Advertisement
Guest User

Untitled

a guest
Apr 26th, 2014
52
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
Bash 9.31 KB | None | 0 0
  1. Postfix main.cf :
  2.  
  3. # See /usr/share/postfix/main.cf.dist for a commented, more complete version
  4.  
  5.  
  6. # Debian specific:  Specifying a file name will cause the first
  7. # line of that file to be used as the name.  The Debian default
  8. # is /etc/mailname.
  9. #myorigin = /etc/mailname
  10.  
  11. smtpd_banner = $myhostname ESMTP ready
  12. biff = no
  13.  
  14. # appending .domain is the MUA's job.
  15. append_dot_mydomain = no
  16.  
  17. # Uncomment the next line to generate "delayed mail" warnings
  18. #delay_warning_time = 4h
  19.  
  20. readme_directory = /usr/share/doc/postfix
  21.  
  22. # TLS parameters
  23. smtpd_tls_cert_file = /etc/postfix/ssl/xxx.ro.crt
  24. smtpd_tls_key_file = /etc/postfix/ssl/xxx.ro.key
  25. smtpd_tls_CAfile = /etc/postfix/ssl/ca.pem
  26. smtpd_tls_CApath = /etc/postfix/ssl
  27. smtpd_use_tls=yes
  28. smtpd_tls_loglevel = 1
  29. smtpd_tls_received_header = yes
  30. smtpd_tls_session_cache_timeout = 3600s
  31. tls_random_source = dev:/dev/urandom
  32. smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache
  33. smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache
  34.  
  35. # See /usr/share/doc/postfix/TLS_README.gz in the postfix-doc package for
  36. # information on enabling SSL in the smtp client.
  37.  
  38. myhostname = xxx.ro
  39. alias_maps = hash:/etc/aliases
  40. alias_database = hash:/etc/aliases
  41. myorigin = /etc/mailname
  42. mydestination = localhost.localdomain, localhost
  43. relayhost =
  44. mynetworks = 127.0.0.0/8 [::ffff:127.0.0.0]/104 [::1]/128 192.168.10.9/32
  45. #mailbox_command = procmail -a "$EXTENSION"
  46. mailbox_size_limit = 0
  47. recipient_delimiter = +
  48. inet_interfaces = all
  49. virtual_mailbox_domains = mysql:/etc/postfix/mysql-virtual-mailbox-domains.cf
  50. virtual_mailbox_maps = mysql:/etc/postfix/mysql-virtual-mailbox-maps.cf
  51. virtual_alias_maps = mysql:/etc/postfix/mysql-virtual-alias-maps.cf,mysql:/etc/postfix/mysql-email2email.cf
  52. virtual_transport = dovecot
  53. #dovecot_destination_recipient_limit = 1
  54.  
  55. smtpd_helo_required = yes
  56. disable_vrfy_command = yes
  57. strict_rfc821_envelopes = yes
  58. invalid_hostname_reject_code = 554
  59. multi_recipient_bounce_reject_code = 554
  60. non_fqdn_reject_code = 554
  61. relay_domains_reject_code = 554
  62. unknown_address_reject_code = 554
  63. unknown_client_reject_code = 554
  64. unknown_hostname_reject_code = 554
  65. unknown_local_recipient_reject_code = 554
  66. unknown_relay_recipient_reject_code = 554
  67. #unknown_sender_reject_code = 554
  68. unknown_virtual_alias_reject_code = 554
  69. unknown_virtual_mailbox_reject_code = 554
  70. unverified_recipient_reject_code = 554
  71. unverified_sender_reject_code = 554
  72.  
