API tools faq
paste
Advertisement
Ameriks

Untitled

Ameriks
Jul 31st, 2015
91
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 11.26 KB | None | 0 0
raw download clone embed print report diff
  1. postconf -nf:
  2.  
  3. alias_database = hash:/etc/aliases
  4. alias_maps = hash:/etc/aliases
  5. append_dot_mydomain = no
  6. biff = no
  7. config_directory = /etc/postfix
  8. content_filter = smtp-amavis:[127.0.0.1]:10024
  9. inet_interfaces = all
  10. inet_protocols = all
  11. local_recipient_maps = $virtual_mailbox_maps
  12. mailbox_size_limit = 0
  13. message_size_limit = 134217728
  14. milter_default_action = accept
  15. mydestination = localhost
  16. myhostname = box.example.com
  17. mynetworks = 127.0.0.0/8 [::ffff:127.0.0.0]/104 [::1]/128
  18. myorigin = /etc/mailname
  19. non_smtpd_milters = $smtpd_milters
  20. notify_classes = bounce, delay, resource, software
  21. readme_directory = no
  22. recipient_delimiter = +
  23. smtp_dns_support_level = dnssec
  24. smtp_tls_CAfile = /etc/ssl/certs/ca-certificates.crt
  25. smtp_tls_loglevel = 2
  26. smtp_tls_security_level = dane
  27. smtpd_banner = ESMTP $mail_name
  28. smtpd_milters = inet:127.0.0.1:8891 inet:127.0.0.1:8893
  29. smtpd_recipient_restrictions = permit_sasl_authenticated, permit_mynetworks,
  30. reject_rbl_client zen.spamhaus.org, reject_unlisted_recipient,
  31. check_policy_service inet:127.0.0.1:10023
  32. smtpd_relay_restrictions =
  33. permit_sasl_authenticated,permit_mynetworks,reject_unauth_destination
  34. smtpd_sasl_auth_enable = yes
  35. smtpd_sasl_path = private/auth
  36. smtpd_sasl_type = dovecot
  37. smtpd_sender_login_maps = pgsql:/etc/postfix/pgsql/sender-login-maps.cf
  38. smtpd_sender_restrictions = reject_non_fqdn_sender,
  39. reject_unknown_sender_domain, reject_authenticated_sender_login_mismatch,
  40. reject_rhsbl_sender dbl.spamhaus.org
  41. smtpd_tls_auth_only = yes
  42. smtpd_tls_cert_file = /etc/nginx/ssl/example.crt
  43. smtpd_tls_ciphers = medium
  44. smtpd_tls_dh1024_param_file = /etc/nginx/ssl/dh2048.pem
  45. smtpd_tls_exclude_ciphers = aNULL
  46. smtpd_tls_key_file = /etc/nginx/ssl/example.key
  47. smtpd_tls_received_header = yes
  48. smtpd_tls_security_level = may
  49. smtpd_use_tls = yes
  50. soft_bounce = no
  51. virtual_alias_maps = pgsql:/etc/postfix/pgsql/virtual_alias_maps.cf
  52. virtual_gid_maps = static:5000
  53. virtual_mailbox_domains = pgsql:/etc/postfix/pgsql/virtual_domains_maps.cf
  54. virtual_mailbox_maps = pgsql:/etc/postfix/pgsql/virtual_mailbox_maps.cf
  55. virtual_transport = lmtp:[127.0.0.1]:10026
  56. virtual_uid_maps = static:5000
  57.  
  58.  
  59. postconf -Mf
  60. smtp inet n - - - - smtpd
  61. submission inet n - - - - smtpd
  62. -o content_filter=
  63. -o syslog_name=postfix/submission
  64. -o smtpd_milters=inet:127.0.0.1:8891
  65. -o smtpd_tls_security_level=encrypt
  66. -o smtpd_tls_ciphers=high
  67. -o smtpd_tls_exclude_ciphers=aNULL,DES,3DES,MD5,DES+MD5,RC4
  68. -o smtpd_tls_mandatory_protocols=!SSLv2,!SSLv3
  69. -o cleanup_service_name=authclean
  70. authclean unix n - - - 0 cleanup
  71. -o header_checks=regexp:/etc/postfix/header_checks
  72. pickup unix n - - 60 1 pickup
  73. -o content_filter=
  74. -o receive_override_options=no_header_body_checks
  75. cleanup unix n - - - 0 cleanup
  76. qmgr unix n - n 300 1 qmgr
  77. tlsmgr unix - - - 1000? 1 tlsmgr
  78. rewrite unix - - - - - trivial-rewrite
  79. bounce unix - - - - 0 bounce
  80. defer unix - - - - 0 bounce
  81. trace unix - - - - 0 bounce
  82. verify unix - - - - 1 verify
  83. flush unix n - - 1000? 0 flush
  84. proxymap unix - - n - - proxymap
  85. proxywrite unix - - n - 1 proxymap
  86. smtp unix - - - - - smtp
  87. relay unix - - - - - smtp
  88. showq unix n - - - - showq
  89. error unix - - - - - error
  90. retry unix - - - - - error
  91. discard unix - - - - - discard
  92. local unix - n n - - local
  93. virtual unix - n n - - virtual
  94. lmtp unix - - - - - lmtp
  95. anvil unix - - - - 1 anvil
  96. scache unix - - - - 1 scache
  97. maildrop unix - n n - - pipe flags=DRhu
  98. user=vmail argv=/usr/bin/maildrop -d ${recipient}
  99. uucp unix - n n - - pipe flags=Fqhu
  100. user=uucp argv=uux -r -n -z -a$sender - $nexthop!rmail ($recipient)
  101. ifmail unix - n n - - pipe flags=F user=ftn
  102. argv=/usr/lib/ifmail/ifmail -r $nexthop ($recipient)
  103. bsmtp unix - n n - - pipe flags=Fq.
