# Banniere SMTP
smtpd_banner = Mail Serveur, Welcome

# Ne pas apprendre Notre de nom de Domaine
append_dot_mydomain = no

# Envoie une nouvelle notification aux clients UNIX grace à la commande biff y
biff = no

# Hostname et Fichier d'alias
myhostname = XXX.lan
alias_maps = hash:/etc/aliases

# On mets dans mydestination les domaines qui ne sont pas géré par les domaines virtuels
mydestination = $transport_maps
mynetworks = 127.0.0.0/8 192.168.XXX.XXX/24 (mail local)
recipient_delimiter = +
home_mailbox = Maildir/
inet_interfaces = all
relayhost = smtp.XXX

# Support TLS
smtpd_tls_cert_file = /etc/postfix/cert/smtpd.cert
smtpd_tls_key_file = /etc/postfix/cert/smtpd.key
smtpd_use_tls = yes

# Pour être conforme a la RFC
smtpd_helo_required = yes
strict_rfc821_envelopes = yes

#Désactive la reception locale
local_recipient_maps = $virtual_mailbox_maps

# support pour Mysql, On passe par le daemon mysql pour communiquer avec mysql
virtual_alias_maps = proxy:mysql:/etc/postfix/mysql/virtual_alias_maps.cf
virtual_mailbox_domains = proxy:mysql:/etc/postfix/mysql/virtual_domains_maps.cf
virtual_mailbox_maps = proxy:mysql:/etc/postfix/mysql/virtual_mailbox_maps.cf
virtual_mailbox_base = /home/vmail
virtual_minimum_uid = 5000
virtual_uid_maps = static:5000
virtual_gid_maps = static:5000
transport_maps = proxy:mysql:/etc/postfix/mysql/transport.cf
maildrop_destination_recipient_limit = 1

# Lecture des variables par le proxy
proxy_read_maps = $local_recipient_maps $mydestination $virtual_alias_maps $virtual_mailbox_maps $virtual_mailbox_domains $transport_maps $mynetworks $smtpd_recipient_restrictions $smtpd_sender_restrictions $smtpd_sender_login_maps

# Impose au client SMTP de démarrer la session SMTP par une commande HELO ou EHLO
smtpd_helo_required = yes
allow_untrusted_routing = no
disable_vrfy_command = yes

# Gestion du SASL
smtpd_sasl_auth_enable = yes
smtpd_sasl_security_options = noanonymous
broken_sasl_auth_clients=yes

# SMTPD Restrictions
smtpd_helo_restrictions =
		permit_mynetworks,
		permit_sasl_authenticated,
		reject_non_fqdn_hostname,
		reject_invalid_hostname,
		reject

smtpd_sender_restrictions =
		permit_mynetworks,
		permit_sasl_authenticated,
		reject_unknown_sender_domain,
		reject_non_fqdn_sender,
		reject_unauth_pipelining,
		reject_unauth_destination,
		reject

smtpd_recipient_restrictions =
        permit_mynetworks,
        permit_sasl_authenticated,
        reject_non_fqdn_recipient,
        reject_unknown_sender_domain,
        reject_non_fqdn_sender,
        reject_unknown_recipient_domain,
        reject_invalid_helo_hostname,
        reject_unlisted_recipient,
        reject_unlisted_sender,
        reject_non_fqdn_helo_hostname,
        reject_unauth_destination,
        reject_rbl_client bl.spamcop.net,
        reject_rbl_client zen.spamhaus.org,
        reject