- ## Location of executables and configuration
- command_directory = /usr/sbin
- daemon_directory = /usr/lib/postfix
- config_directory = /etc/postfix
- ## Host names and recipient address mapping
- inet_interfaces = all
- myorigin = /etc/mailname
- myhostname = daniel.priv.no
- mydestination = /etc/mailnames, localhost
- mynetworks = 127.0.0.0/24 192.168.10.0/24 192.168.100.10-99 [::ffff:127.0.0.0]/104 [::1]/128
- alias_database = hash:/etc/aliases
- alias_maps = hash:/etc/aliases
- recipient_delimiter = +
- biff = no
- ## Mail box settings
- home_mailbox = mail/
- mailbox_size_limit = 0
- message_size_limit = 100000000
- tls_random_source = dev:/dev/urandom
- ## Client-side TLS parameters
- smtpd_tls_security_level = encrypt
- smtpd_tls_cert_file = /etc/certs/daniel_priv_no_PositiveSSL.crt
- smtpd_tls_key_file = /etc/certs/daniel_priv_no_private_key.crt
- smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache
- ## Optional TLS for remote servers
- smtp_tls_security_level = may
- smtp_tls_cert_file = $smtpd_tls_cert_file
- smtp_tls_key_file = $smtpd_tls_key_file
- smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache
- ## Client-side authentication and connection
- #smtpd_tls_auth_only = yes
- #smptd_sasl_auth_enable = yes
- #smptd_sasl_local_domain = /etc/hostname
- #smtpd_sasl_path = private/auth-client
- #smtpd_sasl_security_options = noanonymous
- #smtpd_sasl_type = dovecot
- #smtpd_tls_received_header = yes
- #smtpd_tls_mandatory_protocols = SSLv3, TLSv1
- #smtpd_tls_mandatory_ciphers = medium
- #smtpd_sasl_authenticated_header = yes
- ## Client-side authentication and connection
- smtpd_tls_auth_only = yes
- smptd_sasl_auth_enable = yes
- smptd_sasl_local_domain = /etc/hostname
- smtpd_sasl_path = private/auth-client
- smtpd_sasl_security_options = noanonymous
- smtpd_sasl_type = dovecot
- smtpd_helo_required = yes
- disable_vrfy_command = yes
- smtpd_recipient_restrictions =
- permit_sasl_authenticated
- reject_unauth_destination
- reject_unauth_pipelining
- reject_invalid_hostname
- reject_non_fqdn_sender
- reject_unknown_sender_domain
- reject_non_fqdn_recipient
- reject_unknown_recipient_domain
- reject_rbl_client dnsbl.njabl.org
- reject_rbl_client dnsbl.sorbs.net
- reject_rbl_client bl.spamcop.net
- permit
- unknown_local_recipient_reject_code = 550
- smtpd_banner = $myhostname ESMTP $mail_name (GNU/Linux)