  73. html_directory = /usr/share/doc/postfix/html
  74. #smtpd_recipient_restrictions = permit_mynetworks   permit_sasl_authenticated   reject_unauth_destination
  75. smtpd_recipient_restrictions =
  76.         reject_invalid_hostname,
  77.         reject_unknown_recipient_domain,
  78.         reject_unauth_pipelining,
  79.         permit_mynetworks,
  80.         permit_sasl_authenticated,
  81.         reject_unauth_destination,
  82.         reject_rbl_client dsn.rfc-ignorant.org,
  83.         reject_rbl_client sbl-xbl.spamhaus.org,
  84.         reject_rbl_client bl.spamcop.net,
  85.         reject_rbl_client cbl.abuseat.org,
  86.         reject_rbl_client ix.dnsbl.manitu.net,
  87.         reject_rbl_client combined.rbl.msrbl.net,
  88.         reject_rbl_client rabl.nuclearelephant.com,
  89.         permit
  90. dovecot_destination_recipient_limit = 1
  91. smtpd_sasl_type = dovecot
  92. smtpd_sasl_path = private/auth
  93. smtpd_sasl_auth_enable = yes
  94. content_filter = smtp-amavis:[127.0.0.1]:10024
  95. receive_override_options = no_address_mappings
  96. message_size_limit = 0
  97.  
  98. milter_default_action = accept
  99. milter_protocol = 2
  100. smtpd_milters = inet:localhost:12345
  101. non_smtpd_milters = inet:localhost:12345
  102.  
  103.  
  104. ==================================================
  105.  
  106. Postfix master.cf :
  107.  
  108. #
  109. # Postfix master process configuration file.  For details on the format
  110. # of the file, see the master(5) manual page (command: "man 5 master").
  111. #
  112. # Do not forget to execute "postfix reload" after editing this file.
  113. #
  114. # ==========================================================================
  115. # service type  private unpriv  chroot  wakeup  maxproc command + args
  116. #               (yes)   (yes)   (yes)   (never) (100)
  117. # ==========================================================================
  118. smtp      inet  n       -       -       -       -       smtpd
  119. #smtp      inet  n       -       -       -       1       postscreen
  120. #smtpd     pass  -       -       -       -       -       smtpd
  121. #dnsblog   unix  -       -       -       -       0       dnsblog
  122. #tlsproxy  unix  -       -       -       -       0       tlsproxy
  123. submission inet n       -       -       -       -       smtpd
  124. #  -o syslog_name=postfix/submission
  125. #  -o smtpd_tls_security_level=encrypt
  126.    -o smtpd_sasl_auth_enable=yes
  127.    -o smtpd_client_restrictions=permit_sasl_authenticated,
  128.         permit_mynetworks,
  129.         check_relay_domains,
  130.         reject_unauth_destination,
  131.         reject_rbl_client zen.spamhaus.org,
  132.         reject_rbl_client dsn.rfc-ignorant.org,
  133.         reject_rbl_client sbl-xbl.spamhaus.org,
  134.         reject_rbl_client bl.spamcop.net,
  135.         reject_rbl_client cbl.abuseat.org,
  136.         reject_rbl_client ix.dnsbl.manitu.net,
  137.         reject_rbl_client combined.rbl.msrbl.net,
  138.         reject_rbl_client rabl.nuclearelephant.com,
  139.         reject
  140. smtps     inet  n       -       -       -       -       smtpd
  141. #  -o smtpd_tls_wrappermode=yes
  142. #  -o smtpd_sasl_auth_enable=yes
  143. #  -o smtpd_client_restrictions=permit_sasl_authenticated,reject
  144. #  -o milter_macro_daemon_name=ORIGINATING
  145. #628       inet  n       -       -       -       -       qmqpd
  146. pickup    fifo  n       -       -       60      1       pickup
  147. cleanup   unix  n       -       -       -       0       cleanup
  148. qmgr      fifo  n       -       n       300     1       qmgr
  149. #qmgr     fifo  n       -       n       300     1       oqmgr
  150. tlsmgr    unix  -       -       -       1000?   1       tlsmgr
  151. rewrite   unix  -       -       -       -       -       trivial-rewrite
  152. bounce    unix  -       -       -       -       0       bounce
  153. defer     unix  -       -       -       -       0       bounce
  154. trace     unix  -       -       -       -       0       bounce
  155. verify    unix  -       -       -       -       1       verify
  156. flush     unix  n       -       -       1000?   0       flush
  157. proxymap  unix  -       -       n       -       -       proxymap
  158. proxywrite unix -       -       n       -       1       proxymap
  159. smtp      unix  -       -       -       -       -       smtp
  160. relay     unix  -       -       -       -       -       smtp
  161. #       -o smtp_helo_timeout=5 -o smtp_connect_timeout=5
  162. showq     unix  n       -       -       -       -       showq
  163. error     unix  -       -       -       -       -       error
  164. retry     unix  -       -       -       -       -       error
  165. discard   unix  -       -       -       -       -       discard
  166. local     unix  -       n       n       -       -       local
  167. virtual   unix  -       n       n       -       -       virtual
  168. lmtp      unix  -       -       -       -       -       lmtp
  169. anvil     unix  -       -       -       -       1       anvil
  170. scache    unix  -       -       -       -       1       scache
  171. #
  172. #
  173. # maildrop. See the Postfix MAILDROP_README file for details.