  104. user=bsmtp argv=/usr/lib/bsmtp/bsmtp -t$nexthop -f$sender $recipient
  105. scalemail-backend unix - n n - 2 pipe flags=R
  106. user=scalemail argv=/usr/lib/scalemail/bin/scalemail-store ${nexthop}
  107. ${user} ${extension}
  108. mailman unix - n n - - pipe flags=FR
  109. user=list argv=/usr/lib/mailman/bin/postfix-to-mailman.py ${nexthop}
  110. ${user}
  111. smtp-amavis unix - - - - 2 smtp
  112. -o smtp_data_done_timeout=1200
  113. -o smtp_send_xforward_command=yes
  114. -o disable_dns_lookups=yes
  115. -o max_use=20
  116. 127.0.0.1:10025 inet n - - - - smtpd
  117. -o content_filter=
  118. -o local_recipient_maps=
  119. -o relay_recipient_maps=
  120. -o smtpd_restriction_classes=
  121. -o smtpd_delay_reject=no
  122. -o smtpd_client_restrictions=permit_mynetworks,reject
  123. -o smtpd_helo_restrictions=
  124. -o smtpd_sender_restrictions=
  125. -o smtpd_recipient_restrictions=permit_mynetworks,reject
  126. -o smtpd_data_restrictions=reject_unauth_pipelining
  127. -o smtpd_end_of_data_restrictions=
  128. -o mynetworks=127.0.0.0/8
  129. -o smtpd_error_sleep_time=0
  130. -o smtpd_soft_error_limit=1001
  131. -o smtpd_hard_error_limit=1000
  132. -o smtpd_client_connection_count_limit=0
  133. -o smtpd_client_connection_rate_limit=0
  134. -o receive_override_options=no_header_body_checks,no_unknown_recipient_checks,no_milters
  135.  
  136.  
  137.  
  138.  
  139. mail.log:
  140.  
  141. Jul 31 08:19:49 b1037ca901c1 postfix/submission/smtpd[22107]: connect from localhost[127.0.0.1]
  142. Jul 31 08:19:49 b1037ca901c1 postfix/submission/smtpd[22107]: CCAF8D80222: client=localhost[127.0.0.1], sasl_method=LOGIN, [email protected]
  143. Jul 31 08:19:49 b1037ca901c1 postfix/cleanup[22109]: CCAF8D80222: replace: header Received: from box.example.com (localhost [127.0.0.1])??(using TLSv1 with cipher ECDHE-RSA-AES128-SHA (128/128 bits))??(No client certificate requested)??by box.example.com (Postfix) with ESMTPSA id CCAF8D802 from localhost[127.0.0.1]; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<box.example.com>: Received: from authenticated-user (unknown [127.0.0.1])??(using TLSv1 with cipher ECDHE-RSA-AES128-SHA (128/128 bits))??(No client certificate requested)??by box.example.com (Postfix) with ESMTPSA id CCAF8D80222??for <[email protected]>; Fri, 31 Jul 2015 08:19:49 +0000 (UTC)
  144. Jul 31 08:19:49 b1037ca901c1 postfix/cleanup[22109]: CCAF8D80222: message-id=<[email protected]>
  145. Jul 31 08:19:49 b1037ca901c1 postfix/qmgr[20607]: CCAF8D80222: from=<[email protected]>, size=646, nrcpt=1 (queue active)
  146. Jul 31 08:19:49 b1037ca901c1 postfix/smtp[22110]: setting up TLS connection to smtp1.toexample.com[23.75.25.14]:25
  147. Jul 31 08:19:49 b1037ca901c1 postfix/smtp[22110]: smtp1.toexample.com[23.75.25.14]:25: TLS cipher list "aNULL:-aNULL:ALL:+RC4:@STRENGTH"
  148. Jul 31 08:19:49 b1037ca901c1 postfix/smtp[22110]: SSL_connect:before/connect initialization
  149. Jul 31 08:19:49 b1037ca901c1 postfix/smtp[22110]: SSL_connect:unknown state
  150. Jul 31 08:19:49 b1037ca901c1 postfix/smtp[22110]: SSL_connect:SSLv3 read server hello A
  151. Jul 31 08:19:49 b1037ca901c1 postfix/smtp[22110]: smtp1.toexample.com[23.75.25.14]:25: depth=0 verify=0 subject=/C=LV/O=EXample/OU=ITC/CN=smtp1.toexample.com
  152. Jul 31 08:19:49 b1037ca901c1 postfix/smtp[22110]: smtp1.toexample.com[23.75.25.14]:25: depth=0 verify=0 subject=/C=LV/O=EXample/OU=ITC/CN=smtp1.toexample.com
  153. Jul 31 08:19:49 b1037ca901c1 postfix/smtp[22110]: SSL_connect:SSLv3 read server certificate A
  154. Jul 31 08:19:49 b1037ca901c1 postfix/smtp[22110]: SSL_connect:SSLv3 read server certificate request A
  155. Jul 31 08:19:49 b1037ca901c1 postfix/smtp[22110]: SSL_connect:SSLv3 read server done A
  156. Jul 31 08:19:49 b1037ca901c1 postfix/smtp[22110]: SSL_connect:SSLv3 write client certificate A
  157. Jul 31 08:19:49 b1037ca901c1 postfix/smtp[22110]: SSL_connect:SSLv3 write client key exchange A
  158. Jul 31 08:19:49 b1037ca901c1 postfix/smtp[22110]: SSL_connect:SSLv3 write change cipher spec A
  159. Jul 31 08:19:49 b1037ca901c1 postfix/smtp[22110]: SSL_connect:SSLv3 write finished A
  160. Jul 31 08:19:49 b1037ca901c1 postfix/smtp[22110]: SSL_connect:SSLv3 flush data
  161. Jul 31 08:19:49 b1037ca901c1 postfix/smtp[22110]: SSL_connect:SSLv3 read finished A
  162. Jul 31 08:19:49 b1037ca901c1 postfix/smtp[22110]: smtp1.toexample.com[23.75.25.14]:25: subject_CN=smtp1.toexample.com, issuer_CN=smtp1.toexample.com, fingerprint=F1:6E:B7:64:96:D3:DB:5C:F6:7D:37:89:BE:5D:E8:74, pkey_fingerprint=A8:F4:72:BA:D8:16:26:11:67:F5:10:4F:96:C3:CF:29
  163. Jul 31 08:19:49 b1037ca901c1 postfix/smtp[22110]: Untrusted TLS connection established to smtp1.toexample.com[23.75.25.14]:25: TLSv1 with cipher AES128-SHA (128/128 bits)
  164. Jul 31 08:19:50 b1037ca901c1 postfix/submission/smtpd[22107]: disconnect from localhost[127.0.0.1]
  165. Jul 31 08:19:55 b1037ca901c1 postfix/smtp[22110]: CCAF8D80222: to=<[email protected]>, relay=smtp1.toexample.com[23.75.25.14]:25, delay=5.2, delays=0.08/0/0.07/5, dsn=4.3.0, status=deferred (bounce or trace service failure)
  166.  
  167. === AND here goes bounce emails (one to user, one to postmaster) ===
  168.  
  169. Jul 31 08:20:05 b1037ca901c1 postfix/cleanup[22139]: 068B1D80225: message-id=<[email protected]>
  170. Jul 31 08:20:05 b1037ca901c1 postfix/bounce[22138]: CCAF8D80222: sender non-delivery notification: 068B1D80225
  171. Jul 31 08:20:05 b1037ca901c1 postfix/qmgr[20607]: 068B1D80225: from=<>, size=2934, nrcpt=1 (queue active)
  172. Jul 31 08:20:05 b1037ca901c1 postfix/cleanup[22139]: 090D2D80226: message-id=<[email protected]>
  173. Jul 31 08:20:05 b1037ca901c1 postfix/bounce[22138]: CCAF8D80222: postmaster non-delivery notification: 090D2D80226
  174. Jul 31 08:20:05 b1037ca901c1 postfix/qmgr[20607]: 090D2D80226: from=<[email protected]>, size=2536, nrcpt=1 (queue active)
  175. Jul 31 08:20:05 b1037ca901c1 postfix/qmgr[20607]: CCAF8D80222: status=deferred (bounce failed)
  176. Jul 31 08:20:05 b1037ca901c1 postfix/lmtp[22140]: 068B1D80225: to=<[email protected]>, relay=127.0.0.1[127.0.0.1]:10026, delay=0.03, delays=0.02/0/0/0.01, dsn=2.0.0, status=sent (250 2.0.0 <[email protected]> kdV1ArUvu1V+VgAADqs49A Saved)
  177. Jul 31 08:20:05 b1037ca901c1 postfix/qmgr[20607]: 068B1D80225: removed
  178. Jul 31 08:20:05 b1037ca901c1 postfix/lmtp[22141]: 090D2D80226: to=<[email protected]>, orig_to=<postmaster>, relay=127.0.0.1[127.0.0.1]:10026, delay=0.01, delays=0/0/0/0.01, dsn=2.0.0, status=sent (250 2.0.0 <[email protected]> 4tOQArUvu1V/VgAADqs49A Saved)
  179. Jul 31 08:20:05 b1037ca901c1 postfix/qmgr[20607]: 090D2D80226: removed
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!