smtpd_sender_restrictions = reject_unknown_sender_domain, check_client_access hash:/usr/local/etc/postfix/whitelist_bypass_login, reject_sender_login_mismatch, reject_non_fqdn_sender, reject_unknown_address
  46. smtpd_tls_cert_file = /etc/ssl/postfix/all.freebsd.systems.pem
  47. smtpd_tls_key_file = /etc/ssl/postfix/all.freebsd.systems.key
  48. smtpd_tls_loglevel = 1
  49. smtpd_tls_mandatory_ciphers = high
  50. smtpd_tls_mandatory_exclude_ciphers = aNULL, MD5, 3DES
  51. smtpd_tls_received_header = yes
  52. smtpd_tls_security_level = may
  53. transport_maps = hash:/usr/local/etc/postfix/transport
  54. virtual_alias_maps = mysql:/usr/local/etc/postfix/mysql_virtual_alias_maps.cf, mysql:/usr/local/etc/postfix/mysql_virtual_alias_alias_maps.cf
  55. virtual_gid_maps = static:5000
  56. virtual_mailbox_domains = mysql:/usr/local/etc/postfix/mysql_virtual_domains_maps.cf
  57. virtual_mailbox_maps = mysql:/usr/local/etc/postfix/mysql_virtual_mailbox_maps.cf
  58. virtual_minimum_uid = 5000
  59. virtual_transport = dovecot
  60. virtual_uid_maps = static:5000
  61.  
  62. --master.cf--
  63. smtp inet n - n - 1 postscreen
  64. smtpd pass - - n - - smtpd
  65. dnsblog unix - - n - 0 dnsblog
  66. tlsproxy unix - - n - 0 tlsproxy
  67. submission inet n - n - - smtpd
  68. -o syslog_name=postfix/submission
  69. -o smtpd_tls_security_level=encrypt
  70. -o smtpd_sasl_auth_enable=yes
  71. -o smtpd_client_restrictions=permit_sasl_authenticated,reject
  72. smtps inet n - n - - smtpd
  73. -o syslog_name=postfix/smtps
  74. -o smtpd_tls_wrappermode=yes
  75. -o smtpd_sasl_auth_enable=yes
  76. -o smtpd_client_restrictions=permit_sasl_authenticated,reject
  77. pickup fifo n - n 60 1 pickup
  78. cleanup unix n - n - 0 cleanup
  79. qmgr fifo n - n 300 1 qmgr
  80. tlsmgr unix - - n 1000? 1 tlsmgr
  81. rewrite unix - - n - - trivial-rewrite
  82. bounce unix - - n - 0 bounce
  83. defer unix - - n - 0 bounce
  84. trace unix - - n - 0 bounce
  85. verify unix - - n - 1 verify
  86. flush unix n - n 1000? 0 flush
  87. proxymap unix - - n - - proxymap
  88. proxywrite unix - - n - 1 proxymap
  89. smtp unix - - n - - smtp
  90. relay unix - - n - - smtp
  91. showq unix n - n - - showq
  92. error unix - - n - - error
  93. retry unix - - n - - error
  94. discard unix - - n - - discard
  95. local unix - n n - - local
  96. virtual unix - n n - - virtual
  97. lmtp unix - - n - - lmtp
  98. anvil unix - - n - 1 anvil
  99. scache unix - - n - 1 scache
  100. dovecot unix - n n - - pipe
  101. flags=DRhu user=vmail:vmail argv=/usr/local/libexec/dovecot/deliver -d ${recipient}
  102. smtp-amavis unix - - n - 2 smtp
  103. -o smtp_data_done_timeout=1200
  104. -o smtp_send_xforward_command=yes
  105. -o disable_dns_lookups=yes
  106. -o max_use=20
  107. :10025 inet n - n - - smtpd
  108. -o content_filter=
  109. -o local_recipient_maps=
  110. -o relay_recipient_maps=
  111. -o smtpd_restriction_classes=
  112. -o smtpd_delay_reject=no
  113. -o smtpd_client_restrictions=permit_mynetworks,reject
  114. -o smtpd_helo_restrictions=
  115. -o smtpd_sender_restrictions=
  116. -o smtpd_recipient_restrictions=permit_mynetworks,reject
  117. -o mynetworks=127.0.0.0/8,5.196.167.1,[2001:41d0:2:1276::1]
  118. -o strict_rfc821_envelopes=yes
  119. -o smtpd_error_sleep_time=0
  120. -o smtpd_soft_error_limit=1001
  121. -o smtpd_hard_error_limit=1000
  122. -o smtpd_client_connection_count_limit=0
  123. -o smtpd_client_connection_rate_limit=0
  124. -o receive_override_options=no_header_body_checks,no_unknown_recipient_checks,no_milters
  125. vacation unix - n n - - pipe flags=Rq user=vacation argv=/data/bin/vacation/vacation.pl -f ${sender} -- ${recipient}
  126. sa-wrapper unix - n n - - pipe user=vscan:vscan argv=/data/bin/vscan/sal-wrapper.pl --${mailbox}
  127.  
  128. -- end of postfinger output --
Advertisement
Add Comment
Please, Sign In to add comment