  174. # Also specify in main.cf: maildrop_destination_recipient_limit=1
  175. #
  176. maildrop  unix  -       n       n       -       -       pipe
  177.   flags=DRhu user=vmail argv=/usr/bin/maildrop -d ${recipient}
  178. #
  179. # See the Postfix UUCP_README file for configuration details.
  180. #
  181. uucp      unix  -       n       n       -       -       pipe
  182.   flags=Fqhu user=uucp argv=uux -r -n -z -a$sender - $nexthop!rmail ($recipient)
  183. #
  184. # Other external delivery methods.
  185. #
  186. ifmail    unix  -       n       n       -       -       pipe
  187.   flags=F user=ftn argv=/usr/lib/ifmail/ifmail -r $nexthop ($recipient)
  188. bsmtp     unix  -       n       n       -       -       pipe
  189.   flags=Fq. user=bsmtp argv=/usr/lib/bsmtp/bsmtp -t$nexthop -f$sender $recipient
  190. scalemail-backend unix  -       n       n       -       2       pipe
  191.   flags=R user=scalemail argv=/usr/lib/scalemail/bin/scalemail-store ${nexthop} ${user} ${extension}
  192. mailman   unix  -       n       n       -       -       pipe
  193.   flags=FR user=list argv=/usr/lib/mailman/bin/postfix-to-mailman.py
  194.   ${nexthop} ${user}
  195. #dovecot unix - n n - - pipe flags=DRhu user=vmail:vmail argv=/usr/lib/dovecot/deliver -f ${sender} -d ${recipient}
  196. dovecot unix - n n - - pipe
  197.   flags=DRhu user=vmail:vmail argv=/usr/lib/dovecot/deliver -d ${recipient}
  198. smtp-amavis unix -      -       n     -       2  smtp
  199.     -o smtp_data_done_timeout=1200
  200.     -o smtp_send_xforward_command=yes
  201.     -o disable_dns_lookups=yes
  202.     -o max_use=20
  203.     -o smtpd_milters=inet:127.0.0.1:12345
  204. 127.0.0.1:10025 inet n    -       n       -       -     smtpd
  205.     -o content_filter=
  206.     -o smtpd_delay_reject=no
  207.     -o smtpd_client_restrictions=permit_mynetworks,reject
  208.     -o smtpd_helo_restrictions=
  209.     -o smtpd_sender_restrictions=
  210.     -o smtpd_recipient_restrictions=permit_mynetworks,reject
  211.     -o smtpd_data_restrictions=reject_unauth_pipelining
  212.     -o smtpd_end_of_data_restrictions=
  213.     -o smtpd_restriction_classes=
  214.     -o mynetworks=127.0.0.0/8
  215.     -o smtpd_error_sleep_time=0
  216.     -o smtpd_soft_error_limit=1001
  217.     -o smtpd_hard_error_limit=1000
  218.     -o smtpd_client_connection_count_limit=0
  219.     -o smtpd_client_connection_rate_limit=0
  220.     -o receive_override_options=no_header_body_checks,no_unknown_recipient_checks,no_milters
  221.     -o local_header_rewrite_clients=
